ekovshilovsky

Cloister

Name: Cloister
Author: ekovshilovsky

AI community

SOURCE https://github.com/ekovshilovsky/cloister

Description

Run multiple Claude Code accounts & AI agents on one Mac — isolated macOS VMs with secure sandboxing

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

Cloister: Isolated VMs for AI Agents & Multi-Account Claude Code on macOS

[![CI](https://github.com/ekovshilovsky/cloister/actions/workflows/ci.yml/badge.svg)](https://github.com/ekovshilovsky/cloister/actions/workflows/ci.yml) [![Release](https://img.shields.io/github/v/release/ekovshilovsky/cloister)](https://github.com/ekovshilovsky/cloister/releases/latest) [![Go Report Card](https://goreportcard.com/badge/github.com/ekovshilovsky/cloister)](https://goreportcard.com/report/github.com/ekovshilovsky/cloister) [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)

Isolated macOS VM environments for running multiple Claude Code organizations, sandboxing autonomous AI agents like [OpenClaw](https://openclaw.ai/), and separating credentials across client engagements.

![cloister demo](demo.gif)

Why cloister?

**Multi-account isolation.** Claude Code stores credentials, conversation history, and project config in `~/.claude`. If you work across multiple organizations, every session shares the same identity. cloister gives each account its own isolated VM with separate credentials, CLAUDE.md, and conversation history.

**Autonomous agent containment.** AI agents like OpenClaw run 24/7 with shell access, browser control, and cron scheduling. cloister's VM isolation is stronger than Docker (separate kernel, not just namespace isolation) — services inside the VM are unreachable from the host unless explicitly tunneled, and `cloister stop` is an instant kill switch.

**Dual-backend architecture.** Colima (Linux VMs) for Claude Code isolation and Docker workloads. Lume (macOS VMs via Apple Virtualization Framework) for OpenClaw and agents needing macOS-native features like iMessage via BlueBubbles.

Architecture

graph TB
    subgraph Host["macOS Host"]
        CLI[cloister CLI]
        Config["~/.cloister/config.yaml"]
        Ollama["Ollama (Metal GPU)"]
        OP["1Password CLI"]

        subgraph Colima["Colima Backend (Linux