Entroly

[Entroly]

Entroly — Select AI context with auditable recovery.

Receipt-backed selection records: what was kept, what was omitted, and the handle that recovers the exact original bytes.
Compression you can undo, on your own repository, in one command — without replacing your model or agent architecture.

[Entroly context selection and receipt workflow illustration]

pip install -U entroly  ·  entroly verify-claims  ·  entroly simulate

_{Entroly is an open-source, local-first AI token-efficiency and Context Assurance layer: budgeted evidence selection, recoverable context compression, content-addressed evidence recovery, and auditable receipts. Works through VS Code, Claude Code, Cursor, Codex, OpenClaw, GitHub Copilot, Aider, and OpenAI/Anthropic-compatible apps.}

[VS Code Extension] [Entroly on PyPI] [Entroly on npm] [Entroly on PyPI downloads] [Entroly on npm downloads] [Apache-2.0 license] [Repository artifact: 5,117 of 5,117 native source spans passed fidelity checks] [13 of 13 public SDK recovery probes exactly matched their source spans] [Entroly GitHub stars] [CI status] [Contributions welcome] [LobeHub MCP]

English · 简体中文 · 繁體中文 · 日本語 · 한국어 · Español · हिन्दी · Français · Deutsch · Português · Italiano · Türkçe · Tiếng Việt · Bahasa Indonesia · Polski · Nederlands · ไทย · Svenska · Čeština · Tagalog · Română

What is it? · Install · Quickstart · Benchmarks · Questions · Contribute

What is Entroly? (in plain English)

Entroly is a local-first context control plane for AI coding tools. It selects evidence within a token budget, preserves recoverable omissions, and records selection decisions in receipts. Three properties to evaluate on your task:

Do I have to change my code? No. On hosts with a verified prompt hook, Entroly runs before the model plans. MCP-only integrations remain callable tools that an agent may skip; API traffic is intercepted only when it is routed through the Entroly proxy. Check entroly activation status --json instead of assuming an installed integration is active.

Do I need to pay for anything to try it? No. The two commands in the Install section below run on your own machine, with no API key, and show you real numbers on your own project before you connect anything paid. (Missing native-engine support is reported without downloading packages — see the note under Install.)

Switching coding agents mid-task? entroly-work resume reconstructs unfinished work from durable repository evidence, even if the previous agent left no handoff. The receiving agent must review the inferred state and acknowledge it before claiming work through Entroly. Start with entroly-work --project . --json resume --to-agent codex; the agent continuity guide shows the complete flow and how to measure whether it actually saves rediscovery work on your tasks.

Contributing

Start with development setup and repository layout, then follow the architecture, style guide, and test instructions for the surface being changed. Source, delivery adapters, and benchmark evidence have different review requirements; the contributor guide explains their boundaries.

Install

Not sure which one? Pick Python. It's the complete version and what most people use. The other packages expose different runtime surfaces. | Platform | Install | What you get | |---|---|---| | 🐍 Python (pip) — recommended | pip install -U entroly | Everything: the command-line tool, the server your AI editor talks to, and the code library | | 📦 Node / npm | npm install -g entroly | Local Node/WASM CLI; the Python package has a broader CLI, SDK, and proxy surface | | 🦀 Rust (source build) | cd entroly-core && cargo build --release --bin entroly-rs --features proxy | One self-contained program, no Python or Node needed | | 🍺 Homebrew | brew install juyterman1000/entroly/entroly | The command-line tool on macOS/Linux | | 🐳 Docker | docker pull ghcr.io/juyterman1000/entroly:latest | Runs in a container, nothing installed on your machine |

Prefer a package runner instead of a global install? These commands use the same published artifacts in an isolated tool cache:

# Node or Bun / WASM runtimenpx -y entroly@latest --helppnpm dlx entroly@latest --helpbunx --bun entroly@latest --help
# Complete Python runtimeuvx --from entroly entroly --helppipx run --spec entroly entroly --help

The Node commands provide the local WASM CLI. The Python commands provide the complete CLI, SDK, MCP, proxy, verification, and native-engine path described above. Entroly's release workflow smoke-tests all five runners against the exact version before a release is considered complete.

Now check that it worked — free, no API key:

cd /your/repoentroly verify-claimsentroly simulate

_{Both run locally. Neither calls an AI or proves answer quality, activation, or a lower provider bill. Use a task-specific --query with simulate; if it reports Relevance ranking is OFF, run entroly doctor before evaluating the selection.}

_{Runtime package repair is off by default. If the native engine is missing, query-conditioned selection is unavailable and reduction figures are labelled unearned. Install it explicitly with python -m pip install -U entroly-core, call entroly.repair() from Python, or set ENTROLY_ENABLE_SELF_HEAL=1 to permit startup repair. This downloads through the configured package index (normally PyPI). ENTROLY_NO_SELF_HEAL=1 and ENTROLY_AIR_GAP=1 override repair consent. See Privacy and recovery-data security.}

Extras (entroly[proxy], entroly[native], entroly[full]), the standalone Rust binary, and uninstall steps: Engine & install options.

