Mythic, Clean, Daemon-First

The Dawn of
Durable AI Work

Most AI workflows vanish with the tab that launched them. Zorai gives you a shared, watchful runtime where agents keep working, memory persists, approvals stay visible, and every surface reconnects to the same live state.

3 Core Agents
6 Integrations
21 LLM Providers
Rust + React/TS
zorai: goal-run --investigate failing build
3 agents active
Svarog ACTIVE
Routing task to specialist
Spawning Rarog (concierge)
Gmail inbox: 201 messages fetched
$ _
WELES GOVERNANCE
Command blocked: rm -rf /
Sandbox isolation: active
Policy passed: git commit
$
Features

From Prompt to Governed Execution

Zorai turns scattered prompts, scripts, tabs, and terminal state into one operating system for agent work. The runtime stays awake, so the work does too.

Durable by Design

Give an agent a real objective and let the daemon hold the state while you move between surfaces.

Autonomy With Guardrails

Approvals, sandboxing, and policy checks make risky actions legible instead of magical.

Terminals Stay First-Class

Shells, panes, and sessions remain native tools — but they now live inside a broader agent runtime.

See the Execution Path

Inspect what the agent did, which tools it used, and how the run actually unfolded.

Rewind Before You Regret

Capture checkpoints before risky changes and roll back with evidence when needed.

Search What Happened

Reopen prior runs, replay transcripts, and recover the operational context that usually gets lost.

Build Your Control Room

Arrange terminals, agents, and panels around the workflow instead of bending the workflow to the UI.

Built-in Agents

Three Fires at the Core

Zorai starts with three named agents: one to do the work, one to coordinate the flow, and one to watch the edges. Together they make agent execution operable, not theatrical.

Svarog

The Smith — Main Agent
ACTIVE

The main working fire. Svarog plans, executes, delegates, remembers, and keeps durable goals moving.

  • Terminal command execution
  • Subagent spawning & supervision
  • Long-term memory management
  • Task decomposition & routing

Rarog

The Concierge
STANDBY

The concierge fire. Rarog carries context, smooths handoffs, and keeps coordination lightweight.

  • Lightweight DM between agents
  • Context fetching & bundling
  • Notification dispatch
  • Session bridging

WELES

The Guardian — Governance
ALWAYS ON

The governance fire. WELES keeps autonomy bounded, reviewable, and safe when work reaches a dangerous edge.

  • Command interception & review
  • Approval workflow management
  • Sandbox isolation enforcement
  • Policy guardrails
Operator
Svarog
Rarog
WELES

Operators work through Svarog. Svarog hands off coordination to Rarog and routes safety-critical work through WELES before execution.

Architecture

A Runtime, Not Just an Interface

Electron, TUI, CLI, MCP clients, and chat gateways are all just ways of touching the same daemon. Close one surface, open another, and the work is still there.

Clients
Electron Shell React/TypeScript
zorai CLI Command Line
zorai-gateway Slack/Discord/TG
IPC (Unix socket / TCP)
zorai-daemon
Agent Runtime
Task Queue
Governance
Memory
PTY Bus
Lane Queue
AST Validator
Snapshot Engine
Cred Scrubber
CRIU C/R
WORM Ledger
FTS5 History
zorai-protocol (bincode)
zorai-mcp MCP Server (JSON-RPC)

Agent Runtime

Execution, delegation, collaboration, and durable goal runs all happen inside the same live runtime.

Persistent Memory

Identity, reusable facts, and operator context accumulate instead of evaporating between sessions.

Governance Layer

Governance is visible: approvals, isolation, validation, and auditability are part of the workflow.

Plugin Hub

Email, chat, calendars, and search enter the runtime as tools your agents can actually use.

Memory & Learning

Context That Compounds

Useful agentic work needs continuity. Zorai keeps identity, reusable knowledge, and operator preferences in curated layers instead of letting context reset every session.

SOUL.md

Agent identity file. Defines core persona, operational constraints, and communication style. Loaded at startup — shapes every agent response.

role: artisan-craftsman
cadence: solar-cycle
personality: strict but fair

MEMORY.md

Curated episodic and semantic memory. Stores workspace facts, project conventions, recurring corrections, and durable preferences.

workspace: ~/gitlab/it/zorai
lsp: rust-analyzer
operator: conservative risk

USER.md

Operator profile. Backed by SQLite — language preference, CV path, interests, session rhythm, and known feedback patterns.

language: English
session: ~11:00 UTC
signal: intellectually rigorous
Safety & Governance

Autonomy You Can Actually Trust

Agent autonomy without visible control is just a demo. WELES makes risky execution reviewable, bounded, and auditable before work crosses a dangerous line.

Command
WELES
Sandbox
Execute
Block Warn + Approve Pass

Command Interception

WELES intercepts shell commands and risky tool calls before execution. Destructive patterns, credential exfiltration, and unsafe escalation paths are blocked or reviewed.

