cloudx

Cloudx is a local-first workbench for Codex CLI that runs on your own Linux build machine and is driven from a desktop or phone browser. Code, credentials, shell tools and the Codex login stay on the host; the project recommends a private tailnet and states that public internet exposure is unsupported. The README warns that Cloudx can spawn terminals, send text to shells and Codex, read and edit files under configured roots, and embed local dashboards carrying token-bearing URLs, and that it does not authenticate direct LAN clients. An explicit 0.0.0.0 bind exists for a trusted, firewalled LAN. The UI is responsive for both desktop and phone. Workspaces are server-backed windows with independent pane layouts, default work directories, quick name search and AI-assisted context search. Panes behave tmux-like, with movable plugin tabs, and layout templates can save and reopen a pane/tab arrangement on a different project path. Plugins and tools described in the README include: Codex and standard shell terminal tabs, with clipboard PNG/JPEG/WebP/GIF paste into Codex tabs saved under .cloudx/pasted-images and inserted as @ file references; a file browser with voice-exposed read/write actions, active-file search, optional Git setup, changed-file badges and rendered per-file diffs; a worktree manager for creating or cloning a bare repository and managing project worktrees; a local web plugin for hosting dashboards; a Jira Cloud plugin for assigned-issue dashboards grouped by Epic, comments, transitions, links, browser links and polling or manual automation triggers; and a documentation archive plugin for ingesting files, paths, URLs, YouTube playlists, copied text and media transcripts, with search, source inspection, invalidation, queued imports and automatic Codex rule/skill injection. An Automation tab composes trigger events, plugin hooks, primitives and converters into saved graphs, with Python and Bash execution primitives and a cloudx.call_hook API. Voice control uses browser audio, a local Faster Whisper service and a configured planner model. Cloudx serves HTTPS on port 3001 with a local self-signed certificate for microphone access. The Codex terminal defaults are managed: Codex runs in explicit --yolo mode, local memories and Codex Apps are disabled, Agent Plugins are disabled, and only Cloudx-selected, system and bundled skills are enabled in the tab's generated Codex home. Reloading the page reattaches running terminal tabs with a replay buffer; restarting the Cloudx service ends those processes. Resume modes (picker, last, ID) use shared sessions. Repository components: apps/server (Fastify server, plugin host, sessions, terminals, local-web proxy, ASR bridge, voice controller), apps/web (React/Vite UI), packages/plugin-api, packages/shared, services/asr (Faster Whisper), services/documentation-indexer (FastAPI indexer), a credential-free no-network verifier container, and several documents covering the security model, setup, motivation and AI-related contribution process. Plugins can also be installed as metadata from a GitHub repository containing .cloudx-plugin/plugin.json; that path does not execute third-party plugin code. Installation targets Ubuntu 22.04 or newer through a guided install.sh that previews each phase, installs system packages and Node.js 22 when needed, checks Git 2.36+, installs a pinned Codex CLI release, prepares ASR and documentation-indexer environments, writes config, detects NVIDIA GPUs via nvidia-smi, and can install user-level services. --dry-run, --yes, --verbose, --update and --uninstall options are documented, along with manual npm ci/build/dev startup and a Vite dev workflow that requires admitting the exact origin. Configuration is environment-driven, covering bind host and port, trusted origins, log level, allowed roots, assistant binary, ASR URL/device/compute type and audio upload limits, documentation indexer URL, host, port, timeouts, upload caps and data directory, and the voice planner model. The README notes the project was built through heavy agent-assisted workflows, is useful but not a hardened service, and is released under MIT.