Nucleicnash
In development

nash

The shell that
sees everything.

nash — the Nucleic Agent Shell — is the shell narOS gives every agent, built for how agents actually work. Every command they run, every file they touch, every byte that crosses a pipe: on the record the moment it happens. So you never have to read a transcript and hope it's telling the truth.

$ curl -s api/token | jq -r .id > out.json curl jq out.json command curl -s api/token recorded data curl → jq captured file out.json recorded what ran · what it carried · what came of it
Scroll
Not a wrapper

It doesn't watch
the shell. It is the shell.

nash isn't something you run your commands through — it's what narOS runs commands with. The login session, every sh -c, every Makefile recipe, every package install hook, three subshells down: all of it is already nash, because there's nothing else down there. Nothing to opt into, no list of tools to keep current, nothing to anticipate — if it ran, you saw it.

agent nash narOS's own shell nothing underneath git npm · pip · cargo curl · ssh make · docker rm · mv · chmod …and everything else
part of the machine, not bolted onto it
The whole story

What ran, and
what it carried.

Knowing an agent ran curl … | sh tells you almost nothing. You want what came down that pipe, what landed in that file, what a command quietly handed back — and that's what you get. Anything credential-shaped is masked on the machine before it leaves, so the record is safe to keep and safe to share: your secrets stay secrets, even in your own audit trail.

WHAT CAME DOWN THE PIPE #!/bin/sh export TOKEN=[redacted] install -m 755 ./bin/agent /usr/local/bin MASKED AT THE SOURCE before it leaves the machine SAFE TO KEEP and safe to hand to anyone the whole story · none of your secrets
a record you can hand to anyone
Invisible to the work

You'll never notice
it's there.

Nothing runs slower, nothing behaves differently, and nothing that worked before stops working. Output comes back byte for byte, and on the rare command that confuses it, the work carries on anyway. Seeing everything costs you nothing — which is exactly why it can stay on everywhere, all the time, instead of only when you remember to care.

On every screen

Certainty is what
lets you walk away.

A commit, a push, a file rewritten — it appears in your feed and on your iPhone the instant it happens, because Nucleic watched it, not because it guessed from a transcript afterward. That's the difference between reviewing every line by hand and letting good work merge itself while you're somewhere else entirely.

See what that certainty unlocks →

ACTIVITY git commit -m "fix" data captured file written git push origin commit data file push the moment it happens · encrypted end to end
the same truth on every screen
Why it matters

The confidence to stop watching.

Nothing unseen

Every command, in every script, subshell, and pipeline — not a sampled few.

Free to run

Same speed, same behavior, same output. Nothing to notice, nothing that breaks.

Safe to keep

Secrets are masked before they ever leave the machine, so the record is shareable.

Everywhere they work

Sandboxes, cloud runners, Linux VMs, Macs — one record, wherever the work ran.

Keep exploring
Open beta

Stop taking their word for it.

Nucleic is in open beta. All it asks is macOS 27 on Apple Silicon.

No account required · private by design · runs offline