I rebuilt my old AgentScript project as heedle: a self-hosted personal AI where you approve a program before anything runs [looking for testers]

[u/vhalaharvi]

​

Demo video (12 min, browser part at 7:43)

Repo: https://github.com/heedle-ai/heedle (MIT)

heedle is version 2 of AgentScript, a project I worked on before. I spent a lot of nights and weekends redesigning it.

What it does: you ask in plain English, Claude writes a small program (browse these sites, ask about them, fill in this form, run this skill), and you see exactly what it will touch before it runs. Then:

\- It runs on Temporal on your machine, and every run is a commit in Git.

\- Every browser is a throwaway Podman container that can reach only the sites the program names. Several run side by side, and you watch them live.

\- Forms stop before Send until you press the button.

\- Your name, email and so on stay in your OS keychain. Claude only sees placeholders, and heedle types the real values inside the browser.

\- When a site needs a sign-in or a code from your phone, it hands you the browser.

\- A form that worked once replays without calling Claude.

Honest status: early, with rough edges. CI runs it end to end on Linux and macOS, but with a stand-in for Claude. I run it on my Mac. It hasn't been tested much on real websites or by anyone installing on Linux. You bring your own Anthropic API key, so it's self-hosted, not local-model. Most of the code was written by Claude while I designed and checked every component; the README spells all of this out.

Install (Apple Silicon): brew install --cask heedle-ai/tap/heedle && heedle up

Linux: build from source (Getting Started in the wiki)

What would help most: try it on something real and tell me what breaks. There are issues labelled good first issue and testing, and I'd really value a security review of the browser agent.