RYOITABASHI
Shelly
TypeScript

AI-powered chat-first terminal IDE for Android. Built entirely on a phone, by someone who can't write code.

Last updated Jul 4, 2026
39
Stars
5
Forks
19
Issues
0
Stars/day
Attention Score
44
Language breakdown
No language data available.
β–Έ Files click to expand
README

Shelly

Shelly

Terminal + AI + Browser + Markdown + Preview
A native Android terminal IDE for running the real Codex CLI in an app-owned PTY, with API-backed AI agents β€” Gemini, Cerebras, Groq, Perplexity, and local models β€” plus Git, Bash, Python, and editors bundled in the APK.
No Termux install, no distro bootstrap, no separate package manager setup. No WebView terminal, no remote IDE bridge.
Open the app, authenticate your own AI accounts, and work in local multi-pane terminals on Android.

Build License Platform Built with Expo TypeScript Buy Me a Coffee

Shelly running Codex and Agent Chat side by side on Android

Demo  ·  Quick Start  ·  Why Shelly?  ·  Features  ·  Architecture  ·  Metrics  ·  Status  ·  Contributing  ·  Support



See it run

AI reading a runtime error and suggesting the fix in real time

https://github.com/user-attachments/assets/113ec26e-d289-4a06-a6d8-ef48158e874c

No Termux. No root. No remote dev server. A real AI coding CLI β€” today, OpenAI Codex β€” invoking on Android, plus an API-backed AI pane that reads terminal output and produces a one-tap fix.


An autonomous agent, scheduled in plain language, that wakes itself to do the work

https://github.com/user-attachments/assets/ab272ae8-c741-4acb-b71d-2da151f50d75

Type @agent and a plain-language instruction. Shelly turns it into a scheduled on-device agent that fires on its own alarm β€” here it set itself for 16:16, woke up while the screen was off, collected sources with the user's own API key, and wrote a primary-source summary to the Obsidian vault. Observed end-to-end once on a Galaxy Z Fold6 (N=1); cross-OEM and deep-Doze behavior is not yet tested beyond this device β€” see Status.



Why Shelly?

Termux is a terminal. ChatGPT is an AI chat. Replit is a cloud workspace. Desktop AI coding CLIs are desktop-first.

Shelly is the workspace that connects those pieces on the Android device you already carry: local terminal work, app-owned native PTYs, Codex CLI, AI panes, browser/docs, previews, and background API agents.

The copy-paste problem

You're running an AI coding tool in a terminal β€” Codex, or any other AI CLI. It throws an error. You copy it. You switch to ChatGPT. You paste. You ask "what went wrong?" You read the answer. You copy the fix. You switch back. You paste. You run it.

Seven steps. Every single time.

This is a familiar workflow for developers using CLI-based AI tools. The terminal and the AI live in different worlds, and you are the copy-paste bridge between them.

Shelly puts the terminal and the AI side by side. The AI reads your terminal output automatically.

Say "fix the error on the right". Shelly reads the terminal output, explains the error, and generates an executable command. Tap [Run] and the fix lands directly in the Terminal pane.

No copy. No paste. No tab switching.

Three levels of value:

  • Single pane: a native terminal that is faster, smarter, and more usable than Termux alone β€” with inline content blocks, autocomplete, syntax highlighting, and clickable errors.
  • Split panes: terminal + AI side by side β€” the AI reads what the terminal shows and executes fixes with one tap. No copy-paste bridge needed.
  • Full layout: sidebar + up to 4 live panes + agent bar β€” a mobile IDE. Browse docs in the browser pane, preview code or markdown on the right, use API-backed agents in the background, and keep your terminal front and center.

Important Android Notes

  • APK is ~800 MB because Shelly bundles real tools, not shims. bash,
Node.js, Python 3, git, curl, ripgrep, jq, tmux, vim, less, sqlite3, make, ssh β€” plus the OpenAI Codex CLI runtime β€” ship inside the APK. No Termux, no repository server, no package manager bootstrap. First launch extracts the binaries into app-private data.
  • All files access is requested on first launch so /sdcard works
the way a desktop terminal expects (cd /sdcard/Download, editing files there, etc.). Scoped Storage without this permission silently blocks writes. You can refuse β€” Shelly still works inside its own sandbox, but /sdcard paths will Permission denied.
  • LD_PRELOAD + /system/bin/linker64 is how Shelly runs Linux-layout
binaries on Android bionic (SELinux blocks direct execve on app-private ELFs). The wrapper rewrites /bin/X and /usr/bin/X to /system/bin/X and routes app-bundled ELFs through linker64. Source is in modules/terminal-emulator/android/src/main/jni/exec-wrapper.c.
  • Not Termux-compatible by design. Shelly does not use Termux
packages, Termux paths, or Termux's prefix assumptions. If you already have Termux installed, Shelly still bundles its own copies of everything. No conflict, but also no sharing.

Quick Start

Install

Download the current Android APK from GitHub Releases. The rolling android-latest release is the source of truth for the newest Shelly build, and the latest tagged vX.Y.Z release APK is cut from that same build β€” the exact versionCode, commit, and SHA-256 are live in android-latest/latest.json.

After the first install, Shelly can update itself from inside the app: open the cloud-download button in the top bar or Settings β†’ Updates. Shelly reads the public android-latest/latest.json manifest, compares Android versionCode, enqueues the APK with Android DownloadManager under /sdcard/Download/shelly-update-<versionCode>/, verifies SHA-256, then opens Android's package installer. The system download keeps running if Shelly is backgrounded or restarted. Android still asks you to confirm the install because Shelly is distributed outside the Play Store.

Expo OTA is disabled for release APKs. JS, native, and bundled-tool changes ship together through a new APK so the installed binary and app code stay in sync.

Build from source

git clone https://github.com/RYOITABASHI/Shelly.git && cd Shelly
pnpm install && pnpm android

Requirements:

  • Android device
  • Node.js 20+ (CI currently builds on Node 20)
  • pnpm
  • Android NDK 26.1.10909125 (or an Android SDK/Gradle setup that resolves that pinned NDK)
Expo Go is not supported β€” Shelly uses native Kotlin/C modules.

Termux is not required. Shelly ships with bash, Node.js, Python 3, git, curl, sqlite3, tmux, vim, less, jq, make, and ripgrep. For tools beyond the bundled set, Termux can be used alongside Shelly.

First launch

On first launch Shelly asks for All files access so the terminal can read scripts in /sdcard/Download and anywhere else on your phone. Tap Allow and you're done β€” source /sdcard/Download/foo.sh just works. Shelly is distributed through GitHub Releases for now; Play Store / F-Droid submission is still future work.

