Select a document.
Create the first administrator
Retrieve the one-time bootstrap token from the server console. It is never stored by this browser.
ALWAYS-ON AGENT WORKSPACE
Immortal Agents
Sign in
OR
Accept invitation
Create a password and configure TOTP to activate your account.
or
Recover account passkey
A host administrator authorized this one-use recovery. The new passkey will replace every old passkey and sign out all browser sessions for this account.
YOUR WORKSPACE
Stay in the loop, from anywhere.
Agent sessions keep working on the host when your laptop or browser goes offline.
0sessions
0running now
WORKSPACES
Sessions
Advanced runtime actions
Advanced execution settings
LIVE WORKSPACE
Console
Watch the agent, then take the keyboard when you need to intervene.
Keyboard control is off.
More keys
Application previews
Open a development server from this session through an authenticated, expiring route. Nothing is published directly from the container.
Session VPN
A private tunnel for this session only. Applying or removing it restarts a running session at a safe boundary.
Provider timeline
Replayable provider-neutral lifecycle, agent, tool, interaction, and usage metadata. Prompts, commands, paths, outputs, and provider payloads are excluded.
Observed agents
Provider-safe child identities, nesting, outcomes, and activity where the active adapter exposes them.
Recent tool activity
Provider-safe metadata only; commands, paths, inputs, outputs, and errors are not stored here.
Project workspace files
Browse, download, or delete permitted files generated in this session's project workspace. Provider credentials and Git internals are excluded.
Governed project tools
Run a fixed controller-owned recipe inside this session. No command text is accepted. Browser capture is restricted to a service on this session's own loopback interface; file tools are restricted to the project workspace.
Session exchange
Uploads appear at /exchange/inbox; agent results placed in /exchange/outbox can also be published here.
Text preview
Session memory
A provider-neutral Markdown vault shared by this session’s agents. Provider access is read-only; changes are validated and revisioned by Immortal.
History and curation are automaticCompleted requests and final replies become linked daily notes. Raw tool payloads are not copied.At idle boundaries, the active provider consolidates durable findings and verifies the memory index.
Memory health is loading…
Loading…
Select a noteEdit Markdown, inspect its revisions, or switch to the graph view.
Knowledge graph
Explore the linked memory as a living map. Drag notes, drag the empty canvas to pan, use the zoom controls or a mouse wheel, and select a note to open it. Rendering stays inside this browser.
Attachments and settings
Convert project Markdown or create a portable export
Preview first. Importing project Markdown never overwrites existing vault entries. Portable export converts wiki links back to standard Markdown links.
Reviewed skills
Provider-neutral instructions approved by an administrator and granted only to this session.
Project changes
Read-only running-worker diff; file previews remain available after stop.
Atomic snapshots
Stopped-session captures include safe tracked, ignored, binary, and archive files. Protected paths and Git internals are never captured.
Git status
Working-tree diff
Staged diff
Changed and untracked files
Project text preview
Autonomous jobs
Bounded turns run while this server is on. New jobs start disabled.
Webhook secret (shown once)
Save this in a private secret store if you will use signed webhooks. Never paste it in Git.
Jev decisions
Ask a bounded typed question without storing the submitted state. Results and a state digest remain in this session's audit history.
Recent decisions
Provider interactions
Normalize agent questions and approvals across providers. Jev advice fails closed; only allow-listed low-risk requests can be answered automatically.
Session access
Provider runtimes
See upstream releases first, then decide whether and where to apply a verified runtime.
Provider software updates
Read-only checks compare the selected verified runtime with each provider's upstream latest channel. Nothing is built, stopped, or changed by this check.
Checking…
Checks run automatically every six hours; failed checks retry after fifteen minutes.
Upgrade provider runtimes
Update every provider that has a newer upstream release, then move all of its sessions at the next safe boundary.
Default: latest available releases · all matching sessions · drain safely.
Advanced upgrade options
Observed compatibility evidence
Host-local image selection and worker restart outcomes only. They do not prove that a private provider conversation resumed or is semantically compatible across a version pair.
Loading observed transitions…
Jev decision service
Check the personal Jev account used by your decisions and jobs.
Checking…
Every user supplies a private TypeSafe API key in Keys & Tokens and consumes their own credits. The saved key is encrypted and can only be replaced or removed, never displayed. Jobs use their creator's credential.
Storage lifecycle
Apply bounded retention, reconcile deleted-session residue, and monitor private-disk and file-scanner health without touching active or retained data.
Calculating safe cleanup candidates…
Advanced storage maintenance
Checking private disk and file-scanner health…
Automatic reconciliation runs every six hours. Session residue waits 24 hours; completed upgrade snapshots wait seven days.
Immortal Admin · Cost controls
Account for controller-managed turns with explicit provider or estimate provenance, enforce governed spend boundaries, and compare local evidence with provider statements.
