Observe
Read one target state without polling or waking it.
Private preview · Billing not yet open
Route the work. Not the noise.
Connect Codex to a governed local Claude Code worker backed by managed DeepSeek access—AUTO by default, review-only when needed, and one task-bound delivery when explicitly enabled.
MANAGED APIUse the service without a provider key.
NO OVERAGESHard limits, never surprise charges.
FAIL CLOSEDNo permit means no dispatch.
AUDIT FIRSTEvery decision leaves a receipt.
The handoff
A safer handoff, end to end.
The repository stays on your machine. The Cloud issues a short-lived, budgeted model grant, records usage, and reconciles the result without exposing the provider key.
Decide
Apply authorization, duplicate, availability, and budget rules.
Permit
Issue one short-lived, idempotent delivery permit.
Reconcile
Record delivery, failure, or an unresolved handoff for review.
Deterministic gate
Four outcomes. No ambiguous retry loop.
Every request ends in a named decision that operators and software can audit.
RECORD_ONLYKeep evidence. Do not send.
QUEUE_UNTIL_IDLEHold one request until the target becomes available.
DELIVER_ONCEPermit one idempotent handoff.
SUPPRESS_DUPLICATEReject equivalent work already recorded.
Business boundary
Free local core. Paid operational control.
The Apache-2.0 core stays useful on one machine. The commercial cloud adds team governance and managed operations.
Community core
- Deterministic delivery decisions
- Local SQLite outbox
- CLI and Codex callback adapter
- Self-managed deployment
Managed execution cloud
- Codex MCP with AUTO, REVIEW_ONLY, and DELIVERY_ONCE
- Short-lived DeepSeek gateway grants—no customer provider key
- Local source execution with budgets, credits, and receipts
- Managed reconciliation and audit retention