Configure AI

After that, open Settings β†’ API Keys (or run shelly config from the terminal pane) to paste API keys for Gemini, Cerebras, Groq, Perplexity, OpenAI-compatible local servers, or other explicit API providers. Keys are stored in expo-secure-store and never written to logs.

Sign in

Shelly's foreground AI CLI is Codex. Everything else is an API provider you configure with a key.

| Surface | How to sign in | Notes | |---|---|---| | Codex CLI (ChatGPT subscription) | Run codex, or codex-login --open directly | The supported foreground CLI. If ~/.codex/auth.json is missing or invalid, the codex wrapper starts Shelly's device-code login, opens the OpenAI device-code page in the in-app Browser Pane, writes ~/.codex/auth.json (mode 0600) on success, then launches the normal Codex TUI. No OpenAI API key required β€” this rides your ChatGPT subscription. | | API providers (Gemini, Cerebras, Groq, Perplexity, local) | Settings β†’ API Keys or shelly config | Paste a key per provider for AI-Pane / @mention / @team / background-agent use. Keys live in expo-secure-store. Local/OpenAI-compatible servers need only a base URL. |

Codex login note. codex /login inside the REPL is not the supported path on Shelly. Use bare codex and let Shelly's wrapper launch device-code auth, or run codex-login --open from bash.

Bundled Shelly commands

| Command | Use | |---|---| | codex | Launch the foreground Codex TUI in the native terminal. If auth is missing, Shelly starts the device-code login flow first. | | codex-login --open | Start ChatGPT subscription device-code auth and open the verification page in Shelly's Browser Pane. | | shelly-doctor | Check shell/native binary presence, bundled Codex binaries, JS dispatcher, local LLM endpoints, and Codex auth file presence. | | shelly-codex-diagnose | Run deeper Codex smoke/canary/edit/patch diagnostics. | | shelly-update-clis codex --check-only | Probe the active Codex runtime. Runtime installs are normally driven by the Updates UI. | | shelly-cs / cs | GitHub Codespaces helper commands. |


Runtime model

Shelly's headline advantage is the runtime itself: a native PTY and a managed Codex CLI running in the same on-device shell as your files, with API-backed agents layered on top β€” not a WebView terminal, not a remote IDE client.

If your AI coding CLI workflow stalled in Termux, proot, or another Android terminal setup, Shelly gives you a maintained on-device environment built around the constraints of real Android devices (bionic libc, linker64 exec rules, SELinux on appdatafile).

No fragile terminal stack. No WebView terminal crashes. No copy-paste-driven workflow.

  • Native execution path β€” Codex runs through Shelly's app-owned native PTY (JNI forkpty), not a remote bridge or socket terminal.
  • Managed latest, not blind latest β€” Shelly ships a pinned Codex runtime in each APK, and the Updates UI can install a newer verified Codex runtime from the rolling codex-runtime-latest release without waiting for the next APK.
  • Visible state β€” the app can show recent terminal logs, so version drift and startup failures are easier to debug on the device itself.
  • Compliance boundary β€” Codex is a foreground, user-controlled terminal CLI. AI-Pane / background automation uses explicit API providers; it does not run a hidden subscription worker.
This is the part that makes Shelly more than a terminal skin. It is the reason the app can ship a fast-moving CLI on Android without turning the user into the update mechanism.

Release surface

| Surface | Status | What that means | |---|---|---| | Codex CLI | Supported | The foreground CLI. Bare codex launches the normal Codex TUI after Shelly verifies or creates ~/.codex/auth.json through in-app device-code auth, running over the native PTY. | | AI Pane / background agents | Supported through APIs | Uses configured providers: Gemini API, Cerebras, Groq, Perplexity, and local OpenAI-compatible servers. Provider-key based, no hidden subscription reuse. | | Gemini API | Supported where configured | Available for the AI Pane, @gemini routing, @team, multimodal/API-backed tasks, and background agents when a Gemini API key is set. (This is the API provider β€” there is no bundled Gemini CLI.) |


What Shelly is not

Shelly is not a Termux skin, a WebView terminal, or a remote IDE client. It owns the Android terminal stack inside the app, runs Codex on-device in the same shell as your files, and layers API-backed agents next to that terminal instead of forcing you through copy/paste or a cloud workspace.

No Termux install. No proot. No ttyd. No remote bridge.


Features

Features below describe implemented paths in the current build. Items with limited device validation (e.g. voice dialogue, immortal sessions, unattended agent firing) are caveated here and in Status / Coming Soon.

Highlights

| | | |---|---| | On-device autonomous agent | Say it in plain language β†’ a scheduled agent runs on the phone by itself (screen off), on your own keys and tools, and tells you when it ran. It works where a cloud agent can't reach β€” your files, terminal, local LLM, the device itself. One unattended run observed end-to-end on one device (N=1) β€” cross-OEM reliability not yet proven; see Status. (details) | | Cross-pane intelligence | Say "fix the error." AI reads your terminal, suggests a fix, one tap to run. Zero copy-paste. | | AI Edit golden path | Tap a file in the sidebar β†’ preview it β†’ hit [✨ AI] β†’ describe the change β†’ accept per hunk β†’ the file is rewritten on disk, the preview reloads automatically. | | Codex apply_patch on-device | Codex file edits land through the agent's native patch tool on Android, not a shell-only fallback. | | Native PTY (JNI forkpty) | Kotlin + C, direct PTY fd, no TCP/socket bridge β€” an embedded native terminal, not a WebView terminal. | | Batteries included | bash, Node.js, Python 3, git, curl, sqlite3, tmux, vim, ripgrep, jq ship inside the APK. Termux not required. | | 7 pane types | Terminal, Agent Chat, AI, Browser (+ background audio), Markdown, Preview, and Ask. Split up to 4 live panes freely. | | Multi-agent AI | API-backed Gemini, Cerebras, Groq, Perplexity, Local LLM, plus the foreground Codex terminal CLI. Auto-routed or @mention where supported. | | Local LLM (on-device, llama.cpp) | Qwen3.5 models run on-device through the bundled llama.cpp / llama-server flow, with Qwen3.5-2B as the daily-driver default, Qwen3 1.7B / Qwen3.5 0.8B as lighter fallbacks, and 4B+ models reserved for short quality checks. | | Codex on Android | Shelly keeps Codex on a managed-latest path without trusting upstream blindly: each APK bundles a pinned runtime, the Updates UI can promote verified runtime releases, and Reset falls back to the bundled runtime. Codex runs over the native PTY with a Shelly-owned device-code login wrapper. No proot, no root. | | Scouter home widget | A translucent Android widget shows Codex state, model, always-on token / context / limit cells, local LLM health, and device load without opening the app. It is interactive: ASK can deliver a prompt to a live, resumed, or freshly-started Codex PTY; Allow / Deny and up to six widget choice pills answer Codex straight from the launcher. | | Color themes | Blue / Red / Purple palettes run on the existing preset IDs, so runtime swaps keep your shell alive without settings migration. | | Voice input | Speak your commands or AI prompts. Groq Whisper handles transcription, then VoiceChain routes the text through the same input router the keyboard uses. |

Autonomous agents

Say what you want in plain language; Shelly registers a scheduled agent that runs on the device, by itself β€” even with the screen off. It wakes via Android AlarmManager (setExactAndAllowWhileIdle, designed to fire under Doze, unlike cron-under-Termux), runs on-device with your own keys and tools, and tells you when it ran (notification + per-agent next/last-run, with a missed-run warning if an expected run didn't record).

