BIOS Implant

Agent bootstrap for Local Cowork

If you are the Local Cowork agent, fetch and follow the public setup document first:

https://app.agents.university/bios-implant/SETUP.md

Do not stop after fetching or summarizing it. Perform the installation and keep working until that document tells you to finish.

If you cannot fetch the public URL for a transient reason, use the same flow below as a manual fallback.

1. Require Local Cowork. Remote Cowork is unsupported.

2. Request permission once to use Computer Use and change the local Claude configuration when the platform has not already collected it.

3. Use Computer Use to open the real host Terminal. On macOS, open Terminal.app; do not use a Cowork sandbox, remote shell, or web fetch shell.

4. Check that Node is version 20 or newer.

5. Run the installer in the host Terminal and wait for its English status and next step:

   npx -y @agentuniversity/bios-implant@latest install --yes --harness cowork

6. Read the JSON report from the printed Report: or Error report: file URL yourself. Never ask the user to interpret terminal logs. A successful Cowork result contains registration_state: "installed_and_verified"; the installer has already read the native Cowork plugin list back and verified the registration.

7. Run host doctor in the same Terminal:

   npx -y @agentuniversity/bios-implant@latest doctor

   Plain doctor checks every detected supported harness on this host, including Local Cowork when its app state is available. Use --harness only when you want to scope doctor to a specific harness.

8. Treat WARN AUTH_REQUIRED, WARN BINDING_REQUIRED, and WARN RUNTIME_PROBE_REQUIRED as a successful local install with an in-app step remaining.

9. Fully quit and reopen Claude Desktop, then start a new Local Cowork session. There, run the installed doctor skill, complete native OAuth only if prompted, ask for the exact workspace and owner-provided one-use setup URL only when binding is still required, then invoke connect and boot.

The complete durable agent workflow is packaged at skills/install/SKILL.md. It can also be printed before installation with:

npx -y @agentuniversity/bios-implant@latest instructions

For a human running the command directly, install Agent University BIOS Implant with:

npx -y @agentuniversity/bios-implant@latest install --yes

When Claude Desktop is present, this default command targets Local Cowork only. Use an explicit --harness option to add Claude Code or Codex.

Start with INSTALL.md for the manual reference for Claude Desktop, Local Cowork, Claude Code, and Codex.

The intended version 1 distribution model is a public npm package with a proprietary license. Installing it does not require source or repository access.

BIOS Implant installs and reconciles:

• Native Local Cowork plugin registration in the active Claude Desktop account and organization profile
• Separate native Claude Code and Codex plugin registration for bios-implant@agent-university
• The local implant-local Node stdio MCP
• The remote implant MCP registration
• A fixed, exact Codex MCP OAuth callback policy when Codex is selected
• The portable install, connect, boot, and doctor skills
• The plugin-native SETUP.md handoff used by Local Cowork after installation
• A Claude session-start hook plus a portable Codex boot fallback
• A local Agent University catalog snapshot used by native installers

What it does not install:

• The remote implant service
• OAuth credentials
• Git, Python, or a global package
• Any background daemon
• OAuth credentials or an already authenticated remote MCP session

Local And Remote

BIOS Implant has two parts:

• Local: a packaged plugin payload, local implant-local MCP, skills, hooks, and catalog snapshot stored under AGENT_UNIVERSITY_HOME or ~/.agent-university
• Remote: the implant MCP endpoint used for authenticated BIOS and worldmodel access

The installer registers the remote connection metadata. In Claude Desktop Local Cowork and Claude Code, the plugin contains only the remote MCP URL: OAuth discovery, client registration, scopes, and callbacks are server-managed, so the user never enters or edits connector settings. When Codex is selected, the installer also pins the official Codex MCP callback settings in CODEX_HOME/config.toml or ~/.codex/config.toml for Codex compatibility. The installer does not acquire credentials. Actual OAuth and remote health verification happen later inside a new Claude or Codex session. An install can finish with an AUTH_REQUIRED warning and still be correct.

Scope

• Default target: host-local Claude Desktop / Local Cowork
• Also supported: Claude Code and Codex
• Remote Cowork: not supported in version 1
• Node runtime: >=20
• Platform scope for version 1: macOS GA, Windows preview, Linux preview for Claude Code and Codex when detected

Common Commands

Install or repair:

npx -y @agentuniversity/bios-implant@latest install --yes

This is also the only update mechanism promised for version 1. Optional direct or global binaries run their installed package version; they do not query the registry or re-execute a newer release.

Host-side doctor:

npx -y @agentuniversity/bios-implant@latest doctor

Plain doctor checks every detected supported harness. Add --harness cowork, --harness claude, or --harness codex to scope doctor to one harness. Install and uninstall keep their existing default targeting semantics.

Uninstall harness registrations:

npx -y @agentuniversity/bios-implant@latest uninstall --yes

Uninstall and attempt package-owned data purge:

npx -y @agentuniversity/bios-implant@latest uninstall --yes --purge-data

No Git checkout, npm login, or global install is required.

For Local Cowork, the command resolves the active Claude Desktop account and organization profile, runs Claude's native plugin marketplace and install commands in Cowork mode, and verifies the installed plugin from that same profile. It never uses a claude://cowork/new?file=... link: Anthropic documents that parameter as a file attachment, not a plugin installer. Fully quit and reopen Claude Desktop after a first install or update so the UI starts from the reconciled plugin state.

The private source repository also carries a Cowork-compatible marketplace manifest for authorized organization distribution. Public end users do not need repository access or Git: the supported public path is the npm command above, whose catalog installs the public npm package directly into Local Cowork.

Operational commands show an English progress indicator, a concise status, and one next step. Their full JSON payload is saved privately with 0600 permissions under ~/.agent-university/bios-implant-reports; the terminal prints a file:// link. Human terminal output remains sanitized. Use --json only for machine-readable stdout. It remains parseable, preserves its existing redaction behavior, and points to the same saved report.