Manef Shell OS

Your server. A workspace, not another dashboard.

Terminal · files · AI · system health — from a browser or CLI.

Install · CLI · Docs · Security

One workspace

Operate	Create	Automate
PTY terminal · files · system health	Code · image/video tools · browser	Alfa assistant · trusted skills · optional MCP
Exact-allowlist service controls	Desktop windows · mobile layouts	Approvals · durable sessions · local memory

In your terminal

mso                 # terminal agent
mso doctor          # installation checks
mso web             # browser workspace
mso update          # guarded update from main

Command reference · Recorded browser demo

How it fits together

flowchart LR
    Browser --> Guard["Authentication + scope + approval"]
    CLI --> Guard
    MCP["Optional MCP"] --> Guard
    Guard --> MSO["MSO · Node / Next.js"]
    MSO --> Host["Files · PTY · services"]
    MSO --> State["Local state"]
    MSO -. optional .-> Model["Your model provider"]

Loading

One self-hosted application. No required database or separate agent service. Architecture · Detailed workspace guide

Install or update MSO from this repo

Run as your normal Linux user, not root. Review scripts/install.sh before executing:

curl -fsSL https://raw.githubusercontent.com/rahmanef63/mso/main/scripts/install.sh | bash

Default application bind: 127.0.0.1. Use a VPN or protected HTTPS proxy for remote access. Full installation, WSL and recovery guide

Reset or remove

flowchart LR
    Preview["Preview owned paths"] --> Review["Review + stop runtime"]
    Review --> Confirm["Confirm exact plan token"]
    Confirm --> Reset["Reset → private recovery archive"]
    Confirm --> Remove["Uninstall → optional data/code purge"]

Loading

Preview command — no changes yet	Scope
mso reset	Server preferences and provider configuration
mso reset --scope all	Factory reset of known MSO state and local configuration
mso uninstall	Remove owned service/CLI links; keep data and source
mso uninstall --purge --remove-code	Also remove known data and a clean standalone clone

Apply requires --apply --confirm <preview-token> from an independent local/SSH terminal. Browser reset is separate in Settings → About. Unknown files and other projects are retained. Scopes, backups, safeguards and recovery

Safety first

Public Alpha / Developer Preview. An Owner or exec-scoped agent can execute commands as the service user. MSO is not a shell sandbox or multi-tenant security boundary. Provider calls may send selected context off-host. Keep credentials private and review approvals. Security policy · Verification and known limits

Product comparison, evidence and limitations · reviewed 2026-08-29.

Develop

bun install --frozen-lockfile
bun run verify
bun run test:features
bun run audit:strict

Use Node 22 and Bun >=1.2.15 with native audit support. Contributing · Development · Changelog · MIT license

Native Integrations: temporary credential forms for browser, CLI and MCP Page.

Session screenshots: private temp folders, descriptive artifact names, session discovery and automatic dormant-file cleanup.