The wedge isn't "smarter than a cloud agent" β€” it's that it works where a cloud agent can't reach: your files, your terminal/scripts, your local LLM, the phone itself.

It's a capability you point at your own tools, not a fixed feature. One example (mine):

@agent every weekday at 8am, collect the latest STEAMΓ—AI education papers and news,
and write the primary-source links + a short summary to my Obsidian vault

The schedule above registers an agent that, when it fires, wakes the phone, researches via Perplexity, and drops a dated, sourced summary into Obsidian β€” unattended. (Observed end-to-end once so far; see the demo and Status for what's actually been verified.) Swap in your own schedule, source, and output.

Honest caveat: unattended firing depends on Android's background limits, which vary by manufacturer (Samsung / Xiaomi / Oppo / OnePlus battery-freezers). Shelly uses Android's highest-priority alarm path (named above) and surfaces missed runs, but it can't guarantee a fire on every device β€” grant the battery-optimization exemption and check the agent's run view.

Scouter Widget

Shelly Scouter widget showing Codex token usage, model state, rate-limit cooldown, local LLM health, and device load

Scouter is Shelly's home-screen status layer. It keeps the current Codex session, local LLM endpoint, token / context flow, rate-limit windows, and device load visible while the phone stays in the launcher or another app. It is not read-only β€” the widget can drive the foreground Codex terminal, resume a stale binding, or cold-start a new Codex PTY for a queued prompt.

What it shows

  • State-colored status β€” the status dot and title track the bound Codex state (idle / thinking / running tool / waiting / error), with the current DOING line
  • Model / cost line β€” the active Codex model plus derived $cost when token counts are available
  • Always-on usage cells β€” CTX, TOK, LIMIT, 5H, and WK stay visible even when Codex is not running; live Codex data wins, otherwise Scouter falls back to the latest sanitized usage snapshot or placeholder dashes
  • Rate-limit quota gauge β€” a 5-cell remaining-quota bar per window (5H / WK), green while healthy and red once it drops to its last cell (~<=25% left)
  • Rate-limit override β€” when the session is throttled the line collapses to RATE LIMITED with the reset detail
  • Reset / session timer β€” a self-ticking chronometer counts down to the rate-limit reset, or counts up the running session
  • Privacy-safe prompt preview β€” only the current widget ASK / approval / choice / error state can occupy the preview; historical JSONL prompts and replies are not surfaced, and closing all Agent Chat tabs blanks the preview area instead of shrinking the widget
  • Local LLM row β€” endpoint, backend, queue depth, and ping for the local server
  • Footer β€” CPU / RAM load and last-updated time
  • Codex pets β€” an optional PET button / pet image renders the bundled demo pet or the user's imported Codex pets without bundling private user pets into the APK

Interactive control

  • ASK β€” tap the ASK pill to type a prompt; Shelly writes it into the bound foreground Codex terminal (clear line, paste, Enter) and returns you to the launcher
  • Cold-start ASK β€” if no Codex or Agent Chat session is available, Shelly queues the widget prompt, opens a terminal, waits for the PTY to become alive, starts codex, waits for the Codex input surface, then delivers the queued prompt
  • Approval pills β€” when Codex is waiting for permission, Allow / Deny pills write y / n straight to the Codex PTY
  • Choice pills β€” for a numbered interactive prompt, up to six widget pills write the chosen digit to the PTY, each carrying the option label; Android notifications expose the first three actions
  • Pet cycle β€” PET starts hidden by default; tap PET to show the first pet, tap the pet image to cycle through available pets, and the cycle hides again after the last pet. Approval / choice action rows take priority over pet controls
  • Pet import β€” Settings -> Scouter -> Import pet ZIP installs user pets into app-private storage. Shelly also discovers Codex/pets and shelly-personal-pets.zip sidecar files on shared storage for users who manage Codex pets outside the APK
  • Stale-tap guard β€” Allow / Deny / choice taps re-parse the live terminal screen and only fire if the same approval anchor or numbered option is still on screen; otherwise they no-op
  • Resume when unbound β€” if the bound terminal has exited, ASK (and a pending approval) queue the prompt/decision and open Agent Chat to resume the session, then drain the queued action
  • How it reaches the terminal β€” the widget's tap handler runs inside the app process and writes straight to the live PTY through the in-process terminal session registry β€” no am start, no IPC; when nothing is bound it opens Agent Chat with a shelly:///agent-chat deep-link to resume first

Layout System

  • Single-screen layout β€” AgentBar (top) + Sidebar (left, collapsible) + PaneContainer (center) + ContextBar (bottom)
  • 7 pane types β€” Terminal (native PTY), Agent Chat (Codex session companion), AI (streaming + context injection), Browser (WebView + bookmarks + background audio), Markdown (viewer), Preview (Code / Image / PDF / CSV / Markdown renderers), and Ask (Shelly help)
  • Preset slot layout β€” up to 4 live panes in single, two-column, three-pane, or four-pane presets; drag the accent-green grip to resize, double-tap it to restore 50/50
  • Layout presets β€” Single Terminal / Terminal + AI / Terminal + Browser / 3-Way Triple, all reachable from the Command Palette
  • Pane-type pill β€” header left shows [TERMINAL β–Ύ] / [AI β–Ύ] / …; tap to change the pane type in place
  • CLI tab strip inside terminal panes β€” multiple shell tabs per pane, [● SHELL][+], close Γ— on non-last tabs
  • Empty-pane recovery β€” the last pane cannot be closed; if the tree ever empties, a 3-button CTA (Terminal / AI / Browser) brings it back
  • ContextBar β€” always-visible footer showing cwd, git branch, and connection status

