One agent for everything you run on your Mac.

A chat window that cannot see your screen. A notetaker that dials into your call and uploads the audio to a stranger. An inbox assistant you have to forward your mail to. A research tool with its own tab. And a terminal you keep pasting half of into one of the other four.

Grux is all five, in one panel, on the machine that already holds your mail, your calendar and your files. It costs $0, and it keeps none of your data, because there is nowhere for it to keep it.

Point it at Ollama and the whole thing works with nothing leaving the machine. Local Models reads your actual hardware, budgets your actual memory, and rates each model against it before you download 17 GB to find out.

On the M4 Pro below: 48 GB of memory, 37 GB of it available to a model, Qwen 3 Coder 30B a good fit at 19.0 GB on disk, Qwen 3.5 35B marked tight at 24.0 GB, and one recommendation instead of a list. It will tell you what not to bother with.

There is no hosted anything to pay for, no account to make and no subscription. You pay your model provider directly, on your own account, at their prices. Grux never sits between you and the bill, because nothing is proxied through anything I run. Run a local model instead and the running cost is $0 as well.

One key to start, not one key forever. Chat needs an Anthropic key and nothing else. Research also wants a Brave Search key, Mailbox wants your IMAP details, Compare wants Ollama running. The Now list names what a feature still needs, and a feature you never open never asks you for anything.

Grux can run a shell command, which is the feature most likely to end badly, so it is the one with the most in front of it. Commands run against a denylist, inside folders you chose. Anything sensitive goes to Approvals and sits there until you press the button.

The model's only route to your disk is one Swift file. It reads at most 1 MB of a file, gets 10 calls a minute across reading and listing combined, and cannot touch .ssh, .aws, .gnupg, your Keychains, your Mail, your Messages or your browser profiles at all. Out of the box the folder it may read is empty, because you have not picked one yet.

Every attempt is one line in a plain text log on your own disk, refusals included:

The two jobs most likely to hurt you, keeping a credential out of a prompt and stopping the agent following a hostile link, live in their own Swift package: 125 tests, zero dependencies, MIT. Grux depends on it rather than carrying a copy, and Package.resolved shows you that rather than me saying it.

It carries six published GitHub advisories against its own earlier releases, two critical, because six of the first nine tags failed to redact something. The tags stay resolvable, so anyone pinned to one gets told. That record is the reason to trust this one, and you can count them yourself: the advisories, the package.

I have been building and shipping my own products since 2015. Right now that is about a dozen of them, run by one person.

That is the reason this exists. Running a dozen small products alone was never bottlenecked on code. It was the hour a day spent moving between a mail client, a calendar, a terminal and four chat tabs that could not see any of it. So I built the assistant I actually wanted: one that reads the window I am already in, handles the mail, and takes the meeting notes.

It was a hobby project for six months. It is not a startup, there is no account, and there is nothing to buy. I am open sourcing it because it got useful enough to be worth somebody else's time, and because software that reads your screen and your mail should be readable back.

Expect rough edges. What is not finished sits behind the Labs door and says so. If something breaks, tell me and I will fix it.