Sandbox Isolation

High-risk execution can run inside sandboxed boundaries with visible scope. The runtime makes blast radius legible before work crosses sensitive edges.

Approval Workflows

High-risk operations trigger human-in-the-loop approval. WELES presents blast-radius warnings and waits for operator confirmation.

WORM Audit Ledger

All governance decisions are written to a WORM (Write Once Read Many) ledger. Immutable audit trail for compliance and forensics.

Plugin Hub

Bring the Outside World Into the Runtime

Email, calendars, chat, and web search become governed tools your agents can use without leaving the same execution environment.

Gmail

Read inbox, search, send, trash, archive, star, mark read/unread, and view full threads.

  • list_inbox, get_message, send_message
  • search_messages, trash, archive
  • mark_read, mark_unread, star

Google Calendar

List events, view details with attendees, create, update, delete, and manage multiple calendars.

  • list_events, get_event
  • create_event, update_event
  • delete_event, list_calendars

Slack

Send messages to channels. Operators get notified when agents complete long-running tasks or need input.

  • send_message to channel
  • Default channel from config

Discord

Send to channels or direct messages. Human-in-the-loop approvals routed through Discord when configured.

  • send_message to channel or user
  • Default DM from config

Telegram

Send to configured chat. Real-time agent notifications and approval requests via Telegram bot.

  • send_message to chat
  • Default chat from config

Web Search

Agents search the web for real-time information. Results fed directly into agent reasoning context.

  • web_search with configurable API
  • setup_web_browsing for headless
LLM Providers

Choose Models by Role, Not by Hype

Use frontier models for strategy, fast models for implementation, and local models when privacy matters. Switch providers without rebuilding the workflow around a single vendor.

OpenAI
Anthropic
MiniMax / Coding Plan
Alibaba Coding Plan
Qwen / DeepInfra
Kimi / Kimi Coding
Z.AI / Z.AI Coding
OpenRouter
Cerebras
Together
Groq
Chutes
Hugging Face
Featherless
OpenCode Zen
Ollama (local)
Custom endpoint
Get Started

Start Fast, Go Deep Later

Install the runtime in seconds, or run the daemon and UI surfaces from source when you want the full development loop.

Quick Install

Recommended

  • Installs the latest Zorai release from the official install script
  • Best for Linux and macOS terminals
  • Run zorai --help right after install to verify it worked
Terminal
# Install the latest Zorai release
curl -fsSL https://raw.githubusercontent.com/mkurman/zorai/main/scripts/install.sh | sh

# Verify the install / show available commands
zorai --help
Linux macOS

npm Global Install

Terminal
# Install via npm (all platforms)
npm install -g zo-rai
Linux macOS Windows

Pre-built Binaries

Downloads
# Linux
curl -fsSLO https://github.com/mkurman/zorai/releases/latest/download/zorai-linux-x86_64.zip

# macOS Intel
curl -fsSLO https://github.com/mkurman/zorai/releases/latest/download/zorai-darwin-x86_64.zip

# macOS Silicon
curl -fsSLO https://github.com/mkurman/zorai/releases/latest/download/zorai-darwin-arm64.zip

# Windows
curl -fsSLO https://github.com/mkurman/zorai/releases/latest/download/zorai-windows-x64.zip

Build from Source

Requirements

  • Rust 1.75+ with cargo
  • Node.js 18+ with npm
  • Electron 33+
Terminal
# Clone the repository
git clone https://github.com/mkurman/zorai.git
cd zorai

# Start the daemon
cargo run --release --bin zorai-daemon

# In another terminal: launch the TUI
cargo run --release --bin zorai-tui

Essential Keybindings

Ctrl+D Split horizontal
Ctrl+Shift+D Split vertical
Ctrl+Shift+P Command palette
Ctrl+Shift+A Toggle agent panel
Ctrl+Shift+V Session vault
Ctrl+Shift+T Time-travel snapshots
Preview

See It In Action

A single runtime rendered as terminals, agent panels, execution graphs, and searchable history.

Workspace: development
bash
~/projects/app $ cargo build --release
Compiling zorai-daemon v0.1.0
Compiling zorai-protocol v0.1.0
Finished release [optimized] target(s) in 12.34s
~/projects/app $ _
tests 2
unit_tests
integration
Agent: Claude Sonnet 4
AI
I'll analyze the codebase and help you understand the architecture.
Show me the main components
AI
Using tool: bash
find crates -name "*.rs" | head -10
Execution Graph
Start bash: analyze search: docs Complete
Session Vault
dev-backend Today, 2:34 PM • 124 commands
agent-debug Yesterday • 89 commands
feature/auth Mar 10 • 256 commands
Infinite Canvas • 12 Terminals
bash
$ npm start
logs LIVE
[INFO] Server running...
AI Agent ACTIVE
I'll handle all terminals!
build
Build complete
test
$ cargo test
REAL FREEDOM

Start Your First Durable Run

Install Zorai, point it at real work, and keep the runtime alive even when the window closes.