The app
Vigil is built to watch your coding agents without watching you. It counts how much they work; it does not read what they say:
- It reads event metadata - timestamps and types, token counts, model names, project paths and branches, and identifiers for the terminal an agent runs in.
- It never reads your code, your files, your prompts, or your conversations. The token counts come from a
usageblock your session files record beside the text; the words themselves are not used, not stored, and never sent anywhere. - One optional setting, Show the latest line, is the single exception, and it is off by default. Switched on, a project row can show the last line you or your agent wrote, so you can tell what is happening at a glance. That line is held in memory only while it is on screen - never written to disk, never uploaded. Switched off, no message text is read at all, including by the hook scripts Vigil installs into your agent sessions.
- Lightweight shell hooks post to a token-authenticated server on
localhost. There is no cloud relay, no telemetry, no analytics, and no account. - Usage and cost tracking is computed locally and is fully opt-out. Plan-limit lookups talk directly to your provider's own usage API using your existing session, the same call the agent's CLI already makes.
- For completeness, everything Vigil sends over the network: those plan-limit lookups (roughly every five minutes, to your provider, carrying your existing session and nothing else); a periodic check with GitHub for a new version; and the sound-pack registry when you browse packs. Nothing you or your agent wrote is in any of them, and none of them go to us - there is no Vigil server.
- Accessibility and Automation access are optional and are used only when you click a project to focus its exact editor or terminal window. Hooks, tracking, limits, sounds, and alerts work without them; Vigil does not request Screen Recording.
- One click in Settings removes every hook, script, and file Vigil created and restores your agent configs.
This website
vigilbar.com uses cookieless, privacy-friendly analytics (Vercel Web Analytics) to count page views, referrers, and aggregate download clicks - including Apple Silicon versus Intel and where the button appeared. It sets no cookies, builds no cross-site profile, and never identifies you. That's the only measurement on the site, and it is entirely separate from the app, which sends nothing.
Downloads are served directly from GitHub Releases; visiting those links is subject to GitHub's own privacy terms.
Contact
Questions about any of this, or a bug to report? Open an issue on GitHub and I'll take a look.