Concept Exploration — gblock-party

Final • Updated 2026-05-25 • Answers integrated • Previous version

Personal: Summary

Brief 1 — Personal

A persistent managed development environment that runs multiple Codex CLI sessions in parallel, controlled from browser or phone. Five integrated surfaces — Agent Board, Terminal, VS Code, Browser Preview, and File Explorer — provide a complete AI coding workstation with zero public inbound access.

This is the personal dogfood environment. Agent Board + Terminal are the priority surfaces. VS Code, Preview, and File Explorer are deferred to existing tools.

Personal: Problem Hypothesis

Running AI coding agents locally is constrained by:

  • Resource limits: laptop CPU/RAM caps out at 3-5 parallel agent sessions.
  • No mobile access: can't monitor, approve, or review agent work from phone.
  • No orchestration UX: no unified view of what multiple agents are doing, their status, or their outputs.
  • Session fragility: closing a laptop kills sessions; tmux helps but has no GUI.
  • Security gaps: agents run with full local access, no guardrails on sensitive files.

Personal: Beneficiary Hypothesis

The sole beneficiary is you — a solo developer who wants to run 5-12 parallel AI coding sessions across multiple repos, monitor them from Mac and iPhone, and maintain a locked-down security posture.

Personal: Value Wedge

Human-in-the-loop multi-agent orchestration from any device.

  • See all active agent sessions in one view with real-time status.
  • Start, pause, resume, and kill sessions from browser or phone.
  • Approve or reject risky actions (package installs, file reads, git pushes).
  • Preview running apps alongside the agents building them.
  • Review diffs before pushing.

Development Priority

Agent Board + Terminal first. These are the two most critical surfaces. VS Code, Browser Preview, and File Explorer are deferred — existing tools (code-server, direct Tailscale tunnel) cover those needs until the core orchestration UX is proven.

Decision: Personal development priority

Resolved: Agent Board + Terminal first. VS Code, Browser Preview, and File Explorer are deferred.

Rationale: These are the two most critical surfaces. Existing tools (code-server, direct tunnel) cover the deferred surfaces until the core orchestration UX is proven. (Q1: Personal — Value Wedge.)

Personal: Constraints

ConstraintDetailSource
ProviderHetzner Cloud US [internal architecture decision]Decided
Default machineCCX33 (8 vCPU, 32 GB RAM)Decided
Burst machineCCX43 (16 vCPU, 64 GB RAM)Decided
Scaling ruleDo not expand root disk on scale-upDecided
OSUbuntu LTSDecided
Network postureZero public inbound portsDecided
Access layerBoth: Tailscale for direct terminal/SSH, Cloudflare Tunnel for web dashboard/PWAResolved Q2
Agent CLIsCodex CLI first (better programmatic API via exec --json); Claude Code deferred pending ToS reviewResolved Q3
Session managementtmux-basedDecided
Browser IDEcode-server or OpenVSCode Server (deferred surface)Decided
Code structureMonorepo shared with commercial SaaSDecided

Decision: Access layer selection

Resolved: Both in parallel — Tailscale for terminal, Cloudflare Tunnel for web dashboard/PWA. (User note: "Tailscale for terminal, Cloudflare Tunnel for Website".)

Rationale: Tailscale provides direct, low-latency mesh VPN access for terminal/SSH sessions. Cloudflare Tunnel provides authenticated web-facing URLs for the Agent Board PWA and preview ports. They complement each other — Tailscale for dev-level access, Cloudflare for the web control surface. (Q2: Personal — Constraints.)

Personal: Non-Goals

  • Enterprise compliance or certifications
  • Multi-user or team features
  • Kubernetes or container orchestration
  • Multi-cloud or autoscaling beyond CCX33/CCX43
  • Native iOS app (PWA only)
  • Model provider billing or API key resale
  • Public SSH or publicly exposed web ports
  • GitHub Actions CI/CD
  • Full remote desktop experience

Personal: Assumptions & Unknowns

Confirmed Assumptions

  • Hetzner CCX33 provides sufficient compute for 5-10 parallel agent sessions. [internal architecture decision, from prompt]
  • Tailscale + Cloudflare Tunnel provides adequate dual-layer access. [resolved Q2]
  • tmux is the right session management primitive. [from prompt]
  • Agent Board + Terminal are the priority surfaces. [resolved Q1]

