CompozyOS packages the parts that keep agents working continuously (loops, triggers, cron, permissions, approvals, and observability) into one environment for creating, automating, and supervising agent work. It drives the agent CLIs a developer already uses, such as Claude Code, OpenClaw, and Hermes, through the Agent Client Protocol, and targets developers and technical operators.
A home-scoped daemon sits at the center. People and agents send commands through the web UI, the CLI, HTTP with server-sent events, Unix domain sockets, MCP, or native tools, and the daemon resolves the workspace, applies permissions and runtime policy, coordinates the agents, and persists events and state. Sessions and Loop runs belong to the daemon, so closing a client does not end the work.
CompozyOS ships as one Go binary with SQLite-backed stores, so runtime state stays on the operator's machine. Tasks claim runs atomically, hold a lease they must heartbeat, and return to a shared queue if they crash, and operators and agents write to the same queue. Task files are portable Markdown with typed frontmatter that the runtime imports and runs through Loops.
Agents, skills, capabilities, hooks, and extension kits plug into explicit runtime contracts. Extensions are built with SDKs for TypeScript and Go, and a Gateway pairs devices and exposes only the remote surfaces an operator enables. The v0.3 line is in beta.
Features
- Reusable objects: sessions, agents, Loops, and capabilities are authored once and run on demand
- Automation: cron schedules, webhooks, and event triggers owned by the daemon
- Supervision: approvals, permissions, run state, artifacts, and agent activity stay inspectable while work runs in the background
- Durable sessions: the timeline, edits, and runs persist across clients, and a session can pause and resume
- Agent CLIs: runs ACP-compatible CLIs such as Claude Code, OpenClaw, and Hermes against the same daemon-owned state
- Leased task runs: atomic claims, heartbeats, and lease expiry return crashed runs to a queue shared by humans and agents
- Permission narrowing: child agents cannot widen the permission scopes of their parents
- Control surfaces: web, CLI with JSON output, HTTP/SSE, Unix domain sockets, MCP, and native tools
- Extensions: versioned resources and tools built with TypeScript and Go SDKs, with provenance and lifecycle managed by the daemon
- Skills and marketplace: daemon-discovered skills with explicit source and scope, searchable through a marketplace
- Gateway: pairs devices and exposes only the private or public surfaces an operator enables
