redeven

Redeven

Your computers & servers, in one browser tab.
Terminal, file browser, IDE, and AI —
all on your own hardware, end-to-end encrypted.

Download Desktop | Install CLI | Features | Security | Docs

What is Redeven?

Redeven is a single binary that brings your computers and servers into one browser tab. Instead of juggling SSH terminals, file browsers, monitoring dashboards, port forwarding, and IDE windows, you get one unified workspace on the hardware you already control.

It runs on your machine, your remote servers, or any reachable SSH host. Your files, processes, API keys, and credentials stay where they belong — Redeven does not move your plaintext through anyone else's infrastructure.

• Browser or Desktop — open your workspace from any browser, or use the native Desktop app for local and remote sessions.
• No agent protocol, no remote Node.js — the runtime is a single Go binary. The optional browser IDE (code-server) is installed on demand, not bundled.
• AI that works where your data lives — optional on-device AI assistance reads files, runs commands, and completes tasks under the same permission model as the rest of the workspace.

Quick start

Two paths to get started: Desktop (recommended for most users) or CLI.

Desktop App

1. Download Redeven Desktop from GitHub Releases.
2. Open the app. Choose your environment: Local, Provider, SSH Host, or a saved URL.
3. Start working — the workspace opens in your browser automatically.

For remote machines: Desktop can auto-install the matching Redeven release over SSH, then explicitly connect that managed SSH runtime to a provider Environment when you choose to. No manual setup on the remote host. See docs/DESKTOP.md for details.

CLI

# 1. Install
curl -fsSL https://raw.githubusercontent.com/floegence/redeven/main/scripts/install.sh | sh

# 2. Bootstrap (one-time, requires a ticket from your provider)
redeven bootstrap \
  --controlplane https://<your-provider> \
  --env-id <env_public_id> \
  --bootstrap-ticket <bootstrap_ticket>

# 3. Run
redeven run --mode hybrid

# 4. Open http://localhost:23998 in your browser.

Bootstrap writes your Local Environment config to ~/.redeven/local-environment/config.json. Each OS user has one Local Environment identity, bound to one provider Environment at a time. Desktop and browser flows use the same one-time ticket contract.

Interactive terminals use Redeven's rich runtime presentation by default: a compact animated character mark, runtime version/protocol details, active session/workload counts, Local UI and Environment URLs, real runtime log tailing, and actionable warning/error panels. Use the arrow keys to move between Control plane, Sessions, and Logs. Press Enter on Sessions to open a filterable active-session view, Enter on Logs to expand the full runtime log view, Enter on Control plane to connect, disconnect, or open the bootstrap setup fields, Esc to return, and Ctrl+C to stop the runtime. Non-interactive shells fall back to plain text, and Desktop-managed launches use the machine presentation contract with structured startup reports instead of terminal UI.

Run modes at a glance:

What you can do

Security, without stealing the spotlight

Redeven leads with capability, but the runtime is still the trust boundary because it owns the real host.

• The runtime lives on the endpoint and keeps plaintext there.
• The control plane issues bootstrap payloads, grants, and immutable session metadata.
• Flowersec carries encrypted bytes between the client and the endpoint runtime.
• Effective permissions come from server-issued session grants, clamped by the local permission policy (read, write, execute, admin — no category implies any other).
• Local config, E2EE material, audit logs, and diagnostics stay in the endpoint state directory.
• GitHub Releases remain the public source of truth for binaries, checksums, and signatures.

Read the full contract in docs/CAPABILITY_PERMISSIONS.md, docs/PERMISSION_POLICY.md, and docs/RELEASE.md.

Documentation

By task

For developers

Build, lint, and verify from source.

./scripts/lint_ui.sh
./scripts/check_desktop.sh
./scripts/build_assets.sh
go build -o redeven ./cmd/redeven

./scripts/install_git_hooks.sh
node scripts/generate_third_party_notices.mjs --check

License

Redeven is licensed under the MIT License. Third-party dependency notices are tracked in THIRD_PARTY_NOTICES.md; release archives and Desktop packages include these files alongside the runtime artifacts.

Open-source scope

This public repository covers the endpoint/runtime layer, Redeven Local UI behavior, the desktop shell, and the GitHub Release contract.

Organization-specific deployment automation, control-plane implementations, and site-specific packaging wrappers are intentionally out of scope here.