works in the open
Acestes 1.4.3 · charts in replies, split view with terminals
Every agent. Every account.One app.
Acestes runs Claude Code, Codex, Cursor and ten more on all your accounts, with memory, computer use and your servers built in.
v1.4.3 · free · Windows, macOS, Linux · all 13 runtimes
bring your own agent
Runs on the agent you already have.
Claude Code, Codex, Cursor and ten more, signed in on your own accounts. No new subscription, no key to paste.
- Claude Code, Anthropic
- Codex, OpenAI
- Cursor, Cursor
- Antigravity, Google
- Muse Code, Meta
- Grok, xAI
- Kimi, Moonshot
- Mistral Vibe, Mistral
- Qwen Code, Alibaba
- OpenCode, Open source
- Pi, Any provider
- Local models, LM Studio, Ollama, vLLM
- OpenRouter, Any OpenAI-style API
//why acestes
A host, in the oldest sense of the word: the one whose ground you can return to, who remembers you, and who holds what you leave in his care.
an agent, not a chatbot.
Remembers. Works. Asks first.
It drives your desktop apps, carries its own kit, stays inside the fence, and keeps working while you're away.
//It remembers. How your projects are laid out, how you like things done, what the fix turned out to be. Stored on your machine and searched by meaning.
❯why is the staging deploy slow again?
◆recall "staging deploy slow"
m-4f2 staging builds skip the npm cache since 12 Sep
m-9a1 you prefer small commits, one fix each
✓2 notes found. Picking up where we left off.
acestes desktop app
Work with your agent, not around it.
Review its diffs, approve its commands, open shells beside it and keep its memory, all in one workspace.
A replica of the Acestes Agent window: the agent checks its memory, runs the test suite, finds the commit that broke it, asks before editing a file, runs the tests again and schedules a nightly check.
an opinionated agent.
Not a blank canvas.
It has views on how work should be done, and they're built in.
memory
//Memory is a notebook, not a transcript. Short facts it chose to keep, in plain text you can read and edit.
approvals
//It asks in the open. Every change waits on a card showing the exact command or diff. Questions come with answers to pick from.
secrets
//Secrets go one way. It can store a password or key, but never reads one back. None ever lands in a transcript or a log.
agents
//Every agent is its own person. Separate memory, inventory, folders and sessions. One can't reach into another's.
runtimes
//It runs on the agent you already have. Claude Code, Codex, Cursor and more. No new subscription, no key to paste.
Hello, memory. A notebook it keeps for you: short facts in plain text you can edit, searched by meaning, there the next morning.
[ Thinking ]
Keeps what matters. one fact per note, short and specific
Finds it by meaning. the note turns up however you word it
Rereads the past. any earlier conversation, read back when it counts
❯session ended
rememberedstaging builds skip the npm cache
rememberedweb-02 sits behind Cloudflare
rememberedyou want small commits, one fix each
forgotold VPN gateway, decommissioned
✓3 new notes · 41 in the notebook
[ Output ]Plain text, on your machine.
Without memory
A chatbot. Every morning is day one.
[ prompt ]
> web-02 is throwing 502s again
✳ Which server is web-02? Could you paste the nginx logs?
[ again ]
> same box as yesterday. we fixed this.
✳ I don't have access to previous conversations.
[ again ]
> the cert renewal thing??
✳ Could you share your nginx config and certbot setup?
[ starting over ]
> never mind. I'll ssh in myself.
The next morning.
Acestes. After it knows you.
[ prompt ]
> web-02 is throwing 502s again
[ recall ]
web-02 sits behind Cloudflare. On Tuesday certbot renewed and nginx kept the old cert.
◆ ssh web-02 · sudo nginx -t ok
[ waiting on you ]
sudo systemctl reload nginx Allow
✓ 502s gone. Same cause as Tuesday. I added a certbot deploy hook so nginx reloads itself, and a daily certificate check.
[ remembered ]
> that's exactly it. thanks.
a real terminal in the bag.
A serious SSH client, built in.
Acestes grew out of CloudTerm. When the job is on a server, the agent works through the same sessions you do, in the same window.
Tabs and split panes
Chats and terminals side by side.
SFTP
Drag and drop, both ways.
Port forwarding
Local, remote and dynamic.
Session recording
Replay what happened, keystroke by keystroke.
Jump hosts
Through a bastion, as many hops as it takes.
Proxies
SOCKS and HTTP, saved per host.
Serial and Telnet
For the switch in the rack.
Snippets and specs
Your runbooks, which it follows.
a team of them.
One for prod. One for the homelab. One that only reads.
Each has its own name, helmet, colour, memory, inventory and rules, and runs on whichever model you give it.
production
Ace
- Runtime
- Claude Code
- Approval
- Asks for changes
- Inventory
- 14 hosts · 3 keys · github, grafana
- Memory
- 128 notes
homelab
Palinurus
- Runtime
- Codex
- Approval
- Never asks
- Inventory
- 4 hosts · proxmox · ~/infra
- Memory
- 57 notes
read-only auditor
Achates
- Runtime
- Local model
- Approval
- Reads and reports
- Inventory
- 20 hosts · no write access
- Memory
- 33 notes
Free.
Bring your own agent.
- Claude Code
- Codex
- Cursor
- Antigravity
- Muse Code
- Grok
- Kimi
- Mistral Vibe
- Qwen Code
- OpenCode
- Pi
- Local models
- OpenRouter
Acestes drives the coding agents already installed and signed in on your machine. No new subscription, no key to paste. One runtime can hold several accounts, and the status bar shows each plan's limits.
//faq
Questions,
answered.
What usually comes up before someone hands it the keys. Still curious? Read the README or open an issue.
It runs on them. Acestes drives the coding agent you already have and adds what a chat window lacks: a memory that lasts, an inventory of hosts, keys and folders, approval cards for every change, real terminal sessions on your servers, and jobs that run while you're away.
No. It uses the runtimes already installed and signed in on your machine, on your own accounts. You need at least one of them; the app finds it on its own. Local models through Ollama, LM Studio or vLLM work too.
Only the folders you grant it, each read-only or read and write. Turn on the container and that fence becomes a wall. On a server, its access is exactly yours, through sessions you can watch.
Secrets go one way. You type them into a masked field, they're stored encrypted in your keychain, and the agent only ever sees a reference like {{secret:name}}. None ever lands in a transcript or a log.
Only if you say so. Each agent asks for everything, only for changes, or never. Commands you block are refused outright, however they're spelled, and no approval lets them through.
Windows (installer or portable), macOS on Apple silicon and Intel, and Linux as an AppImage. The builds aren't code-signed yet, so your system will warn you the first time; the README says how to get past it.
Nothing. Acestes is free to use and modify under a fair-code license, and the source is open to read on GitHub.
+ yours
Ready to meet Acestes? Hand it the next fix.
The agent that stays. Download it, sign in to the agent you already use, and it will be there tomorrow knowing what happened today.
Free · Windows · macOS · Linux · Fair-code