ALERT! 🖥️ v6.1.2 OUT! USE THE BINARIES! https://github.com/Dulus-Ai/dulus-updates < where dulus is maintained actively — new features launch there first

Pouring my soul into this...

Dulus

⛽ /fuel walkthrough → · 🔑 API key from pip → · 🚀 dulus.online

🖥️ Prefer a desktop app? Download Dulus Premium — A version where i code without giving away my creativity for free.. 09/05/2026 read the last part of the readme file.
⬇️ Download the latest binaries → github.com/Dulus-Ai/dulus-updates

Install · API key · Fuel / QR · Why Dulus · Models · Extensions · Agents · Surfaces · Commands · Live tour ↗

Español · Français · 中文 · 日本語 · 한국어 · Português · Русский · العربية

Dulus is an open-source agent runtime that hands you a real AI agent the moment you install it —
talking to Gemini, Claude and GPT through their own web sessions, so you owe no one a key or a cent.
One runtime. Every model. Your machine. The whole world invited.

Now on 6.0.5 🚀 — for the best experience get the binaries from https://dulus.ai/ there are free models on my /dulus/dulus-* providers, love you guys!

God bless you! ♥

⚡ Outgrew local? Dulus AI is the hosted platform.
12 models behind one OpenAI-compatible router — from a nimble 9B to a 397B heavyweight, including a Qwen-based uncensored flagship that answers straight, self-hosted, no gatekeeping.
Fuel it with $DULUS — the utility token that is your AI credit: on-chain, transferable, spent by the token. No plan approvals, no frozen accounts.
Point your OpenAI SDK at https://control.dulus.ai/v1 and go.

🔑 Need an API key? Stop waiting on the website.
It has been in dulus-public (pip) forever — mint it from the CLI:

pip install -U dulus
dulus
# inside the REPL:
/login dulus        # sign in (OAuth — browser opens)
/login dulus key    # mint a dulus_sk_* key (shown once)

# then point anything OpenAI-compatible at the router
export OPENAI_API_KEY='dulus_sk_...'          # the key you just minted
export OPENAI_BASE_URL='https://control.dulus.ai/v1'
# or:  openai.base_url = "https://control.dulus.ai/v1"

Damn brother… are you really waiting for the website update to get your API key?
That’s on Dulus-public since years. Have fun. It was a surprise u,u — $DULUS

🔑 Get your API key from pip → · 🚀 Platform → dulus.online

⛽ $DULUS Fuel is LIVE in the CLI — /fuel is ready.
Sign in, get your reload wallet as a console QR, scan with Phantom / Solflare,
send $DULUS, and Fuel credits hit your account. Utility coin that actually powers AI.

pip install -U dulus
dulus
# inside the REPL:
/login dulus     # sign in
/fuel            # balance + scannable reload-wallet QR
/fuel deposit    # QR only

Tested. Reloaded. Fuel credited. We’re not playing points — this is on-chain gas for inference.
$DULUS · control.dulus.ai/v1 · 12+ models · spent by the token 🦅

One runtime, every provider.

Dulus is a single agent runtime that speaks to every major model provider, so you are not locked into one vendor's CLI.

pip install dulus
dulus

On first run the setup wizard asks how you want to connect:

• Dulus account — /login dulus, OAuth, no provider API key. Hosted models metered in Fuel on the Dulus control plane. Sign up at dulus.ai.
• Bring your own key — Anthropic, OpenAI, Gemini, Kimi, DeepSeek, Qwen, Zhipu, MiniMax, NVIDIA NIM, Azure, and more.
• Your own subscription — /login claude, /login chatgpt, /login kimi, /login grok put your existing plan behind the agent via OAuth.
• Local & offline — Ollama, LM Studio, or the on-device edge runtime. No key, no account, no network.

Fuel + reload wallet QR (READY)

/fuel is ready. Top up AI compute with $DULUS — the utility token that is your credit.