Daily and monthly budgets
Budgets are checked before each controller-managed turn. Missing evidence fails closed. A turn already running is never interrupted, and direct terminal input remains outside this boundary.
Provider statement reconciliation
Enter only an aggregate USD total and period from a provider statement. Immortal stores no billing account identifier or raw statement and compares the total with immutable local evidence.
Immortal Admin · Update operations
Review provider-runtime update progress and completed outcomes without crowding routine provider settings.
Operation history
Active operations stay first; completed, failed, and cancelled operations follow newest first.
Immortal Admin · Managed-image audits
Browse scheduled security results for active, retained, and cached managed images. Manual recheck is not required for scheduled checks.
Audit history
Items needing attention stay first; completed results can be filtered and browsed page by page.
!
Administrator action required
Cache and audit controls
Managed runtime images and BuildKit layers are independent caches. Both controls preserve active containers, selected provider defaults, rollback images, and production runtimes.
Managed image cache
Checking unreferenced managed images…
Runtime build cache
Reading unused BuildKit cache…
Scheduled security audit
Audits run automatically. Request an early pass only when you need a fresh result.
Immortal Admin · Host capacity
Live advisory capacity uses RAM and disk as hard planning bounds. CPU load is shown separately as an operational warning.
Estimated active-session capacity
Reading current host resources…
—active now
—configured limit
—estimated host maximum
—RAM available
—disk available
—CPU load
—
Allow users to choose resource profilesOff by default. When disabled, non-admin session creation uses Standard and only administrators can change RAM/CPU/PID profiles.
Live resource pressure—
How this estimate works
This is a planning indicator, not an admission guarantee. The configured global limit remains authoritative. Refreshing always reads current host RAM and disk availability again, including VM memory ballooning changes.
Session resource use
Administrative resource inventory across all owners. No terminal or workspace content is exposed here.
Immortal Admin · Host monitoring
Private sampled host telemetry for capacity, performance, and I/O-pressure diagnosis.
—CPU utilization
—load / CPUs
—RAM used
—swap used
—storage used
—I/O pressure (10s)
Controller operations
Aggregate private health signals without user, session, project, or container identities.
—SchedulerCollecting…
—Memory journalsCollecting…
—DatabaseCollecting…
—Live streamsCollecting…
—WorkersCollecting…
—Execution depthCollecting…
—Runtime upgradesCollecting…
—Filesystem inodesCollecting…
Controller availability
Database coordination, replica heartbeats, sticky session placement, and encrypted shared snapshots.
Service containers
Controller services only; user session containers are deliberately excluded.
Runtime build cache
Reading private BuildKit accounting…
Immortal Admin · Fleet & HA
Monitor independent installations, verify cluster eligibility, and prepare deliberate HA commissioning without changing a running host.
OPERATIONS TOPOLOGY
Installation map
Roles, health, resources, provider readiness, and session placement. Operational session metadata appears only for explicitly authorized pairings.
Paired installations
Only aggregate operational metadata is retained.
Inbound tokens
Revoke tokens that are no longer used by another fleet inventory.
CURRENT INSTALLATION
High availability
Reading database and controller state…
COMMISSIONING
Design a protected cluster
Creating a plan changes nothing. Preflight probes every selected installation and blocks activation until release, resources, PostgreSQL topology, peer snapshots, networking, and quorum are eligible.
HA plans and operation history
Every check and transition is retained with its time, outcome, next action, and rollback boundary.
Reviewed skills
Your definitions are private by default. Share them with selected accounts or deliberately publish an approved version to the organization.
Private catalogue
Your skills, definitions explicitly shared with you, and organization skills remain separated.
Immortal Admin · Skill reviews
Review pending immutable definitions before they can be granted to sessions or published to the organization.
Review queue
Administrative review is kept separate from every user's private skill catalogue.
Import a project or stopped CLI session
Upload an Immortal .iam migration bundle—not a raw project ZIP—validate it, then create a stopped session owned by your account. Bundles may contain a Git repository or ordinary project home, with an optional provider conversation. Starting remains a separate action.
Create a stopped session from a validated bundle
Recent imports
Immortal Admin · Users & access
Invite accounts, manage capacity and administrator responsibility, then grant only the sessions they need.
Account applications
Optional public requests with a CAPTCHA and administrator approval. Disabled by default.
Accept public applicationsApplicants can request review but cannot create an account directly.
Session profile requests
Review requested package, compute, and dependency-cache increases. Approved changes apply automatically; running sessions restart only when their execution profile changes.
Loading profile requests…
This single-use link is shown once. Send it through a private channel.
User directory
Search and select one account to review or change its settings.
Selected account
User settings
Session capacity
Override the platform default for this account only.
Runtime access
Choose one reviewed package for this user's sessions.
