Instant Docker sandboxes for AI coding agents

Skip permission prompts safely. Let agents run wild. Tear everything down when you're done.

cd myproject && aibox claude --yolo

One command to go from bare project to fully isolated Claude Code session. Changes sync both ways, the agent stays sandboxed, tear everything down when you're done.

npm install -g aibox-cli    # 1. install
cd myproject                 # 2. go to your project
aibox claude --yolo          # 3. run

• Zero config — don't even need Docker installed. Detects your machine, auto-installs Colima/Docker, builds an Alpine image with Claude Code + dev tools on first run
• Safe by default — network firewall (allowlisted domains only), restricted sudo, sensitive file detection. --yolo to unlock everything
• Full isolation — --copy snapshots into a Docker volume, --worktree creates a git worktree. Both handle uncommitted changes, submodules, and LFS
• Parallel agents — run multiple named instances on the same project, each with its own container
• Editor integration — VS Code, Cursor, JetBrains, Windsurf — set startup command to aibox claude --yolo
• Clone and run — --repo <url> clones any git repo and launches an agent session
• Not just Claude — container ships with Node.js, python3, git, ripgrep, build tools. Run aider, codex, or anything else
• Just a shell script — no daemon, no runtime dependencies, easy to fork

npm install -g aibox-cli
# or
brew install blitzdotdev/tap/aibox

aibox up                    # start container (auto-builds image on first run)
aibox claude --yolo         # no prompts, full sudo, no firewall
aibox claude --safe         # keep prompts, restricted sudo, firewall on
aibox claude                # asks you each time
aibox claude --resume       # resume most recent conversation
aibox shell                 # zsh inside the container
aibox down                  # stop and remove

Run multiple containers for the same project:

aibox --name refactor claude --yolo
aibox --name tests claude --safe
aibox --name refactor down

Both --copy and --worktree auto-detect uncommitted changes, submodules, and Git LFS. Each creates a aibox/<instance-name> branch.

aibox --repo https://github.com/user/project.git claude --yolo
aibox --repo [email protected]:user/project.git --branch dev claude

Repos cached at ~/.config/aibox/repos/ with submodules included.

Forward ports from a running container to the host — no restart needed:

aibox port-forward 3000              # host:3000 → container:3000
aibox port-forward 8080:3000         # host:8080 → container:3000
aibox port-forward 3000 5173         # multiple ports
aibox port-forward --list            # show active forwards
aibox port-forward --stop 3000       # stop one
aibox port-forward --stop-all        # stop all

Uses a lightweight sidecar container (alpine/socat) on the same Docker network. Cleaned up automatically on aibox down.

aibox status              # list all aibox containers
aibox volumes             # list copy volumes and worktrees
aibox down --clean        # also remove copy volumes / worktrees
aibox down --all          # stop all containers for this project
aibox nuke                # remove ALL aibox containers

In safe mode, outbound traffic is restricted to Claude API, npm, GitHub, PyPI, DNS, and SSH. Add extra domains:

export AIBOX_EXTRA_DOMAINS="example.com,api.myservice.io"

The container ships with Node.js 20, git, git-lfs, ripgrep, zsh, python3, and build tools. Claude Code is pre-installed, but you can run anything:

aibox shell    # then run: aider, codex, etc.

Customize the Dockerfile at ~/.config/aibox/Dockerfile.

Per-project settings in .aibox:

IMAGE=aibox:latest
SHARED_MODULES=false

See CONTRIBUTING.md.

MIT