# thunderbird/thunderbolt

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/thunderbird-thunderbolt).**

_How this analysis was created: the description and tags below were written by an AI model that read this project's README and public documentation pages; stars, license and language come straight from the GitHub API. The model does not read the source code._

4,819 stars · 338 forks · TypeScript · MPL-2.0

## Links

- GitHub: https://github.com/thunderbird/thunderbolt
- Homepage: https://thunderbolt.io
- awesome-repositories: https://awesome-repositories.com/repository/thunderbird-thunderbolt.md

## Topics

`ai` `ai-agents` `llms` `on-device-ai`

## Description

Thunderbolt is an open-source, self-hostable AI chat client that runs on web, desktop (macOS, Linux, Windows) and mobile (iOS, Android) from one shared web codebase inside lightweight native shells. It is local-first: each device keeps a local database as the source of truth, and data syncs to a central backend with optional end-to-end encryption, so the server stores only ciphertext for protected content. New devices are approved from trusted ones by fingerprint, recovery phrase or passkey, and revoked devices lose access.

What sets it apart is its approach to model and agent choice and to privacy. Users can connect hosted providers, any OpenAI-compatible endpoint, local models, or a managed catalog with per-account spend limits. A confidential inference tier encrypts requests for a hardware-attested enclave, so the relaying server cannot read the conversation. Outside coding and search agents can be attached to any chat over open agent protocols, over WebSockets or encrypted peer-to-peer links. Tool servers connected through the Model Context Protocol are merged into the model's toolset, and a terminal coding agent and a browser-based coding agent are also included.

Around the core chat, it offers projects with shared instructions, reusable skills, file attachments, voice conversations, search across local data, and rich in-chat widgets. Model-written HTML pages render in a sandboxed frame, and embedded mini apps can share context with the chat. Email, calendar and file integrations are available for Google and Microsoft accounts.

On the server side, sign-in works through OIDC, SAML, emailed codes or passkeys. The server stack deploys with Docker Compose, Kubernetes with Helm, or AWS infrastructure-as-code. It also covers rate limits, usage metering, and optional telemetry that is off by default.

