Undo anything your AI agent did.
Sandpiper saves your project before every prompt and before risky commands like rm -rf. If an agent breaks something, put it back in one click.
FreemacOS 26Apple siliconNo account
Sandpiper is a Mac app. Send the link to your Mac.
Works with Claude CodeCodexCursorGemini CLI
› Clean up the project structure $ rm -rf src/legacy
Every prompt
Saved before the agent starts.
When you send a prompt, Sandpiper saves the git repo the agent works in. Before a risky command runs, it saves again. No setup per project: it starts watching a repo the first time an agent works there.
Snapshots are APFS clones, so they take almost no space until a file changes.
Timeline
See exactly what each turn changed.
Every turn is listed under the prompt that started it, with the files it added, changed and deleted, and a line-by-line diff of each.
Your own edits between turns show up separately, so you always know who changed what.
Undo
Undo one turn, not your afternoon.
Undo this turn reverts only the files that turn touched. Everything you did since stays as it is. Or put the whole project back, or a single file.
No confirmation dialogs: every undo can itself be undone with Redo.
Stops the worst before it runs.
Every shell command an agent runs is read first. What it can delete is saved, and the commands that would wipe your Mac are refused.
rm -rf src/legacySaved first, then runsgit checkout -- .Saved first, then runsrm -rf ~/old-projectCopied to the vault, then runsrm -rf .gitAsks you firstrm -rf "$BUILD_DIR/"Refused: $BUILD_DIR is unset, so this is rm -rf /rm -rf ~Refused.env files too
Dotfiles backed up hourly
Recover a mistake. Protect the next turn.
Start with the tool and file state you actually have.
Questions
Is it really free?
Yes. No account, no tracking, no paid tier. It's made by the maker of Murmur, and it's free so more people can let agents work without fear.
Does my code leave my Mac?
No. Snapshots are APFS clones on your own disk. Sandpiper has no server and makes no network requests.
Which agents does it work with?
Claude Code, Codex, Cursor and Gemini CLI, through each one's hooks. Sandpiper adds the hooks for you and keeps a backup of each settings file. Codex asks you to trust new hooks once: run /hooks and press t.
Isn't this what git is for?
Git only has what you committed. Agents delete uncommitted work, run git checkout and git reset, and touch files git ignores, like .env. Sandpiper saves every turn without touching your repo or its history.
Doesn't Claude Code have /rewind?
It does, for edits Claude makes with its own tools. Its docs say it doesn't track files changed by Bash commands, which is how most deletions happen. Sandpiper covers both, and works the same for every agent.
How much disk space does it use?
Almost none at first: a snapshot is a clone that shares space with your files until they change. It keeps every snapshot for 2 days, hourly ones for a week and daily ones for a month. Files over 256 MB are listed but not kept.
What doesn't it cover?
Folders tools rebuild (node_modules, .git, build output git ignores), databases and anything in the cloud. If an agent drops a production database, a local snapshot can't bring it back.
Which Macs does it run on?
Apple silicon Macs on macOS 26 Tahoe or later.
Talk to your agent instead of typing.
Murmur is dictation for Mac that turns what you say into clean prompts, on your Mac. From the maker of Sandpiper.
Let your agent work. Keep the undo button.
FreemacOS 26No account