ANOLISA User Guide
ANOLISA provides a complete server-side runtime for AI Agent workloads. Components are installed via the anolisa CLI and operate independently.
Component Architecture
┌────────────────────────────────────────────────────────────────────┐
│ Agent Applications (cosh / OpenClaw / Hermes / custom) │
├────────────────────────────────────────────────────────────────────┤
│ User Entry Points │
│ anolisa-cli · cosh · os-skills │
├──────────────────────────────────┬─────────────────────────────────┤
│ Token Saving │ Runtime │
│ tokenless · agent-memory │ skillfs · ws-ckpt │
├──────────────────────────────────┼─────────────────────────────────┤
│ Agent Observability │ Agent Security │
│ agentsight │ agent-sec-core │
└──────────────────────────────────┴─────────────────────────────────┘
Documentation Index
Global
| Document | Content |
|---|---|
| Installation | Progressive install from CLI to full component stack |
| Troubleshooting | Cross-component common issues and fixes |
User Entry Points (user-entrypoint/)
| Document | Component | Description |
|---|---|---|
| anolisa CLI | anolisa | Unified CLI for component management |
| cosh-ng | cosh-ng | AI-native Linux terminal with an integrated Agent runtime |
| Copilot Shell | cosh | AI terminal assistant and command gateway |
| OS Skills | os-skills | System management and DevOps skills |
Agent Observability (agent-observability/)
| Document | Component | Description |
|---|---|---|
| AgentSight | agentsight | eBPF-based tracing, Token accounting, Web Dashboard |
Agent Security (agent-security/)
| Document | Component | Description |
|---|---|---|
| AgentSecCore | agent-sec-core | Hardening, code scanning, prompt scanning, skill ledger |
| Code Scanner Hook Configuration | agent-sec-core | Per-agent hook modes, environment variables, and fallback behavior |
| PII Checker | agent-sec-core | Personal data / credential detection and redaction |
| Skill Ledger User Guide | agent-sec-core | Skill integrity chain and signing workflow |
| OpenClaw Deployment & Upgrade | agent-sec-core | OpenClaw plugin deployment and upgrade guide |
Token Saving (token-saving/)
| Document | Component | Description |
|---|---|---|
| Tokenless Quick Start | tokenless | Install, connect an agent, run the first compression, and verify |
| Tokenless User Manual | tokenless | Capability boundaries, runtime behavior, and task navigation |
| Tokenless Framework Integration | tokenless | cosh, OpenClaw, Hermes, Qoder, Claude Code, Codex, and Qwen Code |
| Tokenless CLI Reference | tokenless | Compression, environment checks, Stash, MCP, and statistics commands |
| Measuring Tokenless Savings | tokenless | Statistics, diffs, dry runs, AgentSight, and SLS measurement |
| Tokenless Configuration and Data Privacy | tokenless | Configuration precedence, local data, and sensitive workloads |
| Tokenless Troubleshooting | tokenless | Adapters, databases, Stash, upgrades, and uninstall |
| Agent Memory | agent-memory | Persistent memory, MCP tools, search and sovereignty controls |
Runtime (runtime/)
| Document | Component | Description |
|---|---|---|
| Blaze Sandbox Runtime | blaze | Opt-in VM networking and periodic storage artifact synchronization for managed sandboxes |
| Workspace Checkpoints | ws-ckpt | Instant snapshot/rollback via btrfs COW |
| Skill Filesystem | skillfs | FUSE virtual views with progressive disclosure |
| SkillFS Kubernetes Sidecar | skillfs | Running SkillFS as a FUSE sidecar in Kubernetes |
Terminology
| Term | Meaning |
|---|---|
| Component | A software unit implementing a specific capability (e.g. tokenless) |
| Adapter | A bridge package connecting a component to an Agent framework |
| system mode | Installation requiring root privileges (sudo anolisa install) |
| user mode | Installation into user-local paths (no sudo required) |