What it is
Most assistants stop at text. Open Desktop Agent has hands: a file explorer, a built-in Chromium, your own Chrome through an extension, real mouse and keyboard, and a Linux sandbox it can break without breaking the machine. Each surface — folders, browser, desktop, Android emulator — is a separate permission you can grant or revoke.
Risky work runs in a disposable Lima VM behind a proxy-only egress allowlist, so nothing it does to the guest can reach the host's system files. Password fields, form submits, uploads, payments and cross-domain hops ask before they run, unless you have turned autonomy on for a folder you picked. Every tool call, click and command is written to a local activity log you can read and export; file edits show a per-file diff and keep a snapshot for undo.
It is free and open source, and model-agnostic: connect OpenCode Zen or Go, Anthropic, OpenAI or a local endpoint, and keep the credentials in the macOS Keychain, Windows Credential Manager or Secret Service rather than a config file. The macOS build is available now; Windows and Linux installers are in the works.