## Tags

### Artificial Intelligence & ML

- [AI Chat Clients](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-chat-clients.md) — Provides a self-hostable, local-first chat application for talking to AI models of your choice on web, desktop, and mobile.
- [Agent Client Protocol Connections](https://awesome-repositories.com/f/artificial-intelligence-ml/agent-connection-management/agent-client-protocol-connections.md) — Connects outside AI agents to chats through the Agent Client Protocol, with settings to configure and manage each connected agent. ([source](https://github.com/thunderbird/thunderbolt/tree/main/src))
- [Bring-Your-Own-Key Model Clients](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-chat-clients/multi-provider-chat-clients/bring-your-own-key-model-clients.md) — Connects to hosted providers, any OpenAI-compatible endpoint, confidential enclaves, or local models using personal keys or a managed catalog with spend limits.
- [Bring-Your-Own-Key Model Access](https://awesome-repositories.com/f/artificial-intelligence-ml/bring-your-own-key-model-access.md) — Connects hosted providers with the user's own API key or any OpenAI-compatible endpoint by URL so users choose which model answers. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/customize.md))
- [External Agent Integrations](https://awesome-repositories.com/f/artificial-intelligence-ml/external-agent-integrations.md) — Attaches outside coding and search agents to any chat over open agent protocols and merges tool servers into the model's toolset.
- [Model Provider Management](https://awesome-repositories.com/f/artificial-intelligence-ml/model-provider-management.md) — Connects chats to hosted providers, any compatible endpoint, or local models, and can offer a managed catalog with per-account spend limits. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs))
- [Managed Model Catalogs with Spend Limits](https://awesome-repositories.com/f/artificial-intelligence-ml/model-provider-management/managed-model-catalogs-with-spend-limits.md) — Offers deployment-supplied models that work without keys, metered per account against rolling five-hour and seven-day spending allowances. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/customize.md))
- [Private AI Chat Deployments](https://awesome-repositories.com/f/artificial-intelligence-ml/self-hosted-ai-models/private-ai-chat-deployments.md) — Deploys the full chat service on your own servers, Kubernetes cluster, or AWS account so conversations, models, and user data stay in your control.
- [Slash-Inserted Text Skills](https://awesome-repositories.com/f/artificial-intelligence-ml/agent-skill-management/skill-storage/skill-lifecycle-management/slash-inserted-text-skills.md) — Provides reusable named instruction blocks applied by slash command or loaded automatically by the model when a request matches, pinned above the composer. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/customize.md))
- [Agent Tool Server Connections](https://awesome-repositories.com/f/artificial-intelligence-ml/agent-tool-server-connections.md) — Gives the hosted agent read-only tools from configured tool servers, with server-held credentials, tool and call limits, and graceful handling of unreachable servers. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/self-hosting/configuration.md))
- [MCP Server Connections](https://awesome-repositories.com/f/artificial-intelligence-ml/agentic-systems-frameworks/model-integration-serving/model-integration-interfaces/model-context-protocol/mcp-server-management/mcp-server-connections.md) — Adds Model Context Protocol servers through settings and merges their tools into the model's toolset on every message. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/mcp-connections.md))
- [Streaming Chat Routing](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-chat-clients/streaming-chat-responses/streaming-chat-routing.md) — Forwards chat requests to managed inference backends and streams replies back, applying usage metering and per-user limits. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/backend-api-surface.md))
- [External Agent Delegations](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-coding-agent-platforms/external-agent-delegations.md) — Hands a conversation to an external coding agent over a network connection, with a terminal agent available for command-line work. ([source](https://github.com/thunderbird/thunderbolt/blob/main/README.md))
- [Remote Agent Connections](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-coding-agent-platforms/remote-agent-connections.md) — Lets any chat point at an agent running on a server or laptop via a WebSocket address or peer-to-peer ticket, with its commands added to the slash menu. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/customize.md))
- [Voice-to-Voice Loops](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-conversation-managers/voice-to-voice-loops.md) — Provides voice mode with speech-to-text, text-to-speech, mic-open cues and acoustic barge-in through hosted or custom providers. ([source](https://github.com/thunderbird/thunderbolt/blob/main/CHANGELOG.md))
- [AI Provider Integrations](https://awesome-repositories.com/f/artificial-intelligence-ml/ai-provider-integrations.md) — Adds models from several hosted providers or any compatible endpoint, called directly from the device or through an optional backend proxy. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/README.md))
- [Browser-Based Coding Agents](https://awesome-repositories.com/f/artificial-intelligence-ml/browser-based-coding-agents.md) — Includes a full coding agent that runs inside the browser tab with shell and file tools over a virtual filesystem and no server execution. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/in-browser-agent-harness.md))
- [Conversational Voice AI](https://awesome-repositories.com/f/artificial-intelligence-ml/conversational-voice-ai.md) — Captures microphone speech, transcribes each utterance, routes it through normal chat, and reads the reply aloud hands-free. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/voice.md))
- [Automatic Context Compaction](https://awesome-repositories.com/f/artificial-intelligence-ml/long-context-processing/automatic-context-compaction.md) — Summarizes older conversation history manually or automatically near the context limit while keeping recent turns, so long chats continue without overflowing the model window. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/in-browser-agent-harness.md))
- [Model Catalog Management](https://awesome-repositories.com/f/artificial-intelligence-ml/model-catalog-management.md) — Offers confidential and managed inference providers, swaps built-in models via a skill, and requires a successful connection test before saving a custom model. ([source](https://github.com/thunderbird/thunderbolt/blob/main/CHANGELOG.md))
- [Runtime Provider Switching](https://awesome-repositories.com/f/artificial-intelligence-ml/model-provider-configurations/runtime-provider-switching.md) — Switches among many model providers or any OpenAI-compatible endpoint, with saved per-profile credentials and per-run provider, model and reasoning flags. ([source](https://github.com/thunderbird/thunderbolt/tree/main/cli))
- [Model Provider Freedom](https://awesome-repositories.com/f/artificial-intelligence-ml/model-provider-freedom.md) — Works with frontier, local, and on-prem models so users pick their own model and avoid lock-in to a single provider. ([source](https://github.com/thunderbird/thunderbolt#readme))
- [Multi-Backend Agent Chat](https://awesome-repositories.com/f/artificial-intelligence-ml/multi-backend-agent-chat.md) — Points any chat at an outside agent over an open protocol or the built-in assistant, with agents added by the backend or users. ([source](https://github.com/thunderbird/thunderbolt/tree/main/docs))
- [Reusable Instruction Skills](https://awesome-repositories.com/f/artificial-intelligence-ml/reusable-instruction-skills.md) — Stores named reusable instruction blocks in a synced library users create, edit, enable, disable and delete from settings. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/skills.md))
- [Chat Workflow Customization](https://awesome-repositories.com/f/artificial-intelligence-ml/reusable-instruction-skills/chat-workflow-customization.md) — Lets users shape assistants for repeated work with reusable skills, shared project instructions, embedded mini apps, and interactive widgets inside chats.
- [Terminal Coding Agents](https://awesome-repositories.com/f/artificial-intelligence-ml/terminal-coding-agents.md) — Operates in the working directory with shell, file read/write/edit and web fetch tools, taking a single prompt or interactive session from one binary. ([source](https://github.com/thunderbird/thunderbolt/blob/main/cli/README.md))
- [Speech-to-Speech Frameworks](https://awesome-repositories.com/f/artificial-intelligence-ml/text-to-speech/speech-to-speech-models/speech-to-speech-frameworks.md) — Transcribes speech and reads replies aloud via a hosted enclave speech engine or any OpenAI-compatible speech endpoint configured per device. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/customize.md))

