Nucleicnash
In development

nash

The shell that
sees everything.

nash — the Nucleic Agent Shell — is the shell narOS gives every agent, built for how agents actually work. Every command they run, every file they touch, every byte that crosses a pipe: on the record the moment it happens. So you never have to read a transcript and hope it's telling the truth.

$ curl -s api/token | jq -r .id > out.jsoncurljqout.jsoncommand curl -s api/token recordeddata curl → jq capturedfile out.json recordedwhat ran · what it carried · what came of it
Scroll
Not a wrapper

It doesn't watch
the shell. It is the shell.

nash isn't something you run your commands through — it's what narOS runs commands with. The login session, every sh -c, every Makefile recipe, every package install hook, three subshells down: all of it is already nash, because there's nothing else down there. Nothing to opt into, no list of tools to keep current, nothing to anticipate — if it ran, you saw it.

agentnashnarOS's own shellnothing underneathgitnpm · pip · cargocurl · sshmake · dockerrm · mv · chmod…and everything else
part of the machine, not bolted onto it
The whole story

What ran, and
what it carried.

Knowing an agent ran curl … | sh tells you almost nothing. You want what came down that pipe, what landed in that file, what a command quietly handed back — and that's what you get. Anything credential-shaped is masked on the machine before it leaves, so the record is safe to keep and safe to share: your secrets stay secrets, even in your own audit trail.

WHAT CAME DOWN THE PIPE#!/bin/shexport TOKEN=[redacted]install -m 755 ./bin/agent /usr/local/binMASKED AT THE SOURCEbefore it leaves the machineSAFE TO KEEPand safe to hand to anyonethe whole story · none of your secrets
a record you can hand to anyone
Invisible to the work

You'll never notice
it's there.

Nothing runs slower, nothing behaves differently, and nothing that worked before stops working. Output comes back byte for byte, and on the rare command that confuses it, the work carries on anyway. Seeing everything costs you nothing — which is exactly why it can stay on everywhere, all the time, instead of only when you remember to care.

On every screen

Certainty is what
lets you walk away.

A commit, a push, a file rewritten — it appears in your feed and on your iPhone the instant it happens, because Nucleic watched it, not because it guessed from a transcript afterward. That's the difference between reviewing every line by hand and letting good work merge itself while you're somewhere else entirely.

See what that certainty unlocks →

ACTIVITYgit commit -m "fix"data capturedfile writtengit push origincommitdatafilepushthe moment it happens · encrypted end to end
the same truth on every screen
Why it matters

The confidence to stop watching.

Nothing unseen

Every command, in every script, subshell, and pipeline — not a sampled few.

Free to run

Same speed, same behavior, same output. Nothing to notice, nothing that breaks.

Safe to keep

Secrets are masked before they ever leave the machine, so the record is shareable.

Everywhere they work

Sandboxes, cloud runners, Linux VMs, Macs — one record, wherever the work ran.

Keep exploring
Open beta

Stop taking their word for it.

Nucleic is in open beta. All it asks is macOS 27 on Apple Silicon.

No account required · private by design · runs offline