Contributing from source? Follow the reproducible development setup. Local installation and the normal test suite need no API key; .env.example documents only optional workspace, offline, provider, and proxy settings.

Quickstart — by how you work

Start with the local check. entroly go registers an MCP server for a detected editor and starts a proxy and dashboard. Route API traffic through that proxy or use a supported host hook, then verify that the integration actually ran. The table below shows the available paths. | Your situation | Do this | What it gets you | |---|---|---| | 🟢 "I control my app's API base URL." (pip / Python user) | pip install -U entroly && entroly go | Starts the local proxy and dashboard; point your app at the displayed URL and check observed requests with entroly value --json | | "I use Node, not Python." (npm user) | npm install -g entroly && entroly init | Node/WASM CLI and local MCP path; use Python for the full proxy and SDK path | | "I want one binary, no runtime." (Rust user) | cargo build --release --bin entroly-rs --features proxy (from entroly-core/) | A single native program with no dependencies | | "I use Claude Code, Codex, Gemini CLI, or VS Code agent plugins." (plugin user) | Install the Entroly plugin/extension for that host, submit one prompt, then run entroly activation status --json | A trusted prompt hook performs bounded local selection before planning; a receipt proves the hook ran | | "I use Cursor with third-party configs enabled." | entroly activation install --host cursor --project . | Merges a reversible Claude-compatible prompt hook; native Cursor MCP remains advisory | | "I use Kiro IDE 1.x or CLI 3.x." | entroly activation install --host kiro --project . | Installs a reversible project PromptSubmit hook whose stdout is added to agent context | | "I use another MCP host." | entroly attach create --client claude --project . --ttl 4h --install or the client-specific command in the compatibility matrix | Scoped Entroly tools and receipts; the model can still skip MCP unless the host has a verified lifecycle hook | | "I'm building my own app in Python." (SDK user) | from entroly import compress, compress_messages, optimize | Call it straight from your code, anywhere you assemble a prompt | | "I have an API key and my own app." (proxy user) | entroly proxy → point ANTHROPIC_BASE_URL / OPENAI_BASE_URL / GOOGLE_GEMINI_BASE_URL at localhost:9377 | Requests sent through the proxy are eligible for optimization; inspect receipts and provider-observed usage after a real request |

Cursor MCP users can also use this one-click install link (no marketplace account required): Add Entroly to Cursor.

_{Runaway-session rescue — automatic on the proxy, callable everywhere else. When a long agent session approaches the provider's context limit, bulky tool output is compacted in flight: no manual /compact, the prompt prefix stays byte-stable so your warm provider cache survives, and every omitted span is recoverable. The proxy does it for you because it sees the outbound request. Anywhere else — pip, SDK, a provider-SDK wrapper, or an MCP host that passes its transcript — hand the conversation over and get the same policy: from entroly import rescue_session. entroly capabilities reports which protections apply to how you are running. See session rescue.}

Why bother: less unnecessary context reaches the model (lower bill, less distraction for the model), drops come with receipts and, where a recovery handle is issued, an exact way back (see what each path keeps below), and you can prove it — entroly verify-claims and entroly simulate show real numbers on your own repo before you connect a paid key.

from entroly import compress, compress_messages, optimizecompressed = compress(api_response, budget=2000)messages   = compress_messages(messages, budget=30000)context    = optimize(fragments, budget=8000, query="fix the login bug")

entroly compress response.json --out small.jsonentroly recover sha256:0b957c79... --out restored.json

What is recoverable: entroly recover returns the complete original for JSON, logs, tables/CSV and shell output. For source code, prose documents, API schemas and chat transcripts it returns only the omitted parts (function bodies, sentences, turns), without their positions, so keep the original file if you need it back whole; the compress receipt says which one you got. compress() and compress_messages() return text only and keep no recovery copy; proxy and rescue_session compaction store the complete original of every block they shorten.

Full setup paths for every agent, IDE, and CI use case: Get started in depth · Command reference.

Integration hub

Use Entroly at the SDK, framework, proxy, MCP, plugin or agent boundary. A listed name is not automatically a claim that hosted subscription inference is intercepted; provider-bound savings exist only when the request traverses an Entroly-controlled route.

