$ ls /primitives/_rust/*/target/release/ | wc -l → 100
/primitives store
Rust-first (100 of 100, RULE 0.2). Total disk footprint ~0.0 MB. Each primitive is a single static binary you can call from Bash or another agent — no runtime, no daemon.
firewall-diff
Rust primitive in the KeiSeiKit substrate.
frustration-matrix
Longitudinal user-frustration matrix — regex-based chatlog scan (no ML)
kei-agent-runtime
Agent substrate v1 — Capability trait + registry + compose/spawn/verify runtime
kei-artifact
Typed artifact handoff pipeline — BMAD-style document pass-between agents with JSON Schema validation
kei-atom-discovery
Shared atom discovery + frontmatter parsing + safe path join
kei-auth
Multi-tenant session tokens with scopes + HMAC-signed expiry (SQLite backend).
kei-auth-apple
Sign in with Apple AuthProvider impl for kei-runtime-core (Wave 7). OAuth code → token endpoint → unverified id_token claim decode (sub/email).
kei-auth-google
AuthProvider impl for Google OAuth 2.0 + OIDC. Wave 7 atomar; sibling of kei-auth (multi-tenant tokens) and forthcoming kei-auth-{github,microsoft,apple}.
kei-auth-magiclink
AuthProvider impl for passwordless email magic-link tokens (HMAC-SHA256, stateless). Wave 7 atomar; sibling of kei-auth (multi-tenant tokens) and kei-auth-{google,github,microsoft,apple}.
kei-auth-webauthn
WebAuthn passkey AuthProvider impl for kei-runtime-core (Wave 7 atomar). Wraps webauthn-rs 0.5; stateless ceremony APIs (registration + authentication). Sibling of kei-auth-{google,apple,github,microsoft}.
kei-backend-daytona
Daytona serverless backend with hibernation (HERMES-MIGRATION P1.2). Resume-or-create sandboxes via REST.
kei-brain-view
Read-only TUI/CLI visualizer of kei-ledger taxonomy graph + agent lineage (Wave 14)
kei-cache
Atom result cache — deterministic wrapping of pure (query/transform) atom invocations
kei-capability
Hook-protocol CLI adapter — routes PreToolUse check + on-return verify to kei-agent-runtime capabilities
kei-changelog
Git-cliff-style CHANGELOG.md generator from Conventional Commits.
kei-chat-store
Session persistence for Claude conversations. Port of LBM internal/chat.
kei-compute-baremetal
ComputeProvider impl for user-owned bare-metal boxes — registers SSH connection, runs cloud-init equivalent, status-pings via SSH. No cloud API. Wave 2 atomar.
kei-compute-digitalocean
DigitalOcean ComputeProvider impl for kei-runtime-core (Wave 2 redo). REST v2 + bearer-token auth, mocked tests via wiremock.
kei-compute-linode
ComputeProvider impl for Linode (Akamai Cloud) v4 API. Wave 2 atomar — sibling of kei-compute-hetzner. Honors LINODE_TOKEN env ref per RULE 0.8.
kei-compute-vultr
Vultr Cloud (v2 API) implementation of the kei-runtime-core ComputeProvider trait
kei-conflict-scan
Deep-sleep conflict scanner — rules/hooks/blocks/orphans/CP violations (v0.13.0)
kei-content-store
Asset + prompt + campaign registry. Port of LBM internal/content.
kei-cortex
Local HTTP daemon exposing cortex state for UI consumption
kei-cron-scheduler
P4.2 — Hermes-equivalent cron/at/interval scheduler with JSON persistence.
kei-crossdomain
Typed-edge cross-domain store. Port of LBM internal/crossdomain.
kei-curator
Edge-decay + orphan-prune graph hygiene. Port of LBM internal/curator.
kei-decision
Linking layer between research output (MASTER-REPORT.md) and decision execution (kei-spawn task.toml + kei-ledger pre-fork)
kei-decompose
Universal decomposition layer — turns ANY MD output (research / audit / sleep / architecture / new-project) into kei-spawn-compatible task.toml + dispatch.
kei-diff
Structural JSON diff (RFC 6902 subset: add/remove/replace). Pure computation primitive for drift detection in kei-replay and invalidation in kei-cache.
kei-discover
Wave 14 — federated marketplace discovery stub for KeiSei primitives (metadata-only).
kei-dna-index
Read-only adjacency/cluster/precedent index over kei-ledger DNAs
kei-entity-store
Convergence-Layer-A engine: schema-driven SQLite CRUD + graph verbs shared across kei-*-store crates (kei-task pilot).
kei-export-trajectories
Export agent trajectories to ShareGPT JSONL format.
