osaurus-ai/osaurus
Own your AI. The native macOS harness for AI agents -- any model, persistent memory, autonomous execution, cryptographic identity. Built in Swift. Fully offline. Open source.
Osaurus – Personal AI Agent Platform for macOS
What it is
Osaurus is a native macOS application (Apple‑silicon only) that acts as a local “harness” for large language models. It lets you run agents – specialised AI assistants – that keep their own memory, tools, and identity on your computer. The platform can talk to any LLM, whether it’s a model stored locally (via MLX, Apple Foundation Models, or Liquid AI) or a cloud service (OpenAI, Anthropic, Gemini, etc.). All the orchestration, privacy filtering, and tool‑calling happen on‑device, so no data leaves your Mac unless you explicitly choose a cloud model.
Core features (as described in the README)
| Feature | What it does |
|---|---|
| Agents & Memory | Create custom agents with independent prompts, persistent memory (identity, pinned facts, session episodes) and visual themes. Memory is distilled after each session and kept compact. |
| Sandboxed execution | Each agent can run code in an isolated Linux VM (Alpine) using Apple’s Containerization framework, or fall back to a macOS Seatbelt sandbox on older OS versions. |
| Privacy filter | On‑device classifier (OpenAI privacy‑filter model) scrubs personal data before any request is sent to a cloud provider, with a fail‑closed policy. |
| Cryptographic identity | Agents and devices have secp256k1 addresses derived from your iCloud Keychain; access keys can be scoped, revoked, and used for end‑to‑end encrypted communication. |
| Secure channel & Relay | Agents can be exposed via a WebSocket tunnel (agent.osaurus.ai) with X25519 handshake and ChaCha20‑Poly1305 encryption; the relay never sees plaintext. |
| Orchestrator | Built‑in default agent that delegates work to custom agents or sub‑agents, manages budgets, and never directly accesses the filesystem or sandbox. |
| Sub‑agents | Spawn specialised agents (local or remote models) for a single task, with single‑residency hand‑off to conserve RAM. |
| Browser tool | Optional per‑agent WebKit‑based browser that can navigate, click, and type, with user‑approved actions and isolated cookie storage. |
| Image generation | Offline image creation/editing using local models (e.g., FLUX, Qwen‑Image) with results shown inline. |
| Model‑agnostic harness | Supports local models via MLX (Gemma, Llama, Qwen, etc.), Liquid AI’s LFM, Apple Foundation Models, and cloud APIs. |
| MCP server | Implements the Model Context Protocol, exposing tools via a stdio bridge for other MCP‑compatible clients. |
| Plugin ecosystem | osaurus tools command to install, list, create, and develop Swift plugins; many Apple‑app integrations are built‑in. |
| Voice input | On‑device transcription using FluidAudio on Apple’s Neural Engine; wake‑word activation and global hot‑key support. |
| System integration | App Intents expose “Ask Osaurus” and “Run Osaurus Agent” to Spotlight, Siri, and Shortcuts. |
| Telemetry & crash reporting | Anonymous usage analytics via Aptabase (opt‑in) and optional crash reporting via Sentry (opt‑out). |
How to get it
- Install via Homebrew Cask:
brew install --cask osaurus. - Or download the
.dmgfrom the GitHub releases page. Two variants exist:- Standard (~70 MB) – prompts you to download a model on first run.
- Full (~4 GB) – bundles the Raptor 0.6 model for immediate offline use.
- Launch with Spotlight (
⌘ Space → Osaurus) or the CLI (osaurus ui,osaurus serve,osaurus status).
Typical use‑case workflow
- Pick a model – local (e.g., Raptor 0.6) or cloud (OpenAI, Anthropic, etc.).
- Create an agent – give it a name, prompt, and optionally enable tools like file access, browser, or image generation.
- Chat – the agent remembers past interactions, can call tools, and can spawn sub‑agents for specialised tasks.
- Run code – enable the sandbox; the agent writes a markdown todo list, the VM executes the code, and the result is returned in the chat.
- Persist & share – agents have cryptographic IDs; you can expose one via the secure relay URL for remote access.
Who it’s for
- Power users who want a private, offline AI assistant on macOS.
- Developers looking to build Swift plugins or integrate macOS apps (Calendar, Mail, etc.) with LLMs.
- Enterprises needing on‑device AI with end‑to‑end encryption and strict data‑privacy guarantees.
Limitations noted in the README
- Requires macOS 15.5+ on Apple Silicon; the full Linux VM sandbox needs macOS 26 (Tahoe).
- The offline image generation and some heavy models need several gigabytes of storage.
- Certain features (e.g., Apple Foundation Models) are only available on the newest macOS releases.
All information above is taken directly from the project's README; no external assumptions have been added.
Related
- Project
- Project
- Project
- Project
- Project