pkg.soopen package index
← All stories

A Local Control Plane for Coding Agents

Kero, Magpie, and Kontext separate three jobs that become inseparable at scale: supervising sessions, routing models, and constraining what agents may do.

Tools in this story

  • Kero — Package details and install
  • magpie — Package details and install
  • kontext — Project website
A developer supervises luminous terminal streams passing through model-routing orbs and a transparent security gate.

The terminal is becoming an operations surface

The first wave of coding-agent tools concentrated on the conversation: type a request, watch a model reason, and review a patch. The practical bottleneck now appears one layer lower. Developers run several agents beside test watchers, build servers, and ordinary shells; some jobs live on a workstation, others on a remote machine. The difficult question is no longer merely which model writes code. It is how a person can see what is running, direct attention to the session that needs judgment, and keep authority understandable.

Kero treats that problem as a terminal workspace. Each command runs in a project session backed by the kerod daemon, so closing the window does not discard the pane or its scrollback. The sidebar reports whether sessions are working, waiting, idle, failed, or finished. That sounds like a small interface choice, but it changes the supervision loop: the developer can scan state instead of repeatedly polling every terminal. The same model extends to remote hosts reached over SSH or Tailscale, where sessions continue while the laptop sleeps.

Three separate control loops

Kero is strongest when understood as one part of a local control plane, not as an all-purpose agent platform. Three responsibilities deserve separate tools:

  • Session control: Kero groups persistent terminals by project, exposes agent-aware status, and provides a CLI that can create panes, type commands, wait, and read screens.
  • Model control: Magpie runs a local gateway that speaks several common model APIs. Agents can share providers, accounts, local models, and routing groups without every client maintaining a different set of endpoints.
  • Action control: Kontext receives supported pre-action events, evaluates local policy, and records the decision and outcome. Observe mode shows what would be denied before a team enables enforcement.

The separation is useful because each layer fails differently. A terminal session may exit. A provider may exhaust quota before producing a response. A policy decision may be unavailable or may arrive on an event surface that cannot block. Combining those states behind one green indicator would obscure rather than simplify operations. These tools instead expose distinct boundaries that a human can inspect.

What actual use looks like

Imagine a developer maintaining three repositories while a larger build runs on a Linux host. Kero can keep one coding agent and one test watcher in separate panes for each project, with the remote build represented in the same sidebar. The developer jumps to a waiting session, reviews its request, and leaves completed sessions intact for later inspection. Remote access still carries the authority of the connected account, so host access and SSH hygiene remain fundamental.

Magpie can sit underneath those agents when the workflow spans providers. A routing group may choose among configured models or accounts, and its local endpoint translates requests for supported APIs. This is helpful for heterogeneous tooling, but it is not magic redundancy: a single configured account has nothing to fail over to, and local subscription discovery should be disabled if reading supported sign-in stores is unacceptable.

Kontext adds a different kind of checkpoint. Teams can begin in observe mode, collect evidence about which commands or resources policies would affect, and only then enable denial on supported synchronous hooks. Its documentation is explicit about the boundary: receiving an event does not mean every action can be stopped, and an unavailable decision may leave the agent's own permission system in charge. That makes agent-native permissions a complement, not a feature to switch off.

Why Kero is the newer center of gravity

Kero's upstream repository appeared in July 2026, and its v2.0.0 release in October documented a cross-platform rewrite for macOS, Windows, and Linux. It is therefore early software, yet its design captures a durable shift: agent work is becoming a collection of processes to supervise rather than a single chat to watch. The project also builds on Ghostty's terminal library and acknowledges prior agent-oriented multiplexers, placing it in a lineage of terminal tools rather than pretending the category began with AI.

The attractive workflow is deliberately composable. Use Kero to know where attention is needed. Use a gateway such as Magpie when multiple providers genuinely need one local routing surface. Add policy tooling such as Kontext when the environment requires attributable decisions before consequential actions. None removes the need to review diffs, protect credentials, scope operating-system accounts, or understand the remote machines involved. Together, however, they make those responsibilities visible at the points where a developer can still act.

Sources