Run Amesh locally

Amesh is a private control plane for coding-agent sessions. Run the control service and node on a machine you trust, then connect from the macOS or iPhone/iPad app with the same access token.

Start the control service

AMESH_CLIENT_TOKEN=choose-a-long-token \
AMESH_PORT=8787 \
npx pnpm nx build control-server
AMESH_CLIENT_TOKEN=choose-a-long-token AMESH_PORT=8787 node apps/control-server/dist/main.js

Enroll and run a node

AMESH_CONTROL_URL=http://127.0.0.1:8787 \
AMESH_CLIENT_TOKEN=choose-a-long-token \
AMESH_WORKSPACE=/absolute/path/to/workspace \
npx pnpm nx build node-runtime
AMESH_CONTROL_URL=http://127.0.0.1:8787 AMESH_CLIENT_TOKEN=choose-a-long-token AMESH_WORKSPACE=/absolute/path/to/workspace node apps/node/dist/main.js

Connect a client

In Amesh, enter the control-service URL and the access token. Select the enrolled node, specify its workspace path, and start a Codex session. Activity is durable: refresh a session after reconnecting to catch up.

Security model

Nodes keep their own keys and workspace access. The client receives authoritative session state and submits typed commands; it does not receive node credentials or workspace secrets.

For the full architecture, protocol, and security references, see the repository documentation.