/login dulus      # OAuth — browser opens
/fuel             # ⛽ balance + console QR of YOUR reload wallet
/fuel deposit     # address + QR only
/fuel balance     # balance only

1. Run /fuel — Dulus prints your unique Solana deposit address and a terminal QR (segno, scannable).
2. Open Phantom / Solflare → scan the QR → send $DULUS.
3. Control plane credits Fuel to your account.
4. Burn it on dulus-* models via the CLI or https://control.dulus.ai/v1.

No website form. No waiting on a dashboard refresh to see the wallet. The QR is in your terminal the second you login.

pip install -U dulus   # includes segno for console QR
dulus

$DULUS = on-chain gas for inference. Transferable. Spent by the token. Tested end-to-end — reload lands, Fuel credits. 🦅

Get your Dulus API key (no website required)

Damn brother… are you really waiting for the website update to get your API key?

You don’t need the website. Minting a dulus_sk_* key has been in dulus-public (pip install dulus) for ages. The CLI talks straight to the control plane.

pip install -U dulus
dulus

Inside the REPL:

/login dulus        # sign in (OAuth PKCE — browser opens, no API key pasted by hand)
/login dulus key    # mint a dulus_sk_* key for CI, SDKs, servers (shown once — copy it)

Then point any OpenAI-compatible client at the router and burn $DULUS fuel by the token:

export OPENAI_API_KEY='dulus_sk_...' 
export OPENAI_BASE_URL='https://control.dulus.ai/v1'

from openai import OpenAI
client = OpenAI(
    api_key="dulus_sk_...",                 # from /login dulus key
    base_url="https://control.dulus.ai/v1",
)
r = client.chat.completions.create(
    model="dulus-a-9b",  # or dulus-b-27b, dulus-x-397b, …
    messages=[{"role": "user", "content": "hola desde el router"}],
)
print(r.choices[0].message.content)

Or stay inside Dulus and use the built-in provider (same login, Fuel-metered):

/login dulus
/model dulus-a-9b

It was a surprise u,u — have fun. 🦅 $DULUS

New — Python console: a live heap that costs no tokens

🧪 Fresh out of the private build. Try it and tell me how it feels.

When an agent explores a big thing — a directory tree, a parsed file, an API dump — the result normally lands in the conversation and gets re-sent every turn for the rest of the session. The new Python console is a persistent REPL whose variables survive across calls: scan once into a variable, then filter and aggregate it across turns while the model only ever prints the small slice it needs. The data lives in the kernel's heap, not the chat — so you never pay tokens to re-read or re-transmit it. Working memory outside the context window.

Real run: 101,619 files scanned into a variable, then queried three ways across separate calls — the context only ever saw a number, an 8-line slice, and a one-line summary. Roughly 1.5–2M tokens that never touched the conversation. It runs in an isolated subprocess kernel (an infinite loop kills the kernel, never Dulus) and caps output at the source so one giant line can't flood the context. Full write-up → The model's second brain.

New — Signed binaries, maintained by me

📢 The fastest way to run Dulus is the prebuilt app — I keep it updated myself.

The public pip install dulus gives you the full open-source runtime. But if you want the smoothest experience — auto-updating, code-signed, zero Python setup — grab the prebuilt binaries for Windows, macOS and Linux. I maintain those builds personally so they always ship the latest fixes first.

⬇️ Download the binaries → dulus.ai · GitHub Releases ↗

The premium/desktop core is closed-source on purpose — that code stays private so it can't be leaked, cloned, or stripped of its license gate. This public repo is the real runtime you can read, fork and build on; the signed binaries are the same runtime plus the private polish, kept safe on my side. Best of both: open where it counts, protected where it matters.

A note from the builder

I'm one developer. No team, no funding, no VC deck — just me, a laptop, and a stubborn little bird from the Dominican Republic. 🇩🇴

I've poured months into Dulus. Some days it feels like building the loudest thing in an empty room — like nobody's paying attention. And the honest truth: I've spent so long building the features that could genuinely rattle this industry that I've barely shown them. That changes now.

Because this isn't a toy demo. Dulus already does things the funded wrappers can't:

• frontier AI with no keys (the web-session engine above),
• 2,186+ MCP tools, 100,000 skills, memory, voice, sub-agents,
• one runtime driving a terminal, a browser, and a local web UI.

