⚓

Drydock

A local-first, provider-agnostic terminal coding agent for your own LLM. No accounts, no telemetry, no cloud — your code and credentials never leave your machine.

$ pip install drydock-cli
$ drydock
PyPI → GitHub →

What it does

A full agentic CLI harness in a Textual TUI — scrolling transcript, collapsible tool & reasoning cards, a live activity line. The model calls every tool below autonomously. Everything is clean-room and dependency-free.

Files & shell

Read (with a structure index for huge files), Write, Edit, Bash, Glob, Grep — with advisory write guards.

Version control

First-class GitStatus / GitDiff / GitLog / GitCommit — structured, truncated; commits are local and reversible.

Internet search

WebSearch + WebFetch bring live web results and pages into context. Offline-safe — degrades cleanly with no network.

GraphRAG knowledge base

Ingest your docs — text, PDF, and Word — with /graphrag build <path> (and /graphrag add for more); the agent then retrieves project facts via the Knowledge tool.

Multi-agent

Dispatch runs several read-only sub-agents in parallel, each in a fresh context, for focused investigation.

MCP support

Connect to Model Context Protocol servers; their tools appear to the agent as mcp__server__tool.

Skills

Create reusable /<name> commands with /skills new <name> <prompt> ($ARGS substitution), or author them as markdown.

Loops

/loop <count> <prompt> runs a prompt iteratively — "fix the next failing test and run pytest". Esc stops.

RMF automation

Ingest the NIST SP 800-53 catalog (/rmf bootstrap) + bundled RMF skills (/rmf-control, -categorize, -review, -poam). 100% local for CUI.

Local-first, by design

Drydock is an original, Apache-2.0, clean-room codebase owned end to end.

  • The only outbound calls are to the model endpoint you configure and (optionally) the web tools you invoke.
  • No telemetry, no phone-home, no hardcoded third-party hosts, no credential transmission — ever.
  • A credential-exfiltration scanner gates every release and blocks anything reaching off-box.
  • Safety is advisory, never blocking: catastrophic commands are refused; sensitive ones prompt Allow / Always / Deny.

Runs on your hardware

Provider-agnostic — any OpenAI-compatible endpoint (llama.cpp, vLLM, Ollama, LM Studio). Tuned against dense Gemma-4-31B (QAT, 64K) on a single workstation; first launch autodetects a local model server and wires it up with no account or API-key prompt.

Tools: Read · Write · Edit · Bash · Glob · Grep · todo · task · Dispatch · GitStatus · GitDiff · GitLog · GitCommit · WebSearch · WebFetch · Knowledge · mcp__<server>__<tool>
Slash commands: /help · /model · /cwd · /undo · /back · /stop · /status · /compact · /graphrag build|add|query|status|clear · /skills · /skills new · /loop · /mcp · /clear · /quit
Or just ask the agent — "how do I add my own docs?" — it knows its own commands.