The app store your desktop always deserved.
KitSpace is the native app store for Foxora OS. Every kit is signed by its publisher, reviewed before it lists, sandboxed by default, and reversible in one click — and anyone with Foxora Desktop can build a new one in a prompt and publish it here.
Click a category to change the kit
Sandboxed · Signed · Reviewed · One-click rollback · Offline-friendly
The desktop never got a proper app store.
Mobile got an app store in 2008 and never looked back. Desktop got six install rituals from six different decades — setup wizards, drag-to-Applications, apt-get, sandbox formats, a half-attempted Mac App Store — and none of them got retired. They just stacked.
KitSpace is the app store your desktop never had.
One object. Signed, reviewed, sandboxed, reversible.
Every app on KitSpace is the same shape underneath — a sealed bundle with an identity, a review trail, a permission manifest, and a transactional installer, all native to Foxora OS.
Four guarantees. On every kit.
One object. Four guarantees, always on.
Open any kit on KitSpace and you get the same four promises — signed by its publisher, reviewed before it listed, sandboxed by default, and reversible in one click. Here's what each of those actually looks like under the hood.
Published by someone you can verify.
Every kit on KitSpace is cryptographically signed by its publisher. No "Unknown Developer" warnings, no "drag it in and hope" — the identity of whoever made the code is verified before a single byte is unpacked.
- ed25519 signaturesEvery kit is signed with the publisher's ed25519 key. KitSpace refuses to list anything unsigned, and Foxora OS refuses to install a kit whose signature doesn't match.
- Verified publishersPublishers prove domain control plus real identity before their first listing. Each publisher gets a checkmark, a track record, and a revocable key.
- Revocation, instantIf a publisher's key is ever compromised, KitSpace revokes it and every installed kit signed with it shows a warning in the dashboard within seconds.
One manifest. One signature. One rollback button.
The four guarantees aren't opt-in — they're the shape of every kit on KitSpace. Your notes app and your password manager carry the same safety properties. You can verify any of them straight from the shell.
Every kit, every time. Now — who builds them?
Two shelves. One store.
Every kit on KitSpace lives on one of two shelves. Official kits are first-party Foxora and verified partner apps. Community kits come from anyone with Foxora Desktop. Same review pipeline. Same four guarantees. Different authorship.
Official
Community
Every kit — Official or Community — passes the same review.
Foxora doesn't fast-track its own apps. A kit from `foxora.dev` and a kit from `ava.dev` go through the exact same four-stage pipeline before they're allowed on the shelf. The only thing the shelves tell you is who wrote the code.
And a Community kit — how does one even get built?
A prompt. A kit. Ninety seconds.
Foxora Desktop ships with an AI Kit Builder. Type what you want — a tip tracker, a log tailer, a meeting summarizer. It scaffolds the UI, writes the code, generates the manifest, runs it in a sandbox, and hands you back a real, installable kit. Keep it for yourself, or submit it to KitSpace.
One command to the Community shelf.
When you like what you built, `fur publish` packages your kit, signs it with your publisher key, and opens a review ticket. Same four-stage pipeline as every other Community kit. Most submissions are reviewed in 24–48 hours.
Built your kit. Now — what happens when someone installs it?
Install. Use. Update. Revert.
Every kit on KitSpace shares the same four verbs. One click installs it. It just runs. One click updates it. One click rolls it back. Foxora OS handles the transactional plumbing — you never have to.
Review the manifest.
Before a single byte installs, KitSpace shows you exactly what the kit is asking for. Publisher. Permissions. Network. Data access. You can see `what` and `why`, one screen.
Install is transactional.
Foxora OS snapshots your system, unpacks the kit, wires the permissions, and commits. If anything fails mid-install, it rolls back to the pre-install snapshot. No half-installed binaries left behind.
It just runs.
Sandboxed, signed, reviewed — and completely out of your way. The kit opens, runs, updates live, and sends zero telemetry it didn't ask for. Same shape as every other kit on your system.
One click back.
Update introduced a bug you didn't catch in review? Don't like the new UI? Rolling back is one click in the kit's page, or `fur rollback <kit>` from the shell. Data, config, and filesystem all snap back to the pre-update snapshot.
One store. One shape. Every day, every kit.
Open KitSpace.
See what's on the shelf.
Install Foxora OS. Open KitSpace. Install your first kit. Build your next one. All in one afternoon.
macOS · Linux · Windows
Every kit. Every time. Only on Foxora OS.