My goal is simple and stubborn: put a real agentic AI in the hands of anyone with a terminal — for free — while the door is still open. If that mission means something to you, star the repo, run one command, tell one person. Help the Cigua fly. 🦅

— Kevin (@KevRojo) · Santo Domingo 🇩🇴

Why Dulus

Most coding agents begin with a model and bolt tools around it. Dulus starts with the runtime.

The model can change mid-session. The tools can come from the core, MCP, a skill, or a Python repository that had never heard of Dulus five minutes earlier. Memory survives the session. Checkpoints cover both conversation and files. Long-running work moves into background jobs. The same engine can be operated from a terminal, browser, desktop app, or Telegram.

That changes what the product is:

The proof is in the repository

At the time of this release, Dulus contains approximately 56K lines of first-party Python, 143 Python runtime modules, 780+ tests, 58 tagged releases, and more than 400 commits shipped in the previous 90 days.

Those numbers are not a vanity dashboard. They explain the product: Dulus is being built in public at production velocity. Read the release notes, inspect the architecture, or open the interactive dependency graph.

Hunt. Patch. Ship. The loop is the product.

Install in 30 seconds

If Python 3.11 or newer is already installed:

pip install dulus
dulus

The first-run wizard inspects the machine, recommends a right-sized local model, and can install Ollama for a zero-key, fully local start.

Automatic installer

Linux, macOS, WSL, and Termux:

curl -fsSL https://raw.githubusercontent.com/KevRojo/Dulus/main/install.sh | bash

Windows PowerShell:

iwr -useb https://raw.githubusercontent.com/KevRojo/Dulus/main/install.ps1 | iex

Windows users who do not want Python or a terminal can download the self-contained MSI from GitHub Releases.

Dulus for Windows — desktop app (alpha/beta trial)

The full Dulus desktop app for Windows is now in open trial. No Python, no terminal, no API key — download, install, sign in, and go.

⬇️ Dulus Windows Trial setup (alpha/beta)

It is early — expect rough edges, and tell us about them in Issues. The CLI in this repository stays free and open source; the desktop app is the same engine with a face.

Docker

docker run --rm -it \
  -v "${PWD}:/workspace" \
  -w /workspace \
  ghcr.io/kevrojo/dulus:latest

From source

git clone https://github.com/KevRojo/Dulus
cd Dulus
python -m pip install -e .
dulus

Pick any brain

# Dulus router (Fuel / $DULUS) — no website key form
dulus
# /login dulus
# /login dulus key          # mint dulus_sk_* for SDKs
# /model dulus-a-9b

# Cloud provider key
export ANTHROPIC_API_KEY=sk-ant-...
dulus --model claude-sonnet-4-6

# Local and offline
ollama pull qwen2.5-coder
dulus --model ollama/qwen2.5-coder

# Unix pipeline
git diff | dulus -p "review this diff and find the dangerous parts"

No third-party key yet? Use /login dulus for the hosted router, or start with Ollama locally.

The runtime, not just the prompt

flowchart LR
    U["You<br/>CLI · Web · GUI · Telegram"] --> A["Agent loop"]
    A --> P["Provider router<br/>cloud · web · local"]
    A --> C["Context engine<br/>project · soul · memory"]
    A --> R["Tool registry"]
    R --> T["Core tools"]
    R --> M["MCP servers"]
    R --> X["Auto-adapted plugins"]
    R --> S["Skills"]
    A --> J["Tasks · checkpoints · background jobs"]
    J --> A

The core stays readable on purpose. There is no TypeScript monorepo hiding the agent loop behind six packages. Start with dulus.py, agent.py, providers.py, tools.py, and tool_registry.py.

One runtime, every model

Dulus does not make model choice an architectural decision. Switch providers during the same session with /model; tools, memory, tasks, and project context remain in place.