Open the complete verified integration and operations hub →

See it work in 30 seconds

Not mocked recordings — each video is rendered from a checked-in command that verifies its source artifact before printing a number.

[Entroly local verification: twelve checks pass without an API key]

entroly verify-claims — import, compression, receipts, WITNESS checks, recovery, proxy routing, replay. No API key.

[Frozen model-recovery holdout: Entroly 24/24, published baseline 18/24]

On a frozen 24-case holdout, Entroly answered 24/24; a published baseline answered 18/24 at roughly 1.5x the effective context. python scripts/readme_proof.py model-recovery

[Fresh-seed restart recovery: 66 of 66 payloads recovered byte-exactly]

Omitted evidence recovered byte-exact after a process restart, 66/66 payloads. python scripts/readme_proof.py restart-recovery

Full protocols, sample sizes, and every caveat: docs/BENCHMARKS.md.

Benchmarks

The question that matters: if you send less, does the AI start getting things wrong? These are standard public tests, run with and without Entroly.

How to read this: Retention is how well the AI still answered — 100% means it did just as well on far less text. Token savings is how much less was sent (and therefore paid for). Measured with gpt-4o-mini; intervals are Wilson 95% CIs.

Being straight with you: look at the SQuAD 2.0 row — accuracy went down (80% → 72%). Compression is a trade, not magic, and it doesn't win everywhere. That's why entroly simulate exists: run it on your own project and see your own numbers before you commit to anything.

Hallucination detection (WITNESS, local, no API): 84.92% accuracy / 0.7976 AUROC on 20,000 HaluEval-QA decisions — within the reported uncertainty of gpt-4o-mini as an API judge on the same shared sample.

Frozen evidence-selection benchmark (opt-in PRISM-R research prototype, not the default compressor): a disagreement guard kept the answer-bearing passage in 298 of 300 cases while selecting an average of 1.02 of 16 passages (paired exact McNemar p=0.21875 vs. BM25 alone) — this experiment measures retrieval of the known-answer passage, not generated-answer quality. Full protocol: PRISM-R neural evidence frontier.

Recovery, latency, and head-to-head frontier results are in docs/BENCHMARKS.md with raw artifacts linked. None of these numbers are a universal or production-savings guarantee for your workload — reproduce them on your own repo with entroly simulate and entroly value.

Accuracy Retention

Historical maintainer-reported experiment, not a quality guarantee. The table below reports one 50K-token-budget run. Overlapping confidence intervals do not establish equivalence or rule out degradation. These results have not been independently reproduced here.

_{Model: gpt-4o-mini · Budget: 50K tokens · Wilson 95% CI · Reproduce: python -m bench.accuracy --benchmark all}

_{The reported SQuAD score fell from 84% to 83%. Retention ratios above 100% can reflect sampling or model variability. The displayed intervals are historical reported values, not a validated paired comparison; Wilson intervals require binary outcomes and do not justify uncertainty for averaged partial-credit scores. Establishing non-inferiority needs a predefined tolerance, paired per-task outcomes, appropriate uncertainty estimates, and adequate sample size. These results cannot be extrapolated to more aggressive compression or other models.}

Context Selection Quality

_{19-fragment synthetic corpus · 300-token budget · 3 fixture queries · Reproduce: entroly benchmark}

_{Entroly sees 8.7 modules where TOP-K sees 3.7 — it includes auth, payments, AND rate limiting. TOP-K misses the rate limiter. Full methodology, CIs, and reproduce commands →}

Research

Entroly includes the following research-oriented implementations. A module's presence does not establish production reliability, mathematical novelty, or independent validation; consult its implementation and evaluation limitations.

Read the full research documentation · Cite Entroly

Features

• Picks first, shrinks second — it works out which files actually answer your question, then compresses them.
• Gives you the original back, exactly — anything left out can be restored character-for-character and checked against a fingerprint.
• Shows its work — a receipt for every decision: what was kept, what was left out and why, and what risk remains.
• Fact-checks answers — compares what the AI said against the evidence it was given, on your machine, without paying for a second AI call.
• Doesn't wreck your caching — keeps the unchanging parts of your prompt stable so your provider's discount for repeated text still applies.
• Rescues sessions before they crash — when a conversation grows too big, it trims recoverable output instead of letting the provider reject the request mid-task.
• Can route cheap work to cheap models — optional and fail-closed when uncertain.
• Cross-agent shared memory — Claude, Codex, Cursor, and Gemini can read and write the same compressed context store with automatic SimHash deduplication and agent provenance tracking.
• Output token reduction — effort-based routing classifies query complexity and steers model verbosity, reducing output tokens alongside input tokens.
• Shell hook compression — transparent CLI output compression for git, npm, cargo, docker, pytest, kubectl, and terraform. Preserves errors and warnings, strips progress bars and boilerplate.
• Image compression — 40-90% reduction on screenshots and diagrams for vision API calls, with optional OCR text extraction.
• Failure mining — entroly learn --deep mines session data for recurring failure patterns and writes corrections to CLAUDE.md, .cursorrules, and other agent configs.

