Build the agent. Ship the project.

Xero is a native desktop app written in Rust. It runs locally on macOS, Windows, and Linux — no account, no cloud round-trip on the hot path.

1. Download the build for your OS from the download section.
2. Open the app. The first launch creates your local workspace and key store.
3. Pick a project directory — Xero only touches paths you point it at.

macOS 13+, Windows 10+, Linux (.deb / .rpm). Apple silicon and Intel are both universal.

Xero talks to model providers directly — your keys, your billing, your rate limits. Keys live in the OS keychain, never in plain text on disk.

• Anthropic (Claude) · OpenAI · Google (Gemini) · OpenRouter
• GitHub Models · Azure OpenAI · AWS Bedrock · Vertex AI
• Local Ollama for fully offline runs

Open Settings → Providers, paste a key, and Xero will pick the strongest available model for each role.

Every agent is a small contract: a role prompt, a tool list, a memory budget, and an approval policy. Start from a built-in (Ask, Engineer, Debug, Agent Create) or fork one.

• Tools. Repo, shell, git, browser, MCP, Solana, mobile pings — pick only what the role needs.
• Memory. Per-agent journals branch and rewind without overwriting siblings.
• Approvals. Decide which actions auto-run and which wait — per session, per tool.

A workflow chains agents into a graph: steps, branches, loops, gates. Drop a node, wire its inputs, and pin the model you want for that step.

• Branch on diff size, test result, or arbitrary predicate
• Loop with a stop condition — token budget, file count, manual halt
• Gate any node behind a Discord or Telegram approval

When an agent reaches a gate, Xero posts the diff or command to Discord or Telegram and waits for a one-line reply. The session keeps running once you approve.

1. Settings → Notifications — connect a Discord webhook or Telegram bot token.
2. Pick which tools require approval. Read-only calls usually shouldn't.
3. Approve, reject, or reply with a redirect — the agent re-plans on the spot.

Every project has a local journal. Branch a session to try something risky, rewind to any checkpoint, or hand a thread to a different agent without losing context.

• Up to six panes per project, mix roles and models freely
• Compact noisy threads with a summary that survives the rewind
• Export or replay any session locally