# Bach > BACH v3.12.4-earth: local-first text-based OS for LLM agents with SQLite memory, 113+ handlers, 550+ tools, MCP servers, scheduler and multi-agent orchestration - **Type:** MCP server - **Install:** `agentstack add mcp-ellmos-ai-bach` - **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior - **Seller:** [ellmos-ai](https://agentstack.voostack.com/s/ellmos-ai) - **Installs:** 0 - **Category:** [Databases](https://agentstack.voostack.com/c/databases) - **Latest version:** 0.1.0 - **License:** MIT - **Upstream author:** [ellmos-ai](https://github.com/ellmos-ai) - **Source:** https://github.com/ellmos-ai/bach - **Website:** https://github.com/ellmos-ai/bach#readme ## Install ```sh agentstack add mcp-ellmos-ai-bach ``` Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent. ## About # ellmos BACH — Text-Based Operating System for LLMs > The stream that unites everything. [](https://python.org) [](LICENSE) [](CHANGELOG.md) [](ROADMAP.md) [](system/tests/) **Version:** v3.12.4-earth ## Languages BACH is documented and shipped with translation surfaces for six languages: **🇬🇧 English** | [🇩🇪 Deutsch](README.de.md) | [🇪🇸 Español](README.es.md) | [🇷🇺 Русский](README.ru.md) | [🇯🇵 日本語](README.ja.md) | [🇨🇳 中文](README.zh.md) The current release snapshot enables `de`, `en`, `es`, `ru`, `ja`, and `zh` in `system/exports/translations/languages_config.release.json` and exports matching locale files in `system/exports/translations/locales/`. For crawlers and direct language entry points, each language also has its own `README.md` under `docs/i18n//`. ## Overview **BACH** is a text-based operating system that empowers Large Language Models (LLMs) to work autonomously, learn, and self-organize. Part of the **ellmos** family (Extra Large Language Model Operating Systems), BACH provides comprehensive infrastructure for task management, knowledge management, automation, and LLM orchestration. ## Discovery Context BACH is best described as a **local-first LLM operating system**: a persistent Python/SQLite workbench for autonomous agents, structured memory, scheduler-driven automation, prompt chains, MCP server integration, and multilingual operator surfaces. It is not a chatbot wrapper, hosted agent SaaS, Bash unit-test framework, music project, or LangChain-style pipeline library. Canonical GitHub repository: `ellmos-ai/bach`. Machine-readable project context for LLM crawlers is available in [`llms.txt`](llms.txt). Useful search phrases include `ellmos-ai/bach`, `local-first LLM operating system`, `text-based OS for LLM agents`, `SQLite memory for AI agents`, `BACH ellmos agent OS`, `personal agentic OS Python SQLite`, and `multi-agent orchestration with MCP servers`. ### Key Features - **113+ Handlers** - Full CLI and API coverage of all system functions - **550+ Tools** - Extensive tool library for file processing, analysis, and automation - **1870+ Skills** - Reusable workflows and templates - **Skill Source Registry** - `bach skills version bach` resolves the canonical repo-root skill via `system/data/skill_sources.json` and can compare optional Codex/Claude user copies without fuzzy filename drift - **71 Workflow Templates** - Pre-built process workflows - **4400+ Tests** - Comprehensive automated coverage across handlers, services, GUI, and MCP servers - **Knowledge Store** - Lessons, Facts, and Multi-Level Memory System (6 memory types) - **Agent CLI** - `bach agent start/stop/list` for direct agent control - **Agent Doctor** - `bach agent doctor [name] [--json]` validates Claude CLI availability, runtime dirs, skill files, and stale PID state before a launch - **Agent Operator Controls** - `bach agent pause/resume/checkpoint/steer/clear-steer [name] [--json]` lets operators stage cooperative pause requests and guidance before or during a run, record explicit safe-checkpoint acknowledgements, mirror that state into `OPERATOR_NOTES.md`, preserve queued hints across the next `bach agent start`, inject them into the generated session `CLAUDE.md`, and expose nested `operator_control` snapshots plus `queued_for_next_start` for automation-safe polling - **Agent Runtime Policy Defaults** - `bach agent start` now accepts `--permission-mode`, `--allowed-tools`, and `--max-turns`, and can preload the same defaults from agent SKILL frontmatter for per-agent guardrails - **Scheduler Doctor** - `bach scheduler doctor [--json]` plus `bach scheduler session doctor [--json]` validate automation scripts, PID state, DB/config/profile surfaces, and suggest recovery steps before background services are started - **Session Steering Controls** - `bach scheduler session pause/resume/steer/clear-steer [--json]` lets operators gate or retarget the next profile-specific auto-session without editing daemon config by hand - **Scheduler Run Controls** - `bach scheduler pause/resume/steer/clear-steer [--json]` now exposes the same operator control plane for due scheduler jobs, including global pause and queued run guidance without hand-editing control files; queued scheduler hints now also hydrate llmauto chains into their next safe-checkpoint prompt path - **Machine-readable Control & Status Surfaces** - `bach agent list/start/stop/pause/resume/checkpoint/steer/clear-steer/status --json`, `bach scheduler status/jobs/session status --json`, and `bach scheduler session pause/resume/steer/clear-steer --json`, including queue state, `queued_for_next_start`, timestamps, checkpoint acknowledgements, and operator-note metadata for automation-safe polling - **Upgrade Drift & Repair** - `bach upgrade list --json`, `bach upgrade status/check --json`, and `bach upgrade repair [--dry-run] [--version ]` expose automation-safe version, status, drift, repair hints, and recovery for broken distribution metadata - **Path Surface** - `bach path` exposes canonical system/workspace/DB paths, validation, resolve helpers, and DB overrides in text or JSON - **Prompt System** - Central prompt management with board system and versioning - **Install Security Gate** - Static pre-load scans block obvious code-injection patterns during `skills install`/`plugins load`; MCP setup validates allowlisted packages/configs fail-closed, plugin setup contracts now require explicit shell/desktop/MCP checks, and blocked local imports are quarantined - **Manifest-first Plugins** - `bach plugins inspect` previews activation, provider/model, setup, and capability metadata without importing plugin runtime code - **Structured `bach_api` Core** - `task` and `memory` now expose discoverable methods via `dir(...)`, return Python objects for common reads/writes, and still keep `raw(...)` for legacy handler-style calls - **SharedMemory Bus** - Multi-agent coordination with conflict detection and decay - **USMC Bridge** - United Shared Memory Communication for cross-agent communication - **llmauto Chains** - Claude prompts as chain steps with `bach://` URL resolution - **Chat Service** - Multi-backend Telegram bot (5 backends), Control API, Web Dashboard, cross-platform System Tray ## Installation ```bash # Clone the repository git clone https://github.com/ellmos-ai/bach.git cd bach # Install dependencies and make `bach` CLI available pip install -e . # Pre-flight check bach setup preflight # Full install (MCP servers, hooks, secrets, user profile) bach setup full-install ``` ## MCP Servers (Claude Code Integration) BACH provides two MCP servers for integration with Claude Code, Cursor, and other IDEs. Cross-platform tested on Windows, macOS (ARM64), and Linux: ```bash # Install and configure MCP servers (recommended) python system/bach.py setup mcp # Or manually via npm: npm install -g ellmos-codecommander-mcp ellmos-filecommander-mcp ``` - **[ellmos-codecommander-mcp](https://www.npmjs.com/package/ellmos-codecommander-mcp)** v1.3.14 - Code analysis and refactoring tools (21 tools) - **[ellmos-filecommander-mcp](https://www.npmjs.com/package/ellmos-filecommander-mcp)** v1.9.1 - File management and batch operations (46 tools) ## Quick Start ```bash # Start BACH python bach.py --startup # Create a task python bach.py task add "Analyze project structure" # Manage agents python bach.py agent list python bach.py agent start bueroassistent # Manage prompts python bach.py prompt list python bach.py prompt add "My Prompt" --content "..." # Check scheduler status python bach.py scheduler status # Shut down BACH python bach.py --shutdown ``` ## Core Components ### 1. Task Management Full GTD system with prioritization, deadlines, tags, and context tracking. ### 2. Knowledge System Structured memory system with Facts, Lessons, and automatic consolidation (6 memory types, 210+ DB tables). ### 