Get Started
Run the kernel.
See what it decides.
Run SharedOS in your own application. Choose Local to set it up, or Cloud to explore the optional console preview.
Your application runs the kernel in both paths.
01Install
Bring SharedOS into your app.
available now · open sourceUse Node.js 20.11 or newer and ES modules. Pin the package version so your integration stays reproducible.
The kernel runs in your process. You keep your database, model credentials, and infrastructure.
npm install @aicoo/sharedos@0.1.0-alpha.5Installs the kernel for your application. Cloud preview access is arranged separately.
02Wire it up
Connect your trusted state.
your grants · your providersSupply a grant source and register the resource or tool providers your agents need. Load grants for the caller's namespace, actor, and issuing authority. Your trusted store supplies the permissions for each request.
View the kernel wiring sketch
import { SharedOSKernel } from "@aicoo/sharedos";
// db is your application's trusted data layer.
const kernel = new SharedOSKernel({
grantSource: {
async load(access) {
return db.grantsFor({
namespaceId: access.namespaceId,
actor: access.actor,
authority: access.authority,
});
},
},
});Integration sketch: connect db.grantsFor to your own store and filter on all three fields. Use the complete quickstart for a runnable example with the provider, grants, and calls.
03Verify
Allow one call. Refuse another.
check the boundaryGrant access to one project subtree. Make an in-scope call, then try the same tool outside that subtree. The second call should be denied.
files.search /Work/Projects/atlasfiles.search /Work/FinanceExample permission-check outcomes. Add a usage store when working with usage-limited grants.
01Availability
What exists today
kernel now · console previewThe open-source kernel
Install SharedOS and run permission checks in your own application. Apache-2.0, ready to use in your own project.
The Cloud console
A preview of decision history and diagnostics, being shaped with participating teams. The public demo uses illustrative data.
Wire your host
Connect the host interfaces directly. CLI tooling, generated schemas, and one-click repository setup remain future work.
02Your application
Wiring it up
local kernel · trusted grant sourceCreate the kernel inside your app and give it a grant source backed by a store you control. Your code supplies authority and manages the database connection.
Return grants only for the caller's namespace, actor, and issuing authority. Register your resource and tool providers through the host interfaces.
Start with your application. Connect db.grantsFor to your own store. Cloud event integration is configured separately during preview onboarding.
import { SharedOSKernel } from "@aicoo/sharedos";
// db is your application's trusted data layer.
const kernel = new SharedOSKernel({
grantSource: {
async load(access) {
return db.grantsFor({
namespaceId: access.namespaceId,
actor: access.actor,
authority: access.authority,
});
},
},
});03Cloud preview
See what your kernel decided.
decisions · trails · trendsSign in to create a Cloud project and connect event reporting from your host. Your application runs SharedOS and enforces permissions. SharedOS Cloud shows the decision events your application sends.
Confirm the event integration for your host with the preview team. Your application loads authority from its trusted store and checks each call. Cloud receives decision events. Check the live availability notes.