Moe Agentic Workstation Runtime

Forkable Codex workstation runtime for serious local agent work: modular steering, specialist agents and skills, MCP installation, peer-model routing, governed memory/RAG, and recoverable state bindings.

Version 1.7.0 adds boot-aware, non-blocking startup branding and memory readiness, capability-gated TUI behavior, governed-memory source policy, atomic promotion, stronger gate continuation, current peer-model routing, and locked MCP dependency/SBOM validation.

What This Gives You

• Modular AGENTS.md, steering packs, skills, and specialist agent roles instead of one overloaded prompt.
• Idempotent installer that can be rerun to add MCPs without destroying working local configuration.
• MCP selector and registry for Claude, Gemini, Context7, OpenAI docs, research, workspace, publishing, messaging, Wiki.js, GitHub, Google Workspace, and Atlassian connectors.
• PostgreSQL-backed governed memory/RAG schema with native-memory ingestion, candidate creation, promotion/review lifecycle, semantic vector retrieval, and context-pack materialization.
• Valkey support for disposable coordination and short-lived runtime cache signals.
• MinIO/S3 object-store contract for artifact bytes while PostgreSQL keeps metadata and traceability.
• Optional product documentation governance that can use installing-team templates from a local path or S3-compatible template store.
• IdP/installation identity model so actions, memories, runs, and review notifications can be attributed without baking one organization into the repo.
• Configurable Moebiusol startup identity with a bounded, asynchronous readiness refresh that does not delay Codex startup or misreport a freshly booted memory service as failed.
• QMS/regulated-work guardrails as portable hooks, not private links.

Quick Start

Prerequisites:

• Codex CLI installed and codex login completed for live Codex use.
• Python 3.10+.
• uv for locked, isolated Python MCP environments.
• Node.js 22+ and npm for JavaScript MCPs.
• Git.
• Optional but recommended for full memory/RAG: PostgreSQL 15+ with pgvector, Valkey, and MinIO/S3-compatible storage.

git clone https://codeberg.org/Moebiusol/moe-agentic-workstation-runtime.git
cd moe-agentic-workstation-runtime

make doctor
make configure-mcps MCP_PROFILE=core
make install

To add more MCPs later:

make configure-mcps MCP_PROFILE=all
make install

The installer reads prior installed state and reconciles additively. It does not delete user-owned secrets, OAuth caches, or hand-edited configuration.

Configuration

Copy and adapt the example environment:

cp .env.example .env

Offline routing tests work without provider keys. Live Gemini, Claude, OpenAI, workspace, publishing, and messaging MCPs require the installing team to provide its own keys or OAuth sessions.

Documentation Map

• Install
• Prerequisites
• Architecture
• Capabilities
• User Manual
• Documentation Framework
• Identity And State
• Memory/RAG
• Object Storage
• MCP Selection
• Model Routing
• QMS Guardrails
• CI
• Open Source Boundary
• Changelog

Verification

make test
make public-scan
make ci-build-mcps

public-scan is conservative and blocks known private endpoints, local paths, secret patterns, and intentionally excluded private connector names.

Public Boundary

This repo is a public template. It excludes private infrastructure endpoints, credentials, connection strings, raw chat history, customer-specific repositories, internal QMS URLs, and personal OAuth fallbacks.

The intended pattern is public runtime + private local configuration:

• repo: reusable behavior, scripts, schema, docs, examples;
• environment/secret manager: provider keys, connection strings, OAuth sessions;
• installing organization: IdP, QMS, PostgreSQL, Valkey, MinIO/S3, and MCP account scopes.