/model
/login dulus
/model dulus-a-9b
/model dulus-b-27b
/model dulus-x-397b
/model claude-sonnet-4-6
/model nvidia-web/deepseek-r1
/model ollama/qwen2.5-coder
/config custom_base_url=http://your-gpu-box:8000/v1
/model custom/your-model

When one NVIDIA model reaches its free-tier ceiling, the provider can fall through the configured chain instead of killing the session.

On the edge — your phone, Termux, on-device

The edge provider runs a small model locally, with no per-token cost and no cloud round-trip. It's backend-agnostic: point it at any OpenAI-compatible server on 127.0.0.1 and it just works.

# The path that works today — llama.cpp on a laptop, a VM, or Termux on Android
llama-server -m gemma-3-1b-it-Q4_K_M.gguf --port 8080
dulus --model edge/gemma-3-1b

# Already running Ollama? Point edge at it instead
dulus --config edge_base_url=http://127.0.0.1:11434/v1

Override the host/port for a phone on your LAN with DULUS_EDGE_BASE_URL or /config edge_base_url=.... A full Termux install walkthrough lives in docs/termux-edge.md.

Gemma Nano on-device (APK) — work in progress. A native Android bridge that runs Gemma directly on the phone's NPU via AICore (zero download, hardware-accelerated) is being built and will take time to ship. Until then, edge/* gets you fully local models on the same phone through llama.cpp in Termux — no APK required.

Extending the tool surface

MCP is supported natively, and any Python repository that ships a plugin manifest installs straight into the running session.

/plugin install name@https://github.com/user/repo
/plugin reload

Dulus reads the repository's plugin.json (or PLUGIN.md), installs the dependencies it declares, validates the exports, and registers the resulting tools in the current session.

Three extension paths

The MCP marketplace indexes more than 2,000 servers. Composio exposes 800+ ready-made skills and app integrations.

{
  "mcpServers": {
    "git": {
      "type": "stdio",
      "command": "uvx",
      "args": ["mcp-server-git"]
    },
    "playwright": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@playwright/mcp"]
    }
  }
}

/mcp search postgres
/mcp install <name>
/mcp installed
/mcp reload
/plugin recommend
/plugin list
/skills

Agents that can work without disappearing

Dulus can run typed sub-agents in isolated git worktrees, coordinate them through messages, and keep their work visible. A coder can implement while a reviewer inspects and a tester runs the suite.

Agent(type="coder", task="implement the auth refactor")
Agent(type="reviewer", task="review the auth refactor")
Agent(type="tester", task="run focused and integration tests")

/agents
/brainstorm "rewrite in Rust or keep Python?"

Long work belongs in the background

TmuxOffload moves a long-running tool into a detached tmux session, records the job under ~/.dulus/jobs/, and returns control immediately. ReadJob retrieves the result, while the tmux session cleans itself up when finished.

This is the difference between “the UI did not freeze” and an actual background execution model.

Memory you can inspect. Checkpoints you can trust.

Dulus stores memory as Markdown, not an opaque vendor profile.

Memories are ranked by confidence and recency. Important entries can be marked gold. The directory can be opened directly as an Obsidian vault.

/remember "use anyio for new async work"
/memory search async
/memory consolidate

Checkpoints snapshot both the conversation and touched files:

/checkpoint
/checkpoint 042
/checkpoint clear

Rewinding means the files and the reasoning context return together.

One engine, four surfaces

Dulus is terminal-native, not terminal-limited.

WebChat and the task system

The browser is not a separate demo backend. It drives the same agent, registry, memory, and tasks as the CLI.

Tasks can be created in the REPL, assigned to agents, and viewed or completed in WebChat:

/task create "refactor auth"
/task assign 1 coder
/task list
/task done 1

Voice and bridges

• Offline speech-to-text through Whisper.
• Offline wake words such as “hey dulus” and “oye dulus”.
• Text-to-speech with local and hosted engines.
• Telegram bridge with streaming responses, files, vision, voice, and per-chat routing.
• Local WebChat address for opening Dulus from another device on the same network.

/voice
/wake set "hey dulus"
/tts
/telegram <bot_token> <chat_id>

Permission model

Autonomy should be selectable, visible, and reversible.

