Clodex – Open-source agentic IDE with governed execution and graph memory

Clodex, an open-source agentic integrated development environment (IDE) that treats AI model output as untrusted input and enforces governed execution through explicit policies, isolated runtimes, and user-controlled review, has been released as a technical preview. The Electron-based workspace combines persistent AI tasks, code editing, terminal, browser, Git, models, memory, and controlled execution into a single environment, with advanced execution lanes feature-gated pending further testing.

Clodex is an open-source agentic development environment that combines persistent AI tasks, code, terminal, browser, Git, models, memory, and controlled execution in one Electron workspace. It is built around a simple principle: Model output is untrusted input. Authority comes from explicit policy, isolated runtimes, and user-controlled review. Current release status: Technical Preview. The architectural core is implemented and tested locally. Advanced execution lanes remain feature-gated until their live promotion evidence and manual sign-off are complete. | Goal | Document | |---|---| | Understand the product in a few minutes | | Developer handbook /mereyabdenbekuly-ctrl/clodex-ide/blob/main/DEVELOPERS.md Full project documentation /mereyabdenbekuly-ctrl/clodex-ide/blob/main/full doc.md Developer documentation index /mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/README.md Architecture /mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/architecture.md Security and data /mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/security-and-data.md · Security policy /mereyabdenbekuly-ctrl/clodex-ide/blob/main/SECURITY.md ide.clodex.xyz https://ide.clodex.xyz A conventional coding assistant produces the next answer or patch. Clodex models engineering work as a durable task with its own state, workspaces, processes, permissions, evidence, and review lifecycle. A task can: - retain context across long-running work and application restarts; - operate across files, Git, terminals, browser tabs, MCP tools, and runners; - route work between models without changing the surrounding workflow; - request approval before high-impact shell, network, browser, or remote actions; - execute locally or move to Docker, SSH, or cloud-backed environments; - return diffs, receipts, artifacts, and a self-contained final result. | Area | What Clodex provides | |---|---| Persistent tasks | Searchable task history, projects, workspaces, forks, goals, progress, token budgets, and time budgets. | Agent runtime | Managed turns, cancellation, recovery, collaboration modes, tool execution, and supervised lifecycle handling. | Code workspace | File editing, pending edits, line-level diffs, Git operations, worktrees, pull-request review, and protected merge flows. | Terminal and browser | Persistent shell sessions, local ports, browser/CDP context, console output, screenshots, and visual verification. | Evidence-backed memory | Scoped memory, append-only evidence records, retrieval, provenance, checkpoints, and bounded context injection. | Model Fabric | Provider-neutral model routing, endpoint health, fallbacks, budget controls, usage accounting, and policy publication. | Execution Fabric | Local execution, SSH sessions, Docker runners, custom runner contracts, cloud-task foundations, and portable snapshots. | Guardian | Independent authorization decisions for sensitive capabilities, fail-closed outcomes, approval escalation, and audit events. | Network Policy | Destination grants, DNS validation, controlled browser access, MCP egress enforcement, and an audit ledger. | Extensions | MCP servers, skills, signed plugins, private marketplaces, runner SDKs, and capability-bounded generated apps. | Continuity | Session checkpoints, crash recovery, memory synchronization, artifact capture, and experimental session teleportation. | Clodex separates user interface, agent execution, tools, secrets, and policy into explicit process and trust boundaries. php flowchart TB USER "Developer" -- UI "Electron renderer" UI <-- IPC "Karton typed IPC" IPC <-- MAIN "Electron main process" MAIN <-- AGENT HOST "Agent Host process" MAIN <-- MCP HOST "MCP Host process" MAIN <-- SANDBOX "Sandbox workers" AGENT HOST -- CORE "Agent Core" CORE -- TASKS "Task lifecycle and goals" CORE -- MEMORY "Evidence memory and context ledger" CORE -- FABRIC "Model Fabric" CORE -- POLICY "Guardian and Zero-Trust policy" POLICY -- EXECUTION "Local, SSH, Docker, or cloud execution" EXECUTION -- ARTIFACTS "Artifacts, receipts, and checkpoints" ARTIFACTS -- MEMORY apps/browser/ Electron desktop application apps/website/ Public project website agent/runtime-node/ Isolated Node.js agent runtime packages/agent-core/ Agent lifecycle, memory, routing, and policy packages/agent-shell/ Shell and execution contracts packages/mcp-runtime/ MCP transport and protocol runtime packages/runner-sdk/ External runner integration SDK packages/karton/ Typed state and RPC transport packages/stage-ui/ Shared interface components For a complete map, see docs/developer/repository-map.md /mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/repository-map.md . Clodex does not rely on a prompt asking the model to behave safely. Sensitive operations pass through deterministic controls outside the model runtime. Fail closed: ambiguous or invalid authorization results do not execute. Isolated hosts: agent turns, MCP servers, and sandboxed workloads run outside the renderer. Explicit capabilities: possessing a tool does not automatically grant authority