devinorium

Devinorium is a self-hosted web interface for AI coding agents, so agents can be driven from a browser rather than only from a terminal. Its backend is written in Rust on axum, tokio and SQLite, and it handles authentication, sessions, files and the calls out to providers. The frontend is Flutter web, produced by a build script and embedded into the Rust binary at compile time from the frontend build output directory. The provider layer is explicitly pluggable, meaning additional backends can be introduced without changing the rest of the application. Three providers are listed as supported: the Devin CLI, OpenCode, and the Codex CLI. Each is expected to be present on PATH and authenticated beforehand through its own login command (devin login, opencode auth login, codex login). Getting started requires the Rust toolchain, the Flutter SDK, and the CLI of the chosen provider. After cloning, the example environment file is copied and edited to set a bootstrap password; the README warns that if this password is unset or left at its placeholder value, no owner account is created and login is impossible. The Flutter build script then produces the frontend bundle, a release cargo build embeds it, a data directory is created for the database, and the binary is run. The service then listens on localhost port 7878 by default, where the user logs in with the bootstrap credentials. Configuration is entirely through environment variables, documented in the example env file. Settings cover the bind address and port, a session key used to sign session cookies (ephemeral unless a long random value is supplied), the SQLite connection string, the first-run owner username and password, a default model for new threads, trust of forwarded-for headers behind a reverse proxy, a maximum request body size, a secure cookie flag for HTTPS, and an explicitly allowed origin for CSRF checks. Database migrations run automatically on startup. Development includes formatting checks, clippy with warnings denied, and the test suite; stricter pedantic and nursery lint groups are mentioned as a backlog to enable incrementally. The README states that Devinorium serves HTTP only, so remote or public exposure should go through a reverse proxy or tunnel that terminates TLS, with detailed deployment examples in a separate documentation file. The project is licensed AGPL-3.0-only, and the repository described is a GitHub mirror of a GitLab project. Screenshots in the documentation show the interface on desktop and on mobile, including sidebar, thread and code editor views.