Use the native host terminal for launcher installation, login and install. On macOS or Windows, enter aidcx terminal after preparation and run doctor and project commands there; the native host refuses those operational commands. Clone the project in the Linux home, which is separate from the Mac home.
Five steps from a clean machine to a shell in your project.
Installing the launcher, signing in, preparing the runtime and starting are separate steps, and success at one does not prove the next. Check each result before moving on.
- $ sh -c "$(curl -fsSL https://dist.mait.sh/aidcx-installer/sh/all)"$ sh -c "$(curl -fsSL https://dist.mait.sh/aidcx-installer/sh/all)"$ irm https://dist.mait.sh/aidcx-installer/ps1/all | iexStep 1 of 5
Install the launcher
Run the installer for your system. Both use the stable channel by default; use the channel approved for your environment rather than swapping in a development build to get past an error.
On Linux and macOS the launcher goes to
$HOME/.local/bin/aidcx; a persistentAIDCX_INSTALL_DIRchanges the directory. On Windows, the installer selects the Microsoft Store package and rejectsAIDCX_WINDOWS_PACKAGE=exe.The Windows channel selects the product:
mait.shfor stable,mait.sh (beta)ormait.sh (edge). They all provideaidcx.exe, so install only one channel. Installation requires access to the approved Store product. If access is unavailable, resolve the account or organization-policy restriction with your administrator before continuing. Installing the package does not prepare the runtime; step 4 still applies. Follow install and update from the Microsoft Store.What you getThe launcher on your computer and its folder added to your shell path.
- $ aidcx version$ command -v aidcx$ aidcx version$ command -v aidcx$ aidcx version$ Get-Command aidcxCapturedaidcx 6.15.7 · Ubuntu 26.04$ aidcx versionaidcx 6.15.7$ command -v aidcx/home/user/.local/bin/aidcxStep 2 of 5
Check that it runs
Open a new terminal so the path is picked up, then ask the launcher for its version and where it lives.
A version answer shows that this executable runs. It does not show that Docker, the virtual machine or the project container work.
What you getA version number and the path of the copy you will run and update.
- $ aidcx login$ aidcx login --checkStep 3 of 5
Sign in
Follow the URL and code that this run prints; do not reuse a code from documentation. The check loads the stored credential and tries to renew it. A successful login stores your MAIT access on this machine. It does not sign you in to the agent's own account.
What you getA stored MAIT credential. Starting a container additionally needs the launcher feature on that credential.
- $ aidcx install
System Supported host What aidcx installpreparesLinux x86_64 or arm64 with systemd, on a Debian or Ubuntu, RHEL or Fedora, or Arch family distribution. On Arch the secure runtime is available on x86_64 only Docker Engine and the secure runtime on the host macOS Apple Silicon only, with at least 8 GiB of memory A managed Linux virtual machine Windows Windows with WSL2 available, with at least 8 GiB of memory A managed WSL2 distribution named MaitCapturedaidcx 6.15.7 · Ubuntu 26.04, trimmed$ aidcx doctorrunning 11 checksPlatform[ok] OS — linux[ok] Arch — x86_64[ok] aidcx binary — /home/user/.local/bin/aidcxContainer Runtime[error] Docker unavailable — the Docker daemon is not reachableSuggestion: run `aidcx install`Credentials[warn] Credentials not found — /home/user/.mait/credentialsUpdates[ok] Up to date — 6.15.7Connectivity[ok] Login service reachable[fail] 1 error, 7 warningsStep 4 of 5Prepare the runtime
Runtime preparation needs the credential from step 3. On native Linux, optionally run
aidcx doctorfirst. On macOS and Windows, prepare from the native terminal and enter Linux afterward; nativedoctoris refused.What the install prepares depends on the system:
On native Linux,
aidcx doctorreports what is missing and what to do about it. This is a trimmed capture from a fresh Ubuntu 26.04 machine before the install:Warnings about display relays, a missing bridge or the
kvmgroup do not block a first start. The error does, and the install fixes it.Run
aidcx installas yourself and let it ask for elevation where a step needs it; do not putsudoin front of the whole command. After it finishes on macOS or Windows, openaidcx terminaland runaidcx doctorinside Linux; nativedoctoris refused. On Linux, rundoctorin your existing terminal. Read the runtime findings: an install can finish with work remaining. Docker Desktop cannot run the secure runtime and is refused.What you getA host that
aidcx doctorreports as ready for the secure runtime. - $ cd /path/to/project$ aidcx scaffold$ aidcx start --trusted$ aidcx shell$ pwd$ ls$ printf 'aidcx-shell-ready\n'Step 5 of 5
Start your project and open a shell
In the project directory, reuse the project's reviewed MAIT configuration, or write one with
aidcx scaffold. On macOS and Windows, openaidcx terminalfirst and use a repository cloned into that Linux session. On macOS its home directory is separate from your Mac home, even if the path text matches. Then start and enter:--trustedrecords that you reviewed this project; grant it only after you have. Inside the shell, check that you are in the project you meant to open:What you getThe marker prints and the files are your project's. Run your agent CLI from here;
exitleaves the shell andaidcx stopstops the container.
A prepared host and a shell in a secure container.
AIDC Launch is installed, signed in, the runtime is prepared and your project runs in a secure container. If a step fails, repeat that step, not all of them: Troubleshooting is organised by the stage that fails.