After Dark Systems / Service Automation HubCompletely Programmable Infrastructure

The shell & the tools around it

A shell for people
who run systems.

Programmable when you need power. Policy-aware when the work needs boundaries. Meet adssh, the execution shell in the Service Automation Hub.

Build adsshExplore the toolbox

Brand: SAH / Development binary: adssh

●   sah / operator toolkit_   □
$ opensah tools

sahlink      built       process I/O capture
sahconnect   built       SSH + SystemAPI client
sahapi       built       local API service
sahcore      not_built   unassigned
adssh        external    execution shell

$ sahconnect api GET /api/v1/fleet
$ sahlink run -- /bin/echo hello
hello
Illustrative, abbreviated tool listing · commands require local setup

01 / The execution shell

A prompt with a point of view.

01 / PROGRAMMABLE

Make it your environment.

Starlark extensions and built-in virtual binaries bring useful operations into the shell. The MCP server gives agents an interface to the toolset.

Explore adssh ↗
02 / POLICY-AWARE

Put intent before execution.

Policy evaluation, approval workflows, and audit evidence make the authority behind a command explicit.

Understand the boundary ↗
03 / COMPOSABLE

Keep your familiar workflow.

Use the adssh binary directly, launch it through sahconnect, or capture a process you start with sahlink.

Start locally ↗

02 / A focused toolbox

Connect.
Capture.
Keep going.

The SAH utilities are useful on their own. They do a small, explicit job and fit alongside the shell.

export SYSTEMAPI_URL=https://systemapi.example
# Set SYSTEMAPI_API_KEY through your secret manager.
sahconnect api GET /api/v1/fleet

Calls your configured SystemAPI with the key in a request header.

03 / For machines, too

A small protocol. An explicit boundary.

The initial sah/1 stdio interface accepts a single JSON frame. It is opt-in through ADSSH_SAH. The hello message does not execute commands.

Execution requires a loaded policy that allows the command. A supplied lease ID does not grant authority, and the cross-product lease handoff is not yet wired.

printf '%s\n' '{"v":1,"id":"hello-1","type":"hello"}' | \
  ADSSH_SAH=1 adssh sah

Start at the prompt.

Build from source, read the policy model, and make the tools part of your workflow.

Open the install guide