Runs as a CLI, Python/TypeScript SDK, MCP server, HTTP proxy, or library import. Full surface map: docs/product-surface.md. Architecture and Rust internals: docs/DETAILS.md.

How Entroly compares

Entroly combines budgeted selection, source-span receipts, and optional verification. These are distinct guarantees: a receipt records retained and omitted material; recovery checks source integrity; WITNESS/EICV checks can still produce false positives or false negatives. Solver objectives approximate useful context and do not prove that the chosen context is sufficient for a task.

Compare tools on the same task set, version, model, token budget, and quality criterion. The local TOP-K fixture does not measure any commercial product. We do not provide an independently reproduced cross-product comparison here.

Works with your stack

Install the public Codex plugin from the Entroly repository:

codex plugin marketplace add juyterman1000/entroly --ref maincodex plugin add entroly@entroly-public

Restart Codex, review and trust the hook, then run entroly activation status --json after a task. The marketplace installs the local Node/WASM runtime with the plugin; the model does not have to remember to call an MCP tool before Entroly runs. A receipt proves that the hook executed and selected local context or made an explicit no-match decision. It does not prove token or cost savings without a matched provider-bound baseline.

Install the same public repository as a Gemini CLI extension:

gemini extensions install https://github.com/juyterman1000/entroly --ref main --consent

Restart Gemini CLI after installation. The repository root contains gemini-extension.json and GEMINI.md, so the command works without navigating into an integration subdirectory.

For VS Code or Kiro, download the entroly-vscode-*.vsix asset from the latest GitHub release, then install it with Extensions: Install from VSIX or code --install-extension. The extension is self-contained and does not require an API key.

JetBrains AI Assistant users can add the same server globally at Settings → Tools → AI Assistant → Model Context Protocol (MCP):

{  "mcpServers": {    "entroly": {      "command": "npx",      "args": ["-y", "[email protected]", "serve"],      "env": {        "ENTROLY_NO_DOCKER": "1",        "ENTROLY_MCP_PASSIVE": "1",        "ENTROLY_MCP_PROFILE": "public",        "ENTROLY_MAX_FILES": "200"      }    }  }}

The repository also ships a free, open-source JetBrains plugin that guides this setup from Tools → Configure Entroly for AI Assistant, checks the local runtime on request, and keeps the evidence boundary visible. See extensions/jetbrains.

MCP marketplace and plugin manifests select the compact public profile so agents see the core context, receipt, continuity, recovery, and verification tools first. A direct entroly serve invocation remains backwards compatible and exposes the full tool surface. You can choose either behavior explicitly with ENTROLY_MCP_PROFILE=public or ENTROLY_MCP_PROFILE=full.

Cross-agent review from a source checkout

The bundled entroly-agent-review skill guides a local Claude-to-Codex (or other agent) code review. With both agents pointed at the same repository and local Entroly state, ask the writer to claim the task, use work_state to get its workstream_id, and call work_handoff for the reviewer. The reviewer uses work_pending_handoffs, work_resume, and work_acknowledge_recovery before claiming further work, then independently inspects the diff and calls work_record_review. work_reviews reports whether the reviewed source is still current. Start with work_capabilities in each host to check the actual repository root; MCP registration by itself does not establish that the right checkout is selected.

For a source checkout without an MCP client, the agent continuity guide shows the equivalent entroly-work handoff, inbox, and review commands.

If the writer's model budget ends before it calls work_handoff, the reviewer can call work_resume(to_agent=...) to obtain a reconstructed no-handoff proof and current changed-file evidence. It must treat previous-agent intent as unknown, acknowledge the recovered state, and review the source independently. It cannot create or record a Claude-authored handoff after Claude is gone.

The handoff and review are local Work Graph records. They bind a reviewer statement to observed Git state and file digests; they do not attest the reviewer's model identity or prove the verdict correct. This flow currently requires shared local state. A customer-hosted multi-machine service, identity policy, and audit administration are separate enterprise work.

The MCP path is provider-neutral: the host can use OpenAI, Anthropic, Google, Mistral, DeepSeek, Kimi, GLM, or a local model. There is no separate plugin marketplace for each model provider; the host's MCP or extension contract is the integration boundary.

