Kernel-Hunter/mudroom

Website ·
Docs ·
How it compares ·
Releases
Mudroom runs coding agents like Claude Code, Codex, Gemini CLI, opencode
and Aider (or any command) on a clone of your project, inside a Linux
micro-VM, with network access limited to the hosts you allow. When the agent
is done, you review its changes like a pull request, apply all of it, some
files, some hunks or none, and undo any apply later. It's a free, local
alternative to cloud agent sandboxes, and your real folder is never mounted.
https://github.com/user-attachments/assets/ff599cbc-fbd9-4c8f-801d-fd2e52ccb0c6
33 seconds, with sound: the agent edits a clone in a VM, reaches only the hosts you allow, and you apply what you pick.
> Status: early prototype. Expect rough edges and breaking changes.
## Install
The Mac app and CLI run on Apple-silicon Macs with macOS 26 or later. On
Linux, Windows and Intel Macs, Mudroom is a CLI that uses Docker or Podman.
### macOS
With Homebrew, which also installs Apple's container CLI:
sh
brew install --cask kernel-hunter/tap/mudroom
Or with the install script:
sh
curl -fsSL https://raw.githubusercontent.com/Kernel-Hunter/mudroom/main/install.sh | sh
What the install script does, and how to uninstall
The script needs macOS 26 or later on Apple silicon. It downloads the latest
release, checks its SHA-256 when the release publishes one, puts Mudroom.app
in /Applications (or ~/Applications if /Applications isn't writable) and
links the mudroom command into /opt/homebrew/bin, /usr/local/bin or
~/.local/bin. It doesn't use sudo. Set MUDROOMVERSION=0.1.1 to pick a
version. To remove Mudroom (your sessions and settings stay):
sh
curl -fsSL https://raw.githubusercontent.com/Kernel-Hunter/mudroom/main/install.sh | sh -s -- --uninstall
About signing and Gatekeeper
Mudroom is ad-hoc signed, not notarized. The install script and the Homebrew
cask remove the quarantine flag, so macOS opens it. If you download the zip
in a browser, use System Settings > Privacy & Security > Open Anyway, or run
xattr -dr com.apple.quarantine /Applications/Mudroom.app.
On an Intel Mac, the CLI works with Docker or Podman; build it from
source.
### Install on Windows
CLI only, Windows 10/11 on x8664 or arm64. With Scoop:
powershell
scoop bucket add kernel-hunter https://github.com/Kernel-Hunter/scoop-bucket
scoop install mudroom
Then install a container runtime: Docker Desktop
with the WSL 2 backend (Linux containers, the default), or
Podman with a Podman machine
(podman machine init, then podman machine start). Build the agent image
once and check the network:
powershell
mudroom image build --backend docker # or --backend podman
mudroom network check --backend docker
Run mudroom from Windows Terminal or any console with VT support. See
Windows for what is different from macOS and Linux.
Without Scoop: install from the release zip
Each release has a zip for x8664 and one for arm64:
mudroom- -windows-x8664.zip and mudroom- -windows-arm64.zip
on the Releases
page, each with a .sha256. The zip holds a folder with mudroom.exe and
the Swift runtime and Visual C++ DLLs it loads, so Swift doesn't need to be
installed. Keep the files together and put the folder on your PATH (copying