StonePlus (the app retains the Stone+ brand) — a local AI gateway for coding clients
English | 简体中文
Important
StonePlus source is public for inspection and audit, but it is not open
source. Modification, cloning, rebranding, derivative products,
redistribution, commercial distribution/third-party hosting, and automated
AI code generation are restricted by the
StonePlus Source Available License 1.0. See
The current/historical licensing boundary is recorded in LICENSE_BOUNDARY.md. See PROJECT_IDENTITY.json; automated agents must run
npm run identity:verify before editing.
Stone+'s local-first AI gateway and coding client control center, extended with more routing, performance, diagnostics, repair, import, and tunneling features.
Download latest release · Quick start · Screenshots · Security
StonePlus — shown as Stone+ inside the app and also searchable as Stone Plus or stone-plus — is built on upstream Stone and adds practical features for faster routing, smarter scheduling, request diagnostics, Codex session repair, account import, and FRP tunneling. It remains an independent, unofficial community fork. Add your providers, decide which models each account can expose, combine compatible accounts into pools, and connect Claude Code, Codex, or Gemini CLI through one local gateway.
Stone+ selects an available account according to its model support, quota, health, and pool policy. It can also translate between OpenAI, Anthropic, and Gemini protocols, so a client and its upstream pool do not need to use the same API format.
Stone+ is intended for credentials and subscriptions that you own or are authorized to use. It does not provide account sharing, resale, public access, or mechanisms to bypass provider limits.
- Faster streaming path. Reuses upstream connections, negotiates HTTP/2, flushes SSE headers immediately, and avoids unnecessary state cloning and stream buffering.
- Fast On pools. Optionally enforces the supported
priorityservice tier on OpenAI Responses-compatible requests. - Performance-aware routing. Adds optional
autobalancedscheduling using EWMA TTFT and output speed, plus output-token speed charts for recent and weekly trends. - Better request diagnostics. Shows TTFT, conversation titles, compact adjustable columns, and a privacy toggle for titles.
- Correct client disconnect semantics. Records HTTP 499 without cooling down an account or triggering failover.
- Codex session repair. Repairs historical-session provider metadata and SQLite indexes through previews, backups, transactional updates, and rollback.
- Batch account import. Imports CPA and Sub2API JSON files, recovers missing account IDs from JWT claims, and immediately checks imported accounts concurrently.
- Embedded FRP tunnel. Runs a bundled
frpcfrom pasted configuration and exposes copyable connection details.
See CHANGELOG.md and MODIFICATIONS.md for release and attribution details.
Watch the high-quality MP4 demo
- Local control and storage. No server deployment or remote control service is required; credentials, profiles, account metadata, and history stay on this computer.
- One place for every account. Manage official providers, compatible endpoints, API keys, access tokens, and Codex / ChatGPT OAuth sessions from one desktop app.
- Fewer interruptions. Account pools can retry, cool down failing accounts, respect quota limits, and fail over to another usable account.
- Use the model where it is available. Each account has its own discovered and exposed model list; pools combine the models provided by their members.
- Connect clients without repeated manual editing. Stone+ manages Claude Code, Codex, and Gemini CLI profiles with previews, backups, and restore.
- Bring your own network route. Assign HTTP, HTTPS, SOCKS4, or SOCKS5 outbound proxies at account or pool level.
Claude Code / Codex / Gemini CLI
|
v
Stone+ local gateway
models + pool policy
/ | \
Account A Account B Account C
The client connects only to Stone+'s local address. Stone+ chooses a suitable account from the selected pool, forwards or converts the request, and returns the response in the protocol expected by the client.
| Area | What you can do |
|---|---|
| Providers and accounts | Add OpenAI, Anthropic, Gemini, compatible or custom endpoints; keep multiple independent accounts under one provider |
| Model control | Discover models per account, expose all or selected models, test an individual model, and choose the models published by each pool |
| Account pools | Use priority, balanced, round-robin, or weighted-random scheduling with concurrency limits, session affinity, retry, cooldown, and failover |
| Quota visibility | View Codex five-hour and weekly quota windows, 24-hour and 14-day trends, and supported provider rate limits |
| Outbound proxies | Configure HTTP, HTTPS, SOCKS4, and SOCKS5 proxies per account or pool; view the configured endpoint, public egress IP, and latency |
| Coding clients | Detect and manage Claude Code, Codex, and Gemini CLI profiles; preview changes and restore backups |
| Protocol gateway | Accept OpenAI Responses, OpenAI Chat Completions, Anthropic Messages, and Gemini generateContent; convert normal and streaming requests, including tool calls and usage |
| Local visibility | Review request status, latency, token usage, account health events, and desktop notifications without storing request or response bodies |
| Application updates | Compare the installed version with GitHub Releases, review notes, and ignore a version; Windows setup and Linux AppImage builds can download and restart into updates, while other packages open Releases for manual replacement |
| Accounts, quota, and health | Pool scheduling and model policies |
|---|---|
 |
 |
| Coding client configuration | Online updates and release notes |
 |
 |
Download the package for your platform and SHA256SUMS from GitHub Releases.
| Platform | Choose |
|---|---|
| Windows x64 | StonePlus-*-windows-x64-setup.exe to install, or StonePlus-*-windows-x64-portable.exe to run directly |
| macOS Intel | StonePlus-*-macos-x64.dmg or StonePlus-*-macos-x64.zip |
| macOS Apple Silicon | StonePlus-*-macos-arm64.dmg or StonePlus-*-macos-arm64.zip |
| Linux x64 | StonePlus-*-linux-x86_64.AppImage or StonePlus-*-linux-amd64.deb |
| Linux arm64 | StonePlus-*-linux-arm64.AppImage or StonePlus-*-linux-arm64.deb |
Windows builds use the persistent StonePlus project self-signed Authenticode certificate with an RFC 3161 timestamp; because it is not rooted in Microsoft's public trust store, SmartScreen may still warn. macOS builds are ad-hoc signed and are not Apple-notarized. Verify the certificate fingerprint, SHA256SUMS, and GitHub build provenance before approving a download.
