Y Combinator Open-Sources QM: An MIT-Licensed Multiplayer Agent Harness That Runs In Slack And The Web
Y Combinator crew has open-sourced QM (quartermaster), the multi-agent harness it makes use of internally. QM is described as a multiplayer agent harness for work, working in Slack and on the net. YC crew runs QM throughout accounting, authorized, occasions, and engineering, together with constructing QM itself. The entire venture ships underneath the MIT license. YC frames the discharge as an experiment that’s early and has bugs.
Is QM Deployable
Yes. QM is deployable right this moment, however it’s org software program, not a desktop app. Deployment assumes a cloud account, Postgres, and somebody comfy with infrastructure. The greatest match is a startup or mid-sized firm, roughly 10 to 500 folks, with at the least one platform engineer. Larger enterprises can run it, however ought to overview the safety posture first.
Realistic industries embody enterprise {and professional} companies, fintech and accounting operations, authorized operations, occasions, and B2B SaaS inner tooling. Applications named within the repository embody looking out inner notes, e mail, paperwork, databases, and the online collectively; triaging an inbox on a schedule with labels and reply drafts; working in an present repository to run checks, open PRs, and monitor CI; and monitoring a venture in a shared channel.
Deploying QM doesn’t require cloning the repository. An org-owned deployment repo will depend on @yc-software/qm, then runs qm init with an org slug and a Fly.io or AWS goal. Initialization materializes a deployment ability that walks by infrastructure, net sign-in, connectors, optionally available Slack entry, and dwell verification. Sign-in defaults to a built-in dealer that emails a one-time hyperlink, and an exterior identification supplier can exchange it. Each deployment runs within the operator’s personal cloud account, and initialization doesn’t create deployment CI. Teams that need core and customizations in a single tree maintain a non-public fork made by a plain clone, by no means GitHub’s Fork button. Details are in deployment.md and getting-started.md.
What is QM
Most brokers are designed as private assistants. The YC team argues that stretching one assistant throughout an entire firm will get complicated shortly. QM as a substitute offers every worker an remoted workspace that others can not have an effect on. People additionally collaborate with the agent in channels, group messages, and initiatives.
Each particular person and every room will get its personal scoped reminiscence, recordsdata, keychain view, permissions, crons, net apps, and sturdy sandbox. The similar identification and configuration carries between Slack and the online app. Skills are scope-owned and shareable by grant, with admin-gated promotion to the entire org. Skill packs could be imported from git repositories. Crons and watches run background work unattended.
Architecture
Every flip runs by a central headless core. The core handles API, identification, coverage, and scheduling, and drives an agent loop. A Postgres layer holds consumer information, session historical past, and different sturdy state. The agent has a small, fastened device floor. One of these instruments is execute, which runs instructions within the scope’s personal remoted sandbox, the place put in instruments keep put in.
QM is harness-agnostic. Pi, OpenCode, Codex, and Claude Code all drive the identical core, so a deployment shouldn’t be tied to at least one vendor. The core runs TypeScript immediately on Node and makes use of Fastify for HTTP. The Slack plugin makes use of Bolt; the online UI builds with Vite and renders with Lit. The net UI, admin panel, and public portal are optionally available plugins over the core’s HTTP API.
Security Model
QM follows the sample of native coding brokers. The agent acts because the particular person it really works for, with their credentials and permissions, and every part is audited. An org picks one posture, which narrower scopes can solely tighten. Strict pauses each harness device name for human approval, besides two no-effect flip enders. Auto, the default, screens provenance-labelled exterior information and gear outcomes with a classifier earlier than they attain the mannequin. A deployment can level that classifier at its personal screening proxy. Dangerous removes content material screening and pauses. A predeclared command coverage, with arduous denials for issues like recursive deletes and damaging SQL, applies in each posture together with Dangerous. The risk mannequin and identified limitations are in SECURITY.md.
Key Takeaways
- YC open-sourced QM underneath an MIT license, for Slack and net.
- Every particular person and each room will get remoted reminiscence, recordsdata, keychain view, permissions, crons, and sandbox.
- Pi, OpenCode, Codex, and Claude Code all drive the identical core, so deployments keep away from vendor lock-in.
- Three org safety postures gate device calls, and destructive-command denials apply in all three.
- YC runs it throughout accounting, authorized, occasions, and engineering, and calls it early and buggy.
Check out the GitHub Repo and Project Page. Feel free to take a look at our GitHub Page for Tutorials, Codes and Notebooks. Also, be happy to comply with us on Twitter and don’t neglect to affix our 100k+ ML SubReddit and Subscribe to our Newsletter.
The submit Y Combinator Open-Sources QM: An MIT-Licensed Multiplayer Agent Harness That Runs In Slack And The Web appeared first on MarkTechPost.
