Project-wide search
Glob, regex, substring, and semantic search find the right code without pasted paths.
Code · IP stays on the machine
Agentic coding that never leaves your Mac.
Plan, edit, run, and review an entire project inside Operator. Every change begins in Shadow, so your real workspace stays untouched until you approve it.
The Code Canvas
The agent, project, and terminal in one place.
Approve a risk-tagged plan, follow live todos, inspect files, edit alongside Courier, run a real PTY, and review the final diff without switching applications.
Courier
Local · air-gapped
courier-webshadowDiscardPromote
Add session persistence
session.ts is in-memory only
Added an in-memory Map and save() on Session. Tests cover set/get. Diff is in the canvas — promote when you want it on disk.
Step trace3 steps
iter 1read_file(path=lib/session.ts)0.3s
Result
Type-only module. No store.
iter 2edit_file(path=lib/session.ts)1.1s
Result
Inserted Map + save().
iter 3run_terminal(command=npm test)4.8s
Result
24 passed
Persistence is in lib/session.ts. Tests are green — review the diff in the canvas, then promote.
Qwen3.8 27BAsk Courier to edit code, run commands, or review changes…
courier-webshadow
Files
▾ app
▾ components
▾ lib
session.ts
package.json
lib/session.ts
01export type Session = {
02 id: string;
03 createdAt: number;
04}
05const sessions = new Map();
06export function save(session) {
07 sessions.set(session.id, session);
08}
Safe by default
Shadow Manager
Courier copies the workspace and treats the entire change as an atomic transaction. Work, commands, and verification happen in parallel; your real files do not move until you promote.
~/acmelocked
$ tree
- app/
- page.tsx
- components/
- Nav.tsx
- lib/
- auth.ts
read-only until you promote
~/acme/.shadowempty
$ waiting for copy…
- app/
- page.tsx
- components/
- Nav.tsx
- lib/
- auth.ts
idle
Your project stays put. Courier is about to copy it.
File intelligence
It works at project scale.
Code can understand the shape of a repository before it changes it — and carries the project's own instructions into every turn.
Natural-language paths
Describe what you need and Courier resolves the likely files across the workspace.
Project memory
COURIER.md, AGENTS.md, and CLAUDE.md load automatically so conventions travel with the task.
Approval gates
Deletes, network access, and git push remain blocked until you explicitly approve them.
Sub-agents
Delegate, verify, and keep going until green.
Courier can dispatch a helper into a fresh workspace, bring the result back, run the checks, and iterate on failures without losing the main task.
Main agent
Owns the task
Sub-agent
Fresh workspace
Verify
Run the checks
Green
Return the result
MCP tools
Use installed apps and custom MCP servers from the same approved tool surface.
Collections
Search an OpenAPI specification semantically, then propose the endpoint call before it runs.
On-device credentials
OAuth tokens and connection secrets remain on the Mac running Courier.
Code with an escape hatch.
Code is included with Courier Pro at $10 per month and bundled with the commercial local license.