Local-first β’ Zero Server Lock-in β’ Native Desktop Shell β’ Recursive Actor Model β’ Stealth Browser β’ Omni-Channel Gateway
Krypton is a local-first, cross-platform autonomous desktop AI agent runtime designed to operate with zero server lock-in. It combines a native desktop shell with a recursive background daemon, isolated Git worktree execution, stealth browser automation, and an omni-channel messaging gateway.
Everything Krypton does is stored locally on your machine inside ~/.krypton (%USERPROFILE%\.krypton on Windows, $HOME/.krypton on macOS/Linux).
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β KRYPTON UNIFIED RUNTIME β
βββββββββββββββββββββββββββββββββ¬βββββββββββββββββββββββββββββββββββββββββ€
β Native Desktop Shell β Background Daemon Engine β
β β’ Tauri v2 (Rust) core β β’ Recursive Actor Engine (depth <= 3) β
β β’ React 19 / Next.js UI β β’ Task DAG Planner & Dynamic Replannerβ
β β’ Krypton Synapse (Voice/STT)β β’ Git Worktree Isolation (Krypton-VCS)β
β β’ Context-staging Chatbar β β’ Sandboxed Subprocess Runner β
βββββββββββββββββββββββββββββββββΌβββββββββββββββββββββββββββββββββββββββββ€
β Terminal CLI Companion β Omni-Channel Gateway β
β β’ React + Ink dynamic TUI β β’ Telegram (grammY + inline buttons) β
β β’ Live Task DAG spinners β β’ Discord (Discord.js + ActionRows) β
β β’ Interactive HITL prompts β β’ WhatsApp (@whiskeysockets/baileys) β
β β’ Native single-binary CLI β β’ Slack (Block Kit) & Signal (CLI) β
βββββββββββββββββββββββββββββββββ΄βββββββββββββββββββββββββββββββββββββββββ
Krypton installs everything into a single, clean directory (~/.krypton) and automatically configures your system PATH. Run the single command for your platform:
irm https://raw.githubusercontent.com/Istiyaq-Khan/krypton/master/scripts/install.ps1 | iex(Or clone this repository and run .\scripts\install.ps1)
curl -fsSL https://raw.githubusercontent.com/Istiyaq-Khan/krypton/master/scripts/install.sh | bash(Or clone this repository and run ./scripts/install.sh)
- Provisions
~/.krypton/(agents, worktrees, cache, browser profiles). - Places the standalone
kryptonbinary in~/.krypton/bin/. - Adds
~/.krypton/binto your userPATHenvironment variable. - Initializes default agent workspace and configuration.
Now, open any terminal and start using Krypton:
krypton --help-
Global Hotkey (
Ctrl+Shift+SpaceorCmd+Shift+Space) summons an always-on-top, frameless, transparent Krypton Synapse companion. - Zero-Latency Audio: Stream audio directly to local Whisper.cpp / Moonshine ONNX speech-to-text with reactive audio waveform visualization.
-
Desktop Chatbar Console: Floating bottom console featuring lexical triggers (
/for dynamic tools,@for codebase context), smart paste chip staging ($\ge 10$ lines or$\ge 300$ chars), and full keyboard navigation.
- No Branch Pollution: Agent coding tasks execute strictly in isolated Git worktrees under
~/.krypton/worktrees/<task-id>. - Atomic Conventional Commits: Every sub-task step generates an atomic commit (
feat(...),fix(...)). - Deterministic Rollback: If linters, tests, or compilers fail, Krypton executes a hard rollback (
git reset --hard) to the last verified commit. - Visual Diff Viewer: Interactive side-by-side diff viewer requiring human approval before merging back into your main branch.
- Blind Navigation: Uses Chrome DevTools Protocol Accessibility Tree (AXTree) with transient numeric IDs (
[id=1],[id=2]) for accurate DOM interactions with minimal token usage. - Humanized Anti-Bot: Generates cubic BΓ©zier mouse movement curves with micro-jitter and Gaussian keypress delays (60β140ms).
- Resource Protection: Hard maximum of 2 active browser contexts with automatic idle recycling after 15 minutes.
Control Krypton from your favorite messaging platform with full Human-in-the-Loop (HITL) prompt resolution:
- Telegram: grammY bot with inline keyboard buttons for prompt approvals.
- Discord: Discord.js bot with task-specific threads and ActionRow button components.
- WhatsApp: Powered by
@whiskeysockets/baileyswith numbered quick-reply menus for mobile approvals. - Slack: Interactive Block Kit buttons and live Task DAG checklist updates.
- Signal: End-to-end encrypted interaction via
signal-cli.
