Glossary
A handful of terms come up often enough that it’s worth pinning them down before you read the rest of the docs. The lifecycle words in particular are easy to confuse — and the distinctions matter for what you can do next.
Project
Section titled “Project”- microagent — the project: Go library, CLI, and backend supervisors.
microagent— the CLI binary. A thin shell over the Go library.- library — the Go packages (
pkg/workspace,pkg/rootfs, and friends) that do the actual work. Importable from your own program when you’d rather not shell out.
VMs and what’s inside them
Section titled “VMs and what’s inside them”- backend — how the host OS runs VMs. Linux uses Firecracker. macOS uses Apple Virtualization.framework. One backend per host; the choice is automatic.
- microVM — the small, fast VM each workspace runs in. Booted by the backend.
- guest — the Linux userspace inside the microVM. What your OCI image becomes once it’s booted.
- rootfs — the ext4 disk image the guest boots from. Built from an OCI image.
- kernel — the Linux kernel image the microVM boots. Backend-specific; the default is downloaded on first use.
- workspace — a named, persistent microVM. Disk, identity, and event history all stick around between starts. The thing you create, halt, and restart.
Control surface
Section titled “Control surface”- supervisor — a small JSON-in / JSON-out executable that owns lifecycle for one backend (
microagent-firecracker-supervisor,microagent-applevf-supervisor). Anything that can spawn a subprocess and parse JSON can drive it. - mediation channel — a guest-to-host vsock contract for the agent’s calls into your host control plane. Declared, required by default, and fail-closed unless you explicitly opt out.
- state directory — where workspace records live on the host (default
~/.microagent/).
Lifecycle vocabulary
Section titled “Lifecycle vocabulary”These five words are not synonyms.
- halt — clean disk-preserving shutdown. The VM exits, the disk stays.
startboots the same disk back up. - stop — graceful shutdown signal (SIGTERM on Firecracker, equivalent on Apple VF). Falls back to
killif it doesn’t return. - kill — hard terminate (SIGKILL or equivalent). For when
stopdoesn’t return. - quarantine — sever host-side network and mediation while preserving disk and event history. The VM may still be running. A forensic state, not a normal stopped state — you must halt, stop, or kill it before you can
startit again. - delete — remove the workspace and its state. Refuses while a Firecracker VM is still running; halt or stop first.