Local-first agent observability

Know what your agents are doing. Keep the data local.

Agent Sidecar unifies persisted sessions from Cursor, Claude Code, Codex, Copilot CLI, DSH, and Kimi into one read-oriented command line and an opt-in loopback panel.

  • Python 3.9+
  • Zero runtime dependencies
  • macOS primary · Linux best-effort
agent-sidecar status
AGENTSTATUSSESSION
cursor-ideworkinglanding-page
claudewaitingapi-review
12:04:21 tool · ReadFile sidecar/http_server.py
12:04:24 assistant · Security boundary verified.

One normalized view across agent-owned persistence formats—without a cloud collector, analytics SDK, or transcript upload.

How it works

Observe through a narrow sidecar boundary

The architecture keeps source adapters, normalization, and presentation separate, so one unreadable source cannot take down the rest.

  1. 01

    Discover locally

    Read supported agent-owned metadata and transcripts without installing hooks into the observed tools.

  2. 02

    Normalize safely

    Map diverse records into stable session, status, and event contracts while isolating adapter failures.

  3. 03

    Present your way

    Use text, JSON, the terminal dashboard, remote SSH snapshots, or the opt-in local HTTP panel.

Built for the operator

Useful visibility, bounded behavior

Unified sessions

List active work across supported local sources with consistent lifecycle states.

Normalized event tails

Follow agent activity as stable JSONL or a focused terminal stream.

Remote snapshots

Aggregate bounded, noninteractive read-only views over SSH with host provenance.

Deterministic packaging

Run from a checkout, pipx Git install, or verified reproducible zipapp.

Start small

Install from GitHub, then observe

Agent Sidecar is not claimed as a PyPI publication. Install directly from the repository or use a verified GitHub Release.

Install with pipx

pipx install 'git+https://github.com/shendeguize/AgentSideCar.git'

See working and waiting sessions

agent-sidecar status
agent-sidecar tui

Opt in to the read-only local panel

agent-sidecar daemon start --http

Security boundary

Local by default. Network only by explicit opt-in.

The daemon normally exposes only a private Unix socket. The optional web panel binds numeric IPv4 loopback only, requires a bearer token held in page memory, sends no CORS allow headers, and offers no mutation endpoint.

Read the security policy →

Support status · v0.4.1

Honest platform boundaries

macOS

Primary. Full local quality-gate target, including daemon, panel, remote monitoring, packaging, and the user LaunchAgent.

Linux

Best-effort. Portable observation, remote monitoring, daemon/HTTP, TUI, and packaging paths are exercised in CI.

Windows

Unsupported. Current contracts depend on POSIX permissions, locking, process groups, and Unix sockets.

中文摘要

本地优先的 AI Agent 会话观测工具

Agent Sidecar 读取本机已有的 Agent 会话数据,统一展示会话状态和事件流。默认不开放网络端口、无需运行时依赖,也不会把 transcript 上传到托管服务。可选 Web 面板仅监听 127.0.0.1,并使用只保存在页面内存中的令牌。