Clawdius

The High-Assurance AI Engineering Engine. Native Rust. Formal Proofs. Multi-Platform Gateway.

Clawdius is a next-generation AI coding engine built in Rust. It provides a terminal UI (TUI), CLI, and multi-platform messaging gateway for agentic coding — connecting chat platforms (Telegram, Discord, Slack, Matrix, and more) to a formal-verification-backed code generation engine.

Highlights

• 3,044 tests, 0 failures across 12 workspace crates
• 0 clippy warnings (-D warnings strict)
• 318 Lean4 formal verification theorems compiled and verified (21 proof libs + 1 exe via lake build)
• 15+ feature flags compile independently
• deny(unsafe_code) in all 11 workspace crates; SIMD primitives isolated in clawdius-unsafe
• 25 MB + 15 MB release binaries (LTO, stripped, codegen-units = 1)
• 162,815 lines of production Rust code

Features

• Multi-Provider LLM — 11 providers: Anthropic, OpenAI, Google Gemini, xAI (Grok), Mistral, DeepSeek, OpenRouter, Ollama, Z.AI, OpenCode Go, Local with automatic retry
• Multimodal Chat — Image attachments via direct API calls (Anthropic, OpenAI, Google)
• JSON/Structured Output — ResponseFormat enum with schema support for reliable parsing
• Tool Calling — All 11 providers support function/tool calling
• MCP Integration — Server + Client + Router for external tool discovery and execution
• Terminal UI — 60 FPS ratatui TUI with 25+ commands, streaming responses, file watching
• Agentic Engine — Sprint execution, auto-fix, code generation with tool use (file, shell, git)
• Parallel Agents — DAG-based task decomposition with concurrent execution of independent subtasks
• Session Hooks — AgentHook trait for tool call interception and audit logging
• Messaging Gateway — 9 platform adapters (Telegram, Discord, Slack, Matrix, Signal, Teams, WhatsApp, Rocket.Chat, Webhook)
• Formal Verification — 318 Lean4 proofs for sandboxing, concurrency, security, and data structures
• 8 Sandbox Backends — Direct, Filtered (explicit opt-in only), Bubblewrap, sandbox-exec, Container, gVisor, Firecracker, WASM. If no isolating backend is available, command execution refuses by default with remediation guidance instead of degrading to the bypassable blocklist.
• Enterprise Auth — OIDC + SAML 2.0 SSO, RBAC (21 permissions, 4 roles), API key middleware
• Audit Logging — 6 backends: Memory, File, SQLite, Syslog, Elasticsearch, Webhook
• Budget Enforcement — Per-session cost limits with real-time tracking
• Task-Aware Routing — 7 task types (Think/Plan/Build/Test/Review/Summarize/Chat) with automatic model selection
• Session Management — Persistent conversations with auto-compact, per-chat isolation
• File Watching — Real-time file monitoring with debounced drift and debt analysis
• Code Analysis — Architecture drift detection, technical debt scoring, graph-RAG intelligence
• Embeddings — OpenAI and Google embedding APIs for semantic search

Workspace Structure

clawdius/
├── crates/
│   ├── clawdius/              # TUI + CLI binary (25 MB release)
│   ├── clawdius-core/         # Core library (~162K lines)
│   ├── clawdius-gateway/      # Messaging gateway binary (15 MB release)
│   ├── clawdius-code/         # VSCode extension helper (JSON-RPC)
│   ├── clawdius-mcp/          # Model Context Protocol server
│   ├── clawdius-plugin-sdk/   # Plugin development SDK
│   ├── clawdius-lsp/          # Language Server Protocol server
│   ├── clawdius-ui/           # UI components
│   ├── clawdius-tauri/        # Tauri desktop app
│   ├── clawdius-web/          # Web interface
│   ├── clawdius-auth/         # Authentication (OIDC, SAML, RBAC)
│   └── clawdius-unsafe/       # SIMD primitives (unsafe code isolation)
├── .specs/                    # Yellow Papers, Blue Papers, Lean4 proofs
├── SECURITY.md                # Dependency risk inventory
└── Cargo.toml                 # Workspace configuration

Quick Start

1. Install

# From source (requires Rust 1.92+)
git clone https://github.com/WyattAu/clawdius
cd clawdius
cargo build --release

# Binaries: target/release/clawdius (25 MB)
#           target/release/clawdius-gateway (15 MB)

2. Configure

# Set your LLM provider API key
export DEEPSEEK_API_KEY="sk-your-key"
# Or: export ANTHROPIC_API_KEY="sk-ant-..."
# Or: export OPENAI_API_KEY="sk-..."

clawdius --version

3. Chat (TUI)

clawdius                    # Launch interactive TUI
clawdius chat "hello"       # Quick message from terminal

4. Agentic Commands

clawdius sprint "build a REST API"    # Execute full sprint lifecycle
clawdius auto "fix the tests"         # Auto-fix with tool use
clawdius generate "add logging" -o .  # Generate code into directory
clawdius analyze                      # Run drift + debt analysis

