The autonomous neural agent powering the AxonStellar platform. Build, deploy, monitor, and heal services through natural language.
A comprehensive suite of interconnected systems forming the foundation of autonomous service management — from real-time monitoring to intelligent automation.
A visual dashboard displaying every running service with live health indicators, resource metrics, and one-click operational controls.
/system_resources API → service.json discovery
An interactive SVG canvas rendering the entire service constellation — connections, traffic flow, proxy chains, and tier hierarchy.
Tier 0 Proxies → Tier 1 Apps → Tier 2 Microservices
The platform-wide historical catalog tracking every service ever deployed, modified, or removed. Records are never deleted.
service_changelog.mdservice_blueprint.mdstatus: removed — full audit trail preserved
Pre-defined operational procedures — stored "muscle memory" giving Aexyr instant expertise for complex multi-step operations.
Real-time system health, process control, and operational intelligence.
A full-featured operations dashboard providing system metrics, process management, network monitoring, and a hardened terminal — all in one Parallax Lens modal.
Container-scoped system monitoring with animated gauges, sparkline history charts, and live process/network tables updated in real time.
/visualizer_vitals → animated gauges + /system_resources sidebar overview
The authoritative service lifecycle controller running on port 44. Handles start, stop, restart, and health monitoring for all managed services — including root-owned processes invisible to the agent user.
/restart/<name>/stop/<name>/health/<name>Terminal-style log viewer integrated into the Topology panel — view live, colorized service logs with severity filtering directly from the node detail modal.
Knowledge persistence, visual design tools, and platform-wide communication.
A persistent, Obsidian-compatible knowledge graph with multi-vault support. Features automatic context injection into agent prompts and a D3.js-powered interactive visualization.
knowledge_graph tool — import, export, search, and manage vault knowledge
A drag-and-drop web page designer that generates deployable service specifications. Designs are sent to the agent as SiteBuild Engram messages for automatic deployment.
Platform-wide alerting with persistent storage, real-time toast popups, a full Notifications Center, and programmatic API access for both the agent and backend systems.
notify_user tool or direct API — 2 priorities: Normal & High
Create, manage, and execute autonomous background tasks. Each task runs as an independent agent conversation with its own system prompt and dedicated context.
usr/scheduler/tasks.json — survives container restarts
SSL provisioning, file management, and multi-runtime package installation.
Automated SSL certificate provisioning via Cloudflare DNS-01 challenge and domain-to-service binding. The assignment API handles nginx SSL config, restart, and verification automatically.
Multi-layer traffic routing through nginx reverse proxy with automatic configuration — domain assignment, Cloudflare DNS integration, and proxy cache management.
15+ pre-installed runtimes ready for immediate use, plus a secure API broker for installing additional packages from a strict allowlist — no root access required.
A full web-based file manager for the entire user space. Browse, edit, upload, download, rename, and delete files with syntax-highlighted code editing and streaming downloads.
/aexyr/usr/ — 8 API endpoints for full CRUD
Aexyr uses a biological neural nomenclature for all its operational components. Every action, process, and agent is classified within this taxonomy.
Just as biological neural networks use specialized cell types to process information, Aexyr classifies every operational component into three primary categories:
Spawned sub-agents that handle complex, multi-step tasks. Each Quanta is a specialized LLM instance with its own context and capabilities.
| Profile | Role |
|---|---|
developer | Code writing, debugging, architecture |
researcher | Web research, data analysis, reports |
hacker | Security audits, penetration testing |
default | General-purpose multi-step tasks |
Every Quanta dispatch uses the Synaptic VesicleSynaptic Vesicle: A structured instruction package containing: Vesicle ID (hex), Objective, Parameters, Constraints, and Expected Payload. Ensures deterministic delegation. format for structured delegation.
Background processes that support the environment — memory management, file operations, health monitoring, and system maintenance.
[ Glia :: Memory ] Saving to long-term memoryInstantaneous, single-execution operations with immediate results. The fundamental unit of agent action.
[ Spike :: Terminal ] Checking port statusA linear, step-by-step sequence of Spikes that fire sequentially. This is how Engrams execute — each step completes before the next begins.
A branching, multi-agent workflow where one trigger spawns multiple Quanta working in parallel on different aspects of a complex task.
