Bromure Agentic Coding runs your coding agent inside a disposable Linux VM, with a man-in-the-middle proxy on the host watching every byte it sends to the model APIs. Version 4.2 is about running more agents with less of you: agents that fire on their own, a window that shows all of them at once, and a terminal fast enough to draw it.

New

Automations. Give a workspace a standing order and Bromure runs it without you: on a schedule, when a pull request, issue, or commit lands on GitHub, when a Linear ticket shows up, or the moment another automation finishes. Each run launches your agent in a fresh git worktree — optionally inside a disposable clone of the whole workspace that is destroyed when the run ends. There are no webhooks: Bromure polls GitHub and Linear from the host with the workspace's own token, so nothing listens, nothing is exposed to the internet, and the token never enters the VM. And because PR titles, issue bodies, and comments are third-party text, every event goes through prompt-injection screening before the agent reads a word of it.
A file browser that knows git. A new pane shows the repository the active tab is working in as a live file tree, with the modified, added, untracked, and deleted badges you know from your editor. Click a file for a colored diff or a rendered preview, watch it update as the agent works, and pop the viewer out into its own window when one screen isn't enough.
Grid mode. See every agent at once: a stage that tiles up to 25 live terminals, across all your workspaces. Pin the current terminal to the grid with ⌘D, click a cell to type into it, double-click to zoom it full-frame, and read each cell's status dot — working, waiting on you, or done — without attaching to anything.
A native terminal, replatformed on libghostty. Terminals used to be rendered inside the VM and shipped to the window as pixels. In 4.2 every terminal is a host-native, GPU-rendered libghostty surface fed raw bytes from the guest's tmux: crisp Retina text, ligatures, inline images, proper IME — and the very thing that makes a 25-cell grid possible.
Depi integration: npm installs from a vetted registry. Bromure now integrates with Depi, Lupin & Holmes' secure npm registry. Turn it on in a workspace's supply-chain settings and the proxy re-routes every npm registry request to Depi, so the agent installs only packages that have already been vetted. Your Depi API key is attached on the host — it never enters the VM, so the agent can't leak it.

Also in 4.2

VMs use about half the memory. The old terminal path ran a full X11 and software-rendering stack inside every VM just to draw the screen. The native terminal made all of it unnecessary, so it's gone — and idle VMs are dramatically lighter for it.
Home folders are now ext4 images. Each workspace's home lives in its own sparse ext4 disk image instead of a host-shared folder: file identity survives suspend and restore, the git-over-shared-folder corruption risk is gone, images shrink back as the agent frees space, and duplicating a workspace clones the home with it. Existing workspaces are offered a one-time migration — your call, not ours.

A big thank-you to the Tolmo team for their feedback and support throughout this release!

Bromure Agentic Coding is free and open source on Apple Silicon. Grab 4.2 on the downloads page, or learn more →.