mrkeyoor.com_
Tue 03 Nov 07:16 UTC
AI Toolsevaluationupdated 29 Sept 2026

Codewhale review

Codewhale is a coding agent that reads a project, edits files, runs commands, and checks its work from a terminal or local browser. It can use hosted or local models, while saved sessions, goals, agent roles, skills, plugins, and MCP servers support longer jobs.

+30stars / 7d
Verdict

Our Codewhale run installed 47 packages in 28 seconds and node:test passed 67 of 67 cases, but the overall test step still exited 127. Use it when persistent sessions, model choice, MCP, and coordinated agents solve problems you already have, then reproduce the v0.10.0 MCP issue before rollout. Aider is the easier recommendation when the job is simply editing code in a Git-aware terminal chat.

We ran it

Lab card: what happened when we ran CodewhaleScreenshot of Codewhale (codewhale.net)
Install✓ · 28s47 packages · 234 MB
Buildn/ano build script
Tests✗ · 18s67 passed · 0 failed of 67 (node:test)
Known vulns00 critical · 0 high · 0 moderate · 0 low (npm audit)
Repo2655 files~1,437,068 lines of source · 72.2 MB · 31 CI workflows · Dockerfile

Answers from our run

Does Codewhale build from source?

Dependencies installed in 28 seconds (47 packages), and the project has no separate build step. We cloned commit 94130d9 into a clean Debian container with 3 CPUs and no project-specific setup.

Do Codewhale's tests pass?

No. The project's own test command finished in 18 seconds and reported 67 passed, 0 failed (node:test).

Does Codewhale have known vulnerabilities in its dependencies?

npm audit found none in the dependency tree at the time of our run.

Who should not use Codewhale?

Teams that require a green root test step before adoption: our command exited 127 even though node:test recorded 67 passes and no failures.

What are the alternatives to Codewhale?

OpenHands, Aider, OpenCode. Our Codewhale run installed 47 packages in 28 seconds and node:test passed 67 of 67 cases, but the overall test step still exited 127.

Setup3/528-second install, but provider and policy choices remain
Docs5/5Detailed provider, permission, sandbox, MCP, and privacy guides
Community5/541,068 stars, an October 7 push, and active issue work
Maturity3/5v0.10.0 is active, but our root test step did not finish cleanly

Discussed on

  1. hnTerminal coding agent for DeepSeek V44 points

Who it’s for

Developers who want one coding agent for hosted providers and local model servers.
Terminal users who need saved sessions and durable goals for work that spans several turns.
Teams prepared to set approval, sandbox, telemetry, and secret policies before rollout.
MCP and multi-agent users who will use enough of the runtime to justify its size.

Who it’s NOT for

Teams that require a green root test step before adoption: our command exited 127 even though node:test recorded 67 passes and no failures.
Users relying on MCP tools in v0.10.0 without a trial: issue #6828 reports enabled servers staying invisible in fresh TUI and headless sessions.
Windows teams that require a built-in OS command sandbox: the sandbox guide says the current Windows path advertises none.
Organizations that prohibit default-on usage reporting: Codewhale enables usage analytics by default until the user or administrator turns it off.
Claude Code plugin users expecting full runtime compatibility: Codewhale rejects hooks, LSP declarations, build steps, TypeScript agents, and several other plugin behaviors.

Setup reality

Our npm install at commit 94130d9 succeeded in 28 seconds, adding 47 packages and using 234 MB on disk. There was no build script or target, so that step was skipped. The test command exited 127 after 18 seconds, although node:test recorded 67 passes and no failures. npm audit found 0 known vulnerabilities.

Hosted models need provider credentials. Local use needs a separate Ollama, vLLM, or SGLang service, though Codewhale can detect an existing Ollama chat model. Teams also need to choose a mode, approval posture, sandbox policy, and whether to disable usage analytics.

The 72.2 MB checkout held 2,655 files and about 1,437,068 source lines. Linux command isolation depends on a working bubblewrap installation, and the current Windows path has no advertised OS sandbox. Release v0.10.0 also has an open MCP discovery report that deserves a reproduction test.

v0.10.0 puts several clients on one local engine

Codewhale v0.10.0 runs its terminal, headless, browser, and pull request review clients against the same local engine. A session can persist across those clients, and a durable goal can keep longer work moving beyond one prompt. Skills, plugins, hooks, MCP servers, sub-agents, and supervised agent teams extend that engine. This is a runtime for continuing work, not merely a chat box that returns a patch.

The control model is unusually explicit. Plan mode explores without changing the workspace. Work and Operate can make changes, while Ask, Auto-Review, and Full Access determine when a tool needs approval. Receipts record files, commands, and approvals. Undo and restore offer recovery paths. Those controls matter because the agent can run shell commands and, through an optional plugin, operate other applications.