kei-forge
Local web wizard for scaffolding new atoms
kei-fork
Managed git-worktree + ledger lifecycle for agent spawns (Wave 15 foundation)
kei-frustration-loop
Per-user frustration learning loop — feedback ingestion + auto-retrain trigger + nightly Phase-0 cron hook
kei-gateway
P4.1 — Unified messaging gateway: platform adapters, sessions, agent cache, delivery router.
kei-gdrive-import
Project-folder classifier for one-shot Google Drive → Forgejo import. Detects build manifests (Cargo.toml, package.json, pyproject.toml, go.mod, pom.xml, build.gradle, Gemfile, composer.json) and emits PROJECT/AMBIGUOUS/NOT-A-PROJECT/ALREADY-REPO verdicts.
kei-git-bitbucket
Bitbucket Cloud GitBackend impl for kei-runtime-core (Wave 5). REST v2.0 + HTTP Basic auth (username + app password), mocked tests via wiremock.
kei-git-forgejo
GitBackend impl for public Forgejo (Gitea-compatible /api/v1). Wave 5 atomar; sibling of kei-git-keigit (private).
kei-git-gitea
GitBackend impl for Gitea (gitea.com / self-hosted) over /api/v1. Wave 5 atomar.
kei-git-gitlab
GitBackend impl for GitLab.com SaaS (and self-hosted via GITLAB_URL). REST API v4 + PRIVATE-TOKEN auth + git CLI shell-out for clone/push. Wave 5 atomar.
kei-graph-check
Post-refactor graph-integrity gate — wikilinks, block refs, handoffs (v0.13.0)
kei-hibernate
Whole-brain export/import — tar.zst bundle of KeiSeiKit state (Wave 14)
kei-leak-matrix
Single source of truth for content protection rules — scanner, substituter, lint, list.
kei-ledger
Agent fork / done / fail ledger — SQLite-backed, SSoT for RULE 0.12. v0.2 adds schema v6 cost tracking + library API.
kei-ledger-sign
ed25519 signing of ledger rows for creator attestation (RULE 0.12 companion)
kei-llm-bridge-mlx
LlmBackend trait-bridge wrapping kei-llm-mlx (Wave 59, Apple Silicon only). Wave 4 atomar.
kei-llm-llamacpp
Wave 58 — adapter to llama.cpp via shell-out (llama-cli / llama-server). NO FFI, NO daemon.
kei-llm-mlx
Wave 59 — Apple MLX adapter (mlx_lm shell-out, macOS Apple Silicon only). Parallel sibling of kei-llm-ollama (W57) and kei-llm-llamacpp (W58). Glued by kei-llm-router (W60).
kei-llm-ollama
HTTP adapter for the Ollama daemon (localhost:11434). Wave 57 of the local-LLM stack — wraps existing Ollama, does not reinvent inference.
kei-llm-router
Wave 60 — UNIVERSAL local-LLM backend selector. Glues W55-W59 (kei-model + kei-machine-probe + kei-llm-{ollama,llamacpp,mlx}) into a single route(machine, model_id, opts) decision.
kei-machine-probe
Wave 56 — Mac hardware/OS/tooling capability detector. Foundation for the local-LLM stack (Waves 57-60: ollama / llamacpp / mlx / router).
kei-mcp
Model Context Protocol (MCP) server — exposes atom registry over stdio JSON-RPC
kei-memory
Session retrospective + recurring pattern detector (offline-first, RULE 0.14)
kei-memory-postgres
MemoryBackend impl over PostgreSQL (tokio-postgres) for kei-runtime-core
kei-memory-redis
MemoryBackend trait-impl backed by Redis 7+ (async). Wave 6 atomar.
kei-memory-sled
MemoryBackend impl over sled (embedded key-value store) for kei-runtime-core
kei-memory-sqlite
MemoryBackend impl over SQLite (rusqlite bundled). Wave 6 atomar.
kei-migrate
Universal SQL migration runner — Postgres/SQLite/MySQL autodetect from DATABASE_URL
kei-model
Universal model registry + selector. SSoT TOML catalog of LLM models across 6 providers with pricing, capabilities, role-tags, and fallback chains. Closes the META-gap of hardcoded MODEL constants in kei-cortex/kei-router/kei-spawn.
kei-net-ipsec
Wave 9 — IPsec NetworkMode impl for kei-runtime-core via strongSwan / swanctl shell-out. Public-IP path; sibling of kei-net-tailscale (private-only) and kei-net-wireguard (private-only).
kei-net-openvpn
NetworkMode impl for OpenVPN — systemctl start/stop openvpn-server@<name> + management interface UNIX socket status parser. Wave 9 atomar.