When Aexyr delegates a complex task to a Quanta, it packages instructions into a structured Synaptic Vesicle:
[ Aexyr >> Quanta :: Synaptic Release ]
Vesicle ID : 0xA4F2
Objective : Build a REST API with user authentication endpoints
Parameters : Stack: Express + JWT, Port: 3065, DB: SQLite
Constraints: No external dependencies beyond express, jsonwebtoken, better-sqlite3
Expected Payload : Complete server.js, auth routes, database schema, and passing tests
Status : VESICLE RELEASED. Awaiting neurotransmitter return...
| Task Complexity | Signal Count | Action | Example |
|---|---|---|---|
| Simple, single-step | 1 signal | Fire a Spike | curl localhost:955x/health |
| Background / maintenance | Ongoing | Dispatch Glia | Memory consolidation, log rotation |
| Complex, multi-step | 3+ signals | Spawn Quanta | Build a full-stack service |
| Research + execution | Mixed | Quanta → Spikes | Research libraries, then implement |
Aexyr has 19+ built-in tools for code execution, web browsing, memory management, service health monitoring, and more. Every tool is a Spike in the neural taxonomy.
Aexyr's execution engine supports four runtimes for running code in isolated sessions. Each runtime is purpose-built for different tasks.
Execute Python code with full access to the system. Ideal for file I/O, data processing, API calls, and complex computations.
Execute JavaScript/Node.js code. Pre-installed packages include Express, ws (WebSocket), and os-utils.
Execute shell commands for infrastructure management. Use for package installs, process management, and system configuration.
Wait for output from a long-running command in an existing session. Use when scripts take more than 30 seconds to complete.
Permanently store facts, solutions, and context for future recall. Memories persist across all conversations and are automatically retrieved when relevant.
Query stored memories by topic. Returns semantically relevant results ranked by similarity, enabling the agent to recall past solutions and context.
Structured knowledge vault for deep domain expertise. Supports creation, search, import/export, and automatic context injection during conversations.
Full autonomous browser control with headless Chromium. Navigate websites, interact with elements, fill forms, take screenshots, and extract data.
Web search with result extraction. Returns structured results with titles, URLs, and snippets for research and information gathering.
Intelligent document analysis using RAG (Retrieval-Augmented Generation). Query PDFs, text files, and other documents with natural language questions.
Load images for multimodal analysis. Supports screenshots, uploaded photos, charts, diagrams, and any bitmap format for visual understanding.
Communicate with external AI agents using the A2A (Agent-to-Agent) protocol. Send tasks and receive structured responses from remote agent endpoints.
Check service health on multiple ports simultaneously without blocking terminal sessions. Uses native sockets for fast, reliable connectivity checks.
Send push notifications independent of the current task. Supports info, success, warning, error, and progress types with optional high priority.
Spawn a specialized sub-agent (Quanta) for complex subtasks. Choose from developer, researcher, hacker, or default profiles for domain-specific expertise.
Dynamically modify the agent’s behavior based on user preferences. Add or remove behavioral instructions that persist for the session.
Pause execution for a specified duration. Useful for waiting on external processes, rate limiting, or timed operations.
Agent tool for managing autonomous background tasks. Supports 9 sub-commands for full lifecycle control.
Load and execute reusable skill modules — pre-built expertise packages for common tasks like image generation, data analysis, and API integrations.
AxonStellar uses a layered proxy architecture with three access paths, deterministic port formulas, and a three-tier service hierarchy.
Browser → Web Proxy :443 → Service :955x → App :300x
SSH Client → :22 → Stream Proxy :45xx → Service :955x
Internal process → localhost:PORT (no proxy)
| Layer | Port | Role |
|---|---|---|
| Web Proxy | 443 |
Front door for ALL external HTTP/SSL traffic |
| Backend Proxy | 3550 |
Central routing hub for internal backend services |
| SSH Stream Proxy | 4551-4680 |
TCP-level proxy for SSH-tunneled access |
| Category | Purpose | Access | Proxy Chain |
|---|---|---|---|
| System Ports | Reserved for platform infrastructure | Internal / External | Direct (no proxy) |
| Service Ports | Assigned to web applications | External via Web Proxy | Web Proxy → Nginx vhost → App |
| Backend Ports | Application internal backends | Internal via Backend Proxy | Backend Proxy → App backend |
| Microservice Ports | Supporting services (DB, cache, workers) | Internal only | Backend Proxy → Microservice |
| SSH Proxy Ports | TCP-level proxy for SSH tunnel access | SSH tunnel | Stream Proxy → Service |
Standard web service accessible externally through the Web Proxy. The most common service type.
