Interactive product previewSample Northstar data · Changes reset on reloadSign in

Northstar

Settings

What every signed in IDE in this company is allowed to reach.

Your working hours

Touch time on the Insights page compares IDE time with these hours, so nights and weekends do not count as waiting.

America/Los_Angeles
Working days
Only you can change these.

AI models

Hosted providers and the specific models your engineers can use from the IDE. Credentials stay in the cloud and are never sent to a workstation.

2 providers
Anthropic2 of 4 modelsKey saved
Leave blank to keep the current key.
OpenAI1 of 5 modelsKey saved
Leave blank to keep the current key.

Local models

Local allowed

Models that run on each engineer's computer through Ollama, LM Studio or another local server. Vedion only connects to servers on the same computer.

Mode

Approved model families

Vedion matches the family the local runtime reports, so renaming a model does not change its family. This is a usage policy, not device security.

ApprovedFamilyPublisherOriginLicenceNote
gpt-ossgpt-oss:20b, gpt-oss:120bOpenAIUnited StatesApache 2.0Chat and reasoning
Devstral and Mistraldevstral:24bMistral AIFranceApache 2.0 (Devstral)Built for agents
StarCoder2starcoder2:3b, starcoder2:7bBigCode (Hugging Face, ServiceNow)InternationalBigCode OpenRAIL-MInline completion
Gemma 4gemma4:26b, gemma4:31bGoogleUnited StatesApache 2.0Fast, long context
Phiphi4MicrosoftUnited StatesMITSmall and fast
Granitegranite3.3IBMUnited StatesApache 2.0Enterprise focused
OLMoolmo2Ai2United StatesApache 2.0Fully open data
Llamallama3.1MetaUnited StatesLlama licenceReview licence terms
CodestralcodestralMistral AIFranceNon-productionNot for commercial work

Last option · China-based publishers

Off by default. Engineers' IDEs always try these after every other approved model.

ApprovedFamilyPublisherOriginLicenceNote
Qwenqwen3-coder, qwen2.5-coderAlibabaChinaApache 2.0Strong at each size
GLMglm-4.5-airZhipu AIChinaMITNeeds 64 GB or more
DeepSeekdeepseek-coder-v2DeepSeekChinaMITFull models too large
Kimikimi-k2Moonshot AIChinaModified MITToo large for most computers
Yiyi-coder01.AIChinaApache 2.0Older models
InternLMinternlm2.5Shanghai AI LaboratoryChinaCheck licenceOlder models

Starting rules

“First” means use that kind of model and switch to the other when it is not running. “Only” never switches. Only stricter lets engineers keep more work local, never less.

Covers Vedion chat, agents and inline completion, and the Claude and Codex tabs Vedion opens. Tools engineers start on their own, such as a Claude Code or Codex terminal opened outside Vedion, use their own settings.

These settings govern Vedion AI. Independently connected extensions and terminal tools use their own credentials. Vedion does not store prompts or responses from the company gateway.

Applies on each IDE's next cloud refresh.

GitHub

Repositories your company can attach to projects and open from the IDE. Vedion reads repository metadata only, never source code.

Connected
northstar

Last synced 10/1/2026, 8:12:00 AM UTC

Repositories

5 of 7 in a project
northstar/cloudPrivate
Cloud onboarding
Self-serve billing
northstar/ciPrivate
CI pipeline speedup
northstar/idePrivate
Planning intelligence
northstar/docsPublic
Developer docs refresh
northstar/billingPrivate
Self-serve billing
northstar/opsPrivate
northstar/marketing-sitePublic · Archived

Company domains

Prove the email domains your company owns. Verified domains let colleagues find and join this company, and power single sign-on.

1 verified
northstar.exampleVerified
northstar-labs.exampleWaiting for DNS record
Type
TXT
Name
_vedion-challenge.northstar-labs.example
Value
vedion-domain-verification=7d41e8c2a6
Who can join with a verified email on these domains
Shared mail providers such as gmail.com can never be verified, so personal addresses only join by invitation.

Single sign-on

Let people on your verified domains sign in through your company identity provider with SAML. Their first sign-in adds them to this company as members.

On

Create a SAML app in Okta, Microsoft Entra ID, Google Workspace or another provider with these values. Send the email address as the name ID or an email attribute.

ACS URL
https://upncyqgxioalplejzymh.supabase.co/auth/v1/sso/saml/acs
Entity ID
https://upncyqgxioalplejzymh.supabase.co/auth/v1/sso/saml/metadata
Metadata
https://upncyqgxioalplejzymh.supabase.co/auth/v1/sso/saml/metadata
Identity provider connected

http://www.okta.example/exk1northstar

Existing sessions that did not use SSO end within the hour.

SSO creates a separate account even for someone who already signs in with a password or Google. The SSO account joins as a member, and the older account keeps its own membership.