docker
Rootless containers with CPU, memory, and PID caps.
Parallel AI coding agents in isolated git worktrees, supervised from one screen. Bring the Claude or Codex subscription you already pay for.
Works with the models you already use
Parallel agents
Every workspace is its own git worktree, its own sandbox, its own port range. Agents can't trip over each other.
Sandbox provider, lifecycle scripts, egress allowlist, agent modes — declared once at the repo root.
Each gets its own git worktree, port range, and Docker, Podman, or raw shell. They never share state.
Line-by-line diffs with inline comments, synced to your GitHub PR. Merge with Cmd+Shift+P.
Isolation
One trait. Local containers, microVMs, or hosted sandboxes — swap providers in fabled.json without touching code.
docker
Rootless containers with CPU, memory, and PID caps.
podman
Daemonless, rootless containers — same caps, no Docker socket.
no-sandbox
Raw shell on your machine. For trusted local runs only.
firecracker
MicroVM isolation, sub-100 ms cold-start, kernel-level boundary.
vercel sandboxes
Ephemeral cloud sandbox with allowlisted egress routing.
e2b
Hosted code-execution sandbox with snapshot-fast warm pool.
modal
Serverless cloud-burst for hardware-heavy or fan-out runs.
// pick any provider — the rest of fabled.json stays put
"sandbox": {
"provider": "docker", // → "podman" | "firecracker" | "vercel" | …
"resourceCaps": { "cpus": 2, "memoryMib": 4096 },
"egress": { "allowlist": ["github.com", "api.anthropic.com"] },
"timeoutSec": { "perStep": 600, "abort": "sigterm-200ms-sigkill" }
}Same per-step timeout taxonomy, same SIGTERM → 200 ms → SIGKILL abort, same line-streamed stdout — across every provider.
Capabilities
No half-built primitives. Every workspace gets isolation, observability, and a real review surface — from day one.
Isolation by construction. Each workspace lives at ~/.fabledos/workspaces/<id>/ with its own branch, port range, and lifecycle. No cross-branch contamination, no stomping merges.
Resource caps, egress allowlists, per-step timeouts, abort on SIGTERM — every primitive enforced before the agent touches code, on every provider.
Line-by-line unified diff with threaded comments. Drops directly into the GitHub PR — agents read the same comments on their next turn.
Git status, CI runs, PR metadata, deployments, comments, todos — every signal a senior reviewer wants, one pane of glass.
Match cognition to the task. Swap Claude Code ↔ Codex per workspace via fabled.json — no engine rewrites, no keyboard detours.
Every decision, every tool call — appended to a hash-chained log on disk. SQL-query the mirror, replay any run, export redacted slices for audit.
Inside a workspace
Declare your repo, spawn a workspace, audit any decision — no magic, no hidden state.
One file at your repo root declares everything FabledOS needs to spin up a workspace — sandbox, scripts, allowlist, agent modes.
{
"$schema": "https://fabledos.com/schema/fabled.json/v1",
"scripts": {
"setup": "bun install && cp .env.example .env.local",
"run": "bun run dev",
"archive": "rm -rf .fabled/cache"
},
"agents": {
"allow": ["claude-code", "codex"],
"default": "claude-code",
"modes": ["plan", "fast", "reasoning"]
},
"sandbox": {
"provider": "docker",
"resourceCaps": { "cpus": 2, "memoryMib": 4096 },
"egress": { "allowlist": ["github.com", "api.anthropic.com"] }
}
}Cognition
FabledOS runs on the subscription you already pay for and exposes itself as an MCP server — any editor that speaks MCP picks it up without a fork.
The CLI you already log into runs the work. Every model call lands on the provider from your machine — your rate limit, your bill, zero proxy in the middle.
Bring an Anthropic, OpenAI, AWS Bedrock, Google Vertex, Azure, Mistral, Cohere, Groq, or local Ollama key for anything the subscription path doesn't cover. Keys land in your OS keychain — never on our servers.
Run fabled mcp serve and FabledOS exposes workspace, audit, and policy as first-class MCP tools. Any editor that already speaks MCP picks them up — no fork, no plugin store, no per-editor wrapper.
Eight stable ports — cognition · audit · policy · memory · attestation · payment · queue · auth. Every adapter swappable in isolation.
Install
Pick the surface that fits your day. The same workspaces follow you across all three.
Terminal-native power. Spawn workspaces, run agents, review diffs — without leaving your shell. Pick your package manager:
$ brew install himudianda/fabledos/fabled$ brew install himudianda/fabledos/fabled$ scoop bucket add fabledos https://github.com/himudianda/scoop-fabledos && scoop install fabled$ npm install -g @fabledos/cliThen sign in and create your first workspace:
$ fabled auth login
$ fabled workspace create --repo ~/your-projectRoadmap
What ships now, what's coming, where it ends up.
Everything above is live in v1.0. Local-first, cross-platform, audit-from-day-one.
Declare your team's working agreement once. Let evaluated agents merge while you sleep.
Evidence flows in; the runtime proposes refinements; you approve; behavior changes — without writing code.
FAQ
Lock-in, sandbox safety, bring-your-own model, what you keep if you cancel. Honest answers.
Ready to ship
Install in 30 seconds. Your subscription already covers the inference. You bring the backlog.
Free forever for local fleets. No credit card. No token markup. Ever.