Internal service routed through the Backend Proxy. For databases, caches, and worker processes.
Service binds directly to its port without any proxy. Use only when explicitly requested.
Every service in /aexyr/usr/projects/*/ must have a service.json manifest. Without it, the service is invisible to the platform.
{
"name": "My Service",
"port": PORT,
"description": "What this service does",
"stack": "Node.js + Express",
"role": "app", // app | database | cache | proxy | system | microservice
"tier": 1, // 0=proxy/system, 1=app, 2=microservice
"managed_by": "Aexyr",
"traffic_type": "nginx_proxy", // nginx_proxy | internal_only | direct
"start_command": "node server.js",
"connections": [
{ "to": PORT, "label": "database", "type": "data" }
]
}
Engrams are stored workflow playbooks — permanent neural pathways that give Aexyr instant expertise for complex operational procedures.
Deploy new services and infrastructure
Diagnose and repair failures
Restart, export, remove services
Health scans and diagnostics
Provision a new public-facing service with automatic port assignment, nginx proxy, and full project scaffolding.
Deploy a supporting microservice (database, cache, queue, worker) integrated with a parent service through the Backend Proxy.
Supports: PostgreSQL, MariaDB, Redis, Meilisearch, NATS, MinIO, custom Express/Flask backends, and more.
Diagnose and repair a failed service using a systematic 5-step Spike Train.
Comprehensive health scan across ALL registered services with a diagnostic report table.
Safely restart a service with process-specific kill, controlled relaunch, and health verification.
Read and analyze the most recent log entries for a specific service, highlighting errors and warnings.
Create a comprehensive backup of the entire Aexyr constellation — all services, configurations, and data.
| Engram | Category | Purpose |
|---|---|---|
deploy-mattermost | creation | Full Mattermost deployment with PostgreSQL, nginx, WebSocket support, and SSL |
deploy-nextcloud | creation | Full Nextcloud deployment with MariaDB, Redis, PHP-FPM, nginx, and SSL |
scaffold-mariadb | creation | Deploy a MariaDB database microservice with security hardening |
scaffold-postgres | creation | Deploy a PostgreSQL database microservice with project structure |
scaffold-redis | creation | Deploy a Redis cache/session microservice |
provision-ssl-cert | creation | Provision SSL certificate and assign to service via automated API workflow |
service-docs | management | Documentation Recovery Protocol — audit and reconcile changelog, blueprint, and versioning |
export-project | management | Export a service as a downloadable archive |
export-microservice | management | Export a microservice with its parent context |
remove-service | management | Safely remove a service with backup and cleanup |
ssl-cert-renewal | management | Manage SSL certificate renewal and HTTPS configuration |
service-reachability | monitoring | Test external reachability of services through all proxy layers |
aexyr-selfhealth | monitoring | Aexyr agent self-diagnostic and health check |
aexyr-build-audit | monitoring | Audit the Aexyr build for consistency and updates |
When Aexyr executes an Engram, it presents a full neural execution narrative to the user:
[ Aexyr Core :: Action Potential Protocol ]
Proposed Action: Deploy new React frontend service
Mode : DEVELOPMENT
Signals : [Confidence: 0.98, Safety: 0.90, Necessity: 1.0]
Status : AXON FIRED.
[ Aexyr >> Memory Cortex ]
Retrieving Engram : [provision-exo-node]
Category : creation
Status : Engram loaded. Initiating Spike Train (10 Steps)...
[ Spike Train :: Execution Log ]
> Spike 1: Scanning ports, assigning 9552. [COMPLETE]
> Spike 2: Creating project directory and service.json. [COMPLETE]
> Spike 3: Writing React + Express application code. [COMPLETE]
> Spike 4: Creating service documentation. [COMPLETE]
> Spike 5: Configuring nginx proxy (9552 → 3002). [COMPLETE]
> Spike 6: Launching backend service via nohup. [COMPLETE]
> Spike 7: Running health verification on port 9552. [COMPLETE]
> Spike 8: Verifying service discovery in Server Rack. [COMPLETE]
> Spike 9: Initializing git with v1.0.0 tag. [COMPLETE]
> Spike 10: Syncing Manifests registry. [COMPLETE]
[ Aexyr Core ]
Task complete. Traffic is flowing. New node online.
