Agent Lowmem

More agents. Less RAM.

Agent Lowmem is a native Rust policy runner for predictable agent-launched validation on memory-constrained Apple Silicon Macs. It serializes heavy work, denies watch and background modes, supervises owned process groups, and keeps adoption reversible.

Agent Lowmem v0.1.0 is available for ARM64 Apple Silicon Macs running macOS 14 or newer.

The first release is not signed or notarized because an Apple Developer ID is not available.

Install with Homebrew

Install the fully qualified formula so Homebrew trusts only Agent Lowmem from the Pleo2 tap:

brew install Pleo2/agent-lowmem/agent-lowmem

Upgrade or uninstall it with:

brew update
brew upgrade Pleo2/agent-lowmem/agent-lowmem
brew uninstall Pleo2/agent-lowmem/agent-lowmem

The Homebrew package uses the same unsigned and not notarized binary published in the immutable GitHub Release. Homebrew verifies its pinned SHA-256 before installation. Never disable Gatekeeper globally.

Install with Codex

Open the JavaScript or TypeScript repository you want to inspect in Codex, then paste this prompt:

Install and safely configure Agent Lowmem for the repository currently open in Codex.

Context:
- Agent Lowmem is a native Rust policy runner for memory-constrained Apple Silicon Macs.
- It keeps agent-launched JavaScript and TypeScript validation predictable by allowing only reviewed operations, serializing heavy work, applying bounded concurrency arguments, supervising the child process group, and making repository adoption reversible.
- The v0.1.0 MVP supports ARM64 Apple Silicon, macOS 14 or newer, and recognized npm or pnpm projects.

Safety rules:
- Do not use sudo and never disable Gatekeeper globally.
- Do not change package-manager versions, dependencies, lockfiles, or package scripts merely to make the repository compatible.
- Do not overwrite unrelated work or discard existing changes.
- Do not run tests, builds, commits, pushes, or destructive cleanup as part of installation.
- Run one command at a time and stop on conflicts, unsupported versions, or ambiguous repository state.

Procedure:
1. Read https://github.com/Pleo2/agent-lowmem and its docs/quickstart.md before acting.
2. Check `uname -m`, `sw_vers -productVersion`, `brew --version`, the repository root, and `git status --short`. If this is not a supported Mac or not a Git repository, explain why and stop without changing the project.
3. If `agent-lowmem` is not installed, run `brew install Pleo2/agent-lowmem/agent-lowmem`. If it is already installed, do not reinstall or upgrade it automatically.
4. Run `agent-lowmem --version`. The expected release is `agent-lowmem 0.1.0`. If a different version is present, report it and stop.
5. From the repository root, run `agent-lowmem doctor --json` and explain the compatibility result in plain language.
6. If doctor reports that init is available, run `agent-lowmem init --dry-run`. Show what Agent Lowmem proposes to manage and confirm that no unrelated file would be overwritten.
7. If the dry run is supported and conflict-free, run `agent-lowmem init`. Otherwise stop without forcing adoption.
8. Show the final `git status --short`, the generated operation keys in `.agent-lowmem.json`, and the Agent Lowmem block in `AGENTS.md`.
9. Finish with a concise report: installed version, compatibility, files changed, available operation keys, and the exact `agent-lowmem run <key>` commands I can choose to execute later. Mention `agent-lowmem restore --dry-run` as the safe first step for removal.

The prompt installs and adopts Agent Lowmem, but deliberately leaves heavy validation under your control. For a disposable end-to-end exercise first, use the 10-minute quickstart.

Current commands

New here? Follow the 10-minute end-to-end test in a disposable project before adopting a real repository.

agent-lowmem doctor
agent-lowmem --version
agent-lowmem init --dry-run
agent-lowmem init
agent-lowmem run test
agent-lowmem restore --dry-run
agent-lowmem restore

Every managed run uses a strict repository policy, one global heavy-operation lock, a visible deadline, signal forwarding, and ownership-checked cleanup.

GitHub integration

Inspect the current repository's GitHub Actions configuration through the official GitHub CLI:

gh auth status
agent-lowmem github inspect
agent-lowmem github inspect --json

The integration accepts only a canonical github.com origin, invokes gh api directly without a shell, requests at most 100 workflows, caps captured output at 256 KiB, and terminates the request after 10 seconds. Agent Lowmem never reads or prints the GitHub token. The machine-readable report follows schemas/github-inspect-v1.schema.json.

Scope

• macOS on Apple Silicon;
• reference profile: M2 MacBook Air with 8 GiB RAM;
• JavaScript and TypeScript repositories using npm or pnpm;
• Node, Next.js, NestJS, Vitest, Jest, TypeScript, and ESLint operations admitted by the embedded policy matrix;
• no daemon, sudo, shell evaluation, private memory-pressure API, or hard memory-cap promise.

Development

Use sequential, resource-bounded validation:

cargo fmt --all -- --check
cargo clippy --all-targets -j 1 -- -D warnings
cargo test -j 1 -- --test-threads=1
cargo build --release -j 1

The production Rust package is at the repository root. The Swift package under tools/pressure-probe is an experimental measurement tool, not the production implementation.

Release verification

Release archives are published with SHA256SUMS. After downloading both files from the GitHub release, verify the archive before extracting it:

shasum -a 256 -c SHA256SUMS
tar -tzf agent-lowmem-v0.1.0-aarch64-apple-darwin.tar.gz

The archive is expected to contain only agent-lowmem, LICENSE.md, and README.md. Until signing and notarization are available, macOS may quarantine the downloaded binary. Inspect that state explicitly and remove quarantine only from the verified Agent Lowmem binary you downloaded:

xattr -l ./agent-lowmem
xattr -d com.apple.quarantine ./agent-lowmem
./agent-lowmem --version
./agent-lowmem doctor

Never disable Gatekeeper globally. See SECURITY.md before reporting a vulnerability.

License and contributions

Agent Lowmem uses the FSL-1.1-MIT license, with Copyright 2026 Jose Leonardo Moreno. It is source-available during the initial two-year period and each version converts to MIT on its own second anniversary. See COMMERCIAL.md for plain-language examples and CONTRIBUTING.md to contribute.

Support

Email support@agentlowmem.dev.