5. Messaging Gateway

# Start gateway with Telegram
export TELEGRAM_BOT_TOKEN="123456:abc..."
clawdius-gateway --platform telegram --provider deepseek

# Health check
curl http://localhost:8081/api/gateway/health

TUI Commands

Command	Description
:sprint <query>	Execute sprint lifecycle with LLM
:auto <query>	Auto-fix with tool use
:generate <query>	Generate code into directory
:build	Run cargo build
:test	Run cargo test
:doc	Generate documentation
:verify	Run Lean4 proof verification
:checkpoint	Create file checkpoint
:timeline	View file timeline
:memory	Manage CLAWDIUS.md
:analyze	Run drift + debt analysis
:config show	Display current config
:watch	Toggle file watcher
:sessions	List/manage sessions
:workspace	Switch workspace
:quit	Exit TUI

CLI Commands

clawdius chat "message"           # Send message to LLM
clawdius sprint "task"            # Sprint execution
clawdius auto "task"              # Auto-fix
clawdius generate "task" -o dir   # Generate code
clawdius analyze                  # Code analysis
clawdius test                     # Run tests
clawdius doc                      # Generate docs
clawdius verify                   # Lean4 verification
clawdius timeline                 # File timeline
clawdius memory                   # Project memory
clawdius sessions                 # Session management
clawdius watch                    # File watching
clawdius index                    # Build code index

Feature Flags

Feature	Description	Default
keyring	OS keyring for API keys	On
crash-reporting	Sentry crash reporting	Off
browser	Browser automation	Off
embeddings	ML embeddings (candle)	Off
local-llm	Local LLM support	Off
vector-db	Vector database (lancedb)	Off
orchestrator	Multi-agent orchestration	Off
redis-queue	Redis job queue	Off
postgres	PostgreSQL storage	Off
mariadb	MariaDB storage	Off
stripe	Stripe billing	Off
telegram	Telegram gateway adapter	Off
discord	Discord gateway adapter	Off
slack	Slack gateway adapter	Off
matrix	Matrix gateway adapter	Off

# Minimal build
cargo build --release

# With gateway platforms
cargo build --release --features telegram,discord

# Full build
cargo build --release --features "keyring,embeddings,vector-db,postgres"

Binary Size Comparison

Configuration	Dependencies	Binary Size
Minimal	~350	clawdius 25MB, clawdius-gateway 15MB
+embeddings	~400	~35MB
+vector-db	~450	~30MB
Full	~696	~40MB

---

Configuration

# ~/.clawdius/config.toml

[llm]
default_provider = "deepseek"
max_tokens = 4096

[llm.deepseek]
model = "deepseek-chat"

[llm.retry]
max_retries = 3
retry_on = ["rate_limit", "timeout", "server_error"]

[shell_sandbox]
timeout_secs = 120
restrict_to_cwd = true
blocked_commands = ["rm -rf /", "mkfs", ":(){ :|:& };:"]
# Refuse to execute when no real isolation backend (bubblewrap, Docker/Podman,
# gVisor, sandbox-exec) is installed. Setting true permits degraded, unisolated
# execution (blocklist only — trivially bypassed). DANGEROUS.
allow_unisolated = false

Messaging Gateway

Connect Clawdius to chat platforms for remote coding:

# Telegram
clawdius-gateway --platform telegram --provider deepseek

# Multiple platforms
clawdius-gateway -p telegram -p discord -p slack

# Admin API on :8081, webhook on :8080
clawdius-gateway -p telegram --port 8080 --admin-port 8081

Platform	Polling	Edit	Auth
Telegram	Long-poll	Yes	Bot API token
Discord	Gateway	Yes	Bot token
Slack	Socket Mode	Yes	Bot token + app token
Matrix	Sync	Yes	Homeserver + token
Signal	REST poll	No	Account number
Teams	REST	No	App ID + password
WhatsApp	Cloud API	Yes	Access token
Rocket.Chat	REST	Yes	Auth token
Webhook	HTTP POST	No	URL + secret

Development

# Run all tests (3,044 tests)
cargo test --workspace

# Clippy (0 warnings, strict)
cargo clippy --workspace -- -D warnings

# Security audit
cargo audit

# Lean4 proofs
lake build

# Check specific feature flag
cargo check -p clawdius-core --features postgres

Quality Metrics

Metric	Value
Test suite	3,044 tests, 0 failures
Clippy warnings	0 (-D warnings)
Lean4 proofs	22 files / 318 theorems, 21 proof libs + 1 exe via lake build verified
Feature flags	15+ compile independently
Unsafe code	deny(unsafe_code) in all 11 crates; SIMD primitives in clawdius-unsafe
Codebase	429 files, ~160K lines
Release binaries	25 MB (CLI) + 15 MB (Gateway)

License

Apache 2.0 — see LICENSE for details.

---

"Build like an Engineer. Verify like a Mathematician. Deploy like an Operator."