{
  "markdown": "<p align=\"center\">\n  <img src=\"assets/brand/redeven/png/app-icon-256.png\" alt=\"Redeven\" width=\"120\">\n</p>\n\n# Redeven\n\n<!-- readme-locales:start -->\n<p align=\"center\">\n  <strong>English</strong> |\n  <a href=\"README.zh-CN.md\">简体中文</a> |\n  <a href=\"README.zh-TW.md\">繁體中文</a> |\n  <a href=\"README.ja-JP.md\">日本語</a> |\n  <a href=\"README.ko-KR.md\">한국어</a> |\n  <a href=\"README.de-DE.md\">Deutsch</a> |\n  <a href=\"README.fr-FR.md\">Français</a> |\n  <a href=\"README.es-ES.md\">Español</a> |\n  <a href=\"README.pt-BR.md\">Português do Brasil</a> |\n  <a href=\"README.ru-RU.md\">Русский</a>\n</p>\n<!-- readme-locales:end -->\n\n<p align=\"center\">\n  <strong>Your computers &amp; servers, in one browser tab.</strong><br>\n  Terminal, file browser, IDE, and AI —\n  <br>all on your own hardware, end-to-end encrypted.\n</p>\n\n<p align=\"center\">\n  <a href=\"https://github.com/floegence/redeven/releases\">Download Desktop</a> |\n  <a href=\"#quick-start\">Install CLI</a> |\n  <a href=\"#what-you-can-do\">Features</a> |\n  <a href=\"#security\">Security</a> |\n  <a href=\"#documentation\">Docs</a>\n</p>\n\n<p align=\"center\">\n  <a href=\"https://go.dev/\"><img alt=\"Go Version\" src=\"https://img.shields.io/badge/Go-1.27.1-00ADD8?style=flat-square&logo=go\"></a>\n  <a href=\"https://nodejs.org/\"><img alt=\"Node Version\" src=\"https://img.shields.io/badge/Node.js-26.7.0-339933?style=flat-square&logo=node.js\"></a>\n  <a href=\"okf/index.md\"><img alt=\"OKF Knowledge\" src=\"https://img.shields.io/badge/Knowledge-OKF%20v0.1-6C3BFF?style=flat-square\"></a>\n  <a href=\"https://github.com/floegence/redeven/releases\"><img alt=\"Releases\" src=\"https://img.shields.io/badge/Releases-GitHub-181717?style=flat-square&logo=github\"></a>\n</p>\n\n<p align=\"center\">\n  <img src=\"assets/readme/redeven-demo.gif\" alt=\"Redeven demo: files, terminals, Git, Workbench, and Code Server in one browser tab\" width=\"100%\">\n</p>\n\n<!-- readme-section:what-is-redeven -->\n<a id=\"what-is-redeven\"></a>\n\n## What is Redeven?\n\nRedeven is a single binary that brings your computers and servers into one browser tab. Instead of juggling SSH terminals, file browsers, monitoring dashboards, port forwarding, and IDE windows, you get one unified workspace on the hardware you already control.\n\nIt runs on your machine, your remote servers, or any reachable SSH host. Your files, processes, API keys, and credentials stay where they belong — Redeven does not move your plaintext through anyone else's infrastructure.\n\n- **Clients connect to an endpoint runtime** — Browser, Desktop, CLI, and SSH-hosted sessions all enter the same runtime-managed workspace.\n- **The runtime is the trust boundary** — a single Go binary owns files, terminals, monitoring, Git, web-service forwarding, Workbench layout, notes, Browser Editor setup, and Flower access.\n- **Transport and policy stay explicit** — Flowersec carries encrypted RPC and stream traffic, while session grants, local permission policy, filesystem scope, and local secrets constrain what each session can do.\n\n![Redeven architecture overview](assets/readme/architecture-overview.png)\n\n<!-- readme-section:quick-start -->\n<a id=\"quick-start\"></a>\n\n## Quick start\n\nTwo paths to get started: Desktop (recommended for most users) or CLI.\n\n<!-- readme-section:desktop-app -->\n<a id=\"desktop-app\"></a>\n\n### Desktop App\n\n1. Download Redeven Desktop from [GitHub Releases](https://github.com/floegence/redeven/releases). Public releases currently provide macOS and Linux installers. Windows 11 x64 remains an internal WSL certification build until code signing and signed update verification are enabled.\n2. Open the app. On macOS or Linux, choose Local, Redeven Cloud, SSH Host, or a saved URL. On Windows, register an initialized WSL 2 distribution in the Environment Center; Desktop provides no native Local Environment, Windows Runtime, or local container Runtime.\n3. Start working — the workspace opens in your browser automatically.