SETUP REQUIRED
SYSTEM ONLINE / BUILD FROM ANYWHERE

Let’s connect your workspace.

Setup guidance. Real connections. Your permissions.

⌁Start with your setup. Connect your own host for AI guidance and real task activity.
↗
0Sessions in this workspace
◇
0Waiting for your decision
⌁
Not connectedYour computer does the work
NEXUS / CONNECTION ASSISTANT

One connection at a time.

Guided setup

Never paste API keys, access tokens or passwords here. Use a provider’s official login flow or the host vault’s hidden prompt.

START SOMETHING

What are we working on?

Connect your host before starting a task.

SESSION WORKSPACE

HOST VAULT / PERSONAL MODE

Store secrets outside your repository

On the host, run these commands from the companion folder. Tokens and passphrases are entered in hidden terminal prompts, never command arguments.

node vault.mjs set github
node vault.mjs list
node bridge.mjs --cwd /path/to/repo --integrations github

Rotate: node vault.mjs set github
Remove local copy: node vault.mjs remove github

Vault uses AES-256-GCM with a scrypt-derived passphrase key. Keep a strong unique passphrase. Unlock it on host startup. Removing a local token does not revoke it at GitHub/Vercel/OpenAI; revoke there too. Restart the companion after rotation/removal. Integrations explicitly enabled at startup are available to the Codex child process.

The session token is separate: browser-memory only, rotates on request, uses the lifetime configured on your host. Host vault tokens are never returned to the UI. This is not a managed or audited enterprise secret manager.