zwinger
Run AI coding agents (Claude Code, Codex, pi, Gemini CLI) in cages, small Linux microVMs on your Mac. An agent sees only the folders that you mount and reaches only the hosts that you allow.
Projects and cages
A project is a folder on your Mac. Its cage is a Linux microVM with its own kernel. The agent works in the project folder as
/workspace.Your logins stay on the Mac
The proxy of the cage adds your subscription login to the requests to the provider. The agent sees a placeholder only.
Network control
Block or allow each host or service per project. The app shows the hosts that the agent contacts and the hosts that the cage blocks.
Tasks for two agents
Two agents plan, build and review a task together. You see each stage in the run room.