Installation
Requirements
- Node.js 22.19 or later to run the compiler and the developer Workbench.
- A package manager — npm, pnpm, yarn, and bun all work; the examples below use npm.
Generated executables target Node.js 22.12 or newer by default. runtime: { node: '24.0' }
raises that floor (it can never be lowered), and the selected floor is recorded as runtime.node
in the artifact manifest.
Install from the preview channel
Nothing is published to npm yet. This is deliberate: the current package names are
placeholders, and the agent-bundle name on npm currently belongs to an unrelated project.
Until the first release, install the preview tarballs CI publishes for every commit and pull
request:
Use a PR number or the SHA of a commit whose package-preview run succeeded — every green main
commit has one. Short SHAs work, and a SHA is the right form for lockfiles and reproducible
setups; a PR number tracks that pull request's most recent build.
Pair the runtime package from the same commit
Projects with route modules also need @agent-bundle/runtime, published to the same channel:
Install both from one SHA or PR number. agent-bundle declares @agent-bundle/runtime as
an optional peer (the runtime package declares no agent-bundle peer), and the publish
(--peerDeps) rewrites that peer range inside the agent-bundle preview tarball to the exact
preview version of the runtime built from the same commit, so a matched pair installs with
stock npm. Mixing two different SHAs fails with ERESOLVE by design — the range to inspect is
the one in the installed agent-bundle package.
pnpm and yarn accept the same URLs (pnpm add <url>, yarn add agent-bundle@<url>).
Preview versions are spelled 0.0.0-preview-<sha>. They are built from the same output the
release gates verify, but they are not npm releases. See
Preview packages
for pinning details and where previews come from.
Optional dependencies
These are installed only when a project uses the surface that needs them:
Once npm releases exist
The commands below are the future installation path. They do not work yet, because no npm release has been cut:
The first npm release will use npm package provenance. Until the release owner picks the final package name and license, pkg.pr.new previews are the release channel.
Verify the install
validate checks project source. Once you have built something, validate --artifact <dir>
checks the built artifact instead, with no project sources required.
Next: Quick start.