Sanductor Native macOS app

Run agents in parallel. Keep your tokens private.

Run Claude Code and Codex safely in parallel, always in YOLO mode. Agents run as a sandboxed non-admin macOS user separate from yours, with no access to your home directory, tokens or environment variables.

Install with Homebrew View on GitHub

Free and open source · Apple silicon · macOS 26+

The worktree sidebar, an agent's terminal and its review beside it
On the happy path, go from a GitHub issue prompt through code review comments and failing CI to a merged pull request, entirely by clicking in the app.

Protect your personal account

Give agents access to shared repositories while keeping your personal files, GitHub credentials and host environment variables private.

Keep multiple projects moving

Give each task its own Git worktree and run Claude Code or Codex across repositories at once. See which agents are working, finished or waiting for you in one window.

You control sensitive actions

Review diffs yourself in the app, request human review on GitHub or get AI feedback from a fresh agent, Copilot or CodeRabbit. You control signing, pushing and pull requests.

Why I built Sanductor

My credentials stay outside.

As Homebrew’s Project Leader and a CTPO, I take both developer productivity and coding agent security very seriously. I assume any token an agent can access will eventually be misused. I want agents to work unattended without giving them my GitHub credentials or access to the rest of my home directory. Sanductor puts that workflow in one native macOS app.

My sandboxed Homebrew workflow

Get Sanductor

Install Sanductor

Install with Homebrew. Update with brew upgrade.

brew install agentide

The Homebrew cask will be renamed to sanductor soon. The cask installs herdr, ripgrep and gh. You’ll also need Git, sandvault 1.29 or later with its sandbox user configured and Claude Code or Codex CLI signed in inside the sandbox. Setup guide

Or download for Mac

Built on open source

Sanductor is free and open source under the AGPLv3 licence. It uses sandvault for user separation and macOS sandboxing, herdr for persistent agent sessions, gh for pull requests and ripgrep for search.