协同AI工作流

Install

curl -fsSL https://coop.dryga.com/install.sh | sh

The script downloads the coop binary for your system into ~/.local/bin. It needs curl, tar, and sha256sum or shasum. If a container runtime is available, it also builds the box image and runs coop doctor. If not, install one and then run:

coop build --egress open && coop doctor

co:op runs on macOS and Linux with Docker. Online provider runs use Docker's private network namespace to keep credentials outside the box. Apple's container remains available for raw open-network workloads, not provider-brokered or filtered runs. co:op prefers Docker when both are present. The coop binary is static.

coop update updates the binary, then uses the installed version to prepare the image for this project's network mode. Filtered projects build on the pinned client base; open and offline images refresh their base components. If a filtered project needs a build later, an interactive provider launch can offer Build and continue. Review the saved snapshot before approving; unattended runs still require an explicit host build. Each release carries pinned agent CLIs and ACP adapters. To build from source, run git clone https://github.com/AndrewDryga/coop && cd coop && make install.

<a name="verifying-a-download"></a> <details><summary>Verifying a download</summary>

The one-line command runs install.sh from the main branch, served by GitHub Pages at coop.dryga.com. That trusts GitHub, the domain, and the current main branch. To trust GitHub alone, fetch the same script from https://raw.githubusercontent.com/AndrewDryga/coop/main/install.sh.

The script then needs the release's checksums.txt, and checks the downloaded archive against it with sha256sum or shasum. It stops if the checksum file or the tool is missing. When cosign is installed, the script also proves the checksum file came from the release workflow for the exact tag you asked for. Every release since v2.2.2 ships that signature bundle, so a missing bundle stops the install instead of falling back to the checksum alone. Without cosign, the script says the signature wasn't checked.

To verify before you run any project code, download the release files by hand. Set VER and ASSET for your platform, for example VER=v8.1.0 ASSET=coop_8.1.0_darwin_arm64.tar.gz:

```bash base="https://github.com/AndrewDryga/coop/releases/download/$VER" curl -fsSLO "$base/$ASSET" curl -fsSLO "$base/checksums.txt" curl -fsSLO "$base/checksums.txt.bundle"

Build and test

co:op is one static Go binary. make install builds it into ~/.local/bin, and make check runs the same gate CI runs. CONTRIBUTING.md covers the source layout and the test layers.

Quickstart

coop login claude          # 1. sign in, once per account
cd ~/code/your-repo        # 2. any git repo
coop init                  # 3. set up the project: settings, task queue, hooks
coop claude                # 4. start the agent in the box

coop init sets up the task queue, hooks, shared instructions and skills, and the selected agent directories. It configures the agents you're signed in to, so sign in first.

Each agent starts with its own "don't stop to ask" flag on (--dangerously-skip-permissions, --dangerously-bypass-approvals-and-sandbox, --yolo). An agent that goes off the rails works on the repo you gave it, which you can restore from Git, and the rest of your computer stays out of reach. Anything after the agent's name goes to the agent, so coop claude --continue resumes Claude's last session in the box. Codex is the exception: its -p picks a profile, so run a one-shot prompt with coop codex exec "…".

Other ways in:

coop codex                                    # the same box, with Codex
coop claude --peer codex --peer gemini        # read-only second opinions for hard calls
coop shell                                    # a shell in the box, to look around
coop run -- npm test                          # any command in the box

1. checksums.txt is signed by the release workflow (keyless Sigstore):

cosign verify-blob checksums.txt \ --bundle checksums.txt.bundle \ --certificate-identity "https://github.com/AndrewDryga/coop/.github/workflows/release.yml@refs/tags/$VER" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com