A proposal for agents on umbrelOS 2.0. Built from the public product brief. I have not installed the OS.

An agent that can install apps and touch files is a permission you give this machine. It should feel like that. Not like a dashboard for models.

Nothing is granted until you check a scope. The token lives until you revoke it. Offline and revoked use the same layout so the window does not turn into an error screen.

The grant UI is a tray inside the widget, so the dock never goes away. The live pip is status. I left the rest still.