Kine AgentOpen source

Claude Code, Codex, and Antigravity: supervised, in one place.

A local-first desktop app that spawns and supervises AI coding-agent CLIs as subprocesses: session list, live status, diff review, and approval gates. Open source under MIT, with signed auto-updates for macOS, Windows, and Linux.

WORKTREEGATEMERGE

agents never touch your working copy

The mechanism

Consequential actions pause for a human.

Each of these exists in the codebase. We name the mechanism so you can hold us to it.

  1. A worktree per session

    Every session runs in its own git worktree on its own agent branch, cut from HEAD. Agents never touch your working copy: you review the diff and decide what merges.

  2. Approve or deny, live

    Claude and Codex sessions route permission requests into the app as approve/deny prompts. Antigravity exposes no interactive channel, so its runs are governed by the permission mode you set up front. Stated plainly.

  3. No telemetry, no analytics, no accounts

    Session content never leaves your machine. The app makes exactly three kinds of network calls, all to fixed endpoints: the signed auto-update check against GitHub Releases, a one-time integrity-verified download of the pinned agent-adapter packages, and — only if you add an API key — fetching that vendor’s model list with your key.

  4. Keys live in the OS keychain

    Optional bring-your-own-key auth stores secrets in the macOS Keychain / Windows Credential Manager / Linux Secret Service, injected at spawn and never written to the database, logs, or argv.

What it does5 capabilities, all shipped

One event stream, three dialects

Each CLI emits its own JSON shape; per-agent adapters normalize everything into a single typed event stream: tokens, tool calls, file writes, usage.

Your CLI history, included

Existing Claude, Codex, Gemini, and Antigravity sessions on disk are listed read-only next to Kine Agent’s own, searchable and filterable.

Hardened WebView

Strict CSP and capability-allowlisted IPC: the UI cannot invoke arbitrary filesystem or shell access.

Signed auto-updates

Releases are minisign-signed and verified before relaunch, across all three platforms.

A review boundary, honestly

Kine Agent reviews what agents change in the worktree. It is not a sandbox and does not confine what the agent process itself can reach. We say so in the README, too.

Where it standsOpen source under MIT, v0.2.0, with releases for macOS, Windows, and Linux on GitHub Releases. Update artifacts are minisign-signed and verified by the built-in updater; builds are not yet OS code-signed or notarized, so expect a one-time OS warning on first launch.

More from the studio

All products