The 28-second install leaves four policy choices

Our npm route installed 47 packages in 28 seconds and occupied 234 MB. Codewhale recommends its checksum-verified release installer for macOS and Linux, while npm and Cargo are secondary paths. Windows, Docker, Nix, Homebrew, and Android packages cover more environments. Multiple installations can compete for the same command on PATH, a problem the README calls out directly.

Getting the binary is the easy part. Hosted use needs provider credentials entered through the provider picker. Local use depends on Ollama, vLLM, or SGLang running separately, although Codewhale can detect an existing Ollama chat model. Before a team rollout, someone must choose the default model, approval posture, command sandbox, and telemetry setting. Usage analytics are on by default, with a documented command to disable them.

What happened when we ran it

Our sandbox installed commit 94130d9 in 28 seconds with 3 CPUs, 8 GB of RAM, Node 22, no secrets, and no elevated privileges. The checkout contained 2,655 files, about 1,437,068 source lines, and occupied 72.2 MB. Installation added 47 packages and brought disk use to 234 MB. The repository had no build script or target, so our harness skipped that step. npm audit reported 0 known vulnerabilities across all severities.

The overall test step failed with exit 127 after 18 seconds. Within that command, node:test recorded 67 passes and no failures. The visible tail showed protocol corpus cases behaving as expected, followed by successful framing checks for split chunks, bad magic, oversized lengths, and non-JSON payloads. It did not name the command that returned 127. A missing system package or a repository fault would both be guesses, so the defensible result is that the root step did not complete cleanly.

Enabled MCP servers can disappear in v0.10.0

Open issue #6828 describes three enabled MCP servers that validated and exposed 20 tools through the management command, yet a fresh terminal or headless session exposed none of them. Tool search also returned no MCP entries. The reporter found that starting a server inside each session worked around the problem, but the state did not persist. This report targets v0.10.0 and directly affects one of Codewhale's advertised extension paths.

Other boundaries are documented rather than accidental. The current Windows command path has no advertised OS sandbox. Linux uses bubblewrap when it is installed and passes Codewhale's probe. Claude Code plugin import supports a declarative subset, but rejects hooks, LSP declarations, custom MCP file paths, build steps, TypeScript agents, and service processes. Compatibility here means selected assets can move across, not that every Claude Code plugin will run unchanged.

31 workflows support an active 1.4-million-line project

Our scan found 31 CI workflow files, a Dockerfile, and monorepo workspaces. It found no directory named tests, though the test command reached node:test cases elsewhere in the tree. The roughly 1,437,068 source lines cover a Rust engine, terminal interface, browser client, provider adapters, packaging, plugins, and agent coordination. Debugging an interaction across those layers will take more effort than tracing a narrow command-line editor.

GitHub showed 41,068 stars and 202 open issues and pull requests on October 7, 2026. The API list separated that total into 186 issues and 16 pull requests. The repository was pushed the same day, while v0.10.0 was released on September 22. Those dates and the fast response to recent reports indicate active maintenance. They do not make the 202-item queue irrelevant, especially when an open item touches MCP discovery in the current release.

Codewhale makes sense when the runtime will stay busy

The alternatives trim the decision in different ways. Aider keeps coding close to a chat, a patch, and Git. OpenHands is better suited to teams that want a browser-led development-agent environment. OpenCode covers terminal, desktop, and IDE use with its own multi-provider approach. Codewhale earns its extra surface when saved sessions, durable goals, receipts, plugins, and supervised agents will all see regular use.

Our run proved that the npm wrapper installs quickly and its audit was clean at commit 94130d9. It also ended with exit 127 after the visible node:test cases passed. Trial v0.10.0 in a disposable clone, confirm that your MCP tools appear in a fresh session, and inspect the sandbox marker on every supported platform. If the job stops at producing a reliable diff, Codewhale asks you to operate more machinery than the result needs.

Alternatives

ProjectWhat it isPick it when
OpenHands gh↗An open-source development agent with a web interface, CLI, and software development SDK.pick this instead when a browser-led workspace and development-agent platform matter more than Codewhale's terminal runtime.
Aider gh↗A terminal pair programmer centered on explicit files, edits, and Git commits.pick this instead when you want a direct chat, patch, and Git loop without Codewhale's agent fleet and plugin surface.
OpenCode gh↗An open-source coding agent with terminal, desktop, and IDE clients.pick this instead when you want another multi-provider agent but do not need Codewhale's exact goal, receipt, and fleet model.

Sources

  1. Codewhale README
  2. Codewhale v0.10.0 release
  3. Issue #6828 on MCP tools missing from sessions
  4. Codewhale sandbox threat model
  5. Codewhale product telemetry
  6. Codewhale Claude plugin compatibility

More ai tools reviews

kornia · skills · anarlog · pr-agent · agent-sprite-forge · KiroCrew · the whole board →

Related reading