Immortal Agents

Create the first administrator

Retrieve the one-time bootstrap token from the server console. It is never stored by this browser.

Email Password Confirm password Bootstrap token

Scan with your authenticator

Use any TOTP authenticator, then enter its current six-digit code below.

Use a manual setup key

Authenticator secretOpen authenticator app

Verification code

Sign in

Email Password

Authenticator or recovery code

Accept invitation

Create a password and configure TOTP to activate your account.

Password Confirm password

Scan with your authenticator

Use any TOTP authenticator, then enter its current six-digit code below.

Use a manual setup key

Authenticator secretOpen authenticator app

Verification code

Recover account passkey

A host administrator authorized this one-use recovery. The new passkey will replace every old passkey and sign out all browser sessions for this account.

YOUR WORKSPACE

Stay in the loop, from anywhere.

Agent sessions keep working on the host when your laptop or browser goes offline.

0sessions

0running now

WORKSPACES

Sessions

Search sessions

Create session

Project slug Session slug Title Provider Public HTTPS repository (optional)

Rename session

Project slug Session slug Display title

Recover provider conversation

Immortal will resume the exact provider conversation captured when the agent exited.

Provider session ID (optional when captured automatically)

LIVE WORKSPACE

Console

Watch the agent, then take the keyboard when you need to intervene.

Keyboard control is off.

Observed agents

Claude hook states and indexed Codex child identities; only Codex reports parent links.

Recent tool activity

Claude hook metadata only; commands, paths, inputs, outputs, and errors are not stored here.

Project file browser

Browse and download artifacts from this session's project workspace. Provider credentials and Git internals are excluded.

Project root

Session exchange

Uploads appear at /exchange/inbox; agent results placed in /exchange/outbox can also be published here.

Choose a file or drop it hereNo file selected Resume upload ID (optional) Tell the agent about this file (optional)

Publish outbox filename

Text preview

Project changes

Read-only running-worker diff; file previews remain available after stop.

Git status

Working-tree diff

Staged diff

Changed and untracked files

Project text preview

Autonomous jobs

Bounded turns run while this server is on. New jobs start disabled.

Create job

Objective Prompt UTC cron (optional) Completion Project-relative completion file Maximum iterations Deadline (seconds) Failure limit Observed-token ceiling per run (0 = off) Cross-run breaker Automatically retry counted failures with backoff (requires a cross-run breaker) Dirty worktree Human approval Distinct approvers HTTPS notifications

Webhook secret (shown once)

Save this in a private secret store if you will use signed webhooks. Never paste it in Git.

Run this job later

Choose a local date and time, from five seconds to 30 days ahead. The controller must be running when the job becomes due.

Local date and time

Review the next job turn

Run-end project snapshot

Git status

Working-tree diff

Staged diff

Untracked file review

Previews and binary downloads are bounded and may be incomplete; restricted paths are excluded.

Jev decisions

Ask a bounded typed question without storing the submitted state. Results and a state digest remain in this session's audit history.

State to evaluate Question type Question identifier Focused question Options or levels, one per lineChoice uses key=description. Score uses one ordered level per line.

External processingThe state and question are sent to TypeSafe. Do not submit credentials or data that policy does not allow TypeSafe to process.

Recent decisions

Session access

User Role

Provider runtimes

Build a verified immutable image and apply it at a safe boundary.

Provider Version Sessions Strategy

Managed-image audits

Automatic, read-only checks cover running, stopped, and cached managed images. The button requests an additional immediate pass; it is not required for scheduled checks.

Import a stopped CLI session

Administrator only. Upload a private .iam bundle, validate it, then create a stopped session. Starting remains a separate action.

Exit the source Claude or Codex CLI before packing. The bundle may contain private conversation and project text; never put it in Git.

Choose a private migration bundle or drop it here.iam bundle · 100 bytes to 64 MiB I stopped the source CLI and all writers to this conversation.

A new private reservation will be created.

Create a stopped session from a validated bundle

Project slug Session slug Title

Recent imports

Users

Invite individual email accounts, then grant only the sessions they need.

Email Expires in hours

This single-use link is shown once. Send it through a private channel.

User preferences

Manage your email sign-in, authenticator, recovery codes, and optional passkeys.

Email, password, and TOTP

Loading sign-in methods…

Email/password + authenticator is active

1
Account passwordConfirm the email and enter the new password twice.
2
Authenticator appScan a QR code and verify a six-digit TOTP code.

Email New password Confirm new password

Use at least 12 characters. Both password fields must match.

Authenticator setup appears hereComplete step 1 to generate a private QR code and manual setup key.

Scan with your authenticator

The QR code is generated locally in this page. After scanning it, enter the current code to activate sign-in.

Use a manual setup key

Authenticator secretOpen authenticator app

Six-digit verification code

Passkeys

Optional phishing-resistant sign-in. Keep independent passkeys on devices you control.

Fresh MFA verification is valid for five minutes on this browser session.

New passkey label

Connected terminal clients

Review and revoke native-client tokens associated with this account.

Immortal terminal client

Attach a local macOS or Linux terminal to your remote sessions.

CURRENT SERVER RELEASE

Checking downloads…

The server verifies client/API compatibility before login and attachment.

Quick start

chmod 700 ./immortal-*
install -m 0755 ./immortal-* ~/.local/bin/immortal
immortal context add work --server https://immortal.example.invalid
immortal login
immortal sessions list
immortal console project/session

By default, Ctrl-C, Ctrl-D, or Ctrl-B then D detach locally without stopping the provider, and the client preserves the shared web/terminal geometry. Use --control-keys forward or --remote-size local only when you deliberately want those remote effects.

A logged-in client automatically installs a checksum-verified matching release from this server on its next command; immortal update checks explicitly. Credentials are revocable tokens stored in private JSON under ~/.immortal; passwords, TOTP secrets, recovery codes, and passkeys are never stored by the client.

Documentation

Installation, operation, security, migration, and release notes.

Select a document.

Save your recovery codes

Each code works once. Store them outside this application; they will not be shown again.

Verify sensitive action

PasswordAuthenticator code

Connect terminal client

Approve only if this code matches the one shown in your terminal.