Unknowns Requiring Validation

#UnknownRiskNotes
1Codex CLI programmatic controlCriticalTechnical spike before any UI. Codex has exec --json (JSONL events) and -o FILE. Spike should validate whether these provide sufficient control for the Agent Board.
2Permission prompt interceptionCriticalCodex has --dangerously-bypass-approvals-and-sandbox and -s MODE sandbox policies. May provide a path for web-based approvals.
3Session state observationHighCodex --json JSONL output may stream status events. Needs spike validation.
3.5Claude Code ToS complianceHighPotential terms-of-service concerns with programmatic control. Focus on Codex first; revisit after ToS review.
4Output streamingMediumHow to stream agent output to web UI in real time.
5Resource ceilingLowWhether CCX33 handles 10+ parallel sessions. Testable empirically.

Decision: CLI integration investigation approach

Resolved: Technical spike before any UI work, focused on Codex CLI first; Claude Code integration deferred pending ToS review. (User note: "I'm worried about Claude Code terms of service, so we might just focus on codex cli for now.")

Rationale: Major pivot. Codex CLI has codex exec --json for JSONL event streaming, which is significantly more automation-friendly for programmatic control. See Codex CLI Reference below. (Q3: Personal — Unknowns.)

Codex CLI Reference

Key Codex CLI capabilities relevant to the Agent Board:

  • codex exec "prompt" — Run a prompt non-interactively (alias: codex e)
  • --json — Print events to stdout as JSONL (state observation, output streaming)
  • -o, --output-last-message FILE — Write agent's final message to a file
  • --output-schema FILE — Constrain final response shape with JSON Schema
  • -s, --sandbox MODE — Sandbox policy: read-only, workspace-write, danger-full-access
  • --dangerously-bypass-approvals-and-sandbox — Skip prompts (for externally sandboxed envs)
  • --ephemeral — Don't persist session files
  • --color never — Disable color output (for piping)
  • -m, --model MODEL — Select model
  • -i, --image FILE — Attach image(s)
  • -p PROFILE — Select config profile (NOT equivalent to Claude Code's -p)

Note: Codex's -p selects a configuration profile from config.toml, not print/prompt mode. The equivalent of Claude Code's -p is codex exec. Stdin is also supported — if no prompt argument is given, instructions are read from stdin.

Personal: Next Steps

Resolved sequencing: Business discovery first, then technical spike.

  1. /pack install business-discovery — install research skills for commercial concept.
  2. /icp — validate beneficiary hypotheses (starting with power users / solo founders).
  3. Technical spike on codex exec --json — prove feasibility of programmatic control before any UI work.
  4. /feature-interview on Agent Board + Terminal once CLI strategy is confirmed.

SaaS: Summary

Brief 2 — Commercial SaaS

A browser/mobile SaaS control plane for AI coding agents on gblock-party's managed cloud infrastructure. Users connect their preferred front-end tool (T3 Code, Multica, Claude Code CLI) or use the native Agent Board.

All infrastructure is managed by gblock-party.

Builds on the personal workstation codebase via a shared monorepo.

SaaS: Problem Hypothesis

Developers increasingly use AI coding agents but face these problems at scale:

  • No remote orchestration: agents run in local terminals with no mobile or browser access.
  • No multi-agent visibility: 5+ agents means 5+ terminal tabs, no unified status view.
  • No safe approval workflow: permission prompts require physical presence at the machine.
  • No session persistence: closing a connection loses context.
  • Security gaps: agents have full machine access, no guardrails.
  • Setup burden: configuring a secure remote dev environment requires significant sysadmin effort.

SaaS: Beneficiary Hypothesis

Primary ICP starting hypothesis: Power users / solo founders

To be validated by ICP analysis. Other segments for later investigation:

  • Freelancers / agency developers: multiple client projects, session isolation, mobile access.
  • Security-conscious developers: zero-inbound architecture, audit trails.
  • Small teams: shared visibility without full machine exposure.

Secondary (managed IaaS tier)

  • Non-sysadmin developers: turnkey devboxes without server setup.

Decision: ICP priority segment

Resolved: Power users / solo founders as the starting hypothesis for ICP analysis. (User note: "we'll leave this to the ICP to investigate and confirm".)

