claudexor

Purpose

Claudexor is aimed at developers who are already paying for AI coding agents but want a unified control layer on top of them. It runs Codex CLI, Claude Code, Cursor CLI, OpenCode, Antigravity CLI, and raw API adapters behind the same typed interface, solving capabilities that vendors themselves do not provide: multi-subscription quota management, cross-model review, race arbitration, and auditable cost/quota accounting.

Main Capabilities

• Unified multi-tool interface: Organizes work in the form of a "chat of turns"; read-only questions restore the vendor's own native session, while write-type turns produce an inspectable patch or a complete file manifest.
• Credential profiles (as of 2.1): Antigravity/Claude/Codex/Cursor subscription bindings can be named side by side, and each profile has state within the Claudexor scope and a platform-declared credential custody method.
• Quota tracking and rotation: Real-time subscription quota tracking for harnesses with a vendor usage source (Antigravity, Claude, Codex), and accounts that are exhausted can be rotated out via an optional policy when a typed vendor limit is encountered; Cursor does not yet support this usage source.
• best-of-N racing: Lets different harnesses compete against each other, with an independent reviewer and arbitration.
• Honest budget/quota accounting: Unknown costs are not recorded as 0.
• Deterministic gates and protected paths: Typed, per-run approval can be recorded via --allow-protected-path for changes to protected paths such as tests/packaging, but built-in critical/security human gates are not bypassed.
• Cross-model review: By default, ordinary Agent runs skip internal model review, and completed changes are shown as Not reviewed; --review can be used to enable automatic review panel selection, and Best-of and --until-clean also include review. Reviewers can be passed via --reviewer-panel as a comma-separated harness=model:effort list, or with --reviewer-panel-json plus credentialProfileId for deterministic per-slot accounts.
• Local-first: Everything runs on the user's machine, files are the source of truth, and there is no telemetry.

Usage

• Prerequisites: Node.js >= 24.15; pnpm (via corepack: corepack enable pnpm); Git for Git-backed worktrees, candidate envelopes, and source control delivery (Git is not required for explicit directory execution); at least one logged-in vendor CLI (codex, claude, cursor-agent or Cursor's agent, opencode, agy), or a provider API key (adapters accept OPENAI_API_KEY, ANTHROPIC_API_KEY, etc. as fallback). You should log in through Claudexor rather than the bare vendor CLI. The desktop app requires macOS; the CLI/daemon can also run on Linux.
• CLI + daemon (npm): Installs the two binaries claudexor and claudexord.
• macOS app: Download Claudexor-<version>.dmg from Releases, drag it into Applications, and open it; the app starts its built-in Claudexor engine, then guides a check of the external Git and harness routing required for the selected work. The app bundles the daemon runtime and runs it at startup; the Claudexor CLI only needs to be installed when used in the terminal.
• Harness installation: For host integration, claudexor harness install <harness> --target local --yes --json can be used to install a vendor CLI into the local toolchain managed by Claudexor; exact npm pin installations go under ~/.claudexor/node, Cursor remains unpinned, and the receipt records the SHA-256 and byte length of the downloaded installer.
• Remote host: The macOS app can run threads on a Linux or macOS SSH host while the UI stays local, using the system /usr/bin/ssh; the first connection installs a signed, sudo-free runtime.
• Directory execution: In an ordinary folder, directory execution must be explicitly selected; --scope-path can be repeated to narrow the copy scope; directory execution never initializes Git.
• Processing mode: --processing standard|fast|economy requests the selected model's service tier without changing reasoning effort or routing target.
• App updates: The macOS app can install a new runtime closure in place from a signed manifest without a new DMG, and rolls back to the last known good version on failure; npm users update via npm install -g claudexor@latest.

Use cases

Developers who need unified scheduling, quota management, and cost auditing across multiple AI coding tools and subscriptions; teams that want to introduce cross-model independent review and race results before committing; and workflows that need to run a coding agent on a remote host while keeping the interface local. Claudexor also runs as the precisely pinned delegation execution layer in Ouroboros.

Limitations

• Requires Node.js >= 24.15, and the desktop app is macOS-only.
• Cursor currently has no vendor usage source, so quota tracking is not supported.
• Direct changes from directory execution do not promise full rollback; copy results retain the complete file bytes for later application.
• Versions v3.8.0, v3.9.0, and v3.9.7 are release exceptions, omitting three custom Ed25519 documents; installed apps cannot update in place to these versions, nor can they perform first-time remote bootstrap from these versions.
• Subscription access does not guarantee zero incremental cost, nor does it enable provider-paid credits; the model catalog and context limits vary by account.
• The current state is v4.1.1; retired verbs and mode ids error out directly rather than being silently aliased.
• Specific billing and pricing information is not yet provided.