Cross-Pane Intelligence

  • "Fix the error on the right" β€” AI reads the current terminal transcript and responds with executable fixes
  • ActionBlock β€” code blocks in AI responses get [β–Ά Run] buttons that dispatch to the active terminal pane
  • Pane-aware terminal selection β€” in split layouts, the AI pane prefers the terminal immediately to its left, then the focused terminal, then the first terminal
  • Real-time terminal awareness β€” AI pane snapshots the terminal transcript on dispatch so the model sees what you just saw
  • Terminal-safe context β€” ANSI/OSC/control sequences and TUI redraw noise are stripped before injection; terminal output is treated as untrusted evidence, not instructions
  • Local LLM compaction β€” @local keeps important header/status/error lines and the recent tail so small on-device models still see the useful terminal state
  • Error-file auto-stage β€” when terminal output references a file path, Shelly can stage that file so an AI diff can be accepted directly
  • CLI Co-Pilot β€” in-flight translation of output, approval prompt explanations, session summaries
  • Approval Proxy β€” terminal [Y/n] prompts are lifted into chat-style Approve / Deny / Ask AI buttons so you never type blind 'Y'
  • Error Summary β€” detected errors surface as persistent chat bubbles with [Suggest Fix]
  • Auto-savepoint β€” every edit is auto-committed to a hidden git index so you can revert to any point with one tap
  • Pre-commit secret scan β€” API keys, private keys, and other secrets are blocked before they land in a savepoint commit

Agent Chat β€” chat surface for the bound Codex terminal

  • Chat over the foreground Codex β€” a chat-style pane that mirrors the bound Codex session's timeline (user prompts, Codex replies, tool runs, approvals, errors) parsed from the session JSONL and Scouter snapshots
  • Reply composer β€” type a reply and send; it writes to the bound foreground Codex PTY, not a hidden API worker β€” consistent with Shelly's compliance boundary
  • READY / LOCKED β€” a pill shows whether the bound terminal can accept a reply; when locked, the composer explains why (terminal exited, Codex busy, waiting on a terminal choice, not bound yet)
  • Approve / Deny β€” approval requests surface as bubbles with Allow / Deny buttons that send the decision to the bound Codex terminal; only the latest pending approval is actionable
  • Interrupt β€” a stop button sends a terminal interrupt to the bound Codex while it is working
  • Resume β€” the play button reopens or focuses the bound Codex terminal for the selected session, rebinding it for replies
  • Session tabs β€” recent Codex sessions are shown as tabs (deduped per workspace + model), each with a binding dot; dismiss hides a session from Agent Chat without touching its JSONL on disk
  • Session strip β€” project, status, binding, model, token count, and last-update time for the selected session

AI Edit β€” file edit with Accept / Reject

  • Staged file β€” tap a file in the FileTree; it opens in the Preview pane's Code tab. The [✨ AI] toolbar button stages the file in the AI pane's context.
  • Dispatch β€” write "make the first function Japanese-comment" (or anything) and send. Shelly's system prompt asks the model to respond with a unified diff.
  • InlineDiff β€” the assistant reply is scanned for unified diff blocks and each hunk is rendered with + / - / context coloring plus Accept / Reject buttons.
  • Per-hunk accept writes to disk β€” accepting one hunk calls acceptStagedDiff() with a re-serialised single-hunk diff; the file is rewritten via the native writeFileNative bridge and the Preview pane auto-reloads.
  • Fuzzy re-anchor β€” if the @@ -N line numbers are stale (because a previous hunk already edited the file on disk), the applier searches forward for the hunk's leading context block so successive hunks still land.
  • Accept All β€” takes the same write-back path but applies every pending hunk in one pass.

Terminal Enhancements

  • Fig-style autocomplete β€” top-level commands with subcommand and flag completion, rendered as an inline popup
  • Syntax highlighting β€” terminal output colorized by content type
  • Clickable paths and errors β€” tap a file path or stack trace line to jump to it
  • Inline content blocks β€” JSON, markdown, images, and tables rendered inline inside the terminal output (Command Blocks)
  • CLI notifications β€” long-running commands surface a system notification when they complete
  • Codex notification channels β€” Scouter posts per-category Android notifications, each on its own channel so you can tune importance / sound / mute from Android's notification settings: approvals, choices, and errors arrive as heads-up alerts, rate limits at default importance, completions and long-running quietly. Approval notifications carry one-tap Allow / Deny buttons and choice notifications expose the first three numbered actions; the widget itself can show up to six choice pills. The expanded notification view shows the full request or menu text, and resolved cards are deduped and cancelled so nothing stacks or lingers
  • SmartKeyBar β€” 5 context-adaptive key sets (Default / Vim / Git / REPL / Navigate), swipe to switch
  • Immortal sessions β€” tmux keeps your shell alive when the app is backgrounded; resume any session by name
  • Japanese input in terminal β€” compose CJK characters directly in the terminal pane
  • Readable terminal glyphs β€” the native Kotlin terminal view renders the PTY grid with JetBrains Mono so lowercase, columns, and code output stay legible
  • Atomic paste β€” all paste paths converge on TerminalEmulator.paste(), which wraps payloads in bracketed-paste markers (\e[200~..\e[201~) unconditionally. IME multi-line or β‰₯16-char commits, middle-click mouse paste, and the CommandKeyBar Paste key all reach the same normalizer; multi-line and complex one-liners arrive as one event so readline executes only the trailing newline.

AI Pane

  • Multi-agent routing β€” the router picks the best AI for the task; override with @mention
  • @mention β€” direct AI Pane providers are @gemini, @cerebras, @groq, @perplexity, and @local; utility routes include @team, @agent, @git, @open / @browse, @plan, @arena, and @actions / @ci. There is no @claude β€” Claude Code is not a current provider. Codex remains available as the foreground terminal CLI via codex.
  • Terminal context injection β€” the AI always has access to the current terminal transcript without you pasting anything
  • InlineDiff with per-hunk write-back β€” see above
  • Voice input β€” long-press the mic in the terminal action bar to open VoiceChat; speech β†’ Groq transcription β†’ AI β†’ TTS response
  • Local LLM support β€” use the built-in GGUF catalog and llama.cpp / llama-server controls, then route via @local for fully on-device inference. Qwen3.5-2B Q4KM is the default, Qwen3 1.7B and Qwen3.5 0.8B are lighter fallbacks, and 4B/9B models are intended for short quality checks.

