Open Source2025

boxctl

Isolated container environments for autonomous AI coding agents with auto-approve, background execution, and desktop notifications.

Role: Developer

DockerAICLIPython

About the Project

boxctl (formerly agentbox) runs AI coding agents (Claude, Codex, Gemini, Qwen) inside Docker containers. The agents run with auto-approve. They can only reach the project directory and explicitly mounted paths. Git tracks every change, and git reset --hard undoes it. The repository is archived.

Features

  • Container isolation: access only to the project directory and mounted paths
  • Auto-approve mode: agents work without confirming each action
  • Background execution: detach from sessions and reattach later; a daemon on the host sends desktop notifications
  • Multiple agents: Claude, Codex, Gemini, and Qwen, several sessions per container
  • Worktrees: several agents on different branches at the same time
  • Device passthrough: audio, GPU, serial ports, and cameras
  • agentctl: in-container CLI, also available via MCP, that lets the agent manage its own sessions and worktrees
  • Credentials: Claude, Codex, Gemini, and Qwen credentials are mounted from the host; SSH is configurable