Open source · T3 Code, now multiplayer
The agent workspace was already here. We brought the team into it.
Campfire is a thin fork of T3 Code for small, fully trusted teams: shared agent threads, presence, Take a Look, side discussions, review chats, and private briefings — without turning agent work into another Slack.
Agent-first collaboration
Don’t rebuild Slack around agents. Make the agent workspace multiplayer.
Chat-first tools pull agent work back into another channel. Campfire takes the opposite bet: start with T3 Code’s purpose-built agent workspace, then bring your teammates into it. The run, its controls, and the human decisions around it stay together.
The team layer
The workflows we wanted from an agent workspace.
- One shared task sidebar
- See the agent threads every teammate starts, who owns them, and what needs attention. Jump into the same run instead of opening another silo.
- Take a Look
- Ping a teammate from the agent answer that needs judgment. They land on the exact thread and can continue the conversation with the agent.
- Talk beside the run
- Keep questions, links, and corrections in a durable team discussion attached to the agent thread that produced them.
- Private briefing
- Ask a temporary, read-only assistant to catch you up. Its answers stay private to you and never pollute the shared conversation.
- PR review threads
- Use Review beside a pull request link to start a dedicated review thread, with a distinct icon and status in the sidebar.
- Presence and shared control
- See who is already there, then send, interrupt, redirect, resume, or archive the same long-running agent work together.
A fork, on purpose
Staying close to upstream does not mean staying frozen. T3 Code can remain focused while Campfire ships opinionated workflows for teams who live in it all day. The code is open: add the feature your team needs, keep it local, or upstream the parts that generalize.
Codex, Claude Code, Cursor, Grok Build, and OpenCode support, along with remote sessions, worktrees, and the web, desktop, and early mobile clients, come from T3 Code.
Source first
Run Campfire from source.
Campfire does not have a stable packaged release yet. You need Node.js 24.13.1 or newer within major 24 and at least one T3 Code provider already installed and authenticated.
git clone https://github.com/astraly-labs/campfire.git
cd campfire
corepack enable
corepack pnpm install --frozen-lockfile
corepack pnpm devOpen the pairing URL printed by the server. Local development state stays in .t3.
Read this before deploying
Campfire has no permissions model. That is the design.
There is no RBAC, tenant isolation, or per-user workspace permission. Anyone admitted to an instance can see and act on every shared agent thread and every project the Campfire service can reach.
The reference deployment binds Campfire to localhost, exposes it only through Tailscale Serve, and admits Google OIDC users whose verified email is on an explicit allowlist. Campfire records who did what, but does not authorize teammates differently. Authentication is not isolation.
Google is the current identity integration, not a requirement of the trust model. Another authentication provider can enforce the same identity boundary and allowlist before a request reaches Campfire.
Run it on a dedicated host behind a network boundary you control, use an explicit identity allowlist, and invite only people you would already trust with repository access. If you need isolation between users or teams, Campfire is the wrong tool.
Read the security model →Roadmap
Make shared agent work safer, richer, and more remote.
These are directions, not promised dates. We want to stay close to upstream and ship each layer only when its security boundary is clear.
- Remote browser
- Attach a live browser surface to an agent task so teammates can inspect, hand off, and control the same session remotely.
- Scoped permissions
- Move beyond the all-trusted-team model with explicit scopes for projects, threads, actions, and agent capabilities.
- Stronger isolation
- Isolate agent execution and workspaces so one task does not automatically inherit everything available to the host.
- Secrets at the boundary ↗
- Explore iron-proxy for default-deny egress and per-request credential injection, keeping real secrets outside the agent workload.
- Open to suggestions ↗
- This roadmap follows how small teams actually use Campfire. Propose the workflow, boundary, or integration you need.
Upstream
T3 Code did the hard part.
Campfire exists because T3 Code built an excellent open-source foundation for driving Codex, Claude Code, Cursor, Grok Build, and OpenCode from web, desktop, and mobile clients. The architecture, provider integrations, remote workflow, worktree handling, and substantial portions of this repository are the work of Julius Marminge, Theo Browne, the T3 Code maintainers, and upstream contributors.
Our strategy is minimal divergence. We rebase onto upstream regularly, avoid renames and rewrites that create conflicts for no user-visible gain, contribute broadly useful fixes upstream when practical, and keep Campfire-only behavior at narrow boundaries.
Campfire is independently maintained and is not affiliated with, sponsored by, or endorsed by T3 Tools Inc. T3 Code and related names and marks belong to their respective owners.