# Clodex – Open-source agentic IDE with governed execution and graph memory > Source: > Published: 2026-07-12 10:45:56+00:00 Clodex is an open-source agentic development environment that combines persistent AI tasks, code, terminal, browser, Git, models, memory, and controlled execution in one Electron workspace. It is built around a simple principle: Model output is untrusted input. Authority comes from explicit policy, isolated runtimes, and user-controlled review. **Current release status:** Technical Preview. The architectural core is implemented and tested locally. Advanced execution lanes remain feature-gated until their live promotion evidence and manual sign-off are complete. | Goal | Document | |---|---| | Understand the product in a few minutes | | [Developer handbook](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/DEVELOPERS.md)[Full project documentation](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/full_doc.md)[Developer documentation index](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/README.md)[Architecture](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/architecture.md)[Security and data](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/security-and-data.md)·[Security policy](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/SECURITY.md)[ide.clodex.xyz](https://ide.clodex.xyz)A conventional coding assistant produces the next answer or patch. Clodex models engineering work as a durable task with its own state, workspaces, processes, permissions, evidence, and review lifecycle. A task can: - retain context across long-running work and application restarts; - operate across files, Git, terminals, browser tabs, MCP tools, and runners; - route work between models without changing the surrounding workflow; - request approval before high-impact shell, network, browser, or remote actions; - execute locally or move to Docker, SSH, or cloud-backed environments; - return diffs, receipts, artifacts, and a self-contained final result. | Area | What Clodex provides | |---|---| Persistent tasks | Searchable task history, projects, workspaces, forks, goals, progress, token budgets, and time budgets. | Agent runtime | Managed turns, cancellation, recovery, collaboration modes, tool execution, and supervised lifecycle handling. | Code workspace | File editing, pending edits, line-level diffs, Git operations, worktrees, pull-request review, and protected merge flows. | Terminal and browser | Persistent shell sessions, local ports, browser/CDP context, console output, screenshots, and visual verification. | Evidence-backed memory | Scoped memory, append-only evidence records, retrieval, provenance, checkpoints, and bounded context injection. | Model Fabric | Provider-neutral model routing, endpoint health, fallbacks, budget controls, usage accounting, and policy publication. | Execution Fabric | Local execution, SSH sessions, Docker runners, custom runner contracts, cloud-task foundations, and portable snapshots. | Guardian | Independent authorization decisions for sensitive capabilities, fail-closed outcomes, approval escalation, and audit events. | Network Policy | Destination grants, DNS validation, controlled browser access, MCP egress enforcement, and an audit ledger. | Extensions | MCP servers, skills, signed plugins, private marketplaces, runner SDKs, and capability-bounded generated apps. | Continuity | Session checkpoints, crash recovery, memory synchronization, artifact capture, and experimental session teleportation. | Clodex separates user interface, agent execution, tools, secrets, and policy into explicit process and trust boundaries. ``` php flowchart TB USER["Developer"] --> UI["Electron renderer"] UI <--> IPC["Karton typed IPC"] IPC <--> MAIN["Electron main process"] MAIN <--> AGENT_HOST["Agent Host process"] MAIN <--> MCP_HOST["MCP Host process"] MAIN <--> SANDBOX["Sandbox workers"] AGENT_HOST --> CORE["Agent Core"] CORE --> TASKS["Task lifecycle and goals"] CORE --> MEMORY["Evidence memory and context ledger"] CORE --> FABRIC["Model Fabric"] CORE --> POLICY["Guardian and Zero-Trust policy"] POLICY --> EXECUTION["Local, SSH, Docker, or cloud execution"] EXECUTION --> ARTIFACTS["Artifacts, receipts, and checkpoints"] ARTIFACTS --> MEMORY apps/browser/ Electron desktop application apps/website/ Public project website agent/runtime-node/ Isolated Node.js agent runtime packages/agent-core/ Agent lifecycle, memory, routing, and policy packages/agent-shell/ Shell and execution contracts packages/mcp-runtime/ MCP transport and protocol runtime packages/runner-sdk/ External runner integration SDK packages/karton/ Typed state and RPC transport packages/stage-ui/ Shared interface components ``` For a complete map, see [ docs/developer/repository-map.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/repository-map.md). Clodex does not rely on a prompt asking the model to behave safely. Sensitive operations pass through deterministic controls outside the model runtime. **Fail closed:** ambiguous or invalid authorization results do not execute.**Isolated hosts:** agent turns, MCP servers, and sandboxed workloads run outside the renderer.**Explicit capabilities:** possessing a tool does not automatically grant authority to use it.**Controlled egress:** network destinations are evaluated independently of model intent.**Protected storage:** credentials use OS-backed storage; sensitive task artifacts use context-bound authenticated encryption.