Workspace isolation, local AI, a native IDE, a composited browser, studio-grade audio and hardware-accelerated media — all built in, all zero JNI.
Sabas OS ships the subsystems that usually stay third-party add-ons — isolated workspaces, a local AI that knows your machine, a native IDE, and a browser composited by the OS itself.
Every workspace gets its own OverlayFS upper layer and its own PID, mount, IPC, UTS, network, user and cgroup namespaces — created with unshare(2) called directly through Java FFM, no native helper binary. Apps share a read-only base but can't see each other's writes, processes or network.
Local-first through native Ollama — no cloud round-trip by default. An LSM-tree index (full-text, vector and temporal) grounds answers in your actual files and history. An agentic loop acts through MCP tools behind a security gate that redacts PII before anything crosses a boundary.
A native, Java-first editor with LSP completion, DAP debugging and hot code reload — with the AI subsystem wired in directly, no IPC boundary. It's a Wayland client like any other app, rendered through the same Vulkan pipeline as the desktop.
A CEF-based browser rendered off-screen and handed to the compositor as a DMA-BUF — zero-copy, verified live on real GPU hardware — instead of managing its own window and swap chain outside Sabas's pipeline.
A full mastering-grade DSP chain plus a license-free immersive ambisonic engine — the same 3D sound field decodes to binaural headphones or a 5.1/7.1/7.1.4 speaker rig, with measured-HRTF convolution from SOFA datasets. No Dolby, no DTS licensing — first-order ambisonics and Panama FFM bindings straight to PipeWire.
A full media pipeline built on Panama FFM bindings to FFmpeg 7 — hardware-accelerated decode and encode via VA-API and NVENC, a frame-accurate seek engine, and a subtitle renderer that composites directly into the Vulkan pipeline. Video frames are handed to the compositor as DMA-BUF — zero-copy from the decoder to the display.
Built on Java 25's Panama FFM and the Vector API. No JNI bridges, no C shims, no wlroots dependency anywhere in the stack.
The compositor drives Vulkan and DRM atomic mode-setting itself — a flip-driven frame loop with no intermediate rendering library between the JVM and the GPU.
Six selectable output paths (A-F) route rendered frames to the display, picking zero-copy whenever the GPU and scanout hardware allow it.
Frame execution, damage tracking and buffer reads are pooled and allocation-free — a GC pause never shows up as a dropped frame.
A minimal-heap supervisor JVM spawns compositor and shell as separate, capability-scoped processes and restarts either on crash.
OutputPathSelector scores same-GPU and cross-GPU paths per output at hotplug time — laptop iGPU and external dGPU handled automatically.
Eight native apps ship with the OS — same render tree as the shell, drawn straight through the compositor's Vulkan pipeline. No JavaFX, no Swing, no Electron.
Wi-Fi, display, sound, power, about.
Cloud storage, high-performance index, multi-pane browsing.
Full shell emulator, GPU-rendered glyphs.
Live CPU, memory and process view from /proc.
Install, remove and update packages — auto-detects dnf or apt.
Encrypted secrets store. AES-256-GCM at rest, session-locked.
Markdown-first, full-text search, optional Vault encryption.
Recoverable file deletion — restore or permanently empty.