The oxi ecosystem · v0.4

An AI agent platform,
written in Rust.

oxi is the engine, oxios is the operating system, oxibrowser is the browser. One stack, end to end — no containers, no Chromium, no half-built agents.

install
$ cargo install oxios # the operating system
$ cargo install oxi # the agent engine
$ cargo install oxibrowser # the headless browser

$ oxios # start the daemon → http://127.0.0.1:4200
Agent ready. Workspace mounted.
macOS · Linux · Windows · MIT licensed
How it fits together

A real stack, not a constellation of wrappers.

oxios orchestrates. The crates do the work.

The Oxios binary is a thin shell over a kernel. The kernel talks to the agent runtime. The runtime is built on oxi's LLM and tool abstractions. And oxibrowser is just another tool the kernel can hand to an agent — no subprocess, no port, no extra binary.

  • Ouroboros protocol
    Every task becomes a spec: interview → seed → execute → evaluate → evolve.
  • Stack-wide composition
    oxi-ai, oxi-agent and oxibrowser are first-class Rust crates. Embed them. Don't glue them.
  • Memory that survives
    Three-tier memory with semantic recall and dream-time consolidation.
  • Defense in depth
    RBAC, path sandboxing, SSRF blocking, Merkle-chained audit trail.
oxios · runtime
Channels
Web · CLI · Telegram
Gateway
Channel-agnostic message hub
Kernel
Supervisor · Scheduler · Memory · Security
Agent runtime
oxi-agent · oxi-ai · tools · skills
oxibrowser
in-process headless browser
Host exec
sandboxed commands · gix (git)
built on oxi-ai · oxi-agent · oxi-sdk · oxibrowser
no containers · no subprocess browsers · no detached daemons
01 · The engine

oxi

A terminal-grade AI coding agent. The fastest way to put a real LLM loop in front of a real codebase — without giving up control of your environment.

Multi-provider out of the box
Anthropic, OpenAI, Google, DeepSeek, Mistral, Groq, Cerebras, xAI, OpenRouter, Azure.
Tool calling that actually works
Read, write, edit, bash, grep, find — plus a trait system for your own tools.
Sessions you can branch
Persistent JSONL. Fork any point. Replay, rename, export. Your history is yours.
Streaming-first
Real-time tokens, reasoning traces, and tool events as they happen — not after.
Skills & extensions
Pluggable prompt skills and native (.so/.dylib/.dll) or WASM extensions.
Package manager built in
Install, update, and pin skills and extensions with one command.
terminal · oxi
# one binary, no config files
$ export ANTHROPIC_API_KEY="sk-ant-…"

$ oxi "refactor auth.rs to use sqlx and add a test"
› thinking…
  • read auth.rs
  • grep "User::find" src/
  • edit auth.rs (3 hunks)
  • bash cargo test --quiet
  ✓ all tests passed

$ oxi sessions # list · tree · fork · delete
$ oxi tree s_a3f2 # visualize session branches
10+
LLM providers
1.6K
tests in suite
6
workspace crates
MIT
license
oxi on GitHub
02 · The operating system

oxios

Where AI agents don't just talk — they work. A kernel for lifecycle, scheduling, memory, security, and the channels that bring humans in.

Ouroboros protocol
Every task is specified before it runs. Interview → seed → execute → evaluate → evolve.
Supervisor
fork / exec / wait / kill — Unix-style lifecycle for every agent process.
AIOS-style scheduler
Priority queue, rate-limit-aware admission, zombie cleanup, max-concurrency enforcement.
Tiered memory
Hot / Warm / Cold tiers with HNSW + TF-IDF, dream-time consolidation, and semantic recall.
Defense in depth
RBAC, path sandboxing, SSRF blocking, Merkle-chained audit trail (blake3).
In-process git
gix-powered version control. No system git, no detached index files.
Ouroboros cycle
01
Interview
Clarify the task before any code is written.
02
Seed
Generate a formal specification the agent will commit to.
03
Execute
Run tools, write code, browse the web, talk to other agents.
04
Evaluate
Validate the output against the seed. Pass or fail.
05
Evolve
Refine the spec from what was learned. Loop.
↻ spec-driven agents, not improvised ones
oxios · daem on :4200
# start the daemon → web at :4200
$ oxios
  ⬡ oxios v0.4.0
 workspace mounted at ~/.oxios/workspace
 kernel online · supervisor, scheduler, memory
 web dashboard → http://127.0.0.1:4200

# one-shot, JSON output, exit codes for CI
$ oxios run --json "review this code"
{
  "response": "…no race conditions found…",
  "phase_reached": "Evaluate",
  "evaluation_passed": true,
  "duration_ms": 3500
}

# kill a stuck agent, audit it, see why
$ oxios agent list
$ oxios audit verify # blake3 merkle chain
67K+
lines of Rust
76
REST endpoints
0
containers
MIT
license
oxios on GitHub
03 · The browser

oxibrowser

A headless browser written from scratch in Rust. No Chromium, no V8, no Docker. The browser your agent deserves — not the one Chrome ships you.

Pure Rust, no V8
ES2024+ via boa_engine. html5ever for HTML. Memory-safe end to end.
CDP compatible
10 domain handlers. Drop-in for Puppeteer, Playwright, and any CDP client.
Agent-first CLI
--json output, --max-bytes, --fields, --summary, describe, and a session REPL.
Secure by default
SSRF protection with CIDR blocking, robots.txt respect, no sandbox escape surface.
OxiBrowser vs Headless Chrome
MetricOxibrowserHeadless Chrome
binary size24 MB~400 MB install
base memory~8 MB~200 MB
cold start~50 ms~800 ms
JS engineboa (Rust)V8 (C++)
dependencieszero Cmany
licenseMITBSD / ToS
oxibrowser · cli
# one-shot fetch, clean markdown for LLMs
$ oxibrowser fetch https://news.ycombinator.com --summary --json
{
  "ok": true,
  "data": {
    "title": "Hacker News",
  "status": 200,
    "headings": ["Show HN: …","Ask HN: …"]
  },
  "meta": { "elapsed_ms": 87 }
}

# or: full CDP, Puppeteer-compatible
$ oxibrowser serve --port 9222
$ oxibrowser session # 22-command JSON REPL
24MB
static binary
50ms
cold start
8MB
base RAM
408
tests
oxibrowser on GitHub
Why oxi

The agent stack you'd build yourself.

Other platforms are good at one of these. The oxi ecosystem is the first one that's good at all of them — without bolting on a virtual machine and a different browser.

01
Pure Rust, end to end
No C, no Node, no Python, no Chromium. Every line from the LLM call to the pixel is Rust.
02
In-process everything
No containers. No subprocess browsers. The agent runs in your process, with your security rules.
03
Spec-driven execution
Ouroboros turns vague prompts into specifications. Agents that can be evaluated, not just prompted.
04
Open by default
MIT licensed. Public repos. Public roadmap. No telemetry, no analytics, no upsells.

Ship agents in Rust.
In one cargo install.

The full stack is published to crates.io. Pick what you need — embed oxi as a library, run oxios as a daemon, or hand your agent oxibrowser for the web.

install · all three
$ cargo install oxios oxi oxibrowser
  Updating crates.io index
  Compiling oxios v0.4.0
  Compiling oxi v1.0.2
  Compiling oxibrowser v0.11.0
  Finished release in 3m 42s
  Installing ~/.cargo/bin/oxios
  Installing ~/.cargo/bin/oxi
  Installing ~/.cargo/bin/oxibrowser

$ oxios # start → http://127.0.0.1:4200