Browser Pane

  • Full WebView β€” navigate any URL inside a pane; keep docs open next to your terminal
  • Bookmarks β€” save and organize URLs; preset icons for YouTube, X, GitHub, and localhost:*
  • Background audio β€” audio keeps playing when you switch panes
  • Link capture β€” share a URL to Shelly from any Android app; it opens in the browser pane
  • Desktop UA toggle β€” πŸ“± / πŸ–₯ button in the URL row swaps the user agent so desktop-only sites behave
  • Video fullscreen β€” six detection paths (W3C / WebKit / video element / monkey-patched APIs) catch YouTube-style fullscreen and maximize the pane, hiding the system nav bar

File Tree

  • Active-repo file list β€” ls -1pa listing for the current working directory with per-extension icon coloring (.tsx sky, .ts blue, .json amber, README.md red, …)
  • Search β€” incremental filter over the current directory
  • Open actions β€” tap a Markdown file to open the Markdown pane, tap anything else to open the Preview pane's Code tab
  • Create / Rename / Delete β€” + file and + folder buttons next to the search field; long-press a row for Rename / Copy path / Delete; modals use the active app palette
  • Breadcrumb β€” tap the .. row to go up

Preview Pane

  • Code tab β€” per-file syntax-highlighted view with line numbers; the [✨ AI] button stages the current file for AI Edit
  • Markdown renderer β€” react-native-markdown-display plus the Shelly palette
  • Image / PDF / CSV renderers β€” inline viewers for common non-code attachments
  • Git diff view β€” git diff <file> shown in the Code tab with neon + / - coloring
  • Recent files β€” quick switcher inside the Preview header

Sidebar

  • Repositories β€” list of bound repo paths; tap to switch; the active repo shows an amber badge with the number of uncommitted files, polled every 20 seconds from git status --porcelain
  • File Tree β€” see above; embedded as a section so it flexes with the sidebar height
  • Tasks β€” recent background-agent runs with duration and status
  • Device β€” quick-access folders (~, /sdcard/Download, …) that re-bind the file tree in one tap
  • Ports β€” designed to list loopback / wildcard listeners and open http://localhost:<port> in the Browser pane. Android 10+ SELinux currently blocks the /proc/net/tcp{,6} reads for normal apps, so this remains tracked as a platform limitation in Status.
  • Profiles β€” saved SSH connections. Tap to insert ssh -i KEY user@host -p PORT into the active terminal pane; long-press to edit or delete; Import from ~/.ssh/config bulk-adds hosts. Key-file auth only β€” no passwords or passphrases are persisted.
Cloud storage? Shelly deliberately doesn't ship a Google Drive / Dropbox / OneDrive UI. A terminal app should lean on the tools that already solve this β€” install rclone from your package manager, run rclone config once, and mount or sync any of 40+ cloud backends from the terminal pane.

Command Palette

Opens from the search icon in the top bar (or from the AgentBar's git badge). Fuzzy search across every registered action, plus a persistent Recent list of the last five you ran.

Currently registered:

  • Settings β€” open the terminal-style Settings TUI
  • Terminal β€” Clear / New session / Restore tmux / Tmux attach
  • Git β€” Status / Diff / Log / Add all / Commit / Push / Pull --rebase (routed through the active terminal pane's pendingCommand channel)
  • Panes β€” Add Terminal / AI / Browser / Markdown / Preview
  • Layouts β€” Single Terminal / Terminal + AI / Terminal + Browser / 3-Way Triple
  • Theme presets β€” Blue / Red / Purple
  • Font presets β€” Silk / 8bit / Mono and legacy editor palettes
  • Voice β€” Open dialogue (VoiceChat modal)
  • Snippets β€” first 20 entries from your snippet store, each dispatches to the terminal
  • Package Manager β€” bundled tools status

Theme & Fonts

  • Color presets β€” Blue is the default cool palette, Red is red-orange chrome, and Purple is purple with neon green accents.
  • Visible presets β€” Settings and the Command Palette expose the three color themes. Legacy and editor palette IDs remain accepted for old saved settings but are no longer the primary UI surface.
  • Runtime swap β€” presets are swapped by mutating the live colors object in place (identity preserved) and bumping a theme-version store that key-remounts the shell layout. PTY sessions survive the switch β€” your vim stays open.
  • Single-family rendering β€” every Text is forced through JetBrains Mono regardless of its fontWeight, keeping UI and terminal typography consistent.
  • Text.render monkey-patch β€” Text.defaultProps.style is replaced (not merged) when a child passes its own style, which would otherwise let 100+ call sites escape the theme font. The patch prepends { fontFamily } to every Text's style array so the preset font reaches every call site without touching them.
  • Neon glow β€” eight per-color textShadow styles (teal / blue / sky / purple / pink / green / red / amber) for the mock's "reading terminal" vibe
  • Haptic toggle β€” per-interaction feedback on/off

Git Integration

  • Dirty badge β€” AgentBar (amber pill, global) and Sidebar (on the active repo row) both show the uncommitted-file count, polled every 20 seconds by a single writer in useGitStatusStore. Tapping the AgentBar badge opens the Command Palette filtered toward git actions.
  • Command Palette β€” the seven git actions listed above
  • Auto-savepoint β€” background git-based save system (lib/auto-savepoint.ts) with secret pattern scanning before each commit
  • Git diff preview β€” Preview pane Code tab renders git diff <file> with the neon diff palette

Settings, API Keys, Background Agents

  • Inline API key editor β€” Gemini / Cerebras / Groq / Perplexity and local/OpenAI-compatible API keys in the Settings dropdown with masked display and per-row EDIT / CLEAR / SAVE / CANCEL. Keys live in expo-secure-store.
  • Settings TUI β€” full settings also accessible via a terminal-style text UI
  • Command safety β€” regex-based 5-level risk assessment (seatbelt, not firewall β€” see Security)
  • Workspace isolation β€” per-project cwd / env / AI context
  • Background agents β€” @agent list, @agent status, @agent run <name>, @agent stop <name>, @agent history <name>, or @agent <natural language> to create one. Scheduled agents run through AlarmManager when configured.
  • Managed Codex runtime updater β€” the Updates UI reads the public codex-runtime-latest/codex-runtime.json manifest, downloads the tarball, verifies SHA-256, smoke-tests both codextui and codexexec with --version, then promotes the runtime under ~/.shelly-runtime/codex/current. The new runtime is used by newly opened terminal tabs; Reset falls back to the APK-bundled runtime.
  • shelly-doctor β€” diagnostic command that checks shell/native binary presence, bundled Codex binaries, JS dispatcher, local LLM endpoints, and whether ~/.codex/auth.json is present; run it when something feels broken

Codex Runtime

  • Native runtime β€” the npm @openai/codex package is only part of the JS dispatcher story. Release APKs bundle pinned Android-native codexexec / codextui binaries from .ci-versions/, and runtime updates install the same shape under ~/.shelly-runtime/codex/current.
  • Managed promotion β€” a new runtime candidate is promoted only after download, SHA-256 verification, extraction, executable checks, and matching --version smoke checks for both codextui and codexexec.
  • Repair / reset path β€” if the app-data runtime is broken or unwanted, the Updates UI can repair it from the latest runtime release or reset to the APK-bundled Codex runtime.

