Ship from CI
vio validate --json gates a pull request. A merge redeploys the agent in place.
VIORANT CLI
vio is the Viorant CLI. It validates a .vio file, stands the agent up on Viorant Cloud, and hands you a URL.
The same deploy pipeline as the Hub, without opening the Hub.
macOS and Linux:
curl -fsSL https://dl.viorant.ai/cli/install.sh | shvio needs Node 22. It installs to your home directory without sudo. Run the same command again to upgrade.
Windows: download the release file from dl.viorant.ai and check its sha256 checksum by hand.
vio loginGoogle sign-in in your browser. One owner-only credential file on your machine.
vio validate agent.vioLocal and offline. No account needed. An invalid file fails with the exact field that is wrong.
vio deploy agent.vio --target viorant_cloud --env-file creds.envYou get a URL and a run key, shown once. Your provider key is sealed on your machine before it leaves it.
Then call it:
curl -sS -X POST https://<service>.a.run.app/run -H "Authorization: Bearer <run key>" -H "Content-Type: application/json" -d '{"task":"..."}'vio status: your plan, credit balance, and how many agents you can still deploy.vio list and vio show <id>: your deployments and their state.vio runs <id>: recent runs of a deployed agent.vio logs <id>: recent logs of a deployed agent, with terminal control stripped and common secrets redacted.vio redeploy <id>: replace a running agent in place. The URL stays the same.vio connect <id>: authorise or re-authorise the agent's connectors in your browser. No redeploy.vio stop <id>: stop the agent and revoke its credentials.vio validate --json gates a pull request. A merge redeploys the agent in place.
A .vio file is reviewable text with a canonical digest. Diff it, review it, and deploy exactly what was merged.
Check runs and logs, re-authorise connectors, and stop agents from a server or an SSH session.
Claude Code or Codex writes the .vio file, validates it, and deploys it with vio. You approve the sign-in and the deploy.
Every release is signed with Sigstore from the Viorant release workflow and recorded in the public Rekor transparency log.
The installer always checks the checksum, and checks the signature whenever cosign is installed.
Provider keys are sealed and sent to your deployment. Connector tokens never touch disk.
A run key is printed once and never written to disk or to the session transcript.
Deploys run through Helix, the same engine the Hub uses.
No. The Hub and vio deploy through the same pipeline. Use either.
No. Validation runs offline with no account. Deployed agents count against your plan's agent limit.
Run the install command again. vio --version shows what you have.
Author in the Hub or in your editor. Deploy from either.