to use it. Controlled egress: network destinations are evaluated independently of model intent. Protected storage: credentials use OS-backed storage; sensitive task artifacts use context-bound authenticated encryption. Human review: pending edits, permission prompts, protected merge flows, and high-impact approvals keep final authority with the user. Supply-chain checks: extension identity, signatures, integrity, compatibility, rollback, and quarantine are verified before activation. Privacy-aware audit: operational events avoid storing prompts, source code, audio, credentials, or other unnecessary sensitive content. Read the detailed model in docs/developer/security-and-data.md /mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/security-and-data.md . Report vulnerabilities through , not through a public issue. /mereyabdenbekuly-ctrl/clodex-ide/blob/main/SECURITY.md SECURITY.md | Capability | Status | |---|---| | Desktop workspace, files, Git, terminal, and browser | Available for local testing | | Task lifecycle, goals, scoped memory, and recovery | Available for local testing | | MCP runtime and isolated Agent Host | Available for local testing | | Local and SSH execution | Available for local testing | | Docker and external runner control plane | Preview | | Guardian and managed network egress | Preview | | Signed extensions and generated apps | Preview | | Cloud Tasks and Session Teleport | Labs / promotion-gated | | Stable cross-platform distribution | Pending promotion evidence | The status labels are deliberate: implemented foundations are not presented as stable production capabilities until real installation evidence, monitoring, rollback, and manual promotion checks are complete. - Node.js 22.23.1 - pnpm 10.30.3 - Git - macOS, Linux, or Windows for development - macOS for DMG packaging and notarization git clone https://github.com/mereyabdenbekuly-ctrl/clodex-ide.git cd clodex-ide corepack enable corepack prepare pnpm@10.30.3 --activate cp .env.example .env cp .env.example .env.dev pnpm install --frozen-lockfile pnpm build:packages pnpm --dir apps/browser start:fast Use the checked development command when you want type checking to run in parallel with Electron: pnpm --dir apps/browser start Environment and provider configuration are documented in docs/developer/local-development.md /mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/local-development.md . Never commit .env , credentials, signing keys, or local runtime state.Run the complete local validation suite before opening a pull request: pnpm check pnpm typecheck pnpm test pnpm security:secrets Validated baseline on July 12, 2026 : | Gate | Result | |---|---| | Package builds | 7 / 7 | | Typecheck tasks | 14 / 14 | | Test tasks | 16 / 16 | | Automated tests | 3,322 passed | | Working-tree secret scan | 0 findings | | Website production build | passed | | Desktop startup smoke | passed | | Main-plan readiness | ready=true | | Stable promotion | evidence-gated | CI and signed release evidence remain the source of truth for a published artifact. See docs/developer/testing-and-release.md /mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/testing-and-release.md and . /mereyabdenbekuly-ctrl/clodex-ide/blob/main/VERSIONING.md VERSIONING.md Clodex exposes several integration surfaces: MCP: connect local stdio or remote Streamable HTTP/SSE servers; Skills: package reusable agent instructions and workflows; Plugins: distribute signed capabilities and optional executable runtimes; Runner SDK: integrate Docker, SSH, cluster, or custom execution backends; Generated Apps: create task-owned interactive tools with explicit grants; Automations: schedule bounded tasks with declared capabilities. Start with docs/developer/extensions-and-integrations.md /mereyabdenbekuly-ctrl/clodex-ide/blob/main/docs/developer/extensions-and-integrations.md . Contributions should be scoped, testable, and reviewable. - Read . CONTRIBUTING.md - Follow the commit and versioning rules in . VERSIONING.md - Sign commits according to the repository . DCO - Run formatting, type checking, tests, and secret scanning. - Include focused tests for changed behavior. Use the repository issue templates for bugs, feature proposals, documentation, and agent-runtime problems. Solo scientist building Zero-Trust AI infrastructure. Open to core engineering and research engineering roles at frontier AI labs, including Google DeepMind, xAI, OpenAI, Anthropic, Meta, and NVIDIA. Follow the project on X · @CLODEx lab https://x.com/CLODEx lab . If Clodex is useful to you, you can support independent development with USDT. Send funds only through the network shown for the selected address. | Network | USDT address | |---|---| | BNB Chain | 0xecE224461627a13118982Fa28202Eb9768678AFD | | TRON | TAM5uVRpQexgn7gzAhWR7DZyHmyLgRRakP | | Ethereum | 0xecE224461627a13118982Fa28202Eb9768678AFD | | Avalanche C-Chain | 0xecE224461627a13118982Fa28202Eb9768678AFD | | Polygon | 0xecE224461627a13118982Fa28202Eb9768678AFD | | TON | UQBE4RXHqPAY8Xft2G9kP 6bbfXbY-gRwR0NVvx- qWsIeD3 | | Solana | DNhzLgaFMZgLynwPxNyh6Znp9evRozbNprFm9BUXr94Z | The same network-aware donation interface with copy buttons is available on the Clodex website https://ide.clodex.xyz/ support . Blockchain transfers are irreversible, so verify both the network and address before sending. Clodex is distributed under the GNU Affero General Public License v3.0 /mereyabdenbekuly-ctrl/clodex-ide/blob/main/LICENSE . Third-party components and notices are listed in THIRD-PARTY-NOTICES.md /mereyabdenbekuly-ctrl/clodex-ide/blob/main/THIRD-PARTY-NOTICES.md .