A local-first desktop app that spawns and supervises AI coding-agent CLIs as subprocesses: session list, live status, diff review, and approval gates. Open source under MIT, with signed auto-updates for macOS, Windows, and Linux.
WORKTREEGATEMERGE
agents never touch your working copy
Each of these exists in the codebase. We name the mechanism so you can hold us to it.
Every session runs in its own git worktree on its own agent branch, cut from HEAD. Agents never touch your working copy: you review the diff and decide what merges.
Claude and Codex sessions route permission requests into the app as approve/deny prompts. Antigravity exposes no interactive channel, so its runs are governed by the permission mode you set up front. Stated plainly.
Session content never leaves your machine. The app makes exactly three kinds of network calls, all to fixed endpoints: the signed auto-update check against GitHub Releases, a one-time integrity-verified download of the pinned agent-adapter packages, and — only if you add an API key — fetching that vendor’s model list with your key.
Optional bring-your-own-key auth stores secrets in the macOS Keychain / Windows Credential Manager / Linux Secret Service, injected at spawn and never written to the database, logs, or argv.
Each CLI emits its own JSON shape; per-agent adapters normalize everything into a single typed event stream: tokens, tool calls, file writes, usage.
Existing Claude, Codex, Gemini, and Antigravity sessions on disk are listed read-only next to Kine Agent’s own, searchable and filterable.
Strict CSP and capability-allowlisted IPC: the UI cannot invoke arbitrary filesystem or shell access.
Releases are minisign-signed and verified before relaunch, across all three platforms.
Kine Agent reviews what agents change in the worktree. It is not a sandbox and does not confine what the agent process itself can reach. We say so in the README, too.
Where it standsOpen source under MIT, v0.2.0, with releases for macOS, Windows, and Linux on GitHub Releases. Update artifacts are minisign-signed and verified by the built-in updater; builds are not yet OS code-signed or notarized, so expect a one-time OS warning on first launch.
AI phone receptionist that answers calls and books the appointment.
Open-source AI support that resolves customer questions and escalates the hard ones.
MCP gateway that gates every agent tool call.