Reef Editor

A branded Code-OSS distribution where every agent action is provable. Reef runs governed agentic sessions inside a familiar editor and records each action as a tamper-evident evidence link — verify a session and it goes green; change one byte of the log and it goes red. Closed agentic IDEs show you governance (a badge, a credits meter, a list of PRs to trust); Reef lets you prove it.

Part of Octopus Core — open infrastructure for governed AI. This repo is the editor distribution; the governance engine lives in octopus-reef.

What's inside

• Governed "Let's build" chat — describe a task; a governed session runs it (BYOK model or the offline mock driver), every turn plan → actions → diff → verify badge. Real-agent runs proven live on Claude Sonnet 4.5 via Bedrock.
• Specs — an octopus-workstate provenance graph (proposed → done); illegal transitions rejected, every transition an evidence link.
• Steering & Skills, Agent Hooks, Powers / MCP (native governed tool calls, un-allowlisted tools denied), Usage (honest, API-sourced tokens/cost — no fake meter), Browser (preview + governed CDP DOM reads + annotate → agent), Agent Focus window.
• Chat affordances: / commands · # workstate tasks · @ role-agents (@code/@tool/@cli:claude|codex|gemini).
• Two editions — Community (BYOK only, open source) and Commercial (BYOK or Octopus-hosted Bedrock gateway, account/entitlement, plan quota, team/SSO/audit). Even the commercial gating is evidence-logged.

Install (macOS, Apple Silicon)

Download the notarized build from the latest Release, unzip, and move Reef.app to /Applications. It's Developer ID signed + notarized (Gatekeeper opens it without warnings). Extensions install from Open VSX.

Build from source

./scripts/build-m3.sh      # clones Code-OSS + the pinned octopus-reef payload, builds Reef.app
./scripts/sign.sh          # Developer ID sign (needs your cert) — see acceptance/M5.md
./scripts/package.sh       # → dist/Reef-darwin-arm64-<ver>.zip + .sha256

The build pins a commit of octopus-reef branch reef-editor-payload (the @octopus-reef/ide extension + daemon). See docs/ for the plan, editions, and native-surface design, and acceptance/ for the store-untrusting verification record of every milestone.

Status

Public beta ready for macOS arm64. The current tracked payload pin lives in reef-payload.lock.json, and the bundled payload manifest records the exact source commit plus SHA-256 for every built-in file. Run the release metadata gate before publishing:

./scripts/check-public-beta.sh

Windows/Linux packaging and production commercial backends (hosted gateway, license, team, SSO) are planned; the commercial client runs against local stubs today. Governance is verifiable and adversarially tested.

License

See LICENSE. Community edition is open source; commercial-only components are a separate layer.