Multitui

Key Features

• •Filesystem Sandbox: Uses macOS sandbox-exec to enforce default-deny policies for file writes and deletes. Users can allow only specific paths, view a live deny log, and add rules with one click. This protects system files from untrusted tools while letting them work in project folders.
• •Network Sandbox: Controls outbound network traffic at the domain level. Block all internet access or allow only needed hosts. Pairs with the filesystem sandbox to ensure nothing leaves the machine without permission, preventing data exfiltration.
• •Secrets Filter: Automatically scans outbound network traffic for API keys, tokens, and credentials using gitleaks. Catches secrets before they can leak from AI agents or other tools, adding a critical layer of security.
• •First-Class macOS Apps: Each TUI becomes a dedicated .app bundle with its own dock icon, Spotlight integration, and window management. Supports window managers like Magnet and Rectangle for seamless workflow integration.
• •Finder Integration: Launch apps from Finder toolbar buttons, right-click context menus, drag-to-dock, URL schemes, AppleScript, or command line. Register as file handlers for specific document types for quick opening.
• •Per-App Styles and Themes: Customize style per-app for contextual awareness—use red backgrounds for production environments. Each app can have its own theme, icon, and visual cues to prevent mistakes.
• •Isolated Shell History and Snippets: Each app maintains its own command history, separate from the main shell. Save frequently used commands as snippets per app, enabling efficient workflow organization.

Use Cases

• •Run Claude Code or Codex with sandbox protection: Configure filesystem allow for project folder, block network except necessary APIs, prevent file deletions. Outcome: safe AI coding sessions without risk of system damage or data leaks.
• •Turn lazygit into a dedicated app with its own dock icon and style, reducing terminal tabs. Outcome: quicker Git management with consistent access and minimal clutter.
• •Create a menubar widget for system resource monitoring (top, htop) that always stays on top via global shortcut. Outcome: instant access to CPU/memory usage without a full terminal window.
• •Use file-based apps like nano or harlequin to open documents directly from Finder. Double-click a file to launch the TUI editor. Outcome: seamless editing of text or databases without opening the terminal app.
• •Develop in multiple environments with per-app styles: production apps get a red background and strict sandbox rules. Outcome: improved contextual awareness and reduced risk of accidental changes in critical environments.
• •Leverage the secrets filter while running an untrusted AI agent. The filter catches any API keys the agent tries to send out. Outcome: prevent credential exposure even if the agent is compromised.

Who is this for?

Developers, DevOps engineers, security-conscious power users, and anyone who runs AI coding agents (Claude Code, Codex, Gemini) or other command-line TUI tools on macOS. Also suitable for users who want to isolate their development environment from untrusted code without using containers or VMs. Specifically targets users of macOS 15+ who prefer native apps and want to leverage Terminal utilities like lazygit, htop, or network monitoring tools with enhanced security and convenience.