Lumen Local Agent

By default, Lumen is a hosted service that cannot see any file on your computer — its execution environment is fully host-isolated. The Local Agent is an optional program that lets you choose to give Lumen access to one folder you pick, the way a coding assistant works with a project directory.

What the Local Agent does

• Exposes exactly one directory you choose — never anything outside it. Paths are jailed with realpath; any attempt to escape the folder is refused.
• Polls Lumen outbound over HTTPS for file jobs that your own agent run has queued, runs each inside that folder, and returns the result.
• Is read-only by default (list / read / search / stat). Writing files is refused unless you explicitly start it with --allow-write.
• Never returns more than 256 KB per file read.

What it does NOT do

• Lumen never connects into your machine. The agent only makes outbound requests to ask.eliteaiempire.com.
• It does not run shell commands, install software, or touch files outside your chosen folder.
• It does not start automatically. It only acts while you are running it and while a job you triggered is pending.
• It requires no third-party dependencies — it is a single Python file using only the standard library, so you can read every line before running it.

Consent is explicit and per-session

• You download and run the script yourself.
• It prints a 6-digit pairing code. You enter that code in Lumen Settings while signed in to bind the agent to your account.
• No pairing = no jobs flow. The hosted sandbox stays host-isolated regardless.
• Press Ctrl-C (or unpair in Settings) and local access ends immediately.

How to run it

python3 lumen-local-agent.py                # share current folder, read-only
python3 lumen-local-agent.py --dir ~/work   # share a specific folder
python3 lumen-local-agent.py --dir ~/work --allow-write   # also allow writes

It prints a pairing code. Sign in at ask.eliteaiempire.com, open Settings, and enter the code. Stop the script any time to revoke access.