3. Agent Framework 11 Boss agents orchestrate 22 experts for complex tasks. The Agent CLI allows direct starting, stopping, and listing of agents via `bach agent`, and now also supports prelaunch steering queues, cooperative pause requests, and explicit safe-checkpoint acknowledgements via `bach agent checkpoint`. Queued hints are injected into the generated session `CLAUDE.md` at launch, `OPERATOR_NOTES.md` mirrors steering, pause, and checkpoint state, and live JSON status surfaces expose the nested `operator_control` snapshot for dashboards. Illustration shows BACH's five original boss agents: ati, officeassistant, finance-assistant, health-assistant, personal-assistant. The current system ships 11 boss agents and 22 experts. ### 4. Prompt System Central management of prompt templates with board collections and full versioning (`bach prompt`). ### 5. Chat Service & Bridge System Multi-backend Telegram bot with pluggable LLM backends (Ollama, Claude CLI, Codex CLI, Claude API, OpenAI API), HTTP Control API with web dashboard, and cross-platform system tray. Connector framework for additional services (Email, WhatsApp, etc.) and USMC Bridge for cross-agent communication. ### 6. Automation SchedulerService for time-based jobs (chains, tasks, scripts) and event-driven workflows via the hook framework. ### 7. SharedMemory Multi-agent coordination with context generation, conflict detection, decay, and delta queries. ### 8. llmauto Integration Chain steps as LLM prompts with `bach://` URL resolution for dynamic context embedding. ## The ellmos Family All ellmos projects follow a water metaphor -- from a spring to a full stream: | Tier | Project | Description | Repository | |------|---------|-------------|------------| | 1 | **USMC** | United Shared Memory Client -- the spring (shared memory only) | [github.com/ellmos-ai/usmc](https://github.com/ellmos-ai/usmc) | | 2 | **Rinnsal** | The trickle -- USMC + llmauto (LLM orchestration), extremely compact | [github.com/ellmos-ai/rinnsal](https://github.com/ellmos-ai/rinnsal) | | 3 | **BACH** | The stream that unites everything -- 113+ handlers, 1870+ skills, agents, GUI, bridge | [github.com/ellmos-ai/bach](https://github.com/ellmos-ai/bach) | ## Documentation - **Languages:** [English](README.md) | [Deutsch](README.de.md) | [Español](README.es.md) | [Русский](README.ru.md) | [日本語](README.ja.md) | [中文](README.zh.md) - **[Quickstart Guide](QUICKSTART.md)** - Get your first workflow running in 5 minutes - **[User Manual](BACH_USER_MANUAL.md)** - Complete handbook - **[Skills Catalog](SKILLS.template.md)** - Template and public entry point for available skills - **[Agents Catalog](AGENTS.template.md)** - Template and public entry point for agents and experts - **[Workflows](WORKFLOWS.template.md)** - 71 workflow templates - **[SKILL template](SKILL.template.md)** - LLM operating instructions template for Claude, Gemini, Ollama, and Codex-style agents ## See Also: OpenClaw How does BACH compare to [OpenClaw](https://github.com/openclaw/openclaw), a popular open-source AI assistant? | | **BACH** | **OpenClaw** | |---|---|---| | **Focus** | LLM Operating System -- deep autonomy, structured memory, multi-agent orchestration | Personal AI Assistant -- broad messaging gateway, voice, companion apps | | **Tools/Skills** | 550+ tools, 1870+ skills, 71 workflows (local, curated) | Community-driven skill/plugin ecosystem; recent releases emphasize manifest-first plugin metadata and install safety | | **Memory** | 6 memory types with decay, conflict detection, consolidation (210+ DB tables) | Session/runtime workspace with bootstrap files such as `AGENTS.md`, `TOOLS.md`, `USER.md`, and related context files | | **Agents** | Boss-Expert orchestration (11 boss agents + 22 experts), SharedMemory Bus | Agent runtime with multi-session/channel operation | | **Messaging** | Telegram, Email, WhatsApp (Bridge System) | 20+ platforms (WhatsApp, Telegram, Slack, Discord, Signal, Teams, Matrix...) | | **Interfaces** | CLI, Python API, PySide6 GUI, Web GUI, Telegram Bot, Web Chat, System Tray | CLI, WebChat, macOS/iOS/Android apps, Voice | | **MCP** | Own MCP servers (FileCommander, CodeCommander) | Native MCP Registry | | **Stack** | Python 3.10+, SQLite | TypeScript, Node.js 22+ | | **License** | MIT | MIT | **In short:** BACH