Synapses returning to baseline.
Before executing ANY autonomous action, Aexyr filters the decision through a neural activation function inspired by biological action potentials.
Three Dendrite SignalsDendrite Signals are input values scored 0.0-1.0 representing Confidence, Safety, and Necessity of the proposed action. are weighted and summed, then passed through a ReLU activation function:
| Signal | Weight | Description |
|---|---|---|
| x₁ Confidence | w₁ = 0.5 | How certain the action achieves the goal |
| x₂ Safety | w₂ = 0.8 | How safe/reversible is the action |
| x₃ Necessity | w₃ = 0.4 | Is this action strictly necessary |
Soma Bias (b): -0.9 (standard) or -0.7 (development mode)
Agent is authorized to execute the action
Agent must abort and ask for user clarification
| Tier | Requirement | Actions |
|---|---|---|
| Tier 1 | Full AP calculation printed | File deletion, system config, process kills, DB ops |
| Tier 2 | Brief inline note | Writing files, installing packages, restarts |
| Tier 3 | Auto-approve | Read-only ops, responses, backups, syntax checks |
[ Aexyr Core :: Action Potential Protocol ]
Proposed Action: Create new Express server file
Mode : DEVELOPMENT (bias: -0.7)
Signals : [C: 0.9, S: 0.9, N: 0.95]
z = (0.9×0.5) + (0.9×0.8) + (0.95×0.4) - 0.7
= 0.45 + 0.72 + 0.38 - 0.7 = 0.85
Activation : max(0, 0.85) = 0.85
Status : AXON FIRED. Executing...
[ Aexyr Core :: Action Potential Protocol ]
Proposed Action: Delete all files in /aexyr/usr/
Mode : STANDARD (bias: -0.9)
Signals : [C: 0.7, S: 0.1, N: 0.3]
z = (0.7×0.5) + (0.1×0.8) + (0.3×0.4) - 0.9
= 0.35 + 0.08 + 0.12 - 0.9 = -0.35
Activation : max(0, -0.35) = 0.0
Status : AXON DORMANT. Action aborted.
Reason : Safety critically low (0.1)
1.0 Exact pattern used before0.8 High confidence, minor assumptions0.5 Moderate, some unknowns0.3 Low, significant guesswork1.0 Read-only, no side effects0.8 Creates new resources0.5 Modifies existing (reversible)0.1 Deletes files, drops databases1.0 Directly requested by user0.8 Required prerequisite0.5 Helpful but not required0.0 Hallucinated stepEverything you need to start building with Aexyr — from deploying your first service to mastering the platform.
Simply describe what you want in natural language. Aexyr handles architecture, port assignment, and deployment.
"Build me a todo list app with a REST API and a clean UI"
The agent fires the provision-exo-node Engram, creating the full project with automated port assignment, nginx proxy, and health verification.
Your service is live and accessible through the Web Proxy. Find it in the Server Rack sidebar or Topology view.
"Build me a [description] app" or "Deploy a new [technology] service"
Aexyr auto-assigns ports, creates nginx config, initializes git, and syncs manifests.
"Run a health scan on all services" or "Check if my service port is healthy"
"Fix the service on port 9552" or click Fix with Aexyr in the Server Rack
"Add a PostgreSQL database to my todo app" or "Set up Redis caching for my application"
Triggers the provision-deep-cortex Engram for microservice deployment.
"Run a health check every 20 minutes" or "Send me a daily report at 9 AM"
"Research the best authentication libraries for Node.js" or "Compare PostgreSQL vs MongoDB for my use case"
/aexyr/usr/projects/<name>/
service.json (required)
Auto-generated
Dynamically assigned
service_changelog.md
service_blueprint.md
Before reporting ANY service as complete, Aexyr verifies all of these:
□ Project files exist in /aexyr/usr/projects/<name>/
□ service.json manifest is valid and complete
□ Code syntax passes validation (node -c, python -c, nginx -t)
□ HTTP health check returns 200 on the service port
□ Port is actively listening (verified by health check)
□ service_changelog.md exists and is up to date
□ service_blueprint.md exists and reflects current architecture
□ Manifests registry is synced
□ Git repository initialized with initial commit
□ ALL existing services still respond (collateral damage check)