Clodex – Open-source agentic IDE with governed execution and graph memory

Clodex is an open-source agentic development environment that combines persistent AI tasks, code, terminal, browser, Git, models, memory, and controlled execution in one Electron workspace.

It is built around a simple principle:

Model output is untrusted input. Authority comes from explicit policy, isolated runtimes, and user-controlled review.

Current release status: Technical Preview. The architectural core is implemented and tested locally. Advanced execution lanes remain feature-gated until their live promotion evidence and manual sign-off are complete.

Developer handbookFull project documentationDeveloper documentation indexArchitectureSecurity and data·Security policyide.clodex.xyzA conventional coding assistant produces the next answer or patch. Clodex models engineering work as a durable task with its own state, workspaces, processes, permissions, evidence, and review lifecycle.

A task can:

• retain context across long-running work and application restarts;
• operate across files, Git, terminals, browser tabs, MCP tools, and runners;
• route work between models without changing the surrounding workflow;
• request approval before high-impact shell, network, browser, or remote actions;
• execute locally or move to Docker, SSH, or cloud-backed environments;
• return diffs, receipts, artifacts, and a self-contained final result.

Clodex separates user interface, agent execution, tools, secrets, and policy into explicit process and trust boundaries.

flowchart TB
    USER["Developer"] --> UI["Electron renderer"]
    UI <--> IPC["Karton typed IPC"]
    IPC <--> MAIN["Electron main process"]

    MAIN <--> AGENT_HOST["Agent Host process"]
    MAIN <--> MCP_HOST["MCP Host process"]
    MAIN <--> SANDBOX["Sandbox workers"]

    AGENT_HOST --> CORE["Agent Core"]
    CORE --> TASKS["Task lifecycle and goals"]
    CORE --> MEMORY["Evidence memory and context ledger"]
    CORE --> FABRIC["Model Fabric"]
    CORE --> POLICY["Guardian and Zero-Trust policy"]

    POLICY --> EXECUTION["Local, SSH, Docker, or cloud execution"]
    EXECUTION --> ARTIFACTS["Artifacts, receipts, and checkpoints"]
    ARTIFACTS --> MEMORY
apps/browser/                 Electron desktop application
apps/website/                 Public project website
agent/runtime-node/           Isolated Node.js agent runtime
packages/agent-core/          Agent lifecycle, memory, routing, and policy
packages/agent-shell/         Shell and execution contracts
packages/mcp-runtime/         MCP transport and protocol runtime
packages/runner-sdk/          External runner integration SDK
packages/karton/              Typed state and RPC transport
packages/stage-ui/            Shared interface components

For a complete map, see docs/developer/repository-map.md.

Clodex does not rely on a prompt asking the model to behave safely. Sensitive operations pass through deterministic controls outside the model runtime.

Fail closed: ambiguous or invalid authorization results do not execute.Isolated hosts: agent turns, MCP servers, and sandboxed workloads run outside the renderer.Explicit capabilities: possessing a tool does not automatically grant authority to use it.Controlled egress: network destinations are evaluated independently of model intent.Protected storage: credentials use OS-backed storage; sensitive task artifacts use context-bound authenticated encryption.Human review: pending edits, permission prompts, protected merge flows, and high-impact approvals keep final authority with the user.Supply-chain checks: extension identity, signatures, integrity, compatibility, rollback, and quarantine are verified before activation.Privacy-aware audit: operational events avoid storing prompts, source code, audio, credentials, or other unnecessary sensitive content.

Read the detailed model in docs/developer/security-and-data.md. Report vulnerabilities through

, not through a public issue.

SECURITY.md

The status labels are deliberate: implemented foundations are not presented as stable production capabilities until real installation evidence, monitoring, rollback, and manual promotion checks are complete.

• Node.js 22.23.1

• pnpm 10.30.3

• Git

• macOS, Linux, or Windows for development

• macOS for DMG packaging and notarization

git clone https://github.com/mereyabdenbekuly-ctrl/clodex-ide.git
cd clodex-ide

corepack enable
corepack prepare pnpm@10.30.3 --activate

cp .env.example .env
cp .env.example .env.dev

pnpm install --frozen-lockfile
pnpm build:packages
pnpm --dir apps/browser start:fast

Use the checked development command when you want type checking to run in parallel with Electron:

pnpm --dir apps/browser start

Environment and provider configuration are documented in docs/developer/local-development.md. Never commit

.env

, credentials, signing keys, or local runtime state.Run the complete local validation suite before opening a pull request:

pnpm check
pnpm typecheck
pnpm test
pnpm security:secrets

Validated baseline on July 12, 2026:

CI and signed release evidence remain the source of truth for a published artifact. See docs/developer/testing-and-release.md and

.

VERSIONING.md

Clodex exposes several integration surfaces:

MCP: connect local stdio or remote Streamable HTTP/SSE servers;Skills: package reusable agent instructions and workflows;Plugins: distribute signed capabilities and optional executable runtimes;Runner SDK: integrate Docker, SSH, cluster, or custom execution backends;Generated Apps: create task-owned interactive tools with explicit grants;Automations: schedule bounded tasks with declared capabilities.

Start with docs/developer/extensions-and-integrations.md.

Contributions should be scoped, testable, and reviewable.

• Read .CONTRIBUTING.md

• Follow the commit and versioning rules in .VERSIONING.md

• Sign commits according to the repository .DCO

• Run formatting, type checking, tests, and secret scanning.

• Include focused tests for changed behavior.

Use the repository issue templates for bugs, feature proposals, documentation, and agent-runtime problems.

Solo scientist building Zero-Trust AI infrastructure. Open to core engineering and research engineering roles at frontier AI labs, including Google DeepMind, xAI, OpenAI, Anthropic, Meta, and NVIDIA.

Follow the project on X · @CLODEx_lab.

If Clodex is useful to you, you can support independent development with USDT. Send funds only through the network shown for the selected address.

The same network-aware donation interface with copy buttons is available on the Clodex website. Blockchain transfers are irreversible, so verify both the network and address before sending.

Clodex is distributed under the GNU Affero General Public License v3.0. Third-party components and notices are listed in THIRD-PARTY-NOTICES.md.