Rust agent runtime / local-first

Give coding agents a runtime you can trust.

Durable sessions, policy-gated tools, and local execution in one Rust harness—independent of any client or model.

daemon owns state  /  clients render events  /  secrets stay references

RUNTIME ACTIVITYACTIVE SESSION
  1. 01REQUESTRequest received
  2. 02CHECKApproval required
  3. 03USERUser approved
  4. 04SAFETYSafe execution started
  5. 05OUTCOMEOutcome saved
event history saved

01 / Durable control

One authority. No hidden state.

The daemon owns lifecycle, policy, credentials, and execution. Clients stay replaceable.

01

Durable sessions survive the client.

Disconnect, reconnect, or swap interfaces without losing the authoritative event history.

0181 prompt.acceptedpersisted 0182 model.stream.startedlive 0183 policy.needs_approvalwaiting 0184 approval.acceptedpersisted
02

Policy before execution.

Every typed action resolves to deny, allow, or human approval.

DENYAPPROVEALLOW
03

References, never raw secrets.

Keychain-backed credentials stay outside events, payloads, traces, and tests.

keychain://provider/default
04

Typed IPC keeps clients replaceable.

CLI, TUI, ACP, and Zap-facing paths request work; they do not own it.

request → durable event

02 / Request flow

Every action earns its outcome.

Typed requests move through a fixed control path. Unknown outcomes never become completed.

  1. 01 Client request typed request · origin=agent
  2. 02 Policy decision deny · allow · needs approval
  3. 03 Human approval explicitly accepted
  4. 04 Sandbox + capability bounded execution
  5. 05 Durable outcome stored event log

03 / Real CLI

The runtime speaks in durable events.

Create a session, prompt it, approve gated work, and replay stored history from the CLI.

impetus — session 7f3a LIVE

$ impetus create --profile local

session 7f3a created · durable

$ impetus prompt 7f3a \"Ship the requested change\"

event model.stream.started

tool shell.exec origin=agent

policy needs_approval reason=workspace_write

✓ approved by user

event execution.completed exit=0

  • doctordiagnose local setup
  • createstart a durable session
  • promptsubmit a typed request
  • streamreplay stored events
  • approveaccept gated work

04 / Install

Local runtime.
One verified path.

Supported today: macOS Apple Silicon and Linux x86_64.

QUICK INSTALL

curl -fsSL https://raw.githubusercontent.com/1tuz/impetus/main/scripts/install.sh | zsh
  • SHA-256 verified
  • No latest tags
  • Keychain boundary

Ready when your agent is

Make every action accountable.

Run locally. Keep durable state. Put policy before execution.