Vytrix

Zyvor Vytrix

See what your machine is really doing.

A read-only system activity monitor for macOS and Linux. Applications grouped the way you think about them, processes, listening ports, project folders, and Docker and Podman containers, in a macOS 27 window, a macOS 26 Liquid Glass one, or an Adwaita one. A single-file Python collector with no dependencies feeds it.

Read-only · Dependency-free collector · macOS 27 + Liquid Glass + Adwaita · Docker and Podman aware · Local-first

🎮 [Live demo](https://zyvorai.github.io/zyvor-vytrix/demo/) · 🌐 [Site](https://zyvorai.github.io/zyvor-vytrix/) · 🚀 [Quickstart](#quickstart) · 🧩 [How it fits](#how-it-fits-together) · 🔒 [Security](SECURITY.md) · 📖 [API](docs/API.md)

Why Vytrix

See it

[Try the live demo](https://zyvorai.github.io/zyvor-vytrix/demo/): the real dashboard, running in your browser on simulated telemetry (nothing to install, nothing leaves the page).

[Download for Mac](https://github.com/zyvorai/zyvor-vytrix/releases/tag/v0.7.0): the native app, v0.7.0, DMG and pkg (Apple silicon, macOS 26+); the release notes say whether the build is signed and notarized.

*About 12 seconds against the built-in simulated telemetry: overview, an application's processes, containers, switching to the Adwaita window style, then dark mode.*

*Every image here is the app's built-in simulated telemetry (host zyvor-dev-01). A web page cannot read your processes, so the hosted preview says so on screen. See the UX contract.*

How it fits together

The dashboard starts on clearly labeled simulated telemetry. To see your own machine, run the collector and connect (live), or import a one-off snapshot (offline).

Mac cluster

Optional and read-only: a small worker on each Mac pushes its snapshot to a coordinator, and Monitor → Mac cluster shows every machine's CPU, memory, disk, network, applications and containers. There is no command channel. See docs/CLUSTER.md.

Native Mac app

A SwiftUI app (native/) that shows the same telemetry in a native macOS 27 window. It starts the bundled collector on loopback with a random token held in memory, or connects to one you run elsewhere (Connect…, HTTPS unless it is localhost). It is read-only, like everything else here.

[Download Vytrix 0.7.0 for Mac](https://github.com/zyvorai/zyvor-vytrix/releases/tag/v0.7.0) (Apple silicon, macOS 26 or newer): Vytrix-0.7.0.pkg installs into Applications, or open Vytrix-0.7.0.dmg and drag Vytrix there. The v0.7.0 files are Developer ID signed and notarized. If you use a build that is not (a local or CI build without Apple secrets), the first launch is blocked: open System Settings → Privacy & Security and choose Open Anyway next to the Vytrix message. Each file has a .sha256; check it with shasum -a 256 -c Vytrix-0.7.0.pkg.sha256. v0.3.0 remains available as a hand-signed DMG. The app bundles the collector, which needs Python 3.10+ (see below).

Or build it from source:

./scripts/build-native.sh      # native/build/Vytrix.app, ad-hoc signed development build

open native/build/Vytrix.app # or add --args --demo for simulated telemetry ./scripts/shots-native.sh # docs/ux/native-*.png, from the simulated telemetry ./scripts/build-native-widgets.sh # the same app plus the widget and App Intents (needs xcodegen), see docs/WIDGETS.md

Needs macOS 26 or newer, the Xcode command line tools, and Python 3.10+ for the collector (the system /usr/bin/python3 is 3.9; the app looks for Homebrew's first). Overview, Applications, Containers, Projects, Alerts and Settings are in, grouped Monitor, Workloads and System like the dashboard, along with a menu bar item (CPU, host totals, alert count, busiest apps). Closing the window keeps Vytrix running in the menu bar; Quit stops it and its collector. On the resource pages, anomalous ranges are shaded and a dragged range opens an evidence sheet (needs a collector, so not in demo mode). Alerts use the dashboard's rules (threshold default 80%, critical at +10) and post local notifications, once per alert, never for demo data. The CPU, Memory, Disk, Network and Battery pages and Settings (appearance, accent, threshold, snapshot import and export, data source) are in too. A System widget and two Shortcuts actions ("What is using my CPU?", "How is my Mac doing?") are in docs/WIDGETS.md. Built and run on macOS 27.2.

Quickstart

1. The dashboard, on simulated data (Node ≥ 22.13; npx pnpm@11.25.0 … works without installing pnpm):

git clone https://github.com/zyvorai/zyvor-vytrix.git && cd zyvor-vytrix

npx pnpm@11.25.0 install --frozen-lockfile npx pnpm@11.25.0 dev # http://localhost:5173

2. Your own readings, offline (Python 3.10+, Linux or macOS, no root):

python3 agent/vytrix.py --once > snapshot.json

In the dashboard choose Connect → Import collector snapshot (or Settings → Import). Nothing leaves your machine.

3. Live telemetry

export VYTRIX_TOKEN="$(python3 -c 'import secrets; print(secrets.token_urlsafe(32))')"   # keep it out of source control

python3 agent/vytrix.py --allow-origin http://localhost:5173

Enter http://127.0.0.1:9847/v1/snapshot and the token in Connect. The dashboard polls every two seconds. The token stays in tab memory: it is not stored in localStorage and not sent anywhere else. For another machine, serve HTTPS with --tls-cert/--tls-key (or a TLS reverse proxy that passes Authorization). The UI refuses plain-HTTP collector URLs except on loopback.

Collector flags

Endpoints: GET /v1/snapshot, GET /v1/history?since=…&limit=… (both need the bearer token and an allowed origin), and unauthenticated GET /healthz. Everything is a read; mutations are not supported. See docs/API.md.

Views

Also: search, CPU or memory sort, pause and resume, 1m/5m/1h activity history (captured while the tab is open, at most 1,800 samples), and JSON import/export.

Install as a service

scripts/install-macos.sh --allow-origin http://localhost:5173     # launchd agent, token in the login Keychain

scripts/install-linux.sh --allow-origin http://localhost:5173 # systemd user unit (--system for a hardened system unit)

Both accept --dry-run, --port and --no-containers.

Deploy to a Linux server

./scripts/deploy-remote.sh 203.0.113.10 deploy      # HOST USER, or user@host

./scripts/deploy-remote.sh HOST USER --quick # sync + restart, no build ./scripts/deploy-remote.sh HOST USER --verify-only ./scripts/deploy-remote.sh HOST USER --dry-run # prints the plan; no SSH

It syncs the checkout over SSH (one multiplexed connection) to ~/.vytrix/app, builds it there (with a private Node 22 if the system Node is older), and installs two systemd units: the dashboard on 127.0.0.1:8787 and the collector on `https://HOST:30847` with a self-signed certificate that covers the host, proxying the dashboard on the same origin. The token is created once in ~/.vytrix/env (0600). Open the URL, accept the certificate, Connect (the endpoint is pre-filled) and paste the token. Needs SSH, passwordless sudo, Python 3.10+, curl, openssl, rsync. Details: docs/RELEASE.md.

Read-only by design

The dashboard has no login of its own: put it behind your own access control. What the collector token protects, and what it does not, is in SECURITY.md.

Verification

pnpm typecheck && pnpm lint

pnpm test # telemetry schema tests + Python collector tests pnpm build pnpm test:e2e # Playwright: WebKit, Chromium, mobile WebKit pnpm shots