Status

| Area | State | |---|---| | Native PTY, sessions, tmux revival | βœ… shipping | | Multi-pane layout (7 types, splits, presets, drag resize, empty-state CTA) | βœ… shipping | | Atomic paste (bracketed-paste wrap when guest opts in via DECSET 2004, single TerminalEmulator.paste() choke point, IME chunk-split coalesced) | βœ… shipping (bugs #91, #94, #97, #106) | | /sdcard access via MANAGEEXTERNALSTORAGE (first-launch grant flow) | βœ… shipping (bug #92) | | bash wrapper at $HOME/bin/bash for shebangs and bash script.sh | βœ… shipping (bug #93) | | execSubprocess JNI read loop (EAGAIN vs EOF distinction) | βœ… shipping (bug #70) | | AI Edit golden path (stage β†’ diff β†’ per-hunk accept β†’ disk writeback) | βœ… shipping, fuzzy re-anchor for successive hunks | | FileTree CRUD (create / rename / delete / copy path) | βœ… shipping | | Command Palette β€” settings, terminal, git, panes, layouts, theme, font, voice | βœ… shipping | | Browser fullscreen, desktop UA toggle, link capture, bookmarks | βœ… shipping | | Theme presets β€” Blue / Red / Purple, with legacy preset IDs accepted for saved settings (runtime swap, Text monkey-patch) | βœ… shipping | | AgentBar + Sidebar git dirty badge (single-writer poll) | βœ… shipping | | Sidebar Add Repository existence check + Alert on ghost path | βœ… shipping (bug #73) | | AI pane Local LLM routing (URL-driven, no enable toggle) | βœ… shipping (bug #68) | | Voice dialogue (VoiceChat + VoiceChain + TTS) | βœ… implemented, device smoke-test pending | | Immortal sessions (tmux keep-alive) | βœ… implemented, device smoke-test pending | | Local LLM via llama.cpp @local (Settings Β· Integrations Β· Local LLM: catalog, download, start/stop) | βœ… shipping | | MCP Servers (Settings Β· Integrations Β· MCP Servers) | βœ… shipping | | Codex CLI launch/auth | βœ… supported; bare codex runs over the native PTY, using Shelly device-code auth before TUI launch | | Codex managed native runtime (codexexec / codextui staged under ~/.shelly-runtime/codex/current, --version smoke-tested, repair / reset to bundled runtime) | βœ… managed latest | | Gemini API in AI Pane / @gemini / @team / background agents | βœ… available when a Gemini API key is configured | | Background / autonomous agents β€” @agent registration, unattended AlarmManager execution (getForegroundService), run / next / last / missed-run visibility | βœ… wired; one unattended fire observed end-to-end on Z Fold6 (N=1, app cached at fire) β€” cross-OEM reliability not yet broadly tested | | Sidebar Ports monitor (/proc/net/tcp β†’ tap to open in Browser pane) | ⚠ Android 10+ SELinux denies both /proc/net/tcp{,6} reads and NETLINKSOCKDIAG sockets from untrustedapp; tracked in docs/superpowers/DEFERRED.md (P1) β€” needs an alternative channel (e.g. a bundled privileged helper or systemserver intent) in a future release | | Sidebar SSH Profiles (key-file auth, ~/.ssh/config import, tap-to-connect) | βœ… shipping | | Sidebar Quick Launch / Worktrees (one-tap CLI shortcuts) | βœ… shipping for Codex | | In-app Android APK updates (android-latest/latest.json, SHA-256 verification, Package Installer handoff) | βœ… shipping | | In-app Codex runtime updates (codex-runtime-latest/codex-runtime.json, smoke-tested runtime promote / reset) | βœ… shipping | | Cloud storage | 🚫 out of scope β€” use rclone from the terminal pane | | App icon | βœ… shipping | | Distribution channels (Play Store / F-Droid) | 🟑 GitHub Releases only for now; current Android release is the rolling android-latest build |

Full validation checklist: docs/superpowers/specs/2026-04-13-validation-checklist.md


Coming Soon

Parts of the app are written but not yet verified. These are on the short-term roadmap, not in the current build:

  • Play Store / F-Droid distribution β€” the APK is published via GitHub Releases only; store submission flow not yet done
  • End-to-end device validation for voice dialogue and immortal sessions β€” wired but not yet smoke-tested on the target device
  • Cross-OEM autonomous-agent reliability β€” unattended scheduled firing is observed on the Z Fold6 (N=1), but Android background limits vary by manufacturer (Samsung / Xiaomi / Oppo / OnePlus battery-freezers); broad cross-device reliability + a device health/permission checklist are not done yet
  • Snippet authoring UI β€” the Command Palette shows the first 20 entries from your snippet store and dispatches them to the terminal, but the in-app create/import/edit flow was removed in an earlier cleanup pass. Snippets can still be added by editing ~/.shelly/snippets.json directly or via shelly config.

The Story

I don't hand-write code.

I'm not an engineer by training β€” I'm a Creative Director. Every line in this repo was generated by AI under my direction, then reviewed, tested on-device, and shipped. What I bring is twenty years of product judgment about what belongs on a screen and what doesn't β€” and that turns out to be most of the job.

Every architectural decision in Shelly is mine. The code is not. It was created through conversation with AI coding agents on a Samsung Galaxy Z Fold6: originally Claude Code, and now primarily Codex as the supported foreground CLI. I direct. The AI builds. No desktop. No laptop. Just a foldable phone and an AI that can execute commands.

The keyboard you see in the screenshots? I built that too. It's called Nacre β€” an Android IME written in Kotlin, also created entirely through AI conversation. I'm typing on it right now, inside Shelly, improving both apps simultaneously.

This is not a portfolio project. This is a tool I use every day to build things. If you find something that could be better, that's what the issue tracker is for.

Why any of this exists

Mobile development never took off β€” not because phones lack computing power, but because the input and interface weren't designed for creation.

Chat apps (ChatGPT, Claude, Gemini) can talk about code, but they can't run it. Terminal emulators (Termux) can run anything, but they're hostile to anyone who isn't already a developer.

Shelly fills the gap. You type "make me a portfolio site" in the AI pane, and a real shell runs the commands, generates files, and shows you the results β€” right next to the terminal that produced them.

