A fleet of machines over plain SSH, with nothing installed on any of them.
SysAdmin mode turns OSPal into the console of a fleet. The machines live in an inventory you build once -by scanning your subnets or by adding them one at a time- and from then on you talk about them by name. There is no agent to deploy and no port to open: OSPal reaches every endpoint over the SSH that is already there.
OSPal is not one assistant with four settings. Each mode loads its own system prompt, its own set of tools and its own folder of skills, so the run is shaped for the work you are actually doing.
The system prompt is written for somebody administering machines they do not have in front of them, and it carries the inventory of the run: the model knows which hosts exist, what each one is and what it was found to be running.
On top of the Basic tools the model is given inventory.search, remote.exec and remote.exec_stream. The credentials live in a file separate from the inventory precisely because the inventory is injected into the model's context and must carry no secrets.
Each company gets its own inventory under ~/.ospal/sysadmin/ -company0001.json, company0002.json and so on- with its credentials file beside it. The skills of the mode live in ~/.ospal/sysadmin/skills/.
ospal --sysadmin --subnets-scan 192.168.1.0/24
ospal --sysadmin --endpoint-add
ospal --sysadmin --credential-add
ospal --sysadmin --endpoints-test-ssh
ospal --sysadmin --exec "uptime" --host mydebian
ospal --sysadmin-sa is the short alias. The inventory is compulsory in this mode, and the first run tells you exactly how to create it when it is not there yet.
«which of these machines is still on a kernel older than the one in the repo»
«install and enable unattended-upgrades on every Debian in the inventory»
«web02 has been slow since yesterday; compare it with web01 and tell me what changed»
«test SSH on every endpoint and tell me which ones no longer answer»
Remote execution is still execution: every call is shown to you with the host it is aimed at before it runs. The inventory reaches the model; the credentials never do. --exec runs one command across the selection without opening a conversation, which is the safe way to do the repetitive part.
One install, four harnesses. Switching mode is a flag, and every plan includes all four.
Sign up, choose your plan and download OSPal for your system.