Takumi
A Rust terminal coding agent that holds no API keys — Chitragupta owns routing and memory; Takumi owns execution.
- Daemon-only architecture — the agent itself carries zero credentials
- Signed WebAssembly plugins with deny-by-default capability grants
- Typed task graph where every node can bind a different model
- The TypeScript prototype was deliberately retired — documented in KILL.md
Most coding agents are monoliths: keys, routing, memory, and execution in one process. Takumi splits the plane. The Chitragupta daemon is the control plane; Takumi is the execution harness — a full-screen ratatui TUI and a headless NDJSON driver, speaking JSON-RPC over a Unix socket.
Plugins are signed WebAssembly components. Capabilities are Sanskrit-named, deny-by-default, verified per publisher with Ed25519. If a plugin wants to see your filesystem, it asks — and the grant persists per digest, not per promise.
There was a working TypeScript version. It was retired on purpose, with the reasoning written down. Killing your own working code for a better architecture is the hard kind of honesty.