Comment by hanwenn

I wrote my own (or rather, had Claude write it), https://github.com/hanwen/runclaude.

Mine uses containers, and makes only the git/jj workspace read/write, hiding all credentials that are in my home dir.