Now Available — PalC codeOps by PalC Networks

Centralized Control for
AI Coding Teams

Enterprise-grade platform for managing Claude Code usage across distributed teams and servers. Real-time visibility into who is using AI tools, how much it costs, and full administrative control — all from a single dashboard.

Get Started Live Demo
codeOps — Remote Web Terminal
Connected
admin@codeops-hub:~$
0 Dashboard Modules
0 AI Models Supported
0 Budget Tiers
0 Enforcement Modes
0 AES Bit Encryption

Everything to Govern AI Coding at Scale

codeOps combines a remote web terminal, comprehensive admin dashboard, automated multi-server scanning, and granular budget controls with real-time cost tracking per user, project, and model.

Remote Web Terminal

Launch and manage Claude Code sessions from the browser via SSH. Session detachment for up to 24 hours with buffered output replay.

8-Tab Admin Dashboard

Single-page application with real-time data across LLM Sessions, Managers & Users, Remote Servers, Accounts, and more.

Real-Time Cost Tracking

Per-session token counting with model-specific pricing for Opus, Sonnet, and Haiku. Tracks input, output, cache read, and cache creation.

Hierarchical Budget Enforcement

Four-tier budget system: user, manager, project, and subscription level with warn, soft-block, and hard-kill modes.

Multi-Server Session Scanning

Background SSH scanner discovers Claude processes and parses JSONL session files across all registered servers at configurable intervals.

Session Recording & Playback

Records terminal I/O with timestamps for complete session replay and audit review. Full visibility into every AI coding interaction.

Role-Based Access Control

Superuser, Manager, and User hierarchy with granular permissions for models, servers, projects, and concurrent session limits.

SSO & Audit Logging

One PalC SSO with Azure AD + MFA. Every administrative action recorded with actor, target, timestamp, and full context.

8 Specialized Modules.
One Unified View.

A single-page application providing real-time operational intelligence across every dimension of your AI coding assistant deployment.

01 LLM Sessions

Live Session Monitoring

See all Claude Code sessions across every server in one unified view. Active sessions table shows status, host, user, model, tokens, and cost in real time.

  • Session history with filtering by user, host, and date range
  • Session timeline visualization with cost breakdown
  • Per-user 14-day rolling cost summary
  • Alert history and acknowledgment workflow
Active Sessions Live
UserHostModelCostStatus
alex.chen dev-srv-01 Opus $6.42 Active
maria.k prod-node-3 Sonnet $0.87 Active
j.watson staging-02 Haiku $0.52 Detached
priya.s dev-srv-01 Opus $2.91 Active
02 Managers & Users

Hierarchical Team Management

Full user lifecycle control with Superuser → Manager → User hierarchy. Set granular permissions per user and enforce organizational policies.

  • Per-user budget limits (monthly USD cap)
  • Model restrictions via allowed models allowlist
  • Max concurrent sessions and token cap per user
  • Priority levels (high / normal / low) affecting enforcement
User Management
S
admin Superuser
Unlimited
M
team-lead-fe Manager · 8 users
$500/mo
U
alex.chen User · Opus, Sonnet
$87/$100
U
maria.k User · Sonnet, Haiku
$34/$100
03 API Usage & Cost

Granular Cost Intelligence

Daily cost tracking in USD with full token usage breakdown. See input, output, cache read, and cache creation tokens per model with per-model pricing.

  • Usage by model with per-model pricing
  • Daily cost per user (14-day history)
  • Usage trends and budget forecasting
  • Alert thresholds: session ($5), daily ($20), monthly ($100)
Cost Breakdown — Today
$347.82 Total Spend
23 Active Users
Opus $241.20
Sonnet $82.40
Haiku $24.22

Full Browser-Based Terminal.
Powered by xterm.js & WebSocket.

Connect to remote servers via SSH and launch Claude Code sessions directly from the web interface. Sessions survive browser disconnection for up to 24 hours with 100KB output buffering.

Session Persistence

Sessions survive browser close for up to 24 hours with seamless reattachment and buffered output replay.

Model Selection

Choose between Opus, Sonnet, or Haiku at connection time. Session resumption via --resume flags.

Output Buffering

100KB circular output buffer ensures you never miss output when reconnecting after a disconnection.

Cost per Keystroke

Real-time token and cost display visible directly in the terminal interface as sessions run.

I/O Recording

Complete terminal I/O recorded with timestamps for session replay and compliance audit.

