Concorde is a TypeScript library for building shared agents: AI agents that serve several parties without giving any one party direct control. A trusted operator runs a gateway that mediates interactions between users and the agent.
For example, two people could use one agent to coordinate a household budget. Each sends messages through the gateway, and the agent can publish signed decisions that both can read. The shared-agent proposal explains the idea.
The API is experimental. Version 0.1.0 may require application changes between releases.
Your application chooses the components and defines how incoming signals become prompts. Concorde supplies:
- Persistent message logs, with an HTTP channel or Nostr channel for delivery.
- Users and authentication through passwords or signed Nostr requests.
- A signal worker that executes runs one at a time.
- Schedules that wake the agent.
- Signed statements and stored, numbered decisions.
createGateway builds the database connection, HTTP servers, and signal worker. Your extend
callback constructs the optional components. Components expose start() and stop() methods;
the gateway manages their lifecycle.
The two channels in the diagram are alternatives: a messenger currently accepts one channel. You run the agent instance separately. The included pi runtime connects to it over RPC; it does not configure the model, credentials, tools, or container.
You need Docker with Compose and a model provider credential. The minimal example uses Anthropic.
git clone https://github.com/shutter-network/concorde.git
cd concorde/examples/00_minimal
cp .env.example .envSet ANTHROPIC_API_KEY and USER_PASSWORD in .env, then start the stack:
docker compose up -d --build
docker compose logs -f gatewayCopy the user id printed in the log and open the client in another terminal:
docker compose run --rm tui <user-id>The guide explains how to adapt this example.
Import library APIs from subpaths such as @shutter-network/concorde/gateway; the package root
exports no API. Your application also selects the /schema exports it needs and manages its
own database migrations.
Each example is an independent npm application with a Compose stack. It installs Concorde from the registry rather than this checkout.
| Example | Demonstrates |
|---|---|
| Minimal | One user exchanging messages over HTTP |
| Scheduler | Scheduled runs without users or messaging |
| Decisions | Two users and a shared record of signed decisions |
| Nostr | Encrypted direct messages through a local relay |
| Agent isolation | Restricted agent networking and a model proxy that holds the credential |
All parties must trust the operator. The agent server and agent RPC listener are privileged, unauthenticated endpoints; keep them on a private network. Configure agent permissions, TLS, rate limiting, secret management, and backups for your application.
Concorde does not prevent prompt injection or enforce confidentiality between users. A valid signature authenticates a statement under the signing identity, not the agent's behavior. Read the architecture before deploying.
The documentation is published at https://shutter-network.github.io/concorde/.
- Guide: run and adapt an application.
- Architecture: components, execution, and trust boundaries.
- API reference: exports, HTTP routes, and database tables.
mise install
npm ci
docker run -d --name concorde-pg -e POSTGRES_PASSWORD=postgres -p 5432:5432 postgres:17
npm run checkTests use real PostgreSQL databases. npm run check runs type checking, the build, lint, and
tests. See CLAUDE.md for development conventions and additional checks.