Open source / VM-first / CLI

A thinking computer,
under your control.

A local-first personal agent for approved virtual machines. Rust owns policy. You choose the model, the workspace, and every high-impact capability.

View source ↗Read the docs ↓
thinking-computer chat "Review the approved workspace."
APPROVED VM / TASK FLOWLIVE REVIEW
01 / PLAN

Inspect the approved workspace.

READY
02 / POLICY

Confirm requested capabilities.

REVIEW
03 / RUN

Record auditable tool results.

BOUNDED
04 / REPORT

Return evidence and residual risk.

LOCAL
Operating boundary

Built for a VM, not blind trust.

Thinking Computer keeps sessions, audit records, schedules, Skills, and Plugins local. It asks before guarded operations unless an operator deliberately approves a controlled run.

It is not a hosted control plane, a personal-device surveillance product, or an unrestricted background process.

Core system

One policy owner. Clear language boundaries.

01 / RUST
Policy engine

Agent loop, permissions, providers, local memory, channels, schedules, Skills, and manifest validation.

02 / C++
System bridge

A deliberately small, auditable inspection interface for platform and CPU indicators.

03 / PYTHON
Compatibility input

A local Hermes-compatible adapter forwards normalized requests into the Rust JSON protocol.

04 / NODE
Plugin host

Reviewed local ES modules use a narrow JSON invocation contract and stay behind core policy.

Extension surface

Useful autonomy, bounded by design.

SKILLS

Local manifests retain approved task procedures. Secret-like instructions are rejected before storage.

PLUGINS

Rust validates names, entry paths, and tool declarations before a Node.js module is loaded.

CHANNELS

Trusted inbound pairing and allowlisted outbound delivery for reviewed messaging paths.

IMPROVEMENT

A resumable 20-slot worker records quality commands and halts on failed security or test gates.

Start with the source

Inspect the architecture. Run it in a VM. Extend it with evidence.

Read the public documentation for provider configuration, Skills, Plugins, channels, security boundaries, and the clean-room relationship to Hermes Agent and OpenClaw.

OPEN SOURCE · VM-FIRST · BUILT FOR REVIEW