kei-net-wireguard
Wave 9 — WireGuard NetworkMode adapter via wg-quick + wg shell-out (private mesh, is_public=false). Sibling of kei-net-tailscale; glued by kei-runtime-core::traits::network.
kei-notify-discord
NotifyChannel impl for Discord webhooks. Wave 8 atomar; sibling of kei-notify-email and kei-notify-slack.
kei-notify-slack
Slack incoming-webhook NotifyChannel impl for kei-runtime-core (Wave 8). POST JSON with severity-coloured attachments. Mocked tests via wiremock.
kei-notify-sms
NotifyChannel impl: SMS via Twilio Programmable Messaging. Wave 8 atomar.
kei-notify-telegram
NotifyChannel impl for Telegram Bot API (sendMessage with HTML parse_mode + severity emoji prefix). Wave 8 atomar.
kei-pet
Pet persona manifest: pet.toml parse, validate, system-prompt overlay. Standard Ed25519 identity. CQRS-compatible; no proprietary math.
kei-ping
Cross-window agent presence (heartbeat / list / watch). Auto-selects backend: Redis if redis-cli ping == PONG on localhost, else SQLite.
kei-pipe
Atom DAG pipe runtime — topo-sorts steps, pipes JSON between atoms.
kei-projects-index
SQLite index of git-repo state under ~/Projects/. Feeds dev-hub dashboard view (kei-cortex /projects).
kei-projects-watcher
Long-running fsevents daemon — watches ~/Projects/, debounces 2 s, calls kei_projects_index::reindex_one per touched project.
kei-provision
Unified VPS provisioner — one CLI for Hetzner / Vultr / (future) AWS / DO / Linode. Supersedes provision-hetzner.sh + provision-vultr.sh.
kei-prune
Metadata primitive — mark unused ledger agents as retired (biological pruning analog)
kei-refactor-engine
Deep-sleep refactor-plan generator (consumes kei-conflict-scan JSON) (v0.13.0)
kei-registry
Universal block identity layer — generalises agent DNA to any kit block (primitive / skill / rule / hook / atom). SQLite-backed, idempotent, supersede-aware.
kei-replay
Reconstruct agent spawn from DNA — reads ledger row + task.toml, re-composes, detects drift
kei-router
Routing primitives: (1) NL query → tool-call (LBM port). (2) Multi-provider LLM abstraction (Anthropic / OpenAI / Kimi).
kei-runtime
Atom invocation runtime + schema linter
kei-runtime-core
Hosted Sleep runtime substrate — 12 traits + DNA + plugin registry. No impls; impls live in sibling kei-{compute,llm,git,...}-* crates.
kei-sage
Obsidian-style knowledge graph (SQLite + FTS5). Port of LBM internal/sage.
kei-scheduler
Durable task scheduler (cron / at / interval) — metadata primitive.
kei-search-core
3-wave deep research scaffolding with budget cap. Port of LBM internal/search (fetch stubbed).
kei-shared
Shared substrate types — single source of truth for DNA format + small utility types
kei-skill-importer
Universal parser/canonicalizer/emitter for external AI-coding-tool skill formats (OpenClaw, Cline, Cursor, Claude Code, Kimi).
kei-skills
SKILL.md format — parser, validator, fuzzy patcher, loader, hot-reload registry.
kei-social-store
People + interaction CRM (lite). Port of LBM internal/social.
kei-spawn
Agent substrate v1 — automation envelope around prepare + ledger fork + verify
kei-store
Memory-repo backend abstraction — GitHub/Forgejo/Gitea/Filesystem/S3 (v0.21.0)
kei-svc-systemd
ServiceManager impl: systemd unit + timer generator. Wave 1 atomar #7.
kei-task
Task DAG with deps + milestones (SQLite). Port of LBM internal/task.
kei-tlog
RULE 0.17 — atomar time-logger for agents and pipelines. Emits JSONL lines to ~/.claude/memory/time-metrics/tasks.jsonl.
kei-tty
Ratatui-based terminal UI client for the kei-cortex daemon
kei-watch
Filesystem watcher primitive — thin canonical wrapper around notify
keisei
Exobrain attach/status CLI — mounts a portable brain (memory + manifests + artifacts + MCP bin) into an AI client (MVP: Claude Code)
mock-render
Rust primitive in the KeiSeiKit substrate.
ssh-check
Rust primitive in the KeiSeiKit substrate.
tokens-sync
Rust primitive in the KeiSeiKit substrate.
visual-diff
Rust primitive in the KeiSeiKit substrate.
contribute a primitive
Got a useful Rust binary that fits the Constructor Pattern (single binary, narrow scope, no daemon)? Login and submit a PR-style proposal.