Multitui

Key Features

• •Filesystem Sandbox: Uses macOS sandbox-exec to enforce default deny for writes and deletes, with targeted allow rules for specific paths. A live deny log shows blocked actions, and you can add allow rules with one click. Keeps AI agents from harming your dev system.
• •Network Sandbox: Controls outbound network traffic with domain-level rules. You can block all internet access or allow only specific hosts. Pairs with the filesystem sandbox to ensure nothing leaves your machine without permission.
• •Secrets Filter: Automatically scans outbound traffic for API keys, tokens, and credentials using gitleaks. Prevents secret leakage from AI agents or other tools at the network level, catching leaks before they happen.
• •First-class macOS Apps: Each TUI becomes a dedicated .app bundle with dock icon, Spotlight integration, and support for window managers like Rectangle and Magnet. Provides native window management and proper window controls.
• •Finder Integration: Launch apps directly from Finder via toolbar button, right-click context menu, drag-to-dock, or URL scheme. Register as file handlers for specific document types. Open files with AppleScript or command line.
• •Isolated Shell History and Snippets: Each app maintains its own command history and snippets, completely separate from your main shell. Prevents cross-contamination between environments (e.g., production vs development).
• •Style for Contextual Awareness: Customize per-app styles including window, HUD, menu bar, or document mode. Use different background colors for different environments to avoid mistakes, like a red background for production.

Use Cases

• •Running AI coding agents like Claude Code or Codex: Create a dedicated sandboxed app that only accesses your project folder and blocks all network traffic except to the API. Agents can edit files safely without risking system files or leaking secrets.
• •Managing multiple Git repositories with lazygit: Each repository gets its own app with isolated history and read/write access limited to that repo. You can switch between projects without mixing up commit messages or remote configurations.
• •Editing configuration files or code with nano in a sandboxed app: Open files directly from Finder via toolbar or right-click. The app prevents nano from writing anywhere except the targeted file, protecting system directories from accidental overwrites.
• •Monitoring system resources with top, htop, or snitch: Dedicated apps with global keyboard shortcuts and always-on-top behavior. Each monitor runs in its own window, isolated from your main terminal workflow, and can block all network access for sensitive monitoring.
• •Exploring SQLite databases with harlequin in a sandboxed environment: Double-click .db files in Finder to launch harlequin with read-only or targeted write access. Prevents accidental database corruption while providing full query capabilities.
• •Using SSH integration for remote TUIs: Run remote commands through a sandboxed local app that controls network rules. Only allow connections to specific remote hosts, keeping your local machine protected while you work on servers.

Who is this for?

Multitui is built for macOS developers, DevOps engineers, system administrators, and security-conscious power users who use command-line tools and AI coding agents. It is ideal for anyone who runs TUI programs like Claude Code, Codex, lazygit, or system monitors and wants to contain their access. The tool is also valuable for teams that need to enforce sandboxing policies across projects, such as platform engineering teams or security audits. It complements existing terminal emulators (iTerm2, Ghostty, Alacritty, Terminal.app) and integrates with Little Snitch for additional control.