Component Specifications

Spec: Agent Tooling

Provides tools to agents for interacting with the project workspace: file, search, code intelligence (code.lsp), debugging (debug).

Spec: Agent Harness

Compiles the project DSL into running agents; wires processor pipeline, provider routing, and observability.

Spec: Daemon

Defines the kaged daemon process: startup, shutdown, CLI, configuration, and lifecycle gates.

Spec: Federated Project Configuration

How projects compose, override, and resolve configuration across multiple layers and overlays.

spec: git

Spec: HTTP + WebSocket API

Operator-facing HTTP endpoints, WebSocket protocol, auth contract, and warning headers.

Spec: Issues

Structured inbox for project-scoped work; guests surface requests, operators triage into actions.

Spec: LLM Provider Interface

Resolves, loads, and wraps LLM provider modules bundled into the daemon binary; takes a resolved route and conversation context, returns typed stream events.

Spec: Local config

Operator-local configuration file: credentials, preferences, project registry — per-user, per-machine.

Spec: Operational Logging

Structured operational logging: dual-sink pipeline, log levels, sources, retention, HTTP API, plugin logging, and UI integration.

Spec: Session notifications (daemon side)

Daemon-side session notification router: event normalization, presence gate, channel dispatch, Web Push bridge.

Spec: Plugin Host

Spawns, supervises, and communicates with plugins over JSON-RPC 2.0 on stdio.

Spec: Project DSL

The YAML file an operator authors to declare agents, cages, tools, prompts, and model routing.

Spec: project.recipe

Spec: Project Terminals

End-to-end wiring from UI click through PTY/tmux spawn to xterm.js over WebSocket.

Release pipeline

Spec: Sandbox

Compiles DSL cage blocks into kernel-level isolation: bwrap, network allowlists, seccomp, cgroups.

Spec: Session Manager

Owns session lifecycle: creation, active work, checkpoint, detach, reattach, termination.

Spec: Shared SSO Relay (@kaged/sso)

The stateless shared SSO relay (@kaged/sso): OAuth dance with upstream providers, short-lived ES256 JWT minting, fragment delivery, and the daemon-side verification contract.

Spec: Task Runner

Launch, observe, and manage project-scoped terminal commands from the web UI.

Spec: Users, Roles, and Project Grants

Unified user principals — operators, members, and guests in one table with three-tier roles, daemon-managed credentials (password and/or SSO), TOFU provisioning, and per-project grants.

Spec: @kaged/wire

Shared wire contract package — Zod schemas for every HTTP request/response body, error envelope, and WebSocket message.

Spec: Workflows

Operator-authored, parameterised agent recipes: structured inputs, ordered steps, limited tools, defined lifecycle, and the v1 execution engine.