Switch with /permissions <mode> or start a non-interactive run with --accept-all when the environment is intentionally disposable.

Additional safety mechanisms include:

• Tool argument validation and centralized dispatch.
• Output truncation with full results persisted for explicit retrieval.
• Audit logging for mutating operations.
• Isolated worktrees for sub-agents.
• Checkpoints before risky work.
• WebChat authentication required when binding beyond loopback.

Privacy

Telemetry is opt-in. Dulus asks once and sends nothing unless permission is granted.

If enabled, telemetry covers operational events such as session_start, tool_used, the Dulus version, OS, Python version, and provider/model name. It does not include prompts, responses, file contents, paths, API keys, emails, or usernames.

/config telemetry=off

See analytics.py and the security notes for the implementation.

Command map

Type / and press Tab inside the REPL to explore the live command list.

dulus
dulus --model ollama/qwen2.5-coder
dulus -p "explain this repository"
dulus --accept-all -p "implement every TODO and run tests"
git diff | dulus -p "write a precise commit message"

Build with Dulus

Project instructions

Place a CLAUDE.md in the project root. Dulus injects it into the system context so the agent starts with the repository's stack, conventions, commands, and constraints.

Run Dulus from another program

--output json turns a one-shot run into a machine-readable stream, so Dulus can be embedded as the agent runtime behind another tool, an IDE bridge, or a CI job.

dulus -p --accept-all --output json -- "explain this repository"

The contract:

Frames use the OpenCode event-stream dialect, so a consumer that already parses that format needs no new adapter:

Exit code is 0 on success, 130 on Ctrl+C, and non-zero on any failure — a missing credential, a provider error, an unhandled exception, or a turn that produced no answer at all — always alongside an error frame. A run that streams partial text and then fails is a failure, not a partial success. Pass the prompt after --: it is a positional argument, so without the terminator a prompt starting with a hyphen is parsed as a flag.

--version and --help always answer on stdout, in every mode.

Development setup

git clone https://github.com/KevRojo/Dulus
cd Dulus
python -m venv .venv

# Windows
.venv\Scripts\activate

# Linux / macOS
source .venv/bin/activate

python -m pip install -e ".[dev]"
python -m pytest -q
pyright

Repository map

dulus/
├── dulus.py             entry point, REPL, commands, bridges
├── agent.py             streaming agent loop and tool dispatch
├── providers.py         cloud, OAuth, gateway, local providers
├── tools.py             built-in tools and registry wiring
├── tool_registry.py     registration, validation, execution, persistence
├── context.py           system and project context assembly
├── compaction.py        long-session context compression
├── memory/              persistent memory and offloaded jobs
├── multi_agent/         sub-agents, messaging, worktrees
├── dulus_mcp/           MCP transports, config, marketplace
├── plugin/              plugin loader and registry
├── skill/               skill discovery and execution
├── checkpoint/          file and conversation rewind
├── task/                durable task tracking
├── voice/               STT, TTS, wake words
├── webchat_ui/          local browser interface
└── tests/               unit and integration coverage

Documentation:

• Getting started
• Architecture
• API guide
• Interactive dependency graph
• Deployment
• Contributing
• Security
• Release notes

Shipping in public

Dulus does not hide behind a quarterly roadmap. Features, fixes, experiments, reversals, and lessons ship in the open.

• More than 400 commits in 90 days at this snapshot.
• 58 tagged versions across the public history.
• Provider failures, packaging problems, installer issues, and community bug reports routinely become releases within the same day.
• The first Hacker News community bug report was diagnosed, fixed, tested, and released to PyPI the day it arrived.

Follow the evidence:

• docs/news.md — human-readable release journal.
• docs/CHANGELOG.md — structured changes.
• GitHub Releases — installable versions.
• Commit history — the actual shipping rate.

This project is ambitious by design. If Dulus is not yet the best open agent CLI for your workflow, the repository is structured so you can help make it so.

