Shuru

Shuru gives AI agents a disposable Linux virtual machine on your Mac. It's for developers who want coding assistants to execute code, install packages and use tools in an environment isolated from the host.

• Disposable environments: Each run resets the sandbox filesystem, while checkpoints let you save a prepared environment for reuse.
• Controlled file access: Shared host folders are read-only by default, with guest writes kept in a temporary layer that disappears when the VM exits; optional write access lets the agent change host files directly.
• Network and credential controls: Network access is optional and can be restricted to approved hosts; API keys stay on the host, and a proxy substitutes them for placeholder tokens only in HTTPS requests to specified hosts.
• Agent integration: A TypeScript SDK and an agent skill let tools such as Claude Code, Cursor and Copilot use the sandbox for execution.
• Access to sandbox services: Port forwarding exposes services inside the VM without general guest network access, including an isolated Chromium browser in the Browser Use example.

Shuru runs locally on Apple Silicon Macs with macOS 14 or later, using Apple's Virtualization.framework. It isolates agent execution; requests to external model APIs still go to those providers. The project is open source under the Apache 2.0 license.