Kybernesis Platform
The product monorepo for Kybernesis — the ecosystem layer that makes eve agent deployments enterprise-ready and uniquely Kybernesis. Eve is the plumbing; this is the moat.
Packages (all Apache-2.0, published to npm)
Also in this repo
-
fixtures/— private, never published.governed-refis the minimal governed eve agent used as the enterprise package's reference consumer and E2E harness (proved the invite → grant → access → revoke loop against the production control plane);eyes-spikeexercises the Docker workshop sandbox. -
registry/— source of https://registry.kybernesis.ai, the shadcn-format eve integration registry serving all of the above. It deploys automatically frommaster.eve registry add @kybernesis=https://registry.kybernesis.ai/r/{name}.json eve add @kybernesis/arcana eve add @kybernesis/enterprise eve add @kybernesis/computer eve add @kybernesis/vault eve add @kybernesis/evals -
docs/—HANDOFF.mdis the repo map and fresh-machine setup;gaps.mdis the honest ledger of what is verified, what is built-but-never-run, and what is missing. Read it before promising anything to a client.
Related, not in this repo
- Control plane (
KybernesisAI/kybernesis-admin, prod:agent.kybernesis.ai) — the issuer/governance service the enterprise package verifies against, and the broker for connectors and local access. - Kyber (
KybernesisAI/kyber) — our own production company agent: the reference deployment that dogfoods every package here via published versions. - KYBER Studio (
KybernesisAI/kyber-studio) — the desktop client. Signed, notarized, self-updating; the consumer oflocal,connectors,manage,vault,computerandvoice. - KYBER Studio Mobile (
KybernesisAI/kyber-studio-mobile) — the same client on iOS and Android (Expo), and the receiver fornotify. - Sid (
KybernesisAI/sid) — the off-Vercel reference deployment (exe.dev, iMessage, a Grok subscription). If something works there, it works at a client.
Development
Node 24 is required (eve refuses older Node).
npm install
npm run build # builds every package
npm run typecheck
npm test
node scripts/check-registry.mjs
Every package is built against one eve line: eve is a peer dependency
scoped to that line (>=0.81.1 <0.82.0) with the exact certified version
(0.81.1, the same as EVE_VERSION in packages/create/src/util.ts) in
devDependencies. Moving to a new eve is a deliberate, eval-gated
certification, not a version bump.
Publishing: bump the package version (scripts/prepublish.mjs refuses a
version already on npm), run node scripts/check-eve-line.mjs, then publish
with the npm account's browser 2FA. Update the registry item if install-time
files changed and push to master. The consuming agent's eval suite gates
every release.
History note: these packages were originally developed inside the Kyber agent
monorepo (KybernesisAI/kyber) and extracted here 2026-08-05; pre-extraction
history lives there and in the retired per-package mirrors
(arcana-eve, enterprise-eve).