Take it back.

Shellhog is a fast Mac terminal where AI agents work on a copy of your folder. Keep what you like with ⌘A. Take the whole thing back with ⌘Z.

Get Shellhog for macOS How it works
shellhog
/ˈʃɛlhɒɡ/ · noun

A hedgehog that lives in your shell. It lets your AI agent dig around on a copy, and curls up around your real files.

Let the agent dig. Your files stay curled up safe.

Claude Code, Codex and the rest are great until they delete the wrong photo or rewrite a file you cared about. With Shellhog, nothing they do touches your real files until you say so. If you don't like what it did, it never happened.

Three shortcuts. That's the whole interface.

When the agent finishes, nothing pops up. The status bar says what changed and waits for you.

⌘A

Accept

The changes go into your real files, for good. Deleting a file or anything risky asks for Touch ID first.

⌘Z

Unwind

Before ⌘A, the copy is thrown away and your files never moved. After ⌘A, the accepted work is rolled back with one Touch ID.

⌘J

Status

One line per changed file, with bytes added and removed. Press Space on a file to leave it out, v to read the diff. Deleted a file after accepting it? Press r and the accepted version comes back.

How it works

Type claude in Shellhog as you would in any terminal. The protection steps in on its own.

  1. A copy, instantly

    The folder is cloned with APFS copy-on-write: it takes moments, and no extra disk until files change.

  2. A sandbox

    The agent runs under macOS Seatbelt. It can write to the copy and its own state, nowhere else.

  3. A live count

    The status bar shows each file the agent changes, with bytes added and removed, every second.

  4. Your call

    ⌘A, ⌘Z or ⌘J. Every decision is written to a signed logbook on your Mac.

Built not to be fooled

The agent runs in your terminal, so it could try to imitate Shellhog. It can't.

Drawn outside the terminalThe status bar and the review screen are rendered by Shellhog itself, outside the grid any program can write to.
Your mark, not oursEvery Shellhog surface carries the mark you picked (🦔, 🦉, 🦊…). A program doesn't know it, so it can't fake it.
Touch ID for what mattersAccepting a deletion, or rolling back accepted work, is confirmed in the system's own Touch ID prompt, with the files named.
Everything stays on your MacShellhog's copy, logbook and keys stay local. The confirmation key lives in the Secure Enclave.
Secrets stay secretThe sandbox blocks ~/.ssh and browser profiles, and the agent cannot reach Shellhog's own service.
Honest when it can'tIf something cannot be rolled back, Shellhog says so and asks for nothing. No fake “done”.

And it's a faster terminal than Ghostty

Shellhog is a complete GPU terminal written in Rust, not a plugin. Same machine, same 160×50 window, median of runs.

TestGhostty 1.3.1Shellhog
cat, ASCII0.87 s0.51 s
cat, UTF-80.94 s0.78 s
cat, 24-bit colour1.60 s0.65 s
Window visible229 ms131 ms
First content on screen261 ms162 ms
vtebench1 of 109 of 10

Measured on an Apple Silicon Mac, October 2026. Memory use isn't compared: the two terminals keep different scrollback.

Get Shellhog

Private preview for macOS 14 and later, Apple Silicon.

claude "fix the typos in letter.txt" # then ⌘A, ⌘Z or ⌘J