Spec sheet; rev 2026.07
Everything the desktop app ships with, in detail; and what is on the bench next. No dates on the roadmap: pre-alpha means we ship when it is right, and this page tells you where each thing actually stands.
Bring your own key, pick your provider, keep the middleman out. Calls go straight from your machine to the provider you chose; no proxy, no resale, no markup on tokens. Or skip the network entirely and run a local model.
Long agent runs should not die because one account hit a rate limit. Connect several OAuth accounts; and plain API keys; per provider, each logged in exactly once. When one runs into a usage limit, Unary switches to the next one mid-run: no login window, no re-authentication, no babysitting.
fn accounts() -> Vault {
Vault::local()
.oauth("work") // provider account #1
.oauth("private") // provider account #2
.api_key("sk-…") // plain keys rotate exactly the same way
.auto_switch(OnLimit) // usage cap hit → next account, mid-run, no break
}A dedicated index process beside the editor, with a bundled embedding model that runs on your own GPU — in its default configuration no code leaves the machine. One query runs the lanes together; embeddings for intent, BM25 and exact tags for names, path trigrams for files, and a tree-sitter symbol graph that knows who calls what. The fused candidates are re-ranked by graph weight and proximity, and changed files are reindexed in the background on every save.
One agent is a demo; a fleet is a workflow. Unary orchestrates up to eight workers in parallel, routes each to the provider you picked, and lets a second worker judge the result before it lands; with per-task budgets instead of surprise invoices.
Sixty tools, all Rust, all native: files, shell, git, LSP, a managed Chromium over CDP, real desktop control, persistent memory, and RAG over your own docs. Nothing bolted on through a scripting bridge.
Start a run on the desktop, walk away, steer it from the web app or your phone. Sessions hand off between machines; the relay is end-to-end encrypted and never sees your code.
A real editor around the agent, not a chat window with a file picker. Tree-sitter highlighting for 24 languages, LSP diagnostics inline, every agent edit as a reviewable diff, and a real terminal and git beside it.
Built in Switzerland, where privacy is not a marketing slide. The architecture is local-first by construction: your code, your keys and your prompts stay where you put them. Nothing phones home, and the captcha is our own.
The pre-alpha core: Rust-native index, orchestrated workers, full tool surface.
Direct provider calls, local models via Ollama, per-model routing.
Pair a desktop, steer a running session from the browser, E2E-encrypted.
Several accounts per provider, automatic switching on usage limits, mid-run.
Steer and approve from the phone, mid-run, with the same encrypted transport.
Publish and install tools, docs connectors and provider adapters.
Hand a running fleet; context, workers and budgets; to a teammate.
The IDE and desktop app come first; our own model follows, developed from Europe for worldwide access and global interoperability.
Index, inference and orchestration with zero external calls, verifiably.
How to read this. “Shipped” means it is in the current pre-alpha build you can request a key for. “In progress” is on the bench right now. Everything further out moves as we learn — this page is updated with every release, alongside the changelog.
Every feature above is in the current pre-alpha build. Ask for a key and judge it on your own codebase; that is the only review we trust.