-
Recursion Ceiling: Strict maximum depth of 3 (
max_depth <= 3). - Concurrency Cap: Maximum of 5 concurrent active sub-agents across the runtime.
- Subprocess Jail: Scripts executed in OS-constrained subprocesses (Windows Job Objects / POSIX rlimit with 512MB RAM cap).
-
Static AST Linter: Blocks dangerous operations (
rm -rf /,child_process,eval(),os.system). -
Observation Masking: Tool outputs
$>1,500$ tokens are offloaded to disk, injecting only a 50-line summary into model context.
Krypton includes an interactive terminal companion built with React + Ink:
| Command | Description |
|---|---|
krypton run "<goal>" |
Starts an autonomous task DAG with dynamic status spinners and interactive HITL prompt handling. |
krypton vcs diff |
Reviews uncommitted changes in the current agent worktree with syntax-colored diffs. |
krypton vcs merge <id> |
Approves and merges an agent worktree branch into your active branch. |
krypton agents list |
Displays configured local agent fleet, assigned models, and tool lists. |
krypton agents create <name> |
Provisions a new agent workspace with archetype templates. |
krypton tools list |
Lists active Model Context Protocol (MCP) and dynamic synthesized tools. |
krypton tools install <name> |
Discovers and installs an MCP tool or runtime extension. |
krypton/
βββ apps/
β βββ desktop/ # Tauri v2 (Rust) shell + Next.js 16 / React 19 frontend
β βββ src-tauri/ # Rust native backend, audio capture, global hotkey & sidecar
β βββ src/ # Next.js workspace dashboard & Krypton Synapse
βββ packages/
β βββ shared-types/ # Universal TypeScript types, Zod schemas, and IPC contracts
β βββ agent-runtime/ # Core actor engine, MCP host, sandbox, browser, VCS, and channels
β βββ cli/ # Standalone React + Ink terminal client
βββ scripts/
β βββ install.ps1 # 1-step Windows universal installer
β βββ install.sh # 1-step macOS / Linux universal installer
β βββ build-sidecar.mjs # Native daemon compiler
β βββ build-cli.mjs # Standalone CLI compiler
β βββ setup-env.mjs # Environment prerequisites validator
βββ .githooks/ # Monorepo pre-commit and pre-push verification gates
βββ .github/workflows/ # Cross-platform release matrix (Windows, macOS, Linux)
βββ pnpm-workspace.yaml # Monorepo workspace configuration
- Node.js:
v20+ - pnpm:
v10+ - Rust & Cargo:
stable - Git:
v2.40+
Validate your environment with:
node scripts/setup-env.mjs# 1. Install workspace dependencies
pnpm install
# 2. Build shared contracts and packages
pnpm build
# 3. Run all monorepo test suites (114+ tests)
pnpm test:all
# 4. Start the Desktop Shell in development mode
pnpm --filter desktop dev
# 5. Start the Agent Daemon
pnpm --filter @krypton/agent-runtime dev
# 6. Run the CLI in development
pnpm --filter @krypton/cli dev run "Analyze codebase"# Compile internal sidecar binaries (daemon & CLI) into apps/desktop/src-tauri/binaries/
pnpm build:binaries
# Build desktop application and collect single unified release package into output/
pnpm build:desktopKrypton follows a strict Single-Artifact Distribution Architecture: every release produces EXACTLY ONE self-contained, user-ready application package per supported operating system. Users never have to guess which intermediate binary or installer to download.
All background daemons (krypton-daemon), command-line companions (krypton-cli), and runtime dependencies are compiled and bundled directly inside each single installer package.
| Operating System | Single Download Package | Distribution Format | Architecture | Bundled Components |
|---|---|---|---|---|
| Windows | krypton-windows-x64-setup.exe |
Self-Contained NSIS Installer | x86_64 |
Desktop UI + Background Daemon + CLI Engine |
| macOS | krypton-macos-universal.dmg |
Apple Disk Image (DMG) | Universal / Apple Silicon & Intel | Desktop UI + Background Daemon + CLI Engine |
| Linux | krypton-linux-x86_64.AppImage |
Universal AppImage | x86_64 |
Desktop UI + Background Daemon + CLI Engine |
Each release publishes cryptographic verification hashes in
SHA256SUMS.txt.
For technical details on sidecar bundling, runtime path resolution, and CI/CD matrices, see Release Architecture Documentation.
Releases are published automatically to the Releases tab when a version tag (v*) is pushed or manually triggered via workflow_dispatch.
Contributions are warmly welcomed! Please read CONTRIBUTING.md for details on our code of conduct, environment setup, testing standards, and the pull request submission process.
For vulnerability reporting guidelines, SLA details, and our local-first defense-in-depth security model, please refer to our Security Policy.
This project is licensed under the MIT License.