Run in your terminal for local Codex development:
codex plugin marketplace add orwa-mahmoud/nightshift
codex plugin add nightshift@nightshiftAccountable autonomous coding
Nightshift gives coding agents a durable punch list, owner-defined safety rules, recovery, and a clock-out gate—so long coding runs keep working toward the contract instead of quietly stopping early.
Tonight’s contract
START WITH THE PROBLEM
INSTALL NIGHTSHIFT
Install for Cursor, Codex, or Claude Code. Every path uses the same local-first open-source package and durable shift contract.
Open the official OpenAI listing ↗MIT licensed · no API key · no separate serverWHY NIGHTSHIFT
A prompt can fade. A punch list, gate, decision log, and deadline stay inspectable.
Open work survives compaction, restarts, and handoffs because the authoritative list stays in your project.
Hooks deny sudo, containers, global installs, daemons, and logins by default, and enforce the command, path, identity, and stop rules you add.
One page at clock-out and a report written as the work happens: commits, checks, parked decisions, and what each item cost.
ONE SHIFT, END TO END
Nightshift does not replace your coding host. It gives the host a durable operating contract and works one approved unit at a time.
Explore the complete lifecycle →Write the outcomes, gates, commit intent, and any explicit deadline.
Implement fully, verify immediately, commit locally, then tick.
Choose reversible defaults, record the reasoning, and keep moving.
Inspect commits, checks, decisions, snags, and recovery events.
WATCH ONE SHIFT
A real session, unedited apart from pacing: three items, one commit per item — and midway the agent declares itself finished with two boxes still open. The gate hands back the contract; it clocks out only once the list is clear.
READY-MADE CODING SHIFTS
Turn approved work into ordered outcomes with one local commit and gate per item.
Build the contract →OPEN-ENDEDResearch the product, rank evidence-backed opportunities, and ship the strongest complete work within the clock.
See product evolution →QUALITYSurvey tests, code, accessibility, contracts, documentation, dependencies, and security.
Open the quality guide →RECOVERYDiagnose a service error, check recovery evidence, and keep the approved list available for an attended restart if needed.
See how revival works →TESTINGUse Cursor, Codex, or Claude Code to add behavior-protecting tests without padding a percentage.
Open the coverage shift →CONTINUITYPreserve the current phase, rejected paths, next action, and verification outside conversation history.
Preserve the checkpoint →AUTOMATIC HUNTInspect the project, rank applicable work by evidence and value, and fill a bounded shift without inventing a backlog.
See automatic selection →SCHEDULEPreflight the queued work and permissions, then print the launchd, cron, systemd, or Task Scheduler entry. It registers nothing itself.
Schedule a shift →COSTThe runtime measures tokens and time per item from the host’s own records at the tick. Nothing is estimated, and unavailable is never written as zero.
Read the receipts →ARTIFACT WORKResearch sources, audit SEO, or write documentation in a persistent folder with local receipts instead of commits.
Explore non-Git shifts →REAL RUNS, NOT PROMISES
The real runs library follows the work from punch list to a human-reviewed 67-commit pull request covering 57 closed issues.
Read the real runs →elapsed contract continuity
reviewable commits
issues closed
roadmap phases
It gives Cursor, Codex, and Claude Code a durable punch list, opt-in mechanical rules, recovery, and a clock-out gate for accountable long coding runs.
No. Artifact mode supports compatible research, documentation, SEO, and writing shifts in persistent folders, leaving local receipts instead of commits.
Not by default. Nightshift leaves local commits for owner review unless the shift contract explicitly authorizes an external action.
No. The gate prevents approved work from being quietly abandoned. Item definitions, project checks, and human review prove quality.
No. Run one small task attended so you can verify permissions, gates, stop behavior, and recovery in your exact environment.
THE FIRST SHIFT CAN BE SMALL