Mudroom

Mudroom runs a coding agent such as Claude Code, Codex, Gemini CLI, opencode or Aider on a clone of your project, inside a Linux micro-VM. Network access is limited to the hosts you allow, and your real folder is never mounted. When the agent finishes, you review its changes like a pull request, then apply all of them, some files, some hunks, or none, and undo an apply later. It suits people who want agents to work unattended without touching their working tree.

The Mac app and CLI need macOS 26 or later on Apple silicon. Intel Macs, Linux and Windows get the CLI, which uses Docker or Podman. The README says Mudroom is ad-hoc signed and not notarized, so the install script and Homebrew cask remove the quarantine flag; a browser download needs System Settings, Privacy & Security, Open Anyway, or the xattr command. The README calls it an early prototype with rough edges and breaking changes. The project is free and MIT licensed.