Hook enforcement belongs to the host, so it is independent of whether that host runs an OpenAI, Anthropic, Gemini, Kimi, DeepSeek, Mistral, or GLM model. Status describes integration depth, not a savings guarantee. Provider-observed savings require requests to traverse an Entroly proxy route. Entroly does not claim interception of GitHub-hosted subscription inference on Copilot's native path. Full compatibility matrix: docs/agent-compatibility.md.

Entroly carries verified metadata for current models from OpenAI, Anthropic, Google, Meta, and others. It auto-discovers local Ollama models. Model-specific details: docs/DETAILS.md.

When to use it · when to skip it

Great fit: large repos where the agent only sees a few files at a time · chatty multi-turn agents · anywhere you want answers checked against evidence · cutting a real, growing AI bill.

Skip it: tiny repos or short prompts that already fit the budget · judgment-heavy tasks where you always want the full flagship model.

More commands

For evidence-led optimization rather than a synthetic savings estimate:

entroly learn --history --jsonentroly shrink -- pytest -qentroly trial --experiment checkout-fix --arm baseline -- codex exec "fix the checkout test"entroly trial --experiment checkout-fix --arm optimized -- codex exec "fix the checkout test"entroly trial --report checkout-fixentroly browser https://example.com --query "billing settings"entroly find docs/product-surface.md --query "exact source evidence" --jsonentroly response set evidence --scope project

Trials run one explicitly selected arm at a time so a stateful or paid agent task is never repeated implicitly. Response contracts shape agent instructions; they do not truncate responses or count as measured savings. Browser and command reductions keep exact local recovery handles and pass through when their safety gates cannot be met.

For teams that need to say who an agent is and what it was allowed to do:

entroly govern status                          # identity, policies, audit chainentroly govern policy check write --risk high  # evaluate one authorizationentroly govern audit verify                    # exit non-zero on a broken chain

Authorization is deny-by-default and every denial names the policy and the reason it gave. audit verify checks that recorded entries were not altered after the fact — it does not prove every action was recorded, and govern status reports the state of the local control plane only, not an attestation that each agent action passed through it. Identity tokens are unsigned unless ENTROLY_IDENTITY_KEY is set, and the credential is never printed.

Also available: entroly memory, entroly wrap, entroly unwrap, entroly serve, entroly daemon, entroly dashboard, entroly demo, entroly capabilities, entroly ingest, entroly select, entroly receipt, entroly explain, entroly context-commit, entroly proof, entroly benchmark, entroly cache, entroly ravs, entroly perf, entroly batch, entroly usage. Full description: command reference.

Common questions

Cross-agent shared memory

Content-addressed store with SimHash deduplication and BM25 search. Multiple agents (Claude Code, Codex, Cursor) write and query the same knowledge base with provenance tracking.

from entroly import shared_memory_write, shared_memory_searchshared_memory_write("Auth uses JWT with RS256", agent_id="claude-code", tags=["auth"])results = shared_memory_search("authentication tokens")  # finds it, from any agent

Output token reduction

Three-layer pipeline: effort classification steers verbosity directives, max_tokens budgets cap generation, and post-generation distillation trims filler. A "yes/no" query gets 150 max tokens; a detailed architecture review gets 16,384.

Shell hook compression

Command-specific patterns for git, npm, cargo, docker, pytest, kubectl, and terraform strip progress bars, deprecation warnings, and boilerplate while preserving errors and key results. Full output is recoverable via content-addressed handles.

entroly hook install     # adds transparent compression to your shellentroly hook status      # shows which shells have the hook

Failure mining

entroly learn --deep mines PRISM feedback, vault beliefs, evolution daemon, and checkpoint data for recurring failure patterns, then generates corrections for agent config files.

Documentation

• Benchmarks — every number, protocol, artifact, and caveat.
• Context Commit conformance — 128/128 deterministic replay, 576/576 exact recovery, 768/768 tamper detection.
• Architecture & internals — Rust modules, compression pipeline, provenance, command reference.
• Agent compatibility — every supported client and its authentication boundary.
• Limitations — where Entroly helps, where it passes through, what it doesn't guarantee.
• Product surface map — CLI, SDK, MCP, proxy, verification, memory, security.
• First-run trust — what to run before wiring a paid model key.
• Public evidence policy — claim tiers, benchmark scope, and package links.
• AI Cost Optimization Guide — how context shaping reduces costs without model degradation.
• Model-Triggered Recovery — automated omission recovery validation.
• Cookbook — copy-paste recipes.
• Discussions · Issues

_{Apache-2.0 · local-first · no outbound analytics by default}

pip install entroly && entroly go