Four products, four layers of the stack: background jobs,
multi-vendor networks, the handoff between AI agents and the people
who decide, and the IP KVMs and servers underneath it all. Each one
is open source, self-hosted, and built on Python and FastAPI.
z4j Stable
Z4J
The control plane for Python task queues.
An open-source control plane for Python task infrastructure. Z4J sits on top of the queues you already run (Celery, RQ, Dramatiq, Huey, arq, and taskiq) and gives them one dashboard with persistent history, safe actions, schedule management, and a tamper-evident audit log. It is not another task queue; it makes the ones you have operable.
The problem. Teams running background jobs stitch together Flower, Grafana, Sentry, and hand-built admin pages, with no persistent history, no safe actions, and a different view for every engine. Z4J replaces that patchwork with one place to see, control, and schedule background work.
One dashboard across six engines: Celery, RQ, Dramatiq, Huey, arq, and taskiq
Persistent task history with live worker and queue views
Retry, cancel, bulk, and purge controls, offered only where the engine supports them
Engine-agnostic scheduler: cron, interval, solar, and one-off, in any timezone
Failure grouping and automation rules with a kill switch and dry-run mode
Tamper-evident audit log, four roles, and TOTP two-factor sign-in
An open-source, self-hosted controller for multi-vendor infrastructure. FreeSDN puts switches and Wi-Fi, firewalls, cameras, VoIP, hypervisors, and storage behind one web UI and one typed REST API. Unlike monitor-only tools, it doesn't just observe: it changes configuration on the devices themselves.
The problem. A mixed-vendor network means a different console for every box, and commercial network management is priced out of reach for homelabs, small MSPs, and SMBs. FreeSDN gives them one self-hosted control plane, multi-tenant from organization to site to device, with no per-device fees.
What's next. Hardware-verified write paths across every adapter, automatic database failover, and new vendor adapters as hardware arrives.
13 vendor adapters, including UniFi, Omada, MikroTik, OPNsense, Proxmox, and TrueNAS
Staged writes with an explicit apply step, or a monitor-only mode
Multi-tenant org → site → device scoping with RBAC, OIDC SSO, and TOTP
Connectivity Fabric: reach remote sites over Tailscale, NetBird, WireGuard, or OpenVPN
Automation through n8n, webhooks, alert rules, and zero-touch provisioning
One-command install with Lite, Pro, and Max tiers and a high-availability overlay
An on-call layer for AI coding agents. When Claude Code, OpenAI Codex, or OpenCode reaches a risky command, a permission prompt, or a multiple-choice question, a hook holds the action and the server classifies its risk. If it needs a human, Ony.ai calls your phone, reads out the situation, and returns your keypad decision to the agent as a signed verdict.
The problem. Coding agents stall the moment they hit a decision they can't make alone, and they wait until you're back at a screen. Ony.ai turns that wait into a phone call, and its risk classification keeps calls rare: only the steps that genuinely need you ring through.
What's next. A hosted edition at app.ony.ai, open now as a waitlist.
Phone calls through your own carrier: SignalWire, Twilio, Telnyx, or Plivo
Approve, deny, or choose between up to seven options on the keypad
Server-side risk classification, so only consequential steps ring
Signed, single-use verdicts that fail closed when a call goes unanswered
Drop-in hooks for Claude Code, OpenAI Codex, and OpenCode
Fallbacks to SMS, Telegram, Slack, or a backup number, all in a hash-chained audit log
A free, self-hosted screen wall and command center for IP KVMs and servers. One page shows the live screen and state of every machine you run (GL.iNet Comet, PiKVM-style KVMs, JetKVM, and Redfish BMCs) and lets you act on one of them or on many at once. Nothing goes through a cloud.
The problem. Running several KVMs and BMC-equipped servers means opening each device's console one at a time, or paying for a vendor's cloud wall. QKVM runs on your own machine, talks to every device directly over your LAN or Tailscale, and puts them all on one wall: no cloud, no account, no device limit.
What's next. Live keyboard and mouse in the browser, Intel AMT, and VNC servers are merged and headed for the next release. A native Windows desktop app is in development, and Android is planned.
Live screen wall with groups, search, and a display mode for wall monitors
GL.iNet Comet, PiKVM-style kvmd, JetKVM, and Redfish servers side by side
Bulk actions with confirmation: keys, typed text, macros, ATX power, and Wake-on-LAN
Admin, operator, and viewer roles, TOTP two-factor, and SSO through your reverse proxy
Prometheus metrics, webhook alerts, and a token-based REST API
Pinned device certificates, encrypted secrets, and signed in-app updates