Multi-Server Support

Connect to any registered server from the same interface. Switch hosts without leaving the dashboard.

Hub & Spoke Model

The central web server acts as the hub, connecting to multiple remote servers (spokes) via SSH. All session data flows through the hub for centralized storage, analysis, and enforcement.

Web Console
WebSocket → SSH → Remote
Real-time terminal streaming
Background Scanner
SSH → Remote Servers
Periodic session discovery
Admin Dashboard
REST API → SQLite
Management and reporting
Budget Enforcer
Interval Check
Periodic enforcement check

Technology Stack

BackendNode.js + Express v5.2
DatabaseSQLite 3 (WAL mode)
Real-timeWebSocket (ws v8.20)
SSHssh2 library v1.17
Terminalxterm.js v5.5
EncryptionAES-256-GCM, scrypt
FrontendHTML/CSS/JS (no framework)
Session DataJSONL + timing metadata

Granular Budget Control at Every Level

User-Level

Direct monthly USD limit per individual user with real-time usage tracking.

Manager-Level

Aggregate budget for all users under a manager with roll-up visibility.

Project-Level

Budget tied to project membership across all servers and users.

Subscription-Level

Global API spend limits across the entire organization.

Warn

Log an alert but allow the session to continue uninterrupted.

Soft Block

Prevent new sessions from starting; existing sessions continue running.

Hard Kill

Immediately terminate all active sessions when budget is exceeded.

Enterprise-Grade Security. Built In.

AES-256-GCM Encryption

All stored server passwords encrypted with AES-256-GCM. Encryption key stored with restrictive permissions (0600).

Scrypt Password Hashing

Scrypt-based password hashing with random salts and timing-safe comparison for all admin authentication.

SSO Integration

One PalC SSO integration with Azure AD and multi-factor authentication for enterprise environments.

Full Audit Trail

Every administrative action recorded with actor, action type, target, and timestamp. Configurable 90-day retention.

Role-Based Access

Superuser gets full system access. Managers see assigned teams. Users see only their own sessions and costs.

Bearer Token API

API access secured via Bearer token in Authorization header. SSH connections use encrypted per-server credentials.

Transparent Per-Token Pricing

codeOps tracks costs using model-specific per-token pricing. All costs calculated in real-time per session.

Model Input (per 1M) Output (per 1M) Cache Read Cache Create
Opus Claude Opus $15.00 $75.00 $1.50 $18.75
Sonnet Claude Sonnet $3.00 $15.00 $0.30 $3.75
Haiku Claude Haiku $0.80 $4.00 $0.08 $1.00

Default Alert Thresholds

$5 Per Session
$20 Per Day
$100 Per Month

Up and Running in Minutes

01
npm install

Install Node.js dependencies

02
node server.js

Start the server

03
:3456/admin.html

Access the dashboard

04
cat .admin-password

Auto-generated credentials

Common Questions

codeOps is built for centralized management of Claude Code (Anthropic's AI coding assistant). It supports Claude Opus, Claude Sonnet, and Claude Haiku models with per-model cost tracking.

The terminal is powered by xterm.js and WebSocket connections. Users connect to remote servers via SSH and launch Claude Code sessions directly from the browser. Sessions survive browser disconnection for up to 24 hours with output buffering up to 100KB.

codeOps supports a four-tier budget hierarchy: user, manager, project, and subscription level. Each tier has three enforcement modes — Warn (log alert, continue), Soft Block (prevent new sessions), and Hard Kill (immediately terminate sessions when budget exceeded).

A background scanner connects to all registered remote servers via SSH at configurable intervals (default: every 5 minutes). It discovers running Claude processes via ps aux, parses JSONL session files from ~/.claude/projects/, extracts token counts, calculates real-time costs, and imports user prompts for audit.

AES-256-GCM encryption for all stored server passwords, scrypt-based password hashing with timing-safe comparison, full audit trails, role-based access control, SSO via Azure AD with MFA, and configurable data retention and prompt purging policies.

Install Node.js dependencies with npm install, start with node server.js, and access the dashboard at http://<host>:3456/admin.html. Default admin credentials are auto-generated in the .admin-password file.

Take Control of AI Coding
Across Your Organization

Deploy codeOps and get centralized visibility, budget enforcement, and security for every Claude Code session across every server.

Self-hosted deployment No external dependencies Setup in under 5 minutes