The god agent for solopreneurs on Mac.

A chat window that cannot see your screen. A notetaker that dials into your call and uploads the audio to a stranger. An inbox assistant you have to forward your mail to. A research tool with its own tab. And a terminal you keep pasting half of into one of the other four.

Grux OS is all five, in one sidebar, on the machine that already holds your mail, your calendar and your files. It costs $0, and it keeps none of your data, because there is nowhere for it to keep it.

Point it at Ollama and the whole thing works with nothing leaving the machine. Local Models reads your actual hardware, budgets your actual memory, and rates each model against it before you download 17 GB to find out.

On the M4 Pro below: 48 GB of memory, 37 GB of it available to a model, Qwen 3 Coder 30B a good fit at 19.0 GB on disk, Qwen 3.5 35B marked tight at 24.0 GB, and one recommendation instead of a list. It will tell you what not to bother with.

There is no hosted anything to pay for, no account to make and no subscription. You pay your model provider directly, on your own account, at their prices. Grux OS never sits between you and the bill, because nothing is proxied through anything I run. Run a local model instead and the running cost is $0 as well.

One key to start, not one key forever. Chat needs an Anthropic key and nothing else. Research also wants a Brave Search key, Mailbox wants your IMAP details, Compare wants Ollama running. Every sidebar row carries a dot when something it needs is missing, and a surface you never open never asks you for anything.

Grux OS can run a shell command, which is the feature most likely to end badly, so it is the one with the most in front of it. Commands run against a denylist, inside folders you chose. Anything sensitive goes to Approvals and sits there until you press the button.

The model's only route to your disk is one Swift file. It reads at most 1 MB of a file, gets 10 calls a minute across reading and listing combined, and cannot touch .ssh, .aws, .gnupg, your Keychains, your Mail, your Messages or your browser profiles at all. Out of the box the folder it may read is empty, because you have not picked one yet.

Every attempt is one line in a plain text log on your own disk, refusals included:

The two jobs most likely to hurt you, keeping a credential out of a prompt and stopping the agent following a hostile link, live in their own Swift package: 115 tests, zero dependencies, MIT.

It carries six published advisories about its own earlier releases, because six of the first nine tags failed to redact something. Published, not deleted. That record is the reason to trust this one.

It is public, so none of that is a claim you have to take from me: read the package and its advisories.

I have been building and shipping my own products since 2015. Right now that is about a dozen of them, run by one person.

That is the reason this exists. Running a dozen small products alone was never bottlenecked on code. It was the hour a day spent moving between a mail client, a calendar, a terminal and four chat tabs that could not see any of it. So I built the assistant I actually wanted: one that reads the window I am already in, handles the mail, and takes the meeting notes.

It was a hobby project for six months. It is not a startup, there is no account, and there is nothing to buy. I am open sourcing it because it got useful enough to be worth somebody else's time, and because software that reads your screen and your mail should be readable back.

Expect rough edges. Fourteen surfaces say BETA because they earned it. If something breaks, tell me and I will fix it.