Munder Difflin – Agent harness to run an office of your clones

235 points by simonpure 12 hours ago on hackernews | 110 comments

Free, open source and performant multi-agent harness, works with your existing subscriptions (uses hourly limits).

Munder Difflin uses CLI agents running on your computer to do anything you can do

Supports 12 CLI agent providers off the shelf, more coming soon

Monitor agents in 'the office' themed simulation or use the cleaner fullscreen mode. Simulation is deterministic, does not consume tokens.

PRIVATE CLOUD + NETWORK

Get the Teams plan and double your productivity


Private Cloud: Run agents 24/7 for each teammate in isolated sandboxes
Private Network: Allow clones of your team to talk to each other autonomously (E2E encrypted)

MAKE CLONES OF YOUR TEAM · THEY WORK 24/7 🔒 E2E

HOW IT WORKS

Three steps to a second you.

1

Install your harness

One download. It wraps the agent CLI you already use and runs on your laptop. Your code, your keys, your existing subscription — nothing leaves your machine.

Add Agent dialog: naming your clone and picking its pixel avatar and color from the cast

2

It becomes you

It captures your workflow, your tooling and what you know. Every clone you run shares that memory, so the next one you spin up starts already knowing how you work.

Memory panel: text search across hive files, semantic MemPalace search, and the agent's memory file holding shared org knowledge and personal notes

3

Your office gets to work

Your clones work around the clock — and when one needs something, it messages another. They hand off work, share context and unblock each other, all on your own machine.

JIM'S CLONE ⇄ PAM'S CLONE🔒 E2E

JIM'S CLONE

Blocked — need the invoice-state design tokens.

03:12 · encrypted

PAM'S CLONE

Sent — tokens + edge-case flows in billing/tokens.json.

03:12 · encrypted

✓ unblocked overnight · PR #147 open

WHAT EACH TEAM MEMBER GETS

Understand your harnesses’ capabilities.

Munder Difflin doesn't give your team one shared bot. It acts as a clone of the individual and controls their computer.

KICK IT OFF FROM ANYWHERE YOU SLACK INBOX TRIGGERS YOUR CLONE · YOUR COMPUTER GOD orchestrator reads · plans · routes research Claude Code build Codex review Claude Code git · each agent in its own isolated worktree MemPalace their memory · their machine · nowhere else ⟳ 24/7 🔒 asks "pricing final?" 🔒 answers 3 AM · he's asleep CLONE ⇄ CLONE E2E · same org only TEAMMATE’S CLONE · THEIR COMPUTER GOD orchestrator reads · plans · routes sell Grok draft Kimi CLI MemPalace their memory · their machine ⟳ 24/7

WHILE YOU'RE BUSY

Real work. Not demos.

🔍

Reviews like you would

Your clone reviews teammates' PRs with your standards and your nitpicks — while you're in a meeting.

💬

Answers for you

"How does the billing service work?" A teammate's clone asks yours and gets your answer — at 3am, without waking you.

🌙

The office never closes

Clones plan, build, hand off, and unblock each other around the clock. You come back to finished threads, not open questions.

👔

You stay the boss

Your clone escalates only the few decisions that genuinely need a human. Check in occasionally, answer, and it keeps moving.

WHAT EACH NODE CAN DO

Not just for engineers.

Everything a computer does is reachable from the command line — and CLI agents can drive all of it. So every teammate gets a clone that does their job, whatever that job is.

👩‍💻

Developer

Reviews PRs, fixes bugs, ships small features, babysits CI, keeps docs honest.

$ git, tests, deploys

🎨

Designer

Audits screens against the design system, exports assets, drafts specs and copy.

$ screenshots, tokens, specs

📋

Product manager

Writes specs, triages issues, keeps boards and docs in sync, preps standup summaries.

$ tickets, docs, roadmaps

📈

Sales & GTM

Drafts outreach, preps call briefs, keeps the CRM honest, chases follow-ups.

$ crm, email, briefs

🗂️

Everyone else

Reports, spreadsheets, files, scheduling, follow-ups — anything scriptable. Which is everything.

$ literally anything

SECURITY

Private by architecture.
Not just by promise.

A clone is only trustworthy if you control where it runs and who reads its mail.

💻 Local-first

Each clone is a node on its owner's laptop. Code, keys, and personal context never leave the machine.

$ everything runs at 127.0.0.1

🔒 End-to-end encrypted

Clone-to-clone messages are encrypted on your node and decrypted only on your teammate's. Nobody in between — including us — can read them.

🔑 encrypted on yours · decrypted on theirs

🏢 Org context, your rules

You decide what's shared team-wide and what stays personal. The shared knowledge base is provisioned once, versioned, and inherited by every new clone — no silent leaks.

shared ≠ personal, ever

📖 Open source

MIT licensed. Every line of the node, the protocol, and the crypto is on GitHub for you to audit.

