cryptolab

Rune

FHE-Encrypted Organizational Memory for AI Agents

Rune is an agent-native plugin that transforms organizational memory into a strategic asset by connecting the isolated activities of local agents through encrypted memory.

Works with Claude Code, Codex CLI, Gemini CLI, and any MCP-compatible agent.

# In the Claude Code session
/plugin install github.com/CryptoLabInc/rune

# In the Codex CLI session
$skill-installer install github.com/CryptoLabInc/rune

What is Rune?

This is the complete plugin with everything needed to run Rune locally:

• MCP server with FHE-encrypted vector operations (enVector + Vault integration)
• Capture filtering and recall via FHE-encrypted pipelines
• Installation scripts for Claude Code, Codex CLI, and manual setup
• Agent specifications (Scribe for capture, Retriever for recall)

Requires external infrastructure (deploy separately):

• Rune-Vault server (team-shared, deployed by admin — see rune-admin)
• enVector Cloud account (sign up at envector.io)

MCP Tools

Rune exposes these tools via MCP (stdio transport). Any MCP-compatible agent can use them directly.

Tool	Description
capture	Capture organizational decisions via FHE-encrypted storage pipeline
recall	Search encrypted team memory via Vault-secured pipeline (query expansion → encrypted scoring → Vault decryption)
vault_status	Check Rune-Vault connection status and security mode
reload_pipelines	Re-read config and reinitialize scribe/retriever pipelines

Example — capture a decision:

capture(text="We chose PostgreSQL over MongoDB for better ACID guarantees and JSON support.")

Example — recall past context:

recall(query="Why did we choose PostgreSQL?", topk=5)
→ { found: 3, results: [...], sources: [...] }

Quick Start

Claude Code

$ claude plugin marketplace add https://github.com/CryptoLabInc/rune.git
$ claude plugin install rune

• In the Claude code session:

> /plugin marketplace add https://github.com/CryptoLabInc/rune.git
> /plugin install rune

Codex CLI

In the Codex CLI session:

> $skill-installer install https://github.com/CryptoLabInc/rune.git

Gemini CLI

$ gemini extensions install https://github.com/CryptoLabInc/rune

Local Development (from source)

If you're developing or testing a local copy of the plugin:

# 1. If you previously installed a versioned plugin, clean up first
rm -rf ~/.rune
rm -rf ~/.claude/plugins/cache/*/rune

# 2. Register the local directory as a marketplace source
claude plugin marketplace add ./

# 3. Install from the local marketplace
claude plugin install rune

See CONTRIBUTING.md for full development setup instructions.

Other Agents

See AGENT_INTEGRATION.md for Gemini CLI, OpenAI, and custom MCP client setup.

After Installation

Run /rune:configure and follow the instructions given by the agent.

Architecture

Your Machine                    Cloud / Team Infrastructure
━━━━━━━━━━━━━                  ━━━━━━━━━━━━━━━━━━━━━━━━━━
AI Agent + Rune Plugin
  ├─ enVector MCP Server ──→   enVector Cloud (encrypted vectors)
  │    └─ recall tool    ──→   Rune-Vault (team-shared, secret key holder)
  ├─ Scribe (capture)               decrypts result ciphertext, returns top-k
  └─ Retriever (recall)

Supported Agents: Claude Code, Codex CLI, Gemini CLI, custom MCP clients

flowchart TD
    Cloud[("enVector Cloud<br>(Encrypted Storage)")]

    subgraph MCP [envector-mcp-server]
        Capture["capture tool<br>(local secret key, owner's data)"]
        Recall["recall tool<br>(Vault-secured, shared team memory)"]
    end

    subgraph Vault [Rune-Vault]
        Decrypt["decrypt_scores()<br>(secret key holder)"]
    end

    subgraph Client [Client Agents]
        Agent["Claude / Gemini / Codex / Custom"]
    end

    %% Capture flow
    Agent -- "capture" --> Capture
    Capture -- "|Encrypted Data|" --> Cloud

    %% Recall flow (4-step pipeline)
    Agent -- "recall" --> Recall
    Recall -- "1. encrypted similarity scoring" --> Cloud
    Recall -- "2. decrypt result ciphertext<br>(secret key never leaves Vault)" --> Decrypt
    Decrypt -- "indices + similarity values" --> Recall
    Recall -- "3. retrieve + decrypt metadata<br>4. return raw results" --> Agent

    %% Styles
    style Cloud fill:#eff,stroke:#333
    style Capture fill:#eef,stroke:#333
    style Recall fill:#eef,stroke:#333
    style Decrypt fill:#fee,stroke:#333
    style Agent fill:#efe,stroke:#333