🦊 gulutux

Multi-provider agentic coding CLI. Swap the brain — Nebius Token Factory, Cloudflare Workers AI, Google, or any OpenAI-compatible endpoint — keep the fox.

Named after my childhood nickname. Gulutux writes the code, its ghost agents run in parallel, and Ghostfox — the stealth browser — sees the web.

What it is

gulutux is a terminal-native agentic coding assistant built in Go:

Multi-provider model layer — one agent loop, any brain: Nebius Token Factory (NVIDIA Nemotron), Cloudflare Workers AI, Google AI Studio, OpenAI, or any OpenAI-compatible endpoint (Ollama, vLLM, proxies).
Token Factory Sandboxes execution — commands run in ephemeral Nebius microVM containers (sandbox tool: one-shot runs or named sessions), with automatic sandbox→local fallback.
Cost-aware routing — per-model pricing table, live token/USD metering from real API usage, and a session budget guard that downshifts to a fast model when the budget is reached.
Ghost agents — spawn parallel sub-agents (spawn_agent) with capability-scoped tool allowlists and structured result mailboxes.
Evidence-led proofs — acceptance criteria, recorded verification, and a SHIP / BLOCKED / NEEDS_HUMAN_REVIEW verdict gated by human approval. Deploy tools are blocked at the registry level until a proof is approved for the exact git commit.
Real browsers at its side — a generic Chrome (CDP) layer and Ghostfox, a stealth browser driven through its MCP server: navigate, snapshot, click, type, screenshot with anti-detection identities.
Tavily web search built in for grounded, real-time research.
Checkpoints (time travel), per-project persistent memory, SQLite kanban, and a vibe-security guard over shell/file tools.

Build & run

Requires Go 1.22+.

make build        # produces ./gx
./gx              # interactive TUI
./gx "explain this repo" --task    # one-shot task
./gx --proof replay examples/proof-demo/proof-run.json   # replay a proof, zero API keys

Configure providers in ~/.config/gulutux/config.yaml (see config.example.yaml). Environment: GULUTUX_* (e.g. GULUTUX_API_KEY).

Live demo: https://gulutux.autokeren.com — this landing page was built, rendered, and proof-verified by the agent itself in the demo video.

Status

v0.1.x — foundation + Nebius stack verified live. All 24 Go packages pass vet + tests. Verified end-to-end with NVIDIA Nemotron on Nebius Token Factory:

agent thinking with nvidia/nemotron-3-super-120b-a12b (with automatic downshift to Nemotron-3_5-Lightning when a session budget is exceeded)
Token Factory Sandboxes client (Contree API): spawn instances, subprocesses inside running VMs, one-shot runs, named sessions
live dogfood run: the agent researched landing-page design via Tavily, wrote a page, rendered it in the Ghostfox stealth browser, and issued a SHIP proof — 13 turns, $0.08 of model spend

Origin & license

gulutux is the successor of my prior open-source project autokeren (MIT) — a Cloudflare-first agentic CLI. The Go engine core, tool suite, ghost sub-agent manager, and evidence-led proof system were carried over and are being significantly extended for this project: a rewritten multi-provider architecture, native Nebius Token Factory integration (inference + sandboxes), Ghostfox browser integration, and a structured agent state machine. The prior project is disclosed here explicitly, in the spirit of honest open source.

Built during the Nebius x NVIDIA Global AI Hackathon — running on Nebius AI Cloud, thinking with NVIDIA Nemotron.

Metadata

Release files for gulutux 0.2.5

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for gulutux 0.2.5
File	Size	Uploaded	Provenance
gulutux-0.2.5.tar.gz	4.1 kB	Sep 14, 2026	Without provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for gulutux 0.2.5
File	Interpreter	ABI	Platform	Reset
gulutux-0.2.5-py3-none-any.whl 4.4 kB Sep 14, 2026 Without provenance	Python 3	none	any	Details

Total release size: 8.6 kB

Release files / gulutux-0.2.5.tar.gz

Download URL	gulutux-0.2.5.tar.gz
Size	4.1 kB
Tags	Source
SHA-256 checksum How to use checksums	`5c19d7e83b3b2a3d6a3eb250eedd86f961197a3997107fe5158702988deaa3f5`
BLAKE2b-256 checksum How to use checksums	`4b69f78a77901542917298a59f8a11e953944118b212b517323fa1db126622a6`
Upload date	Sep 14, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.12.3`

Release files / gulutux-0.2.5-py3-none-any.whl

Download URL	gulutux-0.2.5-py3-none-any.whl
Size	4.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`b5662be5721eb933f353aaf9bca6bb9dfb4db0b7dc6e08a997f67f677b06953d`
BLAKE2b-256 checksum How to use checksums	`81920504000a3e35eadae886dc6baced4d6ea1fea5053da2880618160a00b0ec`
Upload date	Sep 14, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.12.3`

Security for gulutux 0.2.5

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.