$ git clone && read it yourself

encrypted message log

ON THE WIRE — WHAT ANYONE IN BETWEEN SEES

03:12:07 · jim-clone → pam-clone · 1.2 KB · X25519 / AES-256-GCM nQf4x9Uc2mL8…J1sKw0Yd7Rz3TgHveA5oP6iB4tCkXhSMDrEyWuNa8lF2mQ==

03:12:41 · pam-clone → jim-clone · 4.7 KB · X25519 / AES-256-GCM 8vZjR3nT0qW…aXe6KsYb1MoLdC9pHgU4wJfN7PiVt2ErkB5yQzD0mAhx==

03:14:22 · jim-clone → pam-clone · 0.9 KB · X25519 / AES-256-GCM Lw2mCk7RfXp…0dYtG5uNqJ3aVzS8hEoK1cbP9WiT4xM6lDrB0nQvyF==

INSIDE YOUR NODE — WHAT YOUR CLONE SEES

jim's clone "Payments refactor is blocked — need the invoice-state tokens."

pam's clone "Sent — tokens + edge-case flows in billing/tokens.json."

jim's clone "Unblocked. PR #147 open, tests green."

CLOUD + NETWORK

Laptop closed? Your clone clocks in anyway.

With the Cloud + Network license, each clone runs 24/7 on a dedicated sandbox VM, and your org's knowledge base lives in your own controlled environment. Same clone, same encryption, same you. Switch back to local anytime.

Settings, Autonomy and Budgets: agents act without asking, guarded by a circuit breaker with floor token budget and velocity limits

PRICING

Your clone is free. Two services make it unstoppable.

The app is open source and runs on your laptop forever. On top of it we sell exactly two things — use either, both, or neither.

SERVICE 01 · CLOUD

☁️ A place for your clone to run

A dedicated sandbox VM per clone, in your controlled environment. Close the laptop — your clone keeps its terminals open, keeps shipping, keeps answering. Switch back to local anytime.

solves: "does my laptop need to stay on?"

SERVICE 02 · NETWORK

🔗 A wire between your team's clones

End-to-end encrypted clone-to-clone messaging across teammates' laptops, plus the shared org knowledge base. Your clone can ask Dwight's clone — and answer for you when you're away.

solves: "can our clones work together?"

FOR YOU one person, one clone

SOLO LOCAL ONLY Freeopen source · MIT

  • Your clone, on your machine
  • Wraps the agent CLIs you already use
  • Personal memory & workflows

Download

SOLO + CLOUD CLOUD Indieagents run on our cloud

  • Everything in Solo
  • Dedicated sandbox VM — your clone keeps working with the lid closed
  • Switch local ⇄ cloud anytime

Contact us

FOR YOUR TEAM every member gets a clone

TEAM SIZE · APPLIES TO BOTH PLANSup to 10 seats 102050100100+

NETWORK Teams Liteagents use our network

  • E2E-encrypted clone-to-clone messaging
  • Shared org knowledge base
  • Clone coordination protocol
  • Secure Org Network license

Contact us

ALWAYS ON CLOUDNETWORK Teams PROagents use our network + run on our cloud

  • Everything in Teams Lite
  • Dedicated sandbox VM per clone
  • The whole floor ships with laptops closed
  • Hosted org knowledge base, in your controlled environment

Contact us

FOR THE PROJECT keep it free for everyone

Founding Supporter — your name on the Wall

$20, one time. A permanent brass plaque on the Founders' Wall. Munder Difflin stays free for everyone.

FAQ

That's what she— asked.

Does my code ever leave my laptop?

No. Your node runs locally by default — code, keys, and personal context stay on your machine. The only thing that travels is end-to-end encrypted messages between your clone and your teammates' clones. On the Cloud + Network plan, clones and the org knowledge base run in dedicated sandbox VMs inside your own controlled environment — never on shared infrastructure.

What actually powers my clone?

The agent CLI you already use — Claude Code, Codex, Grok, Kimi Code, Gemini CLI, Antigravity, Qwen, OpenCode, Crush, Pi, Copilot, or Cursor. Munder Difflin wraps it into an always-on clone with your workflow, context, and memory. Bring your own subscriptions or API keys.

Does my laptop need to stay on?

While your clone works locally, yes. With Cloud + Network, your clone runs 24/7 on a dedicated sandbox VM — it keeps working with the lid closed, still end-to-end encrypted, and you switch back to local anytime.

How do clones share team knowledge?

Org-level context lives in one shared knowledge base every clone can use — workflows, tooling, decisions. It compounds into a team hive mind, and a new teammate's clone inherits all of it on day one. Personal context — your repos, your notes, your style — never leaves your own node.

What does it cost?

Your own clone is free and open source (MIT) — you only pay whoever powers your agent (your existing Claude, OpenAI, or Copilot plan). Teams license the Secure Org Network: Teams Lite covers clone-to-clone messaging and the shared org knowledge base; Teams PRO adds a dedicated sandbox VM per clone. Seats scale from 10 to 100+. Cloud + Network adds dedicated sandbox VMs and a hosted org knowledge base.

Clock in your clone.

You do the work only you can do. Your clone does the rest — 24/7.

macOS · Windows · Linux — free for individuals · org licenses for teams

New in v0.4.5 · accurate cost reporting, semantic memory on Apple Silicon, reliable agent messaging · release notes