Rationale: This is a starting hypothesis only; ICP analysis will validate or redirect the segment. (Q4: SaaS — Beneficiary.)

SaaS: Value Wedge

Human-in-the-loop multi-agent orchestration from browser and mobile.

vs.Gblock Party advantage
Local CLI usageRemote access, mobile, multi-agent visibility, session persistence
Browser IDEs (Gitpod, Codespaces)Agent orchestration focus, not just "code in browser"
T3 CodeBetter mobile UX, zero-inbound security, session management, diff review, approval workflow
Self-managed VPS + tmuxTurnkey control plane, no sysadmin, Agent Board UX

SaaS: Constraints

ConstraintDetailSource
Build orderPersonal workstation built and dogfooded firstDecided
Code structureMonorepo shared with personal versionDecided
Commercial modelHybrid SaaS + optional managed IaaSDecided
Host OSUbuntu LTS (initial target)Decided
Network postureHost-initiated outbound onlyDecided
Agent CLIsCodex CLI first; Claude Code deferred pending ToS review; OpenCode laterResolved Q3
Managed infra providerHetzner [internal architecture decision]Decided
No GitHub ActionsProject does not use GitHub ActionsDecided

SaaS: Assumptions & Unknowns

Confirmed Assumptions

  • Agent Board (multi-agent orchestration) is the core value. [from prompt]
  • Hybrid SaaS + optional managed IaaS is the best path. [from prompt]
  • Zero-inbound security posture is a genuine differentiator. [from prompt]
  • BYO-client SaaS should come before full managed IaaS. [from prompt]

Unknowns Requiring Validation

#UnknownRiskCategoryNotes
1Codex CLI programmatic controlCriticalFeasibilitySpike on codex exec --json. Must be resolved during personal dogfood.
2Permission prompt interceptionCriticalFeasibilityCan prompts be routed through web UI?
3Session state observationHighFeasibilityReal-time status from Codex JSONL output.
4Daemon-to-SaaS tunnelHighArchitectureTechnology choice undecided.
5Willingness to payHighMarketPricing genuinely unknown. Defer to monetization research — no anchoring on preliminary ranges.
6Data custody trustMediumMarketTrust barrier for tunneling through SaaS.
7Daemon reliabilityMediumEngineeringAuto-updates, crash recovery on gblock-party's managed infrastructure.
8Multi-agent CLI compatibilityMediumFeasibilityWhether future agents have similar interfaces.

Decision: Pricing confidence

Resolved: Pricing is genuinely unknown. All pricing anchors are removed from the concept briefs and pricing is deferred entirely to monetization research. (User note: "Let the monetization skill investigate and confirm that".)

Rationale: Do not reference $29-79 or $199-499 ranges as starting points; anchoring before research would bias monetization analysis. (Q5: SaaS — Unknowns.)

SaaS: ICP Readiness

Ready for ICP once /pack install business-discovery is run.

ICP Inputs

  • Priority segment: power users / solo founders (starting hypothesis, to be validated).
  • Value wedge: always-on agent workstation, not browser IDE.
  • Pricing: genuinely unknown — deferred to monetization research.
  • Differentiators vs. T3 Code, browser IDEs, raw VPS+tmux.

Assumptions to Test First

  1. Codex CLI programmatic control feasibility (technical spike).
  2. Whether target users currently run multiple AI agents in parallel.
  3. Whether zero-inbound security posture matters or is table stakes.

SaaS: Next Steps

Resolved sequencing: Business discovery first.

  1. /pack install business-discovery — install ICP, competitive analysis, value prop, positioning, lean canvas.
  2. /icp — starting with power users / solo founders hypothesis.
  3. Monetization research for pricing (no anchoring on preliminary ranges).
  4. Technical spike on Codex CLI integration (after business discovery).

Decision: Post-brief sequencing

Resolved: Business discovery first — /pack install business-discovery/icp → then technical spike on Codex CLI.

Rationale: Market validation before engineering investment. (Q6: SaaS — Next Steps.)

Compile Review

Use Compile Feedback to send concerns or clarification requests before answering every gate, or Compile Answers for final approval once all required gate questions are answered. The compiled YAML always includes any optional section feedback you set.