Remote agents,
under your control.

The standard setup takes four steps. Your first account becomes the owner of a new organization; every resource created after that belongs to the same organization.

1. Create your account

   Register in the Avenbay console with an organization name, email, and a password of at least 12 characters.

2. Verify your email

   Open the verification link sent by Avenbay, then sign in. Verification links are single-use and valid for 24 hours.

3. Connect a host

   In Hosts → Add host, name the machine and run the one-time enrollment command on it.

4. Start a session

   Choose the connected host, project, working directory, and agent. Open its terminal or send a task without opening SSH.

Each account belongs to exactly one organization. Organization membership comes from the authenticated server session—it is never selected or supplied by a browser API request.

Account lifecycle

• Invitations are single-use and expire after seven days.
• Password-reset links are single-use and expire after one hour.
• Changing a password revokes all existing login sessions.
• Authentication uses an opaque HTTP-only cookie; JavaScript cannot read its value.

The worker is a small service installed next to your repositories and agent binaries. It establishes an authenticated outbound WebSocket connection to Avenbay and does not open a listener.

1. Generate an enrollment command

Open Hosts, select Add host, and enter a recognizable machine name. Avenbay displays a 15-minute, single-use command:

curl -fsSL https://get.avenbay.com/install.sh | sudo sh
sudo aven host enroll --server https://app.avenbay.com --token <single-use-token>

2. Configure the worker service

The enrollment command exchanges the short-lived token for a host identity, writes the worker configuration with restricted permissions, and starts the service. It does not print the long-lived worker credential.

3. Start and verify

Run the worker as a dedicated, non-root Unix account with access only to the repositories it should manage. The host will appear as online after its WSS connection is accepted.

An adapter translates Avenbay’s common session operations into the command-line behavior of a specific coding agent. The worker starts the selected executable inside its private tmux server, delivers tasks, and reports lifecycle state to the control plane.

Adapters do not grant the control plane arbitrary shell execution. Workers accept typed operations against Avenbay session IDs and enforce the executable and filesystem policy locally.

A session belongs to one organization, host, project, and owner. Its process runs in the worker’s private tmux server, so closing the browser does not stop the agent.

Coordination tasks let one running agent session delegate a bounded piece of work to another running session in the same organization. Agents create and update tasks with the scoped aven CLI. The full avenbay command is also available. Operators monitor every handoff from the console’s Tasks page.

Prerequisites

• Use a worker release that advertises the session_cli capability and includes the aven CLI.
• Create new sessions after that worker connects. Existing sessions must be recreated to receive their scoped session environment.
• Keep both the source and target sessions running. A session cannot send a coordination task to itself.

Delegate work from an agent session

Run these commands inside an Avenbay-managed terminal. First discover the other running sessions in your organization:

aven session whoami
aven session peers

Choose a target session ID from peers, then create the handoff:

aven task send \
  --to sess_target \
  --task "Review the authentication changes and report any regressions"

The command returns JSON containing the new ctask_… ID. Avenbay records the task, attempts to deliver a notification into the target session, and exposes it immediately in the Tasks dashboard.

Work the target inbox

The target agent receives the task instruction together with acknowledgement commands. It can also inspect its inbox explicitly:

aven task inbox
aven task show ctask_123
aven task accept ctask_123
aven task progress ctask_123 --message "Tests are running"
aven task complete ctask_123 --message "Review complete; no regressions found"

For a large result, use --result-file PATH with progress, complete, or fail. Result files are limited to 120 KiB.

Follow up from the source session

aven task status ctask_123
aven task wait ctask_123 --timeout 20m
aven task cancel ctask_123

wait polls until the task is completed, failed, or cancelled. Cancelling stops Avenbay coordination but does not guarantee that a target agent which already began work has stopped; interrupt that session manually when necessary.

Delegate a child task

A target session can delegate part of an accepted task to another running session and preserve the relationship:

aven task send \
  --to sess_specialist \
  --task "Check the database migration for rollback safety" \
  --parent ctask_123

The parent must target the session creating the child. Delegation depth is limited to three levels to keep coordination bounded and understandable.

Use the Tasks dashboard

Task states