\n\nEach registered distribution is a separate WSL Environment. Desktop transfers its matching Linux x64 Runtime to the distribution user's `~/.redeven`; it does not install or manage WSL, use `/mnt/c`, or require `systemd`. Quitting, updating, or uninstalling Desktop does not stop the WSL Runtime or delete its data. Use Stop on that Environment when you want to stop it.\n\nFor remote machines: Desktop can auto-install the matching Redeven release over SSH, then explicitly connect that managed SSH runtime to a Redeven Cloud Environment when you choose to. No manual setup on the remote host.\n\n<!-- readme-section:cli -->\n<a id=\"cli\"></a>\n\n### CLI\n\n```bash\n# 1. Install\ncurl -fsSL https://raw.githubusercontent.com/floegence/redeven/main/scripts/install.sh | sh\n\n# 2. Generate the Local UI device CA (once)\nredeven local-authority device-ca generate --state-root ~/.redeven\n\n# macOS or Windows: install it into the current user's trust store\nredeven local-authority device-ca install --state-root ~/.redeven --scope user\n\n# Linux: export the public certificate, then import it manually\nredeven local-authority device-ca export --state-root ~/.redeven --output ~/.redeven/local-ui-device-ca.pem\n\n# 3. Run\nredeven run\n\n# 4. Open https://localhost:23998 in your browser.\n```\n\nOn Linux, import the exported public certificate into the trust store actually used by your browser or client. `install --scope user` intentionally returns `manual_required` on Linux; Redeven never runs `sudo` or modifies a system-wide trust store. The Runtime validates the CA identity and its generated server certificate before serving HTTPS/WSS, but it cannot establish client trust for you. Client TLS therefore fails closed until that browser or client trusts the CA.\n\nThe first `redeven run` initializes local state under `~/.redeven/local-environment/` and starts in local mode. No bootstrap or control-plane configuration is required. Local UI listens on `localhost:23998` and is available only from this device; direct LAN or public-network access is not supported. Press Ctrl+C to stop the runtime.\n\nRun `redeven help run` for other run modes and optional local password protection.\n\n<!-- readme-section:what-you-can-do -->\n<a id=\"what-you-can-do\"></a>\n\n## What you can do\n\n| Surface | What it gives you |\n|---|---|\n| Files and Git | File upload/download, inline preview/edit, folder-scoped Git changes, diffs, and stash workflows. |\n| Terminal | Multi-tab terminals rooted in the directories you are working with, under the same runtime permission model. |\n| Monitor | CPU, memory, disk, network, and process views from the endpoint runtime. |\n| Browser Editor | Browser editor sessions set up explicitly by Desktop, isolated per workspace. |\n| Web Services | Runtime-managed service registration and port-forward access without hand-written SSH tunnels. |\n| Containers | Native Docker and Podman management for containers, images, volumes, Compose Projects, and Pods, with logs, statistics, and Web Services ownership protection. |\n| Flower | Optional AI surfaces that use runtime-validated tools and local model/host configuration. |\n| Desktop | Native launcher for local, Redeven Cloud-hosted, SSH-bootstrapped, and saved Local UI environments. |\n\nFlower keeps the references and device selection you submit with the conversation, so follow-up questions retain their context. The selected device and the machine running tools are identified separately. Temporary secret inputs stay out of saved history.\n\n<!-- readme-section:security -->\n<a id=\"security\"></a>\n\n## Security, without stealing the spotlight\n\nRedeven leads with capability, but the runtime is still the trust boundary because it owns the real host.\n\n- The runtime lives on the endpoint and keeps plaintext there.\n- The control plane issues bootstrap payloads, grants, and immutable session metadata.\n- [Flowersec](https://github.com/floegence/flowersec) carries encrypted bytes between the client and the endpoint runtime; browser surfaces use Flowersec Core 5.1.0 and the Go consumer module is `flowersec-go/v5@v5.1.0`.