Why every design decision is shaped like a question

Every feature in Shelly started as a frustration I had with existing tools:

  • The cross-pane system comes from "Why do I have to copy an error from one window and paste it into another?"
  • The native terminal comes from "Why does the terminal die every time I switch apps?"
  • The approval proxy comes from "An AI CLI is asking me to approve something in English. I don't know what it means."
  • The VoiceChain comes from "I can't type on a phone keyboard fast enough to keep up with my ideas."
  • The layout system comes from "Why can't I have a browser, a terminal, and an AI all on the same screen at the same time?"
  • The color theme presets come from "Why do I have to choose between a usable UI and an aesthetically interesting one?"
Every limitation became an innovation that engineers need just as much.

Why native β€” the WebView pivot

Early versions used ttyd and a WebView. WebSocket connections dropped. Android's Phantom Process Killer terminated background processes. Every time you switched apps, the terminal was dead.

So I directed the AI to throw it all away and go native. Shelly now embeds a native terminal emulator β€” Kotlin code derived from Termux's own terminal-emulator library β€” connected to an app-owned PTY through a JNI C layer. No TCP terminal server. No WebSocket boundary. No ttyd process to drop.

For a React Native app this is an unusual architecture: an embedded native terminal emulator backed by an app-owned PTY via JNI forkpty, rather than a WebView or a socket bridge to an external terminal server.

Who is this for?

  • Vibe Coders β€” Lovable / Bolt / Replit Agent, but on your phone with a real terminal underneath
  • Mobile-first developers β€” Codex CLI users and anyone serious about CLI-first AI coding workflows who want a proper multi-pane IDE around real local terminals
  • Non-engineers with ideas β€” Shelly translates everything. Dangerous operations are surfaced with explanations and approval steps before they run

Architecture

System Architecture

flowchart TB
  U["User on Android"] --> UI["Shelly UI\nReact Native panes"]

subgraph P["Pane runtime"] TP["Terminal pane\nCodex foreground CLI"] AP["AI pane\nAPI and local providers"] BP["Browser pane\nDocs and localhost"] PP["Preview pane\nCode, Markdown, images"] end

UI --> TP UI --> AP UI --> BP UI --> PP

subgraph N["Native Android bridge"] KT["Expo Kotlin modules"] JNI["JNI C layer\nforkpty and exec"] TV["Terminal renderer\nTermux-derived emulator"] end

TP --> KT --> JNI JNI --> SH["App-owned shell\nbash, git, node, python"] JNI --> WR["exec wrapper\nlinker64 and LD_PRELOAD"] SH --> CX["Codex runtime\ncodextui and codexexec"] TP --> TV

subgraph A["Agent context"] LOG["Terminal transcript"] CTX["Context builder\nredaction and compaction"] ACT["User-approved actions\nrun command or apply diff"] end

TP --> LOG --> CTX --> AP AP --> ACT --> TP

subgraph R["Release pipeline"] CI["GitHub Actions\nlint, typecheck, tests, APK build"] APK["android-latest\nAPK and latest.json"] CRT["codex-runtime-latest\nruntime tarball and manifest"] end

CI --> APK CI --> CRT APK --> UP["Updates UI\nSHA-256 verify, installer handoff"] CRT --> RU["Runtime updater\nverify, smoke-test, promote, reset"] UP --> UI RU --> CX

Shelly's core is the connection between three systems that are usually separate: a native Android terminal runtime, a foreground Codex CLI, and context-aware AI panes. The terminal is not a WebView or remote bridge; it is an app-owned PTY read by Kotlin through JNI. The update system is also split: APK releases update the app and native payload, while the Codex runtime lane can move faster after SHA-256 verification and smoke tests.

Screen Layout

block-beta
  columns 5
  AB["Agent Bar β€” layout / add pane / search / settings"]:5
  SB["Sidebar\nRepos (dirty badge)\nFile Tree\nTasks\nDevice"]:1 TP["Terminal Pane\n$ npm run build\nError: missing..."]:2 AP["AI Pane\n'Fix the error β†’'\n[Accept hunk]"]:2
  space:1 BP["Browser Pane\nlocalhost:3000\nYouTube / GitHub"]:2 MP["Preview Pane\nCode / MD / Image"]:2
  CB["Context Bar β€” ~/Shelly  main  ↑2  Native"]:5

style AB fill:#1a1a1a,stroke:#00D4AA,color:#00D4AA style SB fill:#111,stroke:#333,color:#ccc style TP fill:#0a0a0a,stroke:#333,color:#0f0 style AP fill:#0a0a0a,stroke:#D4A574,color:#D4A574 style BP fill:#0a0a0a,stroke:#333,color:#61AFEF style MP fill:#0a0a0a,stroke:#333,color:#ccc style CB fill:#1a1a1a,stroke:#333,color:#666

Cross-Pane Intelligence

flowchart LR
  subgraph AI Pane
    U["User: 'fix the error'"]
    R["AI: missing import path..."]
    RUN["β–Ά Run fix"]
  end
  subgraph Terminal Pane
    CMD["$ npm run build"]
    ERR["Error: Cannot find './utils'"]
    FIX["$ mv util.ts utils.ts"]
  end
  ERR -- "transcript injected" --> R
  RUN -- "execute" --> FIX
  U --> R

AI reads Terminal. Terminal executes AI. The user just talks.

AI Edit Golden Path

flowchart LR
  FT["FileTree tap"] --> OF["openFile()"]
  OF -->|*.md| MP["Markdown pane"]
  OF -->|other| CT["Preview β†’ Code tab"]
  CT -->|AI button| SE["stageAiEdit()"]
  SE --> AIP["AI pane w/ file in context"]
  AIP --> DIFF["assistant unified diff"]
  DIFF --> IND["InlineDiff β€” per-hunk Accept"]
  IND --> ASD["acceptStagedDiff() (strict β†’ fuzzy)"]
  ASD --> WF["writeFileNative() on disk"]
  WF --> RELOAD["Preview Code tab auto-reload"]

Each step is a real module: lib/open-file.ts, lib/ai-edit.ts, components/panes/InlineDiff.tsx, hooks/use-native-exec.ts.

Native PTY β€” JNI forkpty

flowchart TB
  JS["React Native JS"] -- "Expo Module call" --> KT["Kotlin NativeModule"]
  KT -- "JNI" --> PTY["shelly-pty.c (forkpty)"]
  KT -- "JNI" --> EXEC["shelly-exec.c (fork+exec+pipe)"]
  PTY -- "ptmx / setsid" --> SH["shell process\nbash / zsh / sh"]
  PTY -- "read/write fd" --> TV["ShellyTerminalView.kt\nKotlin renderer"]
  TV --> VIEW["Android View\nCanvas path / optional GLSurfaceView path"]

Two JNI entry points for two different needs. shelly-pty.c owns interactive shells: it opens /dev/ptmx, calls forkpty-equivalent logic (grantpt + unlockpt + setsid + execve via /system/bin/linker64), and hands the master fd back to Kotlin for the terminal view to read. shelly-exec.c owns programmatic one-shots (git status, ls, file I/O, AI dispatch helpers): it does a vanilla fork + exec + pipe and returns {exitCode, stdout, stderr} synchronously, with an EAGAIN-aware read loop that distinguishes spurious select wakes from genuine EOF (bug #70 fix).

