ANOLISA User Guide

September 14, 2026 · View on GitHub

中文版

ANOLISA provides a complete server-side runtime for AI Agent workloads. Components are installed via the anolisa CLI and operate independently.


Component Architecture

┌────────────────────────────────────────────────────────────────────┐
│  Agent Applications (cosh / OpenClaw / Hermes / custom)            │
├────────────────────────────────────────────────────────────────────┤
│  User Entry Points                                                 │
│  anolisa-cli · cosh · os-skills                                    │
├──────────────────────────────────┬─────────────────────────────────┤
│  Token Saving                    │  Runtime                        │
│  tokenless · agent-memory        │  skillfs · ws-ckpt              │
├──────────────────────────────────┼─────────────────────────────────┤
│  Agent Observability             │  Agent Security                 │
│  agentsight                      │  agent-sec-core                 │
└──────────────────────────────────┴─────────────────────────────────┘

Documentation Index

Global

DocumentContent
InstallationProgressive install from CLI to full component stack
TroubleshootingCross-component common issues and fixes

User Entry Points (user-entrypoint/)

DocumentComponentDescription
anolisa CLIanolisaUnified CLI for component management
cosh-ngcosh-ngAI-native Linux terminal with an integrated Agent runtime
Copilot ShellcoshAI terminal assistant and command gateway
OS Skillsos-skillsSystem management and DevOps skills

Agent Observability (agent-observability/)

DocumentComponentDescription
AgentSightagentsighteBPF-based tracing, Token accounting, Web Dashboard
AgentSight Quick StartagentsightInstall, capture the first session, open the Dashboard
AgentSight Dashboard GuideagentsightToken access and a page-by-page walkthrough
AgentSight CLI ReferenceagentsightEvery command and flag with real output
AgentSight ConfigurationagentsightConfig file, feature switches, Agent discovery rules
Interruption DetectionagentsightThe 18 interruption types and the triage workflow
AgentSight Deploymentagentsightsystemd, containers/sidecars, macOS, upgrade, uninstall
AgentSight Data and StorageagentsightDatabases, retention, HTTP API, Prometheus, ATIF export
AgentSight IntegrationsagentsightTokenless, agent-sec-core, enforcer, cosh, Prometheus
AgentSight TroubleshootingagentsightNo data, 401, unreachable port, database growth

Agent Security (agent-security/)

DocumentComponentDescription
AgentSecCoreagent-sec-coreHardening, code scanning, prompt scanning, skill ledger
OWASP Agentic Top 10 Control MappingANOLISASecurity controls, conditions, and evidence for ten Agentic risk categories
Code Scanner Hook Configurationagent-sec-corePer-agent hook modes, environment variables, and fallback behavior
Prompt Scanneragent-sec-corePrompt injection / jailbreak detection, modes, and verdicts
PII Checkeragent-sec-corePersonal data / credential detection and redaction
Asset Verificationagent-sec-coreGPG-signed skill distribution verification and discovery outcomes
Skill Ledger User Guideagent-sec-coreSkill integrity chain and signing workflow
OpenClaw Deployment & Upgradeagent-sec-coreOpenClaw plugin deployment and upgrade guide
Internal Commandsagent-sec-coreContract and inventory of the hidden, hook-invoked commands

Token Saving (token-saving/)

DocumentComponentDescription
Tokenless Quick StarttokenlessInstall, connect an agent, run the first compression, and verify
Tokenless User ManualtokenlessCapability boundaries, runtime behavior, and task navigation
Tokenless Python SDKtokenlessFramework-neutral and AgentScope layers, Runtime operations, statistics, and examples
Tokenless AgentScope SDK IntegrationtokenlessAgentScope 1.x, 2.x, and App attachment to the generic SDK
Tokenless Agent IntegrationtokenlessProduct adapters, hooks, and plugins
Tokenless CLI ReferencetokenlessProtocol pipeline, direct compression, Stash, MCP, and statistics commands
Measuring Tokenless SavingstokenlessStatistics, diffs, dry runs, AgentSight, and SLS measurement
Tokenless Configuration and Data PrivacytokenlessConfiguration precedence, local data, and sensitive workloads
Tokenless TroubleshootingtokenlessAdapters, databases, Stash, upgrades, and uninstall
Agent Memoryagent-memoryPersistent memory, MCP tools, search and sovereignty controls

Runtime (runtime/)

DocumentComponentDescription
Blaze Sandbox RuntimeblazeOpt-in VM networking and periodic storage artifact synchronization for managed sandboxes
Workspace Checkpointsws-ckptInstant snapshot/rollback via btrfs COW
Skill FilesystemskillfsFUSE virtual views with progressive disclosure
SkillFS Kubernetes SidecarskillfsRunning SkillFS as a FUSE sidecar in Kubernetes

Terminology

TermMeaning
ComponentA software unit implementing a specific capability (e.g. tokenless)
AdapterA bridge package connecting a component to an Agent framework
system modeInstallation requiring root privileges (sudo anolisa install)
user modeInstallation into user-local paths (no sudo required)