I built it because I wanted an agentic CLI without cloud dependency or token costs. Everything runs on-device via llama.cpp (Vulkan/Metal/CPU).
Here are some of the design decisions that make Natshell different - Safety classifier is regex-based, not LLM-based fast and deterministic - Command chaining detection splits on &&/||/;/| before classification - Context window auto-scaling from 4K to 1M tokens - No sandbox it uses your real shell environment by design
MIT licensed runs on Linux/macOS/WSL. Happy to answer questions about the architecture.