\n- Effective permissions come from server-issued session grants, clamped by the local permission policy (`read`, `write`, `execute`, `admin` — no category implies any other).\n- Local config, E2EE material, audit logs, and diagnostics stay in the endpoint state directory.\n- GitHub Releases remain the public source of truth for binaries, checksums, signatures, and OKF verification assets.\n\n<!-- readme-section:documentation -->\n<a id=\"documentation\"></a>\n\n## Documentation\n\nRedeven keeps maintained repository knowledge in [OKF v0.1](okf/index.md). The OKF corpus is generated from current source-level behavior and is embedded into the runtime for `okf.search`.\n\nThe machine-readable RCPP Provider integration surface lives in [spec/openapi/rcpp-v3.yaml](spec/openapi/rcpp-v3.yaml). Outside OKF, maintained Markdown is intentionally limited to `AGENTS.md`, `THIRD_PARTY_NOTICES.md`, the canonical `README.md`, and the supported `README.<locale>.md` translations declared in `assets/readme/locales.json`.\n\n<!-- readme-section:for-developers -->\n<a id=\"for-developers\"></a>\n\n## For developers\n\nBuild, lint, and verify from source.\n\n<details>\n<summary>Build from source</summary>\n\n<!-- readme-section:prerequisites -->\n<a id=\"prerequisites\"></a>\n\n### Prerequisites\n\n- Go `1.27.1`\n- Node.js `26.7.0`\n- npm\n- pnpm or Node.js `corepack`\n\n<!-- readme-section:build -->\n<a id=\"build\"></a>\n\n### Build\n\n```bash\n./scripts/lint_ui.sh\n./scripts/check_desktop.sh\n./scripts/build_assets.sh\ngo build -o redeven ./cmd/redeven\n```\n\n<!-- readme-section:local-guardrails -->\n<a id=\"local-guardrails\"></a>\n\n### Local guardrails\n\n```bash\n./scripts/install_git_hooks.sh\nnode scripts/generate_third_party_notices.mjs --check\n```\n\nNotes:\n\n- `internal/**/dist/` assets are generated and embedded via Go `embed`.\n- Frontend `dist` assets are not checked into git. The tracked exception is `okf/dist/*`, which stays committed as verifiable OKF bundle release metadata.\n- `THIRD_PARTY_NOTICES.md` is generated from Go modules and JavaScript lockfiles. Run `node scripts/generate_third_party_notices.mjs` after dependency changes, then keep `--check` green.\n- `./scripts/lint_ui.sh`, `./scripts/check_desktop.sh`, `./scripts/build_assets.sh`, and `go test ./...` are the main source-level checks.\n- `./scripts/dev_desktop.sh` starts Desktop from the current checkout or worktree with a freshly bundled runtime.\n- `cd desktop && npm run start` and `cd desktop && npm run package` prepare `desktop/.bundle/<goos>-<goarch>/redeven` before Electron starts or packages the desktop shell.\n\n</details>\n\n<details>\n<summary>Local state, release paths, and troubleshooting</summary>\n\n- Local Environment state defaults to `~/.redeven/local-environment/`; Desktop and standalone runtime mode also share the profile catalog under `~/.redeven/catalog/`.\n- GitHub Releases are the public source of truth for versioned CLI tarballs, Desktop installers, checksums, signatures, and OKF verification assets.\n- For current implementation details, query the embedded OKF bundle with `okf.search` or inspect [okf/index.md](okf/index.md).\n\n</details>\n\n<!-- readme-section:license -->\n<a id=\"license\"></a>\n\n## License\n\nRedeven is licensed under the [MIT License](LICENSE). Third-party dependency notices are tracked in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md); release archives and Desktop packages include these files alongside the runtime artifacts.\n\n<!-- readme-section:open-source-scope -->\n<a id=\"open-source-scope\"></a>\n\n## Open-source scope\n\nThis public repository covers the endpoint/runtime layer, Redeven Local UI behavior, the desktop shell, and the GitHub Release contract.\n\nOrganization-specific deployment automation, control-plane implementations, and site-specific packaging wrappers are intentionally out of scope here.\n",
  "bytes": 11758,
  "sha": "7e7f802148846efdcafa331bbabda5f37d86cedaf3cf6637cae3732199e5f42e",
  "repo_slug": "floegence/redeven",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/okf_floegence_redeven_okf_index_md_5bb8cf8f/readme"
}