Hysen Labs
Open-source project
emexlab/Nyxian avatar
emexlab

Nyxian

IDE to develop native code iOS apps and utilities on stock iOS it self just via a certificate and a custom micro kernel for those apps.

1,137 stars108 forksCAGPL-3.0
DEEP OPEN-SOURCE ANALYSIS

Nyxian is an on device iOS IDE and microkernel

Nyxian is an iOS app that provides a native IDE and a userspace microkernel for building and running apps offline on stock devices.

What Nyxian is

Nyxian is an iOS app from emexLabs that gives developers a full native toolchain they can use on the device itself, even while offline. The README describes it as a full native IDE and a userspace microkernel for building and running iOS apps entirely on device, on unjailbroken iOS, across versions from iOS 18.4 up to iOS 27 Beta 4. The tool supports Swift, C, Objective-C, C++, and Objective-C++, and the README says it made a fully on device iOS IDE possible without needing a cloud, with airplane mode usable after the SDK and resources are downloaded from the project server. It states that apps can be compiled and run on the go using the iOS 26.5 SDK. The framing is that this is a developer environment that lives on the phone or tablet rather than on a Mac, which removes the tether to a desktop for parts of the iOS build cycle. The README does not make performance claims or compare build speeds to Xcode, and it presents the project as an enabling tool for iOS developers who want to work away from a traditional host machine. The AGPL 3.0 license in the metadata means that anyone who runs a modified version as a network service must share their changes, which is a strong copyleft stance for a developer tool of this kind.

Limitations and low level work

The README is candid about a current limitation: it cannot intercept an arm64 supervisor call. The authors argue this is not a large problem on iOS because processes have almost no privileges, so bypassing their shims and asking the iOS kernel directly would not grant an attacker anything useful. They also describe thinking about ways to intercept such a call, noting they consider the problem from many directions and are focused on finding a solution that would also speed up guest process initialization. The Todo section lists completed and open items that reveal the low level nature of the work. Compiling and typechecking are done for C, Objective-C, C++, and Objective-C++, with Swift compiling done and Swift typechecking still open, and indexing still open. Offline code execution runs through an NSExtension, and the microkernel, called ksurface, has radix trees, an object API, a process object, a privilege model, a custom entitlement blob, and a Mach IPC syscall server. The list also notes task port handoff, memory copy in and out of guest processes, fixes to posix_spawn, vfork, sysctl, tty and ioctl paths, libproc, task_for_pid style calls, and credential syscalls. These entries show the project is doing unusual userspace plumbing to let native code build and run on a locked down device.

Scope and what to expect

The README presents Nyxian as a developer tool, not as a cracking or intrusion utility, and the technical details it shares are about enabling on device compilation and a sandboxed microkernel rather than about defeating platform security for malicious ends. The signing section notes that executables can be signed and that custom entitlements let a user sign apps like CocoaTop on the desktop with nxtool, which is ordinary developer signing workflow rather than an exploit. The installation guide is hosted on the emexLabs documentation site rather than inline, so a reader follows external steps to set the tool up. With 1137 stars in the metadata, Nyxian has a sizable following for a niche iOS development project, which suggests real interest in off device free iOS building. The Todo list's mix of done and open items tells a newcomer what works today, such as C family compiling and a working Mach IPC server, and what is still missing, such as Swift typechecking and indexing. Anyone evaluating the project should read the limitations section carefully, because the inability to intercept a supervisor call shapes what the microkernel can and cannot do. The AGPL license and the public Todo give a transparent view of both the ambition and the current edges of the work.

Editorial conclusion

Nyxian is published under the AGPL 3.0 license and its most recent commit was on 2026-08-26.

DEEP OPEN-SOURCE ANALYSIS

Official sources

Community notes

Community notes