Collaboration without surrender: shared panes, owned data

Jul 19, 20265 min readBy the Rysh team

Most collab tools make you move your work into their cloud first. Rysh shares live streams out of a workspace you still own.

There's a trade every collaboration tool asks you to make, so quietly you barely notice signing it:

To share your work, first move your work to us.

Collaborative docs? Your documents live in their cloud. Collaborative design? Your files live in their cloud. Collaborative coding? Your repo, their servers. The sharing features are real — but they're downstream of a relocation. Collaboration becomes the reason your work now lives on someone else's computer, governed by someone else's retention policy, exportable through someone else's API, priced by someone else's next pricing page.

For documents, maybe fine. For live terminals with AI agents wired to your shell, your repos, and your internal APIs — the trade is unacceptable. So rysh's collaboration is built on the opposite premise.

The work stays home

Here's the model, concretely.

Your rysh session runs on your machine (or your server — one self-contained binary). The panes are yours. The shell is your shell. The agents run against your Anthropic key — rysh runs on Claude, bring your own key — and the agent logic itself is markdown skill files sitting in your git repo. Session state persists in an embedded store on your disk. On an average Tuesday, apart from the model calls your agents make with your key, nothing about your workspace touches anyone's cloud.

Then a teammate needs to see something.

##share pane view

What happens is transmission, not relocation. Your session opens a connection to an upstream server and forwards that one pane's output stream — a workspace-scoped NATS subject (ws.{workspace}.share.{shareID}.output), your teammate subscribing from their own terminal with ##upstream subscribe. The stream flows while you share.

##unshare pane

…and the stream stops. Your workspace didn't move. It never moved. Sharing was a faucet, not a moving truck.

What the upstream is — and pointedly isn't

The upstream rysh-server does real work: it authenticates workspaces and keeps each connection inside its own workspace's subjects. The share mode is enforced on your machine: a view-only share never accepts inbound commands, and you can set an allow or block list for control-mode commands.

Notice what's on that list: routing and governance. Notice what isn't: your repos, your keys, your agent definitions, your session history. The server is a checkpoint your streams pass through, not a home your work lives in.

And because the boundary is explicit — streams you deliberately share transit the upstream; treat a shared pane like a screen share and don't print secrets into one — you can reason about exposure per share, not per vendor relationship.

The self-host move

For some teams, even "transient streams through a hosted checkpoint" is off the table. Regulated industry, paranoid security posture, or plain taste. Good news: the checkpoint is not sacred infrastructure.

The upstream is yours to run. The rysh server ships as containers with its migrations and a config template, and runs on your own infrastructure; for basic pane sharing you can also point the CLI at your own NATS server. Either way, shares and subscriptions pass through infrastructure you operate (agent inference goes to Anthropic with your key, and it's yours). Same commands. Your team gets ##share pane and ##upstream subscribe; your security team gets to run the boundary.

Self-hostable, note, is not the same as open source: the CLI is open source, the rysh server is proprietary. What we claim is operational ownership: the software runs where you say, holding what you hold.

Why ownership compounds in the agent era

This isn't just data-sovereignty hygiene. With agents, ownership has a second-order effect that surprised even us.

Your agents' definitions are skill files — markdown, in git. Which means your team's accumulated agent knowledge (the prompts that work, the guardrails you've added, the workflows you've encoded) is an asset you accrue, reviewable in PRs, portable across machines, versioned like the code it works on. Compare the alternative: months of prompt-tuning trapped inside a SaaS vendor's config UI, one pricing change away from hostage negotiations.

The collaboration layer respects the same line. Teammates subscribe to your streams; they don't need accounts in a system that owns your stuff. When a share ends, what they have is what they saw. When a design partner leaves us (we're early; it could happen), what they keep is… everything: their binary, their skill files, their data, their keys.

That's the test worth applying to any tool in this wave, ours included: describe what leaving costs you. If the answer is "our workflows live in their cloud," you didn't adopt a tool, you signed a treaty.

The honest ledger

To keep ourselves honest, the full trade in one place:

Shared streams do transit the upstream while a share is active. Deliberate, visible (##share list, ##share status), revocable — but real. Scrollback hygiene applies.
Hosted convenience is real too. rysh.ai's upstream exists so small teams don't have to operate a server on day one. Ownership means having the exit, not being forced to use it.
Agent inference is a Claude API call with your key. Your prompts go to Anthropic under your agreement with them — we're not in that loop, which is exactly the point.
We're early. The ownership architecture is foundational, not bolted on — that's precisely the stage where partner feedback bends the roadmap.

Collaboration tools keep asking teams to choose between working together and keeping their work. With agents about to touch everything your company runs, refuse the choice.

If "agents across the team, work stays ours" is the requirement your last three vendor evaluations failed — talk to us. We're onboarding design partners with direct founder access: rysh.ai/design-partner

Try Rysh

Every pane is a shell and an AI agent — install takes one command.

Get started free →