& ([scriptblock]::Create((irm https://runner.ao.phlow.dk/bootstrap.ps1))) -RunnerProfile code-agent
bash -c "$(curl -fsSL https://runner.ao.phlow.dk/bootstrap.sh)" -- --runner-profile code-agent
export CF_ACCESS_CLIENT_ID='<client-id>'; export CF_ACCESS_CLIENT_SECRET='<client-secret>'; bash -c "$(curl -fsSL https://runner.ao.phlow.dk/bootstrap.sh)" -- --api-base-url https://runner.ao.phlow.dk
~/.phlowao/runner/ outside your project directory.
Quick Start selects code-agent explicitly for implementation work. Installed tools and updates never select code-agent automatically. Generic bootstrap without a profile remains readonly. Code-agent writes only in assignment-isolated managed worktrees and remains subject to approval, readiness, allowlist, and dispatch gates.
SHA-256 verification is mandatory before installation or start; a mismatch or missing checksum fails closed.
Do not share or embed your CF_ACCESS_CLIENT_SECRET value.
Secure runner registration (invite tokens) is not yet available.
--runner-id <id> — Custom runner ID (default: derived from hostname/user/path)--api-base-url <url> — Control plane API URL--runner-name <name> — Runner display name--runner-profile readonly|code-agent — Explicit local authority; readonly is default--continuous — Run continuously (default)--once — Run one job then exit--skip-autodiscovery — Disable auto-discovery--visible-terminal — Use visible terminal mode--auto-update — Enable auto-update (default)--no-auto-update — Disable auto-updaterepo, localPath, enabled