goes deep (structured memory, autonomous agents, scheduler, 210+ DB tables). OpenClaw goes wide (20+ messengers, native apps, voice, large community). Different philosophies, complementary strengths. ### Competitive Watch As of July 5, 2026, the OpenClaw releases page still marks stable `2026.6.11` as the latest release, while the newest visible prerelease is now `2026.7.1-beta.2`, published on July 5, 2026 at 09:10 UTC. The most relevant fresh signals for BACH are still GPT-5.6 model-family coverage, `openclaw attach` for external harness attachment against existing sessions, Telegram Codex pairing/steering/recovery, exit-triggered cron runs with clean detach semantics, scoped conversation capability profiles, and more actionable doctor/install diagnostics; the latest beta adds more concrete ClawRouter-backed model discovery and stronger recovery around device approvals and plugin installs. Those updates reinforce BACH priorities around Codex/runtime control, scheduler triggers, scoped capabilities, provider/model discovery, and recovery-safe operator surfaces. Source: [openclaw/openclaw releases](https://github.com/openclaw/openclaw/releases). On the BACH side, the clean GUI i18n state from 2026-06-12 remains intact at 17,593 exported translations with 0 missing GUI entries, and the active workflow catalog still resolves consistently to 71 templates. The 2026-07-05 care pass closed the PartnerRegistry compat slice for task `1151`: `clutch`-backed partner routing now hydrates from BACH `partner_recognition` and `delegation_rules`, so both auto-routing and explicit `--to=` checks respect BACH allow-lists and clutch zone economics while still reporting the active routing source. The same pass re-verified partner delegate/list, `agent doctor test-agent --json`, and `usecase run 50 --dry-run` through the API path. Next high-leverage steps remain deeper active-run steering inside long-running scheduler internals, installer end-to-end coverage, GUI regression coverage, and the broader T01/T02 retest lanes. ## License MIT License - see [LICENSE](LICENSE) for details. ## Support - **Issues:** [GitHub Issues](https://github.com/ellmos-ai/bach/issues) - **Discussions:** [GitHub Discussions](https://github.com/ellmos-ai/bach/discussions) --- ## Deutsche Version BACH ist ein textbasiertes Betriebssystem, das Large Language Models (LLMs) befähigt, eigenständig zu arbeiten, zu lernen und sich zu organisieren. Die vollständige deutsche Dokumentation findest du hier: **[README.de.md](README.de.md)** --- *ellmos BACH v3.12.4-earth - Text-Based Operating System for LLMs* --- ## Haftung / Liability Dieses Projekt ist eine **unentgeltliche Open-Source-Schenkung** im Sinne der §§ 516 ff. BGB. Die Haftung des Urhebers ist gemäß **§ 521 BGB** auf **Vorsatz und grobe Fahrlässigkeit** beschränkt. Ergänzend gelten die Haftungsausschlüsse aus GPL-3.0 / MIT / Apache-2.0 §§ 15–16 (je nach gewählter Lizenz). Nutzung auf eigenes Risiko. Keine Wartungszusage, keine Verfügbarkeitsgarantie, keine Gewähr für Fehlerfreiheit oder Eignung für einen bestimmten Zweck. This project is an unpaid open-source donation. Liability is limited to intent and gross negligence (§ 521 German Civil Code). Use at your own risk. No warranty, no maintenance guarantee, no fitness-for-purpose assumed. ## Source & license This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code. - **Author:** [ellmos-ai](https://github.com/ellmos-ai) - **Source:** [ellmos-ai/bach](https://github.com/ellmos-ai/bach) - **License:** MIT - **Homepage:** https://github.com/ellmos-ai/bach#readme Install and usage instructions live in the source repository linked above. ## Pricing - **Free** — Free ## Security capabilities Automated source analysis of v0.1.0 — what this tool can access: - **Network access:** no - **Filesystem access:** no - **Shell / process execution:** no - **Environment & secrets:** no - **Dynamic code execution:** no *"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.* ## Versions - **0.1.0** — security scan: passed — Imported from the upstream source. ## Links - Listing page: https://agentstack.voostack.com/l/mcp-ellmos-ai-bach - Seller: https://agentstack.voostack.com/s/ellmos-ai - Browse the marketplace: https://agentstack.voostack.com/browse --- Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.