🦊 gulutux

Multi-provider agentic coding CLI. Swap the brain — Nebius Token Factory, Cloudflare Workers AI, Google, or any OpenAI-compatible endpoint — keep the fox.

Named after my childhood nickname. Gulutux writes the code, its ghost agents run in parallel, and Ghostfox — the stealth browser — sees the web.

What it is

gulutux is a terminal-native agentic coding assistant built in Go:

Multi-provider model layer — one agent loop, any brain: Nebius Token Factory (NVIDIA Nemotron), Cloudflare Workers AI, Google AI Studio, OpenAI, or any OpenAI-compatible endpoint (Ollama, vLLM, proxies).
Token Factory Sandboxes execution — commands run in ephemeral Nebius microVM containers (sandbox tool: one-shot runs or named sessions), with automatic sandbox→local fallback.
Cost-aware routing — per-model pricing table, live token/USD metering from real API usage, and a session budget guard that downshifts to a fast model when the budget is reached.
Ghost agents — spawn parallel sub-agents (spawn_agent) with capability-scoped tool allowlists and structured result mailboxes.
Evidence-led proofs — acceptance criteria, recorded verification, and a SHIP / BLOCKED / NEEDS_HUMAN_REVIEW verdict gated by human approval. Deploy tools are blocked at the registry level until a proof is approved for the exact git commit.
Real browsers at its side — a generic Chrome (CDP) layer and Ghostfox, a stealth browser driven through its MCP server: navigate, snapshot, click, type, screenshot with anti-detection identities.
Tavily web search built in for grounded, real-time research.
Checkpoints (time travel), per-project persistent memory, SQLite kanban, and a vibe-security guard over shell/file tools.

Build & run

Requires Go 1.22+.

make build        # produces ./gx
./gx              # interactive TUI
./gx "explain this repo" --task    # one-shot task
./gx --proof replay examples/proof-demo/proof-run.json   # replay a proof, zero API keys

Configure providers in ~/.config/gulutux/config.yaml (see config.example.yaml). Environment: GULUTUX_* (e.g. GULUTUX_API_KEY).

Live demo: https://gulutux.autokeren.com — this landing page was built, rendered, and proof-verified by the agent itself in the demo video.

Status

v0.1.x — foundation + Nebius stack verified live. All 24 Go packages pass vet + tests. Verified end-to-end with NVIDIA Nemotron on Nebius Token Factory:

agent thinking with nvidia/nemotron-3-super-120b-a12b (with automatic downshift to Nemotron-3_5-Lightning when a session budget is exceeded)
Token Factory Sandboxes client (Contree API): spawn instances, subprocesses inside running VMs, one-shot runs, named sessions
live dogfood run: the agent researched landing-page design via Tavily, wrote a page, rendered it in the Ghostfox stealth browser, and issued a SHIP proof — 13 turns, $0.08 of model spend

Origin & license

gulutux is the successor of my prior open-source project autokeren (MIT) — a Cloudflare-first agentic CLI. The Go engine core, tool suite, ghost sub-agent manager, and evidence-led proof system were carried over and are being significantly extended for this project: a rewritten multi-provider architecture, native Nebius Token Factory integration (inference + sandboxes), Ghostfox browser integration, and a structured agent state machine. The prior project is disclosed here explicitly, in the spirit of honest open source.

Built during the Nebius x NVIDIA Global AI Hackathon — running on Nebius AI Cloud, thinking with NVIDIA Nemotron.

Metadata

Release files for gulutux 0.4.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for gulutux 0.4.1
File	Size	Uploaded	Provenance
gulutux-0.4.1.tar.gz	4.1 kB	Sep 15, 2026	Without provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for gulutux 0.4.1
File	Interpreter	ABI	Platform	Reset
gulutux-0.4.1-py3-none-any.whl 4.4 kB Sep 15, 2026 Without provenance	Python 3	none	any	Details

Total release size: 8.5 kB

Release files / gulutux-0.4.1.tar.gz

Download URL	gulutux-0.4.1.tar.gz
Size	4.1 kB
Tags	Source
SHA-256 checksum How to use checksums	`e85b87e3956c9c2f05a021522edac32adcdc5bfd2a20297c24799fd3626be7ad`
BLAKE2b-256 checksum How to use checksums	`cbe0deb5d1eef71b8c0a047d413f7b74d8237457424926a403dcbd1c87c9e9d2`
Upload date	Sep 15, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.12.3`

Release files / gulutux-0.4.1-py3-none-any.whl

Download URL	gulutux-0.4.1-py3-none-any.whl
Size	4.4 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`3e9b00dca3d0a8f6aa2f04005936cf83873ca101b9f572b6c6a1df7594d5170d`
BLAKE2b-256 checksum How to use checksums	`982bf54f92bfe13f7b9a3be56f98b47408c2f9dd7928e441e3937310a6573040`
Upload date	Sep 15, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.12.3`

Security for gulutux 0.4.1

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.