Vinculum

“The processing device at the core of every Borg vessel. It interconnects the minds of all the drones. It purges individual thoughts and disseminates information relevant to the Collective.”

“It brings order to chaos.”
– Seven of Nine and Kathryn Janeway

Why Vinculum

Drones that remember.

Spinning up a fresh pod for every prompt is wasteful. Vinculum runs each Agent as a long-lived pod with an open crush session and a persistent workspace - so context survives, PVCs survive, and cold-start disappears.

⟳

Long-lived sessions

A pod per Agent - no per-prompt cold-start. Crush session + /workspace PVC survive restarts.

☸

Kube-native

Declarative Agent, Task, AgentSchedule, MCPServer CRDs. One operator reconciles them into Deployments, PVCs, RBAC, Services.

◎

Multi-provider

Azure OpenAI, Anthropic, OpenAI, or bring-your-own - a provider is just a labeled Secret.

▸_

One-binary CLI

Port-forwards through your active kubecontext - no exposed operator endpoint, no long-lived local state.

Custom Resources

Declare it. The hive complies.

Four CRDs. Everything else is derived.

Agent

Long-running agent drone. Model, provider secret ref, instructions, workspace size, attached MCP servers. Operator creates Deployment, Service, PVC, RBAC.

Task

A unit of work. Prompt, fresh, workspace mode (shared or ephemeral), timeout, artifacts, env. Serial execution per Agent.

AgentSchedule

Cron trigger that stamps Tasks from a template. Concurrency policy: Allow, Forbid, Replace.

MCPServer

Reusable Model Context Protocol server - stdio or http. Attach by name to any Agent. secretRef wired as envFrom.

Initiation protocol

Five steps to assimilation.

Any Kubernetes cluster. Any active context. Helm chart + Homebrew CLI.

Install the chart

Helm OCI install - no repo add, no values overrides required for a default run.

helm install vinculum oci://ghcr.io/florianwenzel/helm/vinculum \
  --version 0.1.0 \
  -n vinculum-system --create-namespace

Install the CLI

Homebrew tap for macOS + Linux. Prebuilt binaries available for all platforms on every release.

brew install FlorianWenzel/vinculum/vnclm

Create a provider Secret

Drop API keys into a labeled Secret. Wizard handles the labeling + encoding.

vnclm create provider # interactive wizard

Create an Agent

Pick a model, point at a provider, optionally attach MCP servers. Operator provisions the pod.

vnclm create agent # wizard

Run a Task

Streams live. Blocks until terminal phase. Run again later - crush picks up the session, history intact.

vnclm ctx set-agent locutus
vnclm run "Compose a haiku about the Borg collective."

Control surface

vnclm - the command link.

kubectl-shaped verbs. Interactive wizards. Per-invocation port-forward. No exposed endpoints.

Cheatsheet zsh

vnclm ctx show | set-agent <name> | clear-agent
vnclm get agents|tasks|schedules|providers|mcps [name]  [-o table|wide|json|yaml]
vnclm delete <kind> <name>                              [--yes]
vnclm create provider|agent|task|schedule|mcp        # wizard
vnclm create -f manifest.yaml                         # apply (multi-doc)
vnclm logs <task>                                    [-f]
vnclm run "<prompt>"  [--agent] [--fresh] [--timeout N]

Tool assimilation

MCP servers as first-class drones.

Give agents extra tools by declaring MCPServer resources - stdio processes or HTTP endpoints - and attaching them by reference. One MCPServer, many agents.

Attach a filesystem MCP to every agent that needs it zsh

# stdio MCP - filesystem over the agent's /workspace PVC
vnclm create mcp --name filesystem --command npx \
  --arg -y --arg @modelcontextprotocol/server-filesystem --arg /workspace \
  --enabled

# http MCP with a secret injected as envFrom
vnclm create mcp --name github --url https://api.githubcopilot.com/mcp/ \
  --secret-ref github-mcp --enabled

vnclm create agent   # wizard → multiselect attaches MCPs

The collectivefor AI coding agents.