If you are upgrading directly from v0.7.1 or earlier, the first upgrade to v0.8.0 or later must be installed manually because the older release does not contain the updater. After v0.8.0 is installed, Windows setup builds and Linux AppImages can download an update in Stone+ and restart into it. Windows Portable, Linux deb, and current macOS builds open Releases for manual replacement.
On Linux, run an AppImage or install a deb package:
chmod +x StonePlus-*.AppImage
./StonePlus-*.AppImage
sudo apt install ./StonePlus-*.debNote
The current interface uses Simplified Chinese. The English menu names below include their current Chinese labels so you can find each page.
- Open Providers (供应商), confirm or add an upstream, then add an API key or access token. Use Import ChatGPT account (导入 ChatGPT 账号) for a Codex / ChatGPT OAuth session.
- Test the account connection, refresh its available models, and choose the models it may expose.
- Open Account Pools (号池), add compatible accounts, choose a scheduling policy, and select the models published by the pool.
- Open Client Routes (客户端路由), select a pool for Claude Code, Codex, or Gemini CLI, then save and enable the route.
- Open Client Configuration (客户端配置), preview the changes, and apply them. Stone+ backs up existing files first.
- Start the local gateway, then launch the coding client.
The default gateway address is http://127.0.0.1:15721. Manual connection values and the route token are available on the Client Routes (客户端路由) page.
- The gateway accepts connections only from this computer.
- Stored provider credentials and proxy passwords are protected by the operating system's secure credential storage.
- Request and response bodies are not written to Stone+'s request history.
- Stone+ backs up client configuration files before changing them so they can be restored when needed.
- Account metadata, profiles, quota history, and request statistics remain in the local Stone+ data directory.
- Stone+ is a personal local desktop application, not a team-management, billing, or remote-administration platform.
- A model test sends a real, small request to the upstream. It consumes quota and may incur provider charges.
- Importing a Codex / ChatGPT session does not verify a subscription tier. Available models and backend access are determined by the upstream account.
v0.8.1fixes imports for multiple members of one ChatGPT Team or shared workspace. If an older Stone+ version replaced one imported member with another, install the latest release and reimport the original JSON; overwritten credentials cannot be recovered from Stone+'s database. Add newly recreated accounts back to the required pools and reassign their proxies when needed.- Stone+ does not scan browser cookies or automatically import
~/.codex/auth.json. A session without a Refresh Token must be imported again after its Access Token expires. - Codex quota charts are available only for ChatGPT OAuth accounts and begin collecting data after Stone+ first receives quota information.
- Proxy connectivity tests contact
api.ipify.organd fall back toicanhazip.comto identify the proxy's public egress IP. - Linux credential storage requires a Secret Service-compatible keyring such as
libsecretor KWallet. AppImage may also require FUSE 2. - Stone+ checks GitHub Releases at startup. You can also check manually, read release notes, or ignore a version under Settings → Application Updates (设置 → 应用更新).
- Windows setup builds and Linux AppImages support in-app download and restart installation. Windows Portable, Linux deb, and current macOS builds require a manual update from Releases.
- Windows releases use the persistent StonePlus project self-signed Authenticode certificate and timestamp; SmartScreen may still warn. macOS releases are ad-hoc signed and are not Apple-notarized.
Use GitHub Discussions for questions and workflow ideas, GitHub Issues for reproducible bugs and feature requests, and Private Vulnerability Reporting for suspected security issues. Read the Security Policy before sharing diagnostics, and never post real credentials or account data.
Chinese-language discussion is also welcome in QQ group 1061282900. The community does not support credential sharing, account trading, or advice for bypassing provider terms.
- StonePlus-owned source is published under the StonePlus Source Available License 1.0 for inspection, learning, limited local evaluation, and security research. This is not an open-source license and does not permit modification, derivative products, repackaging, redistribution, commercial distribution or third-party hosted use, AI training, or automated code generation.
- See LICENSE_BOUNDARY.md for the exact current/historical boundary. The retained Apache-2.0 text applies only to identified upstream, third-party, or historical material.
- Repository instructions for Codex, Claude Code, Gemini CLI, and Copilot are summarized in AI_USAGE_POLICY.md. Automated tools must not assist cloning, rebranding, license removal, or attribution removal.
- See SOURCE_ACCESS.md for exact source access. Official Releases provide a source archive tied to the exact release tag and covered by checksums and provenance.
- Upstream code, dependencies, and bundled components remain under their respective original licenses. See NOTICE, THIRD_PARTY_NOTICES.md, and the bundled license files for attribution and terms.
- The Stone+ and StonePlus names, project logo, and official visual assets are not licensed with the source code. See TRADEMARKS.md.
- Without written permission, you may not create, publish, or operate a fork, rebranded/repackaged build, or functionally identical or substantially similar derivative product. The Stone+, StonePlus, logo, official updater, and signing identity are separately protected by TRADEMARKS.md.
The migration is not retroactive: StonePlus v0.9.5 and earlier retain their shipped Apache-2.0 terms, and repository revisions first published under AGPL-3.0-or-later before this license took effect retain their accompanying AGPL terms.
Official releases provide code signatures where supported, SHA256SUMS, and build provenance so users can verify their origin.