{"author":"trashburger","children":[{"author":"trashburger","children":[{"author":"binsquare","children":[],"created_at":"2026-07-13T02:01:01.000Z","created_at_i":1783908061,"id":48886971,"options":[],"parent_id":48884907,"points":null,"story_id":48884885,"text":"If you back it through smolvm, I can take care of the isolation story for you across windows, macOS<p><a href=\"https:&#x2F;&#x2F;github.com&#x2F;smol-machines&#x2F;smolvm\" rel=\"nofollow\">https:&#x2F;&#x2F;github.com&#x2F;smol-machines&#x2F;smolvm</a><p>SDKs available <a href=\"https:&#x2F;&#x2F;github.com&#x2F;smol-machines&#x2F;smol\" rel=\"nofollow\">https:&#x2F;&#x2F;github.com&#x2F;smol-machines&#x2F;smol</a>","title":null,"type":"comment","url":null}],"created_at":"2026-07-12T21:17:48.000Z","created_at_i":1783891068,"id":48884907,"options":[],"parent_id":48884885,"points":null,"story_id":48884885,"text":"I use a bunch of different coding agents but they always have annoying permission pop-ups or not the right kind of sandboxing.  I wanted something simple and flexible so I made it over the weekend.<p>You use it like so:<p>- Get the binary in whichever way you like (you can use Nix, Mise or just get it through the releases page).<p>- Configure via `.agent-run&#x2F;config.toml` to make the folders you care about read-write, and add any environment variables.<p>- Run your agent like so: `agent-run &lt;pi|claude|codex|opencode&gt;`.<p>It&#x27;s very generic so technically you can use this for any command.<p>Currently only supports Linux because I don&#x27;t have access to a macOS machine and sandbox-exec looks daunting.","title":null,"type":"comment","url":null}],"created_at":"2026-07-12T21:15:56.000Z","created_at_i":1783890956,"id":48884885,"options":[],"parent_id":null,"points":7,"story_id":48884885,"text":null,"title":"Show HN: Agent-run \u2013 Run a coding agent in a sandboxed environment","type":"story","url":"https://github.com/sin-ack/agent-run"}