**Human review:** pending edits, permission prompts, protected merge flows, and high-impact approvals keep final authority with the user.**Supply-chain checks:** extension identity, signatures, integrity, compatibility, rollback, and quarantine are verified before activation.**Privacy-aware audit:** operational events avoid storing prompts, source code, audio, credentials, or other unnecessary sensitive content. Read the detailed model in [ docs/developer/security-and-data.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/security-and-data.md). Report vulnerabilities through [, not through a public issue.](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/SECURITY.md) `SECURITY.md` | Capability | Status | |---|---| | Desktop workspace, files, Git, terminal, and browser | Available for local testing | | Task lifecycle, goals, scoped memory, and recovery | Available for local testing | | MCP runtime and isolated Agent Host | Available for local testing | | Local and SSH execution | Available for local testing | | Docker and external runner control plane | Preview | | Guardian and managed network egress | Preview | | Signed extensions and generated apps | Preview | | Cloud Tasks and Session Teleport | Labs / promotion-gated | | Stable cross-platform distribution | Pending promotion evidence | The status labels are deliberate: implemented foundations are not presented as stable production capabilities until real installation evidence, monitoring, rollback, and manual promotion checks are complete. - Node.js `22.23.1` - pnpm `10.30.3` - Git - macOS, Linux, or Windows for development - macOS for DMG packaging and notarization ``` git clone https://github.com/mereyabdenbekuly-ctrl/clodex-ide.git cd clodex-ide corepack enable corepack prepare pnpm@10.30.3 --activate cp .env.example .env cp .env.example .env.dev pnpm install --frozen-lockfile pnpm build:packages pnpm --dir apps/browser start:fast ``` Use the checked development command when you want type checking to run in parallel with Electron: ``` pnpm --dir apps/browser start ``` Environment and provider configuration are documented in [ docs/developer/local-development.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/local-development.md). Never commit `.env` , credentials, signing keys, or local runtime state.Run the complete local validation suite before opening a pull request: ``` pnpm check pnpm typecheck pnpm test pnpm security:secrets ``` Validated baseline on **July 12, 2026**: | Gate | Result | |---|---| | Package builds | `7 / 7` | | Typecheck tasks | `14 / 14` | | Test tasks | `16 / 16` | | Automated tests | `3,322 passed` | | Working-tree secret scan | `0 findings` | | Website production build | `passed` | | Desktop startup smoke | `passed` | | Main-plan readiness | `ready=true` | | Stable promotion | `evidence-gated` | CI and signed release evidence remain the source of truth for a published artifact. See [ docs/developer/testing-and-release.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/testing-and-release.md) and [.](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/VERSIONING.md) `VERSIONING.md` Clodex exposes several integration surfaces: **MCP:** connect local stdio or remote Streamable HTTP/SSE servers;**Skills:** package reusable agent instructions and workflows;**Plugins:** distribute signed capabilities and optional executable runtimes;**Runner SDK:** integrate Docker, SSH, cluster, or custom execution backends;**Generated Apps:** create task-owned interactive tools with explicit grants;**Automations:** schedule bounded tasks with declared capabilities. Start with [ docs/developer/extensions-and-integrations.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/extensions-and-integrations.md). Contributions should be scoped, testable, and reviewable. - Read .`CONTRIBUTING.md` - Follow the commit and versioning rules in .`VERSIONING.md` - Sign commits according to the repository .`DCO` - Run formatting, type checking, tests, and secret scanning. - Include focused tests for changed behavior. Use the repository issue templates for bugs, feature proposals, documentation, and agent-runtime problems. Solo scientist building Zero-Trust AI infrastructure. Open to core engineering and research engineering roles at frontier AI labs, including Google DeepMind, xAI, OpenAI, Anthropic, Meta, and NVIDIA. Follow the project on [X · @CLODEx_lab](https://x.com/CLODEx_lab). If Clodex is useful to you, you can support independent development with USDT. Send funds only through the network shown for the selected address. | Network | USDT address | |---|---| | BNB Chain | `0xecE224461627a13118982Fa28202Eb9768678AFD` | | TRON | `TAM5uVRpQexgn7gzAhWR7DZyHmyLgRRakP` | | Ethereum | `0xecE224461627a13118982Fa28202Eb9768678AFD` | | Avalanche C-Chain | `0xecE224461627a13118982Fa28202Eb9768678AFD` | | Polygon | `0xecE224461627a13118982Fa28202Eb9768678AFD` | | TON | `UQBE4RXHqPAY8Xft2G9kP_6bbfXbY-gRwR0NVvx-_qWsIeD3` | | Solana | `DNhzLgaFMZgLynwPxNyh6Znp9evRozbNprFm9BUXr94Z` | The same network-aware donation interface with copy buttons is available on the [Clodex website](https://ide.clodex.xyz/#support). Blockchain transfers are irreversible, so verify both the network and address before sending. Clodex is distributed under the [GNU Affero General Public License v3.0](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/LICENSE). Third-party components and notices are listed in [ THIRD-PARTY-NOTICES.md](/mereyabdenbekuly-ctrl/clodex-ide/blob/main/THIRD-PARTY-NOTICES.md).