Ecosystem

Dulus has received support through startup programs from Cloudflare, AWS Activate, Datadog, Sentry, Anthropic, MongoDB, DigitalOcean, Notion, Zendesk, Deepgram, Mixpanel, and Amplitude.

My commits in the last 3 days for our private Dulus Build... this is my last time showing my creativity...

I will code it.

🚀 Dulus v6.0.6 ➡️ v6.0.7 Changelog 🚀

✨ Nuevas Features & Core • 👁️ Control de Pantalla Nativo: Agregadas las herramientas ScreenGround y ScreenClick para uso nativo de la computadora.

• ♾️ Lookback Auto-Recall: Nuevo sistema push-RAG que le da contexto virtualmente "infinito" a los modelos locales pequeños.

• 🔒 Modo Isolate: El toggle /isolate ahora bloquea todas las herramientas de escritura, edición y Bash para que no salgan de tu workspace.

• ⏳ Waits Inteligentes: Ahora la IA prefiere usar Reminder en lugar de Bash('sleep N') para esperar, evitando bloquear el chat.

🧠 Razonamiento y Memoria

• 💭 Streaming Real: El comando /thinking vuelve a ser el control principal para el razonamiento, ahora con verdadero streaming.

• 🛡️ Memoria Robusta: Timeout guard implementado para mempalace y protección para evitar que el archivo de memoria se encoja. El baseline de gold/soul ahora va directo al system prompt.

• 🗣️ Verbose Thinking: Restaurado para proveedores como LiteLLM, DeepSeek y Qwen.

🖥️ Interfaz y Experiencia (GUI)

• 📁 Mejoras en el Workspace: Panel de contexto con auto-apertura y subidas de hasta 25MB directamente al workspace.

• 🖱️ El menú de /load ahora es clickeable y se eliminó el molesto bug del ícono duplicado en el Dock.

• 🔤 ¡Adiós acentos rotos (mojibake)! Decodificación UTF-8 estricta para el SSE de Meta y ChatGPT.

• ❄️ Solucionado el problema del escritorio congelado al arrancar (seeding correcto de memoria a corto plazo).

🌐 Modelos y Proveedores

• 🦙 Soporte añadido para Meta AI Muse Spark (http://api.meta.ai/v1/responses). • ✖️ Nuevo alias de proveedor x ➡️ xai-oauth (para Grok-4.5).

• 🤖 Configuración predeterminada actualizada: ahora por defecto usa el modelo dulus/dulus-a-9b, permission_mode=auto y webdrive_embed=always.

• 🪪 Ahora enviamos la identidad de Dulus en los headers al comunicarnos con los LLMs.

🛠️ Infraestructura, DevOps & Fixes

• 🛑 Fail Fast: Eliminados los reintentos silenciosos.

Si un modelo falla, lo hace rápido para evitar que el agente "se congele de la nada".

• ☁️ Migración Cloud: El provisionador de entornos para clientes ha sido portado de Azure a OVH MKS.

• 📊 Arena de Benchmarks: Nueva arena para comparar modelos con un sistema de evaluación basado en evidencias.

• ⚙️ Protocolo de salida en JSON (--output json) y flujo de early-cut mejorado (welcome/doctor). 🔐 Seguridad & Agentes (Datadog-bits)

• Parcheados múltiples vectores críticos: mitigada la inyección de prompts en el bucle de herramientas del Army worker. • Fix de Path Traversal de tenants vía X-Tenant-ID. • Prevención de filtrado de datos (leaks) en el endpoint de búsqueda de memoria y en el marketplace. • Validación estricta del código autogenerado para plugins antes de escribir en el sistema.

⚡️ That's some homework for the industry!

Building binaries!

FAQ

/config custom_base_url=http://your-server:8000/v1
/model custom/your-model

License

Dulus is licensed under GPLv3. You can use it, study it, modify it, and redistribute it. Derivative distributions must preserve the same open-source freedoms.

If Dulus saves you tokens, time, or sanity:

Built by KevRojo in the Dominican Republic.
Named after the Cigua Palmera, not the rocket.
@KevRojox · t.me/dulusx