### Part of an Awesome List

- [AI Chat Clients](https://awesome-repositories.com/f/awesome-lists/ai/ai-chat-clients.md) — Delivers a desktop, web and mobile chat client for talking to AI models, organizing conversations into chats and projects. ([source](https://github.com/thunderbird/thunderbolt/tree/main/src))

### Business & Productivity Software

- [Local-First Sync Libraries](https://awesome-repositories.com/f/business-productivity-software/local-first-sync-libraries.md) — Keeps a local database on each device as the source of truth, reading and writing locally first, with optional sync across devices. ([source](https://github.com/thunderbird/thunderbolt/tree/main/docs))
- [Chat Project Organization](https://awesome-repositories.com/f/business-productivity-software/chat-project-organization.md) — Groups related chats into projects whose shared instructions are inherited by every conversation inside them. ([source](https://github.com/thunderbird/thunderbolt#readme))
- [Shared Project Instructions](https://awesome-repositories.com/f/business-productivity-software/chat-project-organization/shared-project-instructions.md) — Stores durable instructions on a project and injects them into the system prompt of every chat inside it for consistent guidance. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/projects.md))
- [Cross-Device Chat History Syncs](https://awesome-repositories.com/f/business-productivity-software/crm-integrations/conversation-case-syncing/cross-device-chat-history-syncs.md) — Keeps conversations in a local-first database and syncs them between devices with opt-in end-to-end encryption. ([source](https://github.com/thunderbird/thunderbolt#readme))

### Data & Databases

- [Local-First Database Replication](https://awesome-repositories.com/f/data-databases/local-first-database-replication.md) — Replicates each user's data between a central PostgreSQL backend and local SQLite on clients, scoped by a signed identity token. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/powersync-account-devices.md))
- [Local Data Engines](https://awesome-repositories.com/f/data-databases/local-data-engines.md) — Keeps a local SQLite database as each device's source of truth so the app stays fully usable offline. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/README.md))
- [Offline Write Queues](https://awesome-repositories.com/f/data-databases/offline-write-queues.md) — Saves edits to the on-device database immediately, queues them while disconnected, and replays them on reconnect with latest-write-wins conflict handling. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/multi-device-sync.md))

