owainlewis/machinist

Run coding agents on infrastructure you control.
Local, VM, and Kubernetes jobs with GitHub pull-request delivery.

Website · Documentation · Configuration · Workflow examples

_{Machine section · supervised agent system · exploded assembly}

Machinist is an open-source software factory implementation. It runs on your machine, keeps repository access and credentials local, and records the work from request to handoff. Commands can invoke Codex, Claude Code, another agent CLI, a test runner, a shell script, or repository-owned orchestration.

Please note: this is early access software and subject to change.

• One controlled entrypoint. Workers expose named commands and repositories, never arbitrary shell text or machine-local paths.
• Bring your own harness. Use any executable that accepts a prompt on standard input.
• Keep authority local. Repositories, credentials, model aliases, and executor configuration stay on the worker.
• Inspect every run. Stream output, retain durable events and artifacts, and track terminal outcomes, duration, and reported token use.
• Review before merging. Approve specifications when needed, follow independent review, and merge the pull request yourself.

Build and initialize Machinist:

git clone https://github.com/owainlewis/machinist.git
cd machinist
mkdir -p ./bin && go build -o ./bin/machinist ./cmd/machinist
./bin/machinist init

Start the app:

./bin/machinist start

Open the printed local URL. Connect your GitHub App, choose a repository and agent, and verify the connection with PING. Agents run on your computer, a VM, or a configured Kubernetes cluster. Sign in to the coding CLI on its execution host. See the setup guide.

Open Projects → Add project to connect another repository. Adding a project preserves your existing projects, agent, and execution target. Each repository gets its own checkout, and runs and automations choose from the configured list. The project list is saved on the control-plane host and restored after restart.

Only repositories granted to your GitHub App appear. Use Manage GitHub access to grant more repositories, then Refresh repositories. Local and Kubernetes runners reload while idle. For a VM, stop its existing worker, download the updated VM setup from Projects, and run it to clone and register all configured projects.

Use New run to describe work or link a GitHub issue. Choose one of two modes:

• Standard pipeline: Triage → optional Spec → Build → independent Review. Specifications wait for approval. Review findings return to the same branch and PR for up to three repair rounds. You decide when to merge.
• Single agent: one agent completes an operational task end to end. Use it for one-off jobs and automations.

Requested code, documents, and reports use PR delivery. Questions and checks without file changes can return a result directly. Internal prompts, handoffs, and run history stay private in Machinist. GitHub holds published issues, specs, code, and PRs.

For scripts and direct CLI use, machinist run maps a named command to a fixed executable and runs it in the supplied repository. Existing sequence workflows remain available to CLI users; the app offers the two modes above. See the command and workflow reference.

Read CONTRIBUTING.md for development setup and pull-request expectations. Security issues should follow SECURITY.md.

Machinist is released under the MIT License.

New run offers two modes. Standard pipeline runs Triage, optional Spec, Build, independent Review, and human merge. Single agent runs one operational task or automation without a separate reviewer. Requested repository changes still use PR delivery and human merge; unchanged operational tasks return a result. There is no custom workflow editor. The compact table includes stage progress dots.

API clients set recipe to factory or single and supply a stable client_request_id. Repeating the same request after a lost response returns the same job. A changed payload with that ID returns 409. Existing workflow: "factory" submissions remain compatible.

On upgrade, the app snapshots factory.db into jobs.db and archives the old store. Back up the full private runtime directory, including worker outputs. Imported blocked jobs are held private until explicitly reviewed and released. See local job behavior.

Keep the control plane local or on a VM and run individual agent attempts in gVisor Kubernetes Jobs. The first target supports a dedicated Codex subscription login, serialized refresh, restricted egress and trusted GitHub PR publication. See Kubernetes setup and recovery.