Origin-AI-IDE/origin
Project Overview
Origin
A lightweight, open-source Tauri/React desktop IDE with a built-in agentic AI assistant that reads, writes, and runs code under user approval.
True Intent (AI Assessment)
A self-hosted, bring-your-own-API-key desktop IDE that pairs a conventional code editor with an agentic LLM assistant able to carry out multi-step file and shell operations.
README Accuracy
Notes
The README's privacy claims ('no telemetry, no third-party relay, keys stored in OS keychain') line up broadly with the presence of keychain.rs and a local Rust HTTP proxy. However, AI provider calls necessarily send file and code context to whichever third-party LLM provider the user configures (OpenAI, Anthropic, Google, and so on). That is inherent to the product rather than a red flag, but the 'no cloud lock-in' framing understates that code content still leaves the machine when cloud providers are used. The larger open question is whether resolvePath/resolveTargetPath and capabilities.json properly scope filesystem and shell access to the open workspace — preventing path traversal or arbitrary host command execution via bash_run. That could not be confirmed from the provided samples and warrants direct code review before treating the agent's approval-gated tools as a hard security boundary.
Origin is a native desktop code editor built on Tauri 2 (Rust backend) and React 19 (TypeScript frontend), positioned as a lightweight open-source alternative to commercial AI IDEs such as Cursor and Windsurf. It packages a CodeMirror 6 editor, a real PTY-backed terminal, a file tree, a source control panel, a debugger (DAP), and language server (LSP) integration into a single application, shipped as small (~5-10MB) installers for Windows, macOS, and Linux.
The problem it targets is that AI coding tools are typically subscription-based, cloud-locked, or heavyweight. Origin instead lets developers bring their own API keys for 12+ LLM providers (OpenAI, Anthropic, Gemini, OpenRouter, and local models via Ollama, LM Studio, vLLM, and others) and run an agentic coding assistant locally, with no vendor proxy or telemetry layer sitting in the middle.
The intended users are individual developers who want an editor with a deeply integrated AI agent capable of multi-step autonomous work — reading files, running shell commands, editing code through SEARCH/REPLACE blocks, and proposing structured plans — while keeping control of API costs and keeping source code and history on their own machine rather than in a SaaS backend.
Architecturally, the Rust/Tauri backend exposes commands for filesystem access, git, terminal (PTY via portable-pty), LSP/DAP process spawning, an HTTP proxy for AI provider calls (used to work around WebView2 CORS restrictions), and OS-keychain-backed secret storage. The React frontend drives the AI agent loop using the Vercel AI SDK, with a tool-call system (src/lib/agent/tools.ts, run.ts) that auto-executes read-only tools (read_file, list_directory, grep, glob) and gates mutating tools (write_file, edit, bash_run) behind explicit approval before anything touches disk. Chat and session history persists in a local SQLite database via tauri-plugin-sql.
Because the AI agent has direct filesystem write access and arbitrary shell execution (bash_run), and because the Tauri backend spawns terminal, LSP, and DAP child processes from frontend-supplied paths and arguments, the real security boundary rests on the path resolution guards (resolvePath/resolveTargetPath) and on how the Tauri capabilities manifest scopes fs and shell access. Those areas deserve the closest scrutiny — more than the 'approval-gated' framing suggests — because the approval prompt is a frontend-only control, not an OS-level sandbox.
| Languages | TypeScript, Rust, CSS, JavaScript, Shell, HTML |
| Runtime | Node.js 20+ (frontend build) with Tauri 2 (Rust) native shell |
| Framework | React 19 + Tauri 2 |
| Database | SQLite (via tauri-plugin-sql, for local chat/session persistence) |
| Package Manager | npm |
| Key Dependencies | Tauri 2, React 19, Vercel AI SDK (ai, @ai-sdk/anthropic/google/openai), CodeMirror 6, xterm.js + portable-pty, keyring (Rust), reqwest |
| Build Tool | Vite 7 (frontend) + Tauri CLI / Cargo (native) |
| Test Framework | Vitest |