Moved (23 October 2026). This repository now lives in
openIE-dev/rceaside/, with its full history, so that it is checked from the same commit as the specification and the reference checker and can no longer drift from them. Changes go there; this repository is kept only as a pointer.
Rust only, toolchain 1.98.1. The checker, language server and receipt and energy crates make no model call and no network call. Three crates can: mei-agent has HTTP clients for System-One and OpenAI-compatible chat endpoints, rce-mcp has a loopback HTTP transport, and ide-sandbox has a network proxy behind permission prompts. acp-client runs outside coding agents under a jail. Whether any model is called depends on what the user configures, and every proposal still goes through rce check before it is accepted.
The IDE. Left: the editor, with the checker naming the broken rule (W-STEP-1) on line 20. Right: proposals, each accepted or refused by rce check with a receipt; the receipt ledger with energy columns (empty where nothing was measured); memory recall; and a network request waiting for permission.
Where the IDE sits in RCE: it edits source and calls the reference checker; accepted programs become a Form with a hash-chained log, and rce emit projects them to other targets. More figures: openIE-dev/rce docs/figures.
crates/ide-receipt: one receipt per action (action kind, gear, model, tokens in/out, E_sim, E_meas with source tagrapl|nvml|powermetrics|jetson|estimated-remote, delta, checker verdict, policy hash), BLAKE3 hash chain, ed25519 signature. JSONL ledger, verified in full on open. Mappers frommol.receipt.v1and mei-studiomei-receiptJSON.crates/ide-energy:Simulatortrait and a linear simulator with per-gear/model coefficients fitted by least squares;Metertrait with Linux RAPL (powercapenergy_uj, wraparound handled), NVML behind--features nvml, and macOS / Jetson backends that returnUnsupported; time-window attribution; k-sigma anomaly test.crates/rce-mcp: stdio MCP server (JSON-RPC 2.0, newline-delimited). Toolsread_form,propose_edit,rce_check,rce_test,emit. Uses the RCE reference checker (rce-spec-check, path dependency onvendor/rce-spec/checker(vendored RCE reference checker)).
Honesty rules: an uncalibrated simulator predicts None; without a readable meter
e_meas is None; delta_j exists only for a hardware measurement and a prediction.
Run: cargo run -p rce-mcp -- --root DIR [--ledger FILE] [--key FILE] [--calibration FILE].
From 0.1.2 on, rce-ide is published as prebuilt binaries on the
releases page. 0.1.3 and later
are built from the private RCE engine (host runtime, rce db, --media,
--redact, the chat and SFU apps) and embed the standard host libraries,
whose source is public in openIE-dev/rce-stdlib.
The source in this repository, including vendor/rce-spec, is the 0.1.2
snapshot and is not what the 0.1.3+ binaries are built from.
vendor/rce-spec is pinned to openIE-dev/rce commit f7ecf02 (recorded in vendor/rce-spec/SOURCE) and has not been regenerated from public rce main, so it is behind the current specification draft; read the specification in openIE-dev/rce for the current text. It was not refreshed on 17 October 2026: the current public checker compiles here after adding vendor/rcedb, but its test suite reads apps/, lib/ and other directories of the full rce repository, so a refreshed vendor copy fails this repository's cargo test --workspace unless those directories are vendored too.
Release archives contain four programs: rce-ide (the desktop IDE, wgpu on
Vulkan, Metal, DX12 or GL), rce (the RCE checker CLI with the
rce test --energy-budget J gate), rce-lsp (language server) and rce-mcp
(MCP server for agents).
-
Download the archive for your platform and
SHA256SUMSfrom the release page. -
Verify:
sha256sum -c SHA256SUMS --ignore-missing(Linux), orGet-FileHash rce-ide-*.zip -Algorithm SHA256(Windows PowerShell) and compare. -
Unpack and put the binaries on your
PATH:tar xzf rce-ide-0.1.2-x86_64-unknown-linux-gnu.tar.gz cd rce-ide-0.1.2-x86_64-unknown-linux-gnu install -m 755 rce rce-ide rce-lsp rce-mcp ~/.local/bin/
-
Open a folder of
.rcefiles:rce-ide --root DIR --file main.rce [--history 50].
Platforms and requirements:
| Archive | Requirement |
|---|---|
x86_64-unknown-linux-gnu |
glibc 2.28 or newer; a Vulkan or GL driver (Mesa works, including llvmpipe); X11 or Wayland |
aarch64-unknown-linux-gnu |
as above, on 64-bit Arm |
x86_64-pc-windows-gnu |
Windows 10 or newer, DX12 or Vulkan |
aarch64-apple-darwin |
macOS on Apple silicon; Metal. Ad-hoc signed, not notarized: clear quarantine with xattr -d com.apple.quarantine rce* or allow in Privacy and Security |
Notes:
rce-mcp --httpjails itself after binding (Landlock + seccomp; loopback or--allow-hostonly; outbound only to ports declared in.rce-ide/net.json). The jail exists on Linux only (kernel 6.7+ for Landlock ABI 4). On Windows and macOS HTTP mode refuses to start unless you pass--no-jail; stdio mode is unaffected.rce-ide telemetry probelists the energy meters and the GPU launch source found on this machine. Without a readable meter, energy is reported as simulated or missing, never guessed.- Build from source: Rust 1.98.1,
cargo build --release -p rce-ide -p rce-mcp. The checker is a path dependency onvendor/rce-spec/checker(vendored RCE reference checker).
Graph view keys (pointer over the graph): F3 view, F4 layout, F6/F7/F8 colour,
size and glow metric (or click the chips), Esc folds expanded files, Shift-drag
a definition onto another file to move it, Delete removes the selected
definition, N adds a function. Every graph edit is written only if rce check
admits the program.
Copyright (c) 2026 Open Interface Engineering, Inc. Licensed under either of Apache License 2.0
(LICENSE-APACHE) or MIT (LICENSE-MIT), at your option. The vendored photon
library is MPL-2.0 (source shipped as photon-source-mpl-2.0.tar.gz), and
webpki-roots is CDLA-Permissive-2.0; see release/LICENSE-STATUS.md.
