NativeAgent

NativeAgent app icon

NativeAgent is a personal agent for Mac: conversation, memory and action in
one continuous mind. The Mac app owns the Swift runtime in-process; iPhone,
Telegram, Slack and local agent bridges reach that same runtime.

First run

On a Mac running macOS 26 or newer, download the DMG from the
releases page, open it,
drag NativeAgent to Applications, and open the app.
Enter your name and the agent's name.
Connect an AI account or add an API key. You can skip setup of the account
and connect later in Providers; chat needs a connected account.

Three views

Simple — chat beside the agent, its contacts and helpers. Ask the agent
to set things up. The panel's gear offers appearance controls and
More settings…, which opens Settings in Advanced.
Advanced — the full rail of pages: Chat, Today, Memories, Desk,
Notifications, Helpers, Personality, Providers, Trust, Connectors,
Capabilities, Diagnostics and Settings.
Agent — a read-only view of the agent's own desktop.

A fresh install starts in Simple; an install with existing chats defaults to
Advanced. The User and Agent Guide covers setup and the
main pages.

What exists today

Area	Current behavior
Agent interface	One always-on `app` tool. `app {}` is home, “where I left off”; pages, items, search, actions and JavaScript reach the app's capabilities.
Memory and context	MemoryV2 stores durable memory with lexical and semantic recall. Fluid Context prepares bounded context from the underlying stores.
Work	Desk holds projects, dependencies, schedules, progress and outcomes; standing helpers have their own briefs, models and conversations.
Mac and web	App actions reach files, shell, Mac apps, screen control, the built-in browser and the optional Chrome extension. `web.search` uses Codex for general queries and SearXNG for category-specific queries or when Codex fails.
Connections	Connectors and agent contacts live under Connectors. Mounted MCP tools appear as `mcp.<server>.<tool>` actions inside `app`.
Growth	Skills provide reusable guidance and optional admitted scripts: `skill.save`, `skill.enable`, `skill.run`, `skill.resume` and `skill.rollback`. They grant no new authority; see the manifest spec. `tool.propose` files authored code; `tool.approve` activates it as `authored.<id>`.
Trust	Safe, Work mode, Builder and Full Mac govern access. Full Mac grants autonomy; macOS privacy permission resets still ask the owner. Peer-steered turns retain extra approval boundaries, except for authenticated agents enabled in Trust → Connected agents; ordinary Trust and domain checks still apply.
Inner life	Settings controls reflection, dreams and memory in replies; Diagnostics exposes cognition and organism state.

The action registry is
AppActionRegistry.swift.
The app tool contract explains discovery and execution;
the capability map covers boundaries and source owners.

Codex and Claude Code as specialist builders

The agent can delegate repository work to local coding sessions and receive
the result back. Users supply their own installed, signed-in coding products.
Local bridge clients read ~/.config/claude-bridge/bridge.json for the actual
loopback address and bearer token. See the
builder guide.

iPhone and iPad

The companion reaches the Mac through signed iCloud transport. On the Mac,
open Connectors → iPhone; on the phone, use the same Apple Account and
follow pairing. Keep the Mac awake with NativeAgent open for replies.
See Mobile companion.

Install

Download builds from the
releases page.
See Support for installation and updates.

From source

The package requires macOS 26+ and Swift 6.1; app installation requires Xcode
and XcodeGen.

brew install xcodegen
git clone https://github.com/embwl0x/native-agent.git
cd native-agent
./script/install_app.sh

The installer builds, signs, installs to ~/Applications, and launches the
app. See Contributing for the development workflow and
Release setup for distribution.

Local data and privacy

The default work folder is
~/Library/Application Support/NativeAgent/workspace for an app-only install,
or the checkout's workspace/ for a source-backed install. All surfaces use
the same workspace resolver.

Persona, chat, memory, credentials and work products are private local state.
Provider requests and configured services can send selected data off the Mac.
Trust does not grant Apple's privacy permissions. See Privacy,
Security and the Threat model.

Repository map

Sources/NativeAgentApp/           macOS SwiftUI app and platform wiring
Modules/NativeAgentCore/          engine, turns, memory, actions, trust and work
Modules/NativeAgentShared/        Mac/iOS wire models and device transport
iOS/NativeAgentMobile/            iPhone and iPad companion
Extensions/NativeAgentChrome/     Chrome extension
Sources/NativeAgentChromeRelay*/  native-messaging transport
Resources/, distribution/         app resources and distribution configuration
docs/                             product, architecture, security and operations
script/                           build, install and release entry points

Start with Project Status, the
documentation guide or the product intent in
North Star.

License

NativeAgent is available under the MIT License.