Features and capabilities

What Drover does, with a status on each item.

Works today is on by default. Opt-in needs configuration. Roadmap is not built.

Works today

Multi-harness sessions

One way to start, steer and stop a session on each harness.

Harness adapter architecture

Drive Claude Code, Codex, Antigravity (agy) and DeepSeek Harness through structured adapters.
Use structured chat with interrupt and native resume, or attach to a terminal.
Answer tool approvals for Claude Code. The other adapters do not support approvals.
OpenClaw and Hermes are observed. You cannot launch them from Drover.

Works today

Hub and hosts

One hub, and a daemon on each machine that runs agents.

Add another host

The hub keeps the fleet registry and routes each operation.
The host daemon owns the agent processes, terminals and files on its machine.
A host connects directly, or dials out through a relay.
The hub and the hosts run on macOS and Linux.

Beta

iOS cockpit

A native app for iOS 18 and later.

iOS build guide

See live sessions by host, with provider quota.
Start a session. Send turns. Answer prompts. Hand off. Attach to the terminal.
Pair with a QR code. The credential stays in the iOS Keychain.
Build the app from source. A public beta is coming soon.

Works today

Recall, search and handoff

The next session can query the history of earlier sessions.

MCP tools

Search and replay the events that the hub ingested.
Get a recall bundle: matches, summaries, project briefs and open loops.
Continue a session on another host or harness. Drover briefs the new session.
Each result names its store and the age of its data.

Opt-in

Session summaries and project briefs

Optional workers write summaries and briefs with a model you choose.

Configure model backends

The workers use the Claude Code CLI on a host, or an Anthropic API key.
The workers are idle until you configure a backend.
The provider receives the transcript text that it summarizes.

Works today

Portable profile with privacy tiers

Your preferences and rules reach each new session in fewer than 1,500 tokens.

Portable profile guide

Three tiers: general, trusted and private. An agent sees only its tier.
Agents propose changes. You approve them, and you can revert them.
Markdown import is a dry run by default. Imported items start as private.
The profile requires the PostgreSQL control store.

Opt-in

Lake analytics

Usage, projects and quota, from facts you can audit.

How storage works

See tokens for each session, the busiest projects and provider quota windows.
A DuckLake lake holds the facts. You select it explicitly.
Each read has a five-second deadline and a memory limit.

Works today

MCP server

Your fleet and its history as Model Context Protocol (MCP) tools.

MCP setup

About two dozen drover_* tools cover fleet status, search, recall, briefs and the profile.
Each request requires a bearer credential.
The server listens on loopback only.
Responses have size limits, a deadline and a data watermark.

Works today

Continuity across restarts

A restart or a closed lid does not lose your work.

Session lifecycle

The hub writes each event, its payload and its export intent in one transaction.
A session keeps its native resume identity.
The hub holds a stop request for an offline host until the host confirms it.
The iOS app keeps unsent drafts until it can deliver them.

Roadmap

Not built yet.

These are known gaps, without dates. Follow the issue tracker and the changelog.

Roadmap

Remote MCP

MCP listens on loopback only. A protected remote transport is not available.

Roadmap

Host-bound credentials

A host credential can act as any host. Do not enroll a machine you do not control.

Roadmap

Lifecycle enforcement

Lifecycle scans report idle sessions and stale worktrees. They do not stop or remove anything.

Roadmap

Off-site backup

A verified backup to object storage is designed but not shipped.

Roadmap

Public iOS beta

You build the app from source today.

Roadmap

Packaging

Drover ships as source and a release wheel. Native packages do not exist.