Download the Arcotheon CLI
The command-line tool searches the registry, installs capabilities after checking their signatures and hashes, and runs their tools in a sandbox.
Install from source for now
Arcotheon 0.1 is distributed from its repository. It is not published to npm yet and there is no packaged release to download, so there is nothing to click here. The steps below build the CLI on your machine.
Requirements
- Node.js 22.12 or newer, with npm, and git.
- To run tools: Linux with bubblewrap (
bwrap) and unprivileged user namespaces. Installing and verifying work everywhere. - Python 3.9 or newer for capabilities that ship Python tools.
Install
Clone the repository.
git clone https://github.com/sarja-technologies/arcotheonEnter it and build.
cd arcotheonnpm ci && npm run buildRun the CLI.
node packages/cli/dist/main.js helpAlias it as
arcotheonfor the rest of this page, for examplealias arcotheon="node $PWD/packages/cli/dist/main.js".Point it at this registry.
export ARCOTHEON_REGISTRY=https://agdc.dev/arcotheon/registry/v1
Supported systems
| System | Install, verify, update | Run tools | Sandbox |
|---|---|---|---|
| Linux | Yes | Enforced sandbox (needs bubblewrap and unprivileged user namespaces) | bubblewrap |
| macOS | Yes | Refused, unless ARCOTHEON_EXPERIMENTAL_SEATBELT=1 (Seatbelt backend written, not yet validated on a real Mac) | Seatbelt (experimental) |
| Windows | Yes | Refused. Run Arcotheon inside WSL2 with bubblewrap, where the Linux guarantees apply | none |
This is what the project’s own security notes say today; see what is and isn’t enforced.
Check that it works
The build printed no errors and help lists the commands. Then check the integrity and compatibility of whatever is installed:
arcotheon doctorThe CLI trusts the registry root key built into its SDK. Every install verifies the publisher’s signature and each file’s hash before anything is unpacked, and never runs the package’s code.
First commands
arcotheon search arcotheon info sarja/example-adcap arcotheon install sarja/example-adcapThe CLI shows the permissions a capability asks for and waits for your approval. Pro capabilities need an access token: run arcotheon login or set ARCOTHEON_TOKEN.