Arcanada Agent System
A single static binary that turns a terminal into an agent. Deep integration with the Arcanada service mesh — identity, models, vault, search — all behind one command: arcana.
What is arcana
arcana is a command-line agent: you tell it what you want, it plans, calls tools, edits files, runs shells, and reports back. Where it differs from a generic LLM CLI: arcana speaks the Arcanada service mesh natively. Identity comes from Auth Arcana, model calls go through Model Connector, secrets via Vault, retrieval via Scrutator hybrid search. One binary, one config, one identity.
The architecture derives from the Anthropic Claude Code agent loop, rewritten in Rust for a single static binary, predictable resource use, and the kind of compile-time guarantees that matter when an agent has shell access. Built-in tools (Read / Edit / Write / Bash / Grep / WebFetch) follow the same contract as their TypeScript origin; the permission cascade is identical in shape. The interesting work is the ecosystem binding.
Why Rust
Single static binary
No runtime, no virtualenv, no node_modules. One file. Drop it into a CI image or a server and it works.
Memory safety without GC
No undefined behaviour from a stray pointer, no GC pauses in the middle of a tool call. Compile-time guarantees are stronger than runtime hopes.
Honest concurrency
Tokio for async I/O, channels for tool dispatch, Arc
Mature ecosystem
clap for CLI, rmcp for MCP, openidconnect for OIDC RP, vaultrs for Vault — every binding the agent needs is production-grade.
Current state
Phase 0 is closed. The Cargo workspace is in place, CI is green on every commit, governance artefacts (SECURITY.md, accepted-risk register, auth dependency graph) ship from day one. Phase 1 lands the operational baseline: arcana --version with build metadata, arcana login backed by Auth Arcana device-code OIDC. Phase 2 is the agent loop core (turn outcomes, tool dispatcher, cost circuit breaker) and the built-in tools. Phase 3 publishes the binary on crates.io and a Homebrew tap.
Part of the Arcanada ecosystem
arcana does not stand alone. It is an identity client for Auth Arcana, a consumer of Model Connector, a Vault tenant, a Scrutator search caller, a future Munera worker. The arcanada.one site is the entry point to the wider ecosystem.
Explore the ecosystem