<div align="center">

English · 简体中文

Unfour

A local-first desktop workspace for backend developers that combines API debugging, SSH terminals, and database management — and exposes them to your AI agent through a local MCP server.

</div>

Built with Codex & GPT-5.6

Codex was used to review the Rust and TypeScript architecture, implement and refactor Tauri commands, add tests, and investigate build failures and MCP process lifecycle issues.

GPT-5.6 helped design AI-assisted backend troubleshooting workflows, analyze SSH and database permission boundaries, refine MCP tool design, and plan the project architecture and release process.

Codex is also more than a development tool for Unfour: through the Unfour MCP server, it can use API, SSH, and database capabilities to reproduce an API issue, inspect service logs, query the database, correlate the evidence, and identify the root cause.

Sensitive operations remain under developer control. Workspace scope, credential handling, host trust, confirmations, and tool permissions constrain what Codex can access and execute; connecting Codex does not grant unrestricted access by default.

[!WARNING] The source tree is preparing the Community Stable v0.5.0 release. It is unsigned and still requires release verification; installers may trigger SmartScreen or other operating-system security warnings.

Download

Download published builds from GitHub Releases. The latest stable release is v0.4.0; v0.5.0 will appear there after the release is published.

• Windows: NSIS .exe installer.
• macOS and Linux packages are experimental and unverified until real-device smoke checks are recorded; do not treat them as supported or verified yet.
• Verify downloaded installers with the release SHA256SUMS.txt asset.

What Is Unfour?

Unfour is a local-first desktop workspace for backend and operations work. It keeps API requests, SSH connections, database connections, local activity, and workspace layout in one local-first application, and exposes those capabilities to your AI agent through a local MCP server. This foundation supports AI-assisted troubleshooting workflows across those tools.

The app is built with Tauri 2, React, TypeScript, and Rust. The frontend owns the workbench UI, while security-sensitive execution such as HTTP, SSH, database drivers, local storage, and credential references lives behind Rust capability crates and the command bus.

Modules

• API Client - Compose and send HTTP requests, organize saved requests into collections and folders, resolve shared workspace variables, inspect response body/headers/cookies/timing, run saved pre-request and post-response scripts, review script tests and console output, and keep redacted history.
• SSH Terminal - Manage SSH connections and terminal sessions (split panes, search, clipboard context menu, persistent redacted command history and typing suggestions, host-key trust, redacted logs), browse and transfer remote files over SFTP, and automate multi-step SSH tasks (command, upload, download) from the Connections / Files / Tasks sidebar.
• Database - Manage database connections, browse schemas, run SQL with confirmation-aware safety checks (including multi-statement Run Current / Run All), preview and edit table rows, and review query output.
• Workspace - Scope saved requests, shared environments/variables, connections, activity, tabs, and layout state to a local workspace, with title-bar active-environment switching.
• MCP integration for Codex-powered API, SSH, and database debugging - Expose safe local diagnostic tools to MCP clients (such as Codex, Claude Code, or Cursor) through the same command bus used by the desktop app, so your AI agent can work with the same API, SSH, and database context.

Screenshots

App overview — sidebar with module switcher and the API Client workspace

API Client — request builder with params, auth, headers, body, and response

SSH Terminal — connections, sessions, remote files, and tasks

Database — schema browsing and SQL query output

Local Development

Requirements:

• Node.js and pnpm.
• A stable Rust toolchain.
• Tauri 2 prerequisites for your operating system.

Install and run:

pnpm install
pnpm tauri dev

pnpm install also installs Git hooks through lefthook. A commit formats staged Rust files with cargo fmt and auto-fixes staged TypeScript with ESLint. Skip once with LEFTHOOK=0 git commit.

Common commands:

pnpm tauri build        # create local Stable-channel Tauri bundles
pnpm tauri build:test   # create isolated Test-channel Tauri bundles
pnpm run build          # build the desktop frontend only
pnpm run check          # frontend build + Rust check + large-file check
pnpm run lint           # ESLint
pnpm run test           # frontend unit tests (Vitest)
pnpm run test:e2e       # Playwright smoke tests
pnpm run check:rust     # cargo check --workspace
pnpm run check:rust:ssh # cargo check with the ssh-native feature
pnpm run test:rust      # cargo test --workspace
pnpm run test:release-env # release/channel contract unit tests

Run commands from the repository root unless a package document says otherwise. pnpm tauri dev defaults to the Test release channel, while local pnpm tauri build defaults to Stable. Use pnpm tauri build:test for an isolated Test-channel bundle. Set UNFOUR_STORAGE_PROFILE=dev when development data should use ~/.unfour-dev; this storage override is independent from release identity. Only CI should create formal publishable Stable artifacts, with UNFOUR_RELEASE_CHANNEL=stable and an exact UNFOUR_BUILD_COMMIT.

Project Layout

Path	Role
apps/desktop	Tauri/Vite desktop app entry and Tauri adapter layer.
packages/app-shell	Global shell composition and module mount slots.
packages/api-client	API Client frontend module.
packages/ssh-terminal	SSH Terminal frontend module.
packages/database	Database frontend module.
packages/workspace-core	Shared frontend workspace state.
packages/workspace-environments	Workspace environments and variables management UI.
packages/workspace-local	Reserved local workspace lifecycle boundary.
packages/ui	Shared UI primitives and stateless layout helpers.
packages/command-client	Typed Tauri command wrappers and frontend command types.
crates/*	Rust backend capability crates and adapters.

See docs/architecture/project-structure.md for the full package and crate map.

Release Status

The source tree is preparing Community Stable v0.5.0; the latest published stable version is v0.4.0. Release readiness is documented in:

• docs/testing/release-verification.md
• docs/testing/manual-test-cases.md
• docs/release/release-checklist.md
• docs/release/distribution.md
• docs/release/signing.md

Windows distributes an NSIS .exe installer. Installers are unsigned and may trigger SmartScreen. macOS and Linux remain experimental/unverified until real-device smoke checks are complete. Do not claim a release check passes unless it was run successfully for the target platform or is backed by current repository evidence.

Documentation

• AGENTS.md - repository rules for coding agents.
• docs/agents/START_HERE.md - scoped onboarding path for AI agents.
• docs/architecture/package-boundaries.md - package ownership and forbidden dependency directions.
• docs/architecture/project-structure.md - repository, package, crate, and call-chain map.
• docs/architecture/data-storage.md - workspace data, SQLite, credential references, and local activity rules.
• docs/architecture/diagnostics.md - local structured logs, redaction, retention, diagnostic bundles, and developer logging guidance.
• docs/architecture/security-model.md - security posture, redaction, host-key policy, and dangerous-action rules.
• docs/mcp/overview.md and docs/mcp/tools.md - local MCP server behavior.
• docs/testing/release-verification.md - release verification matrix.
• docs/release/release-checklist.md - public release checklist.
• docs/user/USER_GUIDE.md - user-facing workflow guide.

Contributing

Please read CONTRIBUTING.md, CODE_OF_CONDUCT.md, and the package boundary rules in AGENTS.md before opening a pull request.

Security issues should be reported through SECURITY.md, not a public issue.

License

Licensed under the Apache License 2.0.