### Development Tools & Productivity

- [Encrypted Sync Clients](https://awesome-repositories.com/f/development-tools-productivity/cross-platform-desktop-clients/encrypted-sync-clients.md) — Stores data locally first and syncs it across devices with optional end-to-end encryption so only the user can read it. ([source](https://github.com/thunderbird/thunderbolt/blob/main/README.md))
- [Agent Protocol Bridges](https://awesome-repositories.com/f/development-tools-productivity/ai-coding-assistants/agent-protocol-bridges.md) — Bridges external coding agents into chats over a standard agent protocol on WebSockets or peer-to-peer links, mapping slash commands and sessions. ([source](https://github.com/thunderbird/thunderbolt/blob/main/cli/README.md))
- [Tool Server Merging](https://awesome-repositories.com/f/development-tools-productivity/ai-coding-assistants/model-context-protocol-servers/tool-server-merging.md) — Connects Model Context Protocol tool servers over several transports and merges their namespaced tools into the model's toolset on every message.
- [Confidential Inference Attestation Checks](https://awesome-repositories.com/f/development-tools-productivity/attestation-verification-tools/hardware-attestation-verifiers/confidential-inference-attestation-checks.md) — Verifies hardware attestation, signed build provenance, measurements and key binding on the client and shows pass or fail status in the model selector. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/managed-inference.md))
- [Cross-Device Document Syncs](https://awesome-repositories.com/f/development-tools-productivity/cross-device-document-syncs.md) — Streams changes between a local database on each device and a backend database so chats, settings and configurations stay consistent. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs))

### DevOps & Infrastructure

- [Self-Hosted Deployments](https://awesome-repositories.com/f/devops-infrastructure/self-hosted-deployments.md) — Runs the backend, database, sync service and identity provider on own infrastructure using containers, Kubernetes clusters or infrastructure-as-code. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs))
- [AWS ECS Deployments](https://awesome-repositories.com/f/devops-infrastructure/aws-ecs-deployments.md) — Provisions AWS network and compute as code with Pulumi, targeting serverless ECS Fargate containers or an EKS cluster running the Helm chart. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/self-hosting/README.md))
- [On-Premise Deployment](https://awesome-repositories.com/f/devops-infrastructure/on-premise-deployment.md) — Installs on infrastructure the organization controls so conversations and data stay within its own environment rather than a vendor cloud. ([source](https://github.com/thunderbird/thunderbolt#readme))
- [Self-Hosted Agent Inference](https://awesome-repositories.com/f/devops-infrastructure/self-hosted-installations/self-hosted-agent-inference.md) — Enables direct, confidential and hosted-agent inference tiers on a private deployment through environment variables for provider keys, enclave address and quota budgets. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/managed-inference.md))

### Mobile Development

- [Multi-Platform App Delivery](https://awesome-repositories.com/f/mobile-development/multi-platform-app-delivery.md) — Delivers the same AI chat client on web, iOS, Android, macOS, Linux and Windows from one shared codebase. ([source](https://github.com/thunderbird/thunderbolt/blob/main/README.md))
- [Cross-Platform Desktop and Mobile Apps](https://awesome-repositories.com/f/mobile-development/cross-platform-desktop-and-mobile-apps.md) — Runs one shared React codebase inside native shells on macOS, Linux, Windows, iOS and Android so every platform gets the same experience. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/README.md))

### Networking & Communication

- [AI Model Clients](https://awesome-repositories.com/f/networking-communication/cross-platform-clients/ai-model-clients.md) — Provides one AI chat client running on web, iOS, Android, Mac, Linux and Windows so the assistant is the same everywhere. ([source](https://github.com/thunderbird/thunderbolt#readme))
- [Email and Calendar Integrations](https://awesome-repositories.com/f/networking-communication/email-and-calendar-integrations.md) — Connects Gmail, Google Calendar, Outlook and OneDrive so the assistant can read, search and draft mail and work with events and files. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/customize.md))

