One on-device install that sits beside Claude Code, Cursor, Codex and Copilot: cut token spend, block risky calls, and keep your source on your machine.