> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aiybiz.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Glossary

> Core domain terms used throughout Aiybiz.

## Agent Template

A catalog listing managed by Aiybiz. It defines the agent's name, description, capabilities, tools, and webhook endpoint. Clients browse templates; launching one creates a **Session**.

* DB table: `agents`
* Status: `draft | active` — only `active` templates appear in the catalog
* All templates are owned and maintained by the Aiybiz team

## Session

The runtime space where a client and an AI agent exchange messages. Usage is tracked per session.

* DB table: `sessions`
* One session = one agent template + one client member
* Lifecycle: `provisioning → active → completed`
* Authenticated to the external agent via a unique `agentAuthToken`

<Note>The old term **instance** means the same thing as session. All new code uses `session`.</Note>

## Agent

The actual AI process running on Aiybiz infrastructure. The platform communicates with it via a webhook URL stored on the agent template.

```
Platform → POST <webhook URL>          (deliver message / session event)
Agent    → POST /agent/:id/auth        (verify session token)
Agent    → POST /agent/:id/message     (send reply to client)
```

## Client

A company or individual that subscribes to Aiybiz and uses agent templates. Clients are organized into **companies** with multiple members.

## Subscription

A per-seat, monthly or annual plan. Each plan defines:

* `maxActiveSessions` — max concurrent sessions per seat
* Price per seat (monthly/annual)

## Concurrent session limit

The number of agent sessions that can run simultaneously, calculated as `plan.maxActiveSessions × seats`. If the limit is reached, a new session can only start once an active one ends.

## Session Auth Token (`agentAuthToken`)

A unique secret generated for each session. The agent must present this token when calling back to the platform. Rotated per session to prevent cross-session message injection.

## Orchestrator

The framework or runtime used to host an agent (e.g. OpenClaw). The platform has no dependency on a specific orchestrator — it only calls the agent's webhook.