### Security & Cryptography

- [Data Protection](https://awesome-repositories.com/f/security-cryptography/data-protection.md) — Applies encryption and device attestation so user data stays under the user's control rather than a single vendor. ([source](https://github.com/thunderbird/thunderbolt/tree/main/src))
- [Encrypted Multi-Device Chat Sync](https://awesome-repositories.com/f/security-cryptography/encrypted-multi-device-chat-sync.md) — Keeps chats, settings and projects on every device with local-first storage, optional end-to-end encryption, and device approval and revocation.
- [End-to-End Encryption](https://awesome-repositories.com/f/security-cryptography/end-to-end-encryption.md) — Applies optional end-to-end encryption so the server stores only ciphertext and cannot read chat histories. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs))
- [Confidential Inference Enclaves](https://awesome-repositories.com/f/security-cryptography/hardware-security-module-integrations/secure-enclaves/confidential-inference-enclaves.md) — Verifies hardware attestation of the confidential inference connection so users can confirm requests reach a trusted enclave the relaying server cannot read. ([source](https://github.com/thunderbird/thunderbolt/blob/main/CHANGELOG.md))
- [Single Sign-On Integrations](https://awesome-repositories.com/f/security-cryptography/single-sign-on-integrations.md) — Signs users in through existing OIDC or SAML identity providers, emailed codes or passkeys so access follows organizational identity rules. ([source](https://github.com/thunderbird/thunderbolt/tree/main/deploy))
- [Chat History Encryption](https://awesome-repositories.com/f/security-cryptography/chat-history-encryption.md) — Encrypts synced chat histories so the server cannot read them, with optional key escrow for enterprise deployments. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/README.md))
- [Confidential Request Relaying](https://awesome-repositories.com/f/security-cryptography/confidential-request-relaying.md) — Passes end-to-end encrypted requests untouched through the backend to a hardware-isolated enclave, stripping credentials and unsafe headers so session secrets never reach the model host. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/managed-inference.md))
- [Synced Column Decryption](https://awesome-repositories.com/f/security-cryptography/data-decryption/synced-column-decryption.md) — Intercepts incoming sync data and decrypts protected columns with AES-256-GCM before local storage, so the server only ever holds ciphertext. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/powersync-sync-middleware.md))
- [Fingerprint-Verified Device Approvals](https://awesome-repositories.com/f/security-cryptography/device-approval-workflows/fingerprint-verified-device-approvals.md) — Adds new devices by having the user verify a 256-bit key fingerprint on a trusted device before sharing the account key. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/e2e-encryption.md))
- [Device Revocation and Key Rotation](https://awesome-repositories.com/f/security-cryptography/device-revocation-and-key-rotation.md) — Cuts a lost device's API and sync access and rotates the account and data keys so it can never read new data. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/e2e-encryption.md))
- [Enterprise Identity Providers](https://awesome-repositories.com/f/security-cryptography/enterprise-identity-providers.md) — Redirects users to a configured OIDC or SAML identity provider and links returning identities to existing accounts safely. ([source](https://github.com/thunderbird/thunderbolt/blob/main/backend/docs/authentication.md))
- [Identity Providers](https://awesome-repositories.com/f/security-cryptography/identity-providers.md) — Ships a bundled Keycloak identity provider with a demo realm and also works with any external OIDC or SAML provider. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/self-hosting/README.md))
- [Enterprise SSO Authentication](https://awesome-repositories.com/f/security-cryptography/oauth-authentication/enterprise-sso-security/enterprise-sso-authentication.md) — Redirects unauthenticated users through the organization's identity provider, exchanges the returned auth code for tokens and creates or updates the session. ([source](https://github.com/thunderbird/thunderbolt/blob/main/backend/docs/oidc-local-dev.md))
- [SAML Integrations](https://awesome-repositories.com/f/security-cryptography/oidc-identity-integrations/saml-integrations.md) — Connects the deployment to OIDC or SAML identity providers such as Keycloak, Okta, Auth0 or Entra ID for enterprise sign-in. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/self-hosting/configuration.md))
- [Passkey Authentication](https://awesome-repositories.com/f/security-cryptography/passkey-authentication.md) — Lets users sign in with passkeys through WebAuthn and unlock sync on a new device, with configurable relying party identity. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/self-hosting/configuration.md))
- [Post-Quantum Key Exchange](https://awesome-repositories.com/f/security-cryptography/post-quantum-key-exchange.md) — Wraps each device's account key using classical elliptic-curve and lattice-based post-quantum key exchange together, so both must be broken. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/e2e-encryption.md))
- [Database Column Encryption](https://awesome-repositories.com/f/security-cryptography/privacy-data-protection/data-encryption/database-column-encryption.md) — Encrypts columns listed in a central configuration map before upload, so the server only receives ciphertext for those fields. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/powersync-sync-middleware.md))
- [Layered Key Hierarchies](https://awesome-repositories.com/f/security-cryptography/privacy-data-protection/data-encryption/end-to-end-encryption/layered-key-hierarchies.md) — Uses an account key that wraps versioned data keys and is sealed to each approved device, so the server stores only ciphertext.
- [Agent Tool Permissions](https://awesome-repositories.com/f/security-cryptography/security-and-access-control/agent-tool-permissions.md) — Asks users to allow or deny external agent tool requests, remembers prior allowances per agent and tool kind, and cancels pending requests on termination. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/chat-runtime.md))
- [Single Sign-On](https://awesome-repositories.com/f/security-cryptography/single-sign-on.md) — Supports browser-redirect single sign-on including a desktop initiate-and-callback flow, with OIDC, Google and Microsoft sign-in, token exchange and refresh. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/backend-api-surface.md))
- [Single Sign-On Providers](https://awesome-repositories.com/f/security-cryptography/single-sign-on-providers.md) — Authenticates users through the organization's own single sign-on provider, falling back to emailed sign-in codes when none is available. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs))
- [Trusted Device Management](https://awesome-repositories.com/f/security-cryptography/trusted-device-management.md) — Shows live lists of trusted devices and pending approvals, keeps revoked devices visible briefly, and offers pairing details with a QR code. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/delete-account-and-revoke-device.md))

