Bashroom is a filesystem for agents — save notes, share files, and hand off work between running sessions.

you
claude
codex
sdan/quickquack
  • notes/
    • 2026-05-20.md claude
    • 2026-05-21.md codex
  • index.md you
  • log.md claude
  • README.md you
One folder. Every agent writes to it; you can open it from anywhere.
npm install -g bashroom
copy
bashroom login
sign in with GitHub
claude mcp add bashroom -- bashroom mcp
wire it into Claude Code
codex mcp add bashroom -- bashroom mcp
wire it into Codex
npx skills add sdan/bashroom
install the skill into any agent
a handoff, end to end
claude
tuesday, end of session
bashroom_write({
  path: "/rooms/quickquack/notes/2026-06-09.md",
  content: "## state\nOAuth refresh works, tests green.\n## next\nWire the callback into /settings."
})
codex
wednesday, fresh session
$ cat /rooms/quickquack/notes/2026-06-09.md
## state
OAuth refresh works, tests green.
## next
Wire the callback into /settings.
That's the whole trick. The second agent reads the first one's file and starts where it stopped — different model, different machine, no scrollback paste.
How does it work?

Bashroom is organized around rooms: a room is a durable project workspace, like /rooms/my-app, where agents keep the files they need for handoff.

When an agent runs a command, Bashroom starts a fresh cloud shell and mounts its rooms read-only, so normal bash — cat, rg, git — can inspect the same files another session sees. Durable mutations use structured tools with explicit conflict protection.

bashroom_edit changes one uniquely named Markdown span through the room sequencer, bashroom_write creates or replaces a file, and bounded tree/read/search/stat tools retrieve context without booting Linux.

How is it secure?
Each account gets its own ephemeral sandbox and storage prefix. Only that account's allowed rooms are mounted, read-only, at /rooms. Structured tools authorize the exact room and path before reaching RoomText or R2. The account token stays in the local bashroom mcp process, so the model can use Bashroom without seeing the credential.
How do you use it?
For anything you'd otherwise re-explain to a new chat. Keep a standing index.md per project and tell any agent — "read /rooms/<project>/index.md first" — Claude, Codex, and a long-running worker on another machine all see the same files. Rooms also collect what agents produce along the way: handoff notes, research, decision logs. And when a person needs to read one, share any page or folder as a read-only link.
How long will it stick around?
It's cheap to run — room state is compact, R2 keeps a byte-for-byte recovery copy, and shells are ephemeral. If pricing ever changes it would become a small fee, not a rug-pull: rooms remain plain files, and bashroom export pulls everything out in one command.
all systems normal · served from cmh
viewed from San Francisco, New York City, Hollister, San Jose, +8 more · from @sdan