Introduction

Garuda is an open-source coding agent for the terminal. It reads, edits and runs your code with the model that you choose: Claude, or an open model through Ollama, LM Studio, llama.cpp, vLLM, OpenRouter or any OpenAI-compatible server.

Garuda is built safety first:

• Commands run in an OS sandbox. Seatbelt on macOS, bubblewrap on Linux. They write only in the project, the temp folders and the package caches, and they have no network unless you open it.
• Edits ask first. An edit shows its diff. You allow it once, for the session, or not at all. Commands in the sandbox run with no question, inside its limits; a command outside the sandbox asks, unless one of your allow rules covers it. /undo restores the files in its snapshot (ignored files, such as build output, are not in it).
• Your rules decide. Deny rules always win. A team policy sets limits that a project cannot loosen, and an audit log records every decision.

How these docs are organised

• Start here: Install, Quick start and the Security model.
• User guide: every feature and setting. It is the repository’s README.
• Design: the architecture, the high-level design and one document per component. These pages come from the docs/ folder of the repository, so they stay the same as the code.

Garuda is licensed under the Apache License 2.0. To report a security problem, see SECURITY.md.