Session VPNAllow this account to create and control isolated session VPN tunnels.
Account administration
Administrator access and suspension affect the whole account, not session sharing.
User preferences
Manage sign-in methods, personal integrations, and connected clients.
Appearance
Choose the application theme for this account. Terminal content keeps its high-contrast dark palette in either theme.
Profile image
Gravatar is enabled by default. When enabled, your browser requests the image using a one-way SHA-256 hash of your email address; Gravatar also receives the request IP address. Disable it to keep the uppercase email initial locally.
Password & account recovery
Change your password and authenticator, or generate replacement one-time recovery codes. If you cannot sign in with any configured method, ask an administrator for a time-limited account-recovery link.
Loading sign-in methods…
Email/password + authenticator is active
- 1Account passwordConfirm the email and enter the new password twice.
- 2Authenticator appScan a QR code and verify a six-digit TOTP code.
Authenticator setup appears hereComplete step 1 to generate a private QR code and manual setup key.
Passkeys
Optional phishing-resistant sign-in. Keep independent passkeys on devices you control.
Fresh MFA verification is valid for five minutes on this browser session.
Connected terminal clients
Review and revoke native-client tokens associated with this account.
Keys & Tokens
Manage multiple named integrations without exposing secret material to an agent. Every token or key is permanently isolated to one session.
Personal Jev account
Use your own TypeSafe API key for interactive decisions, agent requests, and jobs.
Each account consumes its own Jev credits. The key is encrypted at rest and can only be replaced or removed; it is never displayed or returned.
Session credentials
Secrets are write-only and cannot be moved or shared between sessions. Delete each named credential individually when it is no longer needed.
Immortal terminal client
Attach a local Windows, macOS, or Linux terminal to your remote sessions.
SIGNED CLIENT RELEASE
Checking downloads…
The server verifies client/API compatibility before login and attachment.
Running controllerChecking…
Published clientChecking…
Deployment targetChecking…
INSTALLATION GUIDE
Choose this computer
Download one signed package containing the installer and exact compatible binary.
SELECTED PACKAGEChoose an operating system and architecture.
Download signed installer
1
Install
Run this exact command from the folder containing the downloaded package.
Choose a package above.2
Connect and sign in
Add this server, then approve the terminal client in your browser.
immortal context add work --server <this server>
immortal login3
Verify
Confirm the installed release matches this server before opening a session.
immortal version
immortal sessions list4
Update
Check explicitly or approve the matching client when Immortal reports a mismatch.
immortal update5
Troubleshoot
Choose a platform to see its first-launch guidance.
6
Remove
Sign out first. Removing saved contexts disconnects every server configured for this account.
Choose a platform above.Advanced: raw binaries and manual installation
The selected raw binary is independently signed. The exact filename is used deliberately; wildcard installation into a filename is not portable when multiple downloads exist.
Choose a package above.Download selected raw binary
mkdir -p ~/.local/bin
chmod 700 ./immortal-<version>-<os>-<architecture>
install -m 0755 ./immortal-<version>-<os>-<architecture> ~/.local/bin/
mv ~/.local/bin/immortal-<version>-<os>-<architecture> ~/.local/bin/immortalUseful commands after installation
immortal sessions list
immortal sessions show project/session --format json
immortal sessions start project/session
immortal sessions restart project/session
immortal console project/session
immortal skills list
immortal skills granted project/session
immortal files upload project/session
immortal workspace browse project/session
immortal workspace list project/session
immortal workspace download project/session build/result.pdf --output ./result.pdf
immortal jobs list --session project/session
immortal jobs create --config ./job.json
immortal jobs run <job-id>
immortal runs watch <run-id> --format json
immortal runs snapshot <run-id>Session lifecycle and job/run mutations require maintainer access and a recent immortal authorize. Use --format json for one machine-readable controller envelope.
By default, Ctrl-C, Ctrl-D, or Ctrl-B then D detach safely
Ctrl-C, Ctrl-D, or Ctrl-B then D detach locally without stopping the provider. Use --control-keys forward only when you intentionally want those control bytes to reach the provider. Ctrl-B then F opens the local textual workspace browser. Dragging or pasting one local file path into the live native console asks before uploading it and requests an optional agent comment. The client preserves shared web/terminal geometry.
A version mismatch displays the installed and required releases and asks before installing the Ed25519-and-SHA-256-verified matching client. immortal update checks explicitly; immortal update --yes is available for deliberate non-interactive automation. Omit the local path from immortal files upload project/session to drag one file into its prompt. Credentials are revocable device tokens: Windows encrypts them with CurrentUser DPAPI, while macOS and Linux keep them in private mode-0600 JSON. Passwords, TOTP secrets, recovery codes, passkeys, and provider credentials are never stored by the client.
Documentation
Search practical help for installation, operation, security, migration, APIs, and examples.