### Software Engineering & Architecture

- [Local-First Architectures](https://awesome-repositories.com/f/software-engineering-architecture/local-first-architectures.md) — Keeps a local SQLite database on each device as the source of truth and replicates changes with a central PostgreSQL backend.
- [Assistant Skill Plugins](https://awesome-repositories.com/f/software-engineering-architecture/integration-extensibility/extensibility/third-party-plugins/assistant-skill-plugins.md) — Adds reusable skills, mini-apps, widgets and task extensions that expand what the assistant can do beyond plain conversation. ([source](https://github.com/thunderbird/thunderbolt/tree/main/src))

### User Interface & Experience

- [Cross-Platform Desktop Shells](https://awesome-repositories.com/f/user-interface-experience/cross-platform-desktop-shells.md) — Runs one shared web interface inside lightweight native windows on desktop and mobile, with thin platform-specific adapters around it. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/tauri-shell.md))
- [Chat-Embedded Widgets](https://awesome-repositories.com/f/user-interface-experience/interactive-widgets/chat-embedded-widgets.md) — Parses widget tags in model replies and maps each to a component, showing forecasts, maps and link previews inline in chat. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/widgets.md))
- [Sandboxed HTML Rendering](https://awesome-repositories.com/f/user-interface-experience/sandboxed-html-rendering.md) — Runs model-written HTML pages in one shared sandboxed frame after a self-containment check, with a scripts-off live preview while streaming.

### Web Development

- [Native Shell Embeddings](https://awesome-repositories.com/f/web-development/progressive-web-apps/native-shell-embeddings.md) — Runs one shared React codebase unchanged in the browser and inside lightweight native windows on desktop and mobile with thin platform adapters.
- [Chat File Attachments](https://awesome-repositories.com/f/web-development/chat-file-attachments.md) — Adds files to a chat turn for the model to use while keeping file contents on the device rather than the server. ([source](https://github.com/thunderbird/thunderbolt/blob/main/README.md))
- [Mini App Runtimes](https://awesome-repositories.com/f/web-development/mini-app-runtimes.md) — Runs ordinary web apps inside an iframe in the client so they can publish context to the chat and receive actions from it. ([source](https://github.com/thunderbird/thunderbolt/tree/main/miniapps))
- [Sandboxed Generated Page Rendering](https://awesome-repositories.com/f/web-development/sandboxed-generated-page-rendering.md) — Runs model-written self-contained HTML pages in a single sandboxed frame so generated code executes safely on the user's device. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/artifacts.md))

### System Administration & Monitoring

- [Usage Limiters](https://awesome-repositories.com/f/system-administration-monitoring/usage-limiters/usage-limiters.md) — Enforces authentication, device binding, rate limits and rolling-window spending budgets on every managed inference route. ([source](https://github.com/thunderbird/thunderbolt/blob/main/docs/internals/architecture/managed-inference.md))