vibeOS (vibeos.sh)

Aleks Bykhun’s AI-native browser desktop for Codex & ChatGPT agents — a real i686 Linux VM in WebAssembly, a desktop shell (menu bar, dock, windows), and an agent that edits the system and writes apps on demand. One docker run gets you the same desktop locally, with no request to our servers.

vibeos.sh/app · source · MIT · experimental

try it

Open vibeos.sh/app in a Chromium browser (Chrome, Edge, Arc, …). No install. Sign in with ChatGPT (Codex) or paste your own API key — keys stay in the browser and go straight to the provider.

what this repo is

path	what it is
web/	Browser build — static page + v86 WASM Linux (web/README.md has fetch/serve steps). This is what powers vibeos.sh/app.

The browser tab is the product most people mean by “vibeOS”: the guest runs uname for real; agents call tools like vm_exec, edit_file, and create_app against that stack. External agents (Claude Code, Cursor, Codex) can drive the same desktop through vibeos-mcp — pairing instructions live in the app under Settings → Capabilities.

learn more on vibeos.sh

• Home — overview and Docker quick start on the landing site

• The AI operating system for Codex & ChatGPT agents — what “AI OS” means here, MCP, and how this differs from chat-only clients

• How to use vibeOS — the hosted page, the Docker image, pairing an agent

• Linux in the browser — what v86 is doing and what it costs

• Computer use — giving an agent a machine rather than a chat box

• Is vibeOS real? — history, satire vs substance, naming collisions

not this project

Unrelated projects also called “VibeOS”:

• kaansenol5’s VibeOS — a QEMU-based OS built with coding agents; different author, different stack.
• VibeOS Cloud (os.vibeoscloud.com) — a separate browser OS product with its own cloud sync and SDK; no affiliation.

This repository is caffeinum/vibeOS — open source, MIT, maintained by Aleks Bykhun (@caffeinum).

run locally

browser build (web/)

See web/README.md. Short version:

cd web && ./fetch-assets.sh && bunx serve .
# open http://localhost:3000

Hosted at vibeos.sh/app, the page also uses small APIs on vibeos.sh (/api/agent/prompt, OAuth relay). A static local serve is enough to boot the VM; the full tool-using agent needs those endpoints or the container build below.

run the whole thing yourself (Docker)

docker run -p 127.0.0.1:3000:3000 ghcr.io/caffeinum/vibeos
# then open http://localhost:3000/app

linux/amd64 + linux/arm64, ~625 MB. That is the same desktop as vibeos.sh/app, served entirely from the container: the static page, both chunked Linux disks, the BusyBox ISO, the guest's networking, the agent relay and the CORS proxy. No CDN, no account, no API key. The check behind that fails if any request leaves the container while the desktop boots, websockets included — which is the claim that matters, because it is the claim the hosted page cannot make. Once you are using it, the guest's own traffic goes out through the container, and a model key you paste goes straight to your provider: both leave your machine, neither goes to us.

Two things it does not do, because the honest version is shorter than the discovery:

• Past loopback there is no access control. Origin and Host checks stop a page you merely visit from reaching it, but they constrain browsers — a program sets both headers itself. There is no authenticated ingress, so the 127.0.0.1: above is load-bearing and remote or multi-user deployment is unsupported.
• It is not a sandbox. By default the guest and the proxy reach your LAN and this host's services, deliberately — that is the point of running it locally. Link-local and cloud metadata addresses stay refused even so. The accurate line is "nothing goes to our servers" — not "nothing leaves your box", which the guest's own web traffic does, and not "it cannot touch your machine", which the LAN reach contradicts.

No model key is needed or used by the server: you paste yours into the desktop and the browser calls your provider directly.

Pairing an external agent needs --relay, because the package defaults to the public relay. Copy the line the desktop's agent pane prints:

claude mcp add vibeos -- npx vibeos-mcp --token <token> --relay ws://localhost:3000/api/mcp/relay

A bare npx vibeos-mcp link is refused by a self-hosted desktop, on purpose, naming the command that fixes it.

where the published image comes from

ghcr.io/caffeinum/vibeos is built from the landing repo (private), not from this one. web/ is the source of what that image and vibeos.sh/app serve: the landing repo pins this repo as a submodule and copies web/ at build time, so a desktop change lands here first and reaches the site when the landing repo moves its pin.

the legacy Next.js app

The original vibeOS — a Next.js/tRPC server with an embedded Chromium driven over CDP, terminals and agent chat — lived in src/ and was removed from main. It is preserved at the legacy-nextjs tag.

license

MIT — see LICENSE.