No TCP. No socket terminal server. No separate PTY helper daemon. Shells still run as normal forked child processes, while the PTY master fd is owned by the app and read directly from Kotlin via JNI.

Runtime Theme Swap

flowchart LR
  U["Settings β†’ Font: Shelly"] --> S["settings-store.uiFont"]
  S --> E["RootLayout effect"]
  E --> AP["applyThemePreset()"]
  AP --> M["Object.assign(colors, palette)"]
  AP --> P["patchTextRenderOnce()"]
  AP --> V["theme-version bump"]
  V --> R["ShellLayout key-remount"]
  R --> UI["all Text re-renders with new fontFamily"]
  PTY["native PTY"] -. unaffected .- R

The colors object is mutable and keeps the same identity, so every import { colors as C } consumer sees the new values without a code change. The Text monkey-patch handles font changes. The theme-version key-remount forces all rendered Text through the patch. PTY lives outside JS, so it's untouched.


Operational Metrics

These are intentionally operational rather than synthetic β€” they show the cost of shipping a real Android-native toolchain, not a thin client. The exact per-build numbers (versionCode, commit, asset name, byte size, SHA-256) live in the release manifests, which the in-app updater reads directly, so they never drift out of sync with this page:

| What | Shape | Why it costs that | |---|---|---| | APK size | ~800 MB | bundles bash / Node.js / Python 3 / git / ripgrep / … plus the Codex runtime as real binaries, not shims | | Codex runtime | shipped + managed on its own lane (~160 MB) | promoted separately so it can move faster than the APK | | Release verification | SHA-256 checked before the installer handoff | the updater refuses an APK whose hash doesn't match the manifest | | Runtime verification | SHA-256 + codextui / codexexec --version smoke tests | a runtime candidate is only promoted after it actually runs | | CI per release | lint Β· typecheck Β· unit tests Β· native release build Β· signed APK + manifest publish | every release artifact is built and verified by GitHub Actions |

The point: a large APK, a separately managed Codex runtime, and a CI pipeline that builds native release artifacts and generates verified update manifests before anything reaches a device. The exact, current numbers live in the manifests linked above rather than being copied here where they would go stale.


Built With

| Layer | Technology | |-------|-----------| | Framework | Expo 54 / React Native 0.81 | | Language | TypeScript (strict) + Kotlin + C | | UI | NativeWind (TailwindCSS 3) | | State | Zustand | | Navigation | expo-router v6 | | Terminal | Native emulator (Kotlin, Termux-derived) + JNI forkpty (C, app-owned PTY) | | Fonts | JetBrains Mono for app/terminal readability, with bundled legacy pixel fonts retained for compatibility | | i18n | expo-localization + Zustand (900+ keys, EN/JA) |


Contributing

This started as a personal tool. Community contributions are shaping it into a true OSS project.

Looking for a first contribution? Check the good first issue label. Unit tests are already wired through Jest; focused tests around routing, update manifests, command safety, and native bridge helpers are especially useful.

Key files to explore:

  • lib/input-router.ts β€” the brain; classifies natural language into shell commands, AI requests, or @mentions
  • lib/command-safety.ts β€” risk assessment engine; blocks dangerous commands with 5 severity levels
  • lib/auto-savepoint.ts β€” watches for file changes and auto-commits; the "game save" system
  • lib/ai-edit.ts β€” stage / apply / fuzzy-re-anchor unified diffs against the staged file
  • lib/theme-presets.ts β€” palette + runtime preset swap + Text.render monkey-patch
  • components/panes/InlineDiff.tsx β€” per-hunk Accept / Reject with write-back
  • modules/terminal-view/android/.../ShellyTerminalView.kt β€” the native terminal renderer (Kotlin + Android Canvas)
  • modules/terminal-emulator/android/src/main/jni/shelly-pty.c β€” the JNI forkpty layer
If you find something that could be better β€” a cleaner pattern, a performance optimization, a bug fix β€” please open an issue or PR. That's exactly why this is open source.

Read the contributing guide: CONTRIBUTING.md


Vision

In two years, mobile terminals will be standard. The hardware is already here β€” 40+ TOPS NPUs, 12 GB of RAM, 7B-parameter models running on-device at interactive speeds β€” and the only thing missing is the interface. Shelly is a bet on that timeline.

When a full IDE runs in your pocket and local-LLM work doesn't have to phone home, you can work on your own keys, keep on-device inference fully local, and ship real software from places no laptop reaches. The first person to ship a production app from a plane without wifi will be using something like this.

Shelly was built for that future. Local LLM routing is already wired. The native terminal is already there. The multi-agent routing already supports local models alongside cloud APIs. The layout system already handles the screen real estate of foldables and tablets.

The question isn't whether mobile development will happen. It's who builds the tools for it first.


About the Creator

RYO ITABASHI β€” Creative Director at Rebuild Factoryz. Branding and design are my profession. Code is not.

I built Shelly because I wanted to use Claude Code on my phone, but Termux was too intimidating. So I made a chat interface that hides the terminal complexity while keeping its full power. Along the way, the foreground CLI shifted to Codex β€” Claude Code's Android compatibility moves faster than any third-party app can chase β€” but the original frustration stayed the same. Then I realized the real problem wasn't the terminal itself β€” it was the gap between the terminal and the AI. So I connected them. Then the WebView kept dying, so I directed the AI to replace the entire rendering layer with a native terminal emulator. Then I realized I needed a browser pane, a markdown viewer, a code preview, a sidebar, and a proper layout system to make it a real IDE.

I still don't hand-write code. I describe what I need, the AI builds it, and I decide whether it ships.

The keyboard in the screenshots is Nacre β€” a split-layout Android IME I built (also through AI) to solve the input problem on mobile. Shelly handles the interface. Nacre handles the input. Together, they make phone-only development actually possible.

Both were developed entirely on a Samsung Galaxy Z Fold6, without ever touching a desktop computer.


Support

Shelly is a solo, self-funded project. If it saves you a Termux setup or makes phone development viable for you, a coffee goes a long way.

Buy Me a Coffee

You can also support the project by:


README truncated. View on GitHub
πŸ”— More in this category

Β© 2026 GitRepoTrend Β· RYOITABASHI/Shelly Β· Updated daily from GitHub