Choose your setup
Which boxer integration your coding agent gets, and where its setup page is.
boxer install <harness> writes the files your agent reads, so its shell commands go to the
sandbox. Find your agent, run its command, commit the result.
| Agent | Command | How commands reach the sandbox |
|---|---|---|
| Claude Code | boxer install claude-code | hook rewrites each command |
| Codex | boxer install codex | hook rewrites each command |
| Gemini CLI | boxer install gemini-cli | hook rewrites each command |
| Copilot CLI | boxer install copilot --user | hook rewrites each command |
| OpenCode | boxer install opencode | plugin rewrites each command |
| pi | boxer install pi | extension rewrites each command |
| Grok | boxer install grok | hook rewrites each command |
| Kimi Code, DSH | boxer install kimi, boxer install dsh | shell is blocked; the agent uses the boxer_run tool |
| fx, or any other agent | boxer shell <harness> | the agent itself runs in the sandbox |
Running several agents? boxer install all sets up all of the project-level ones at once.
If an orchestrator starts your agent (Conductor, T3 Code and others), set up the agent here, then follow its orchestrator page.
What every setup has in common
- Commit what
boxer installwrites. A worktree is cut from a branch. If the integration is not on the branch, the agent in that worktree runs on your machine. Codex is the exception: it reads hooks from the main checkout, so every worktree of it is covered either way. - Run
boxer doctor. It lists the integrations it finds and warns about any that will not hold. - Expect the first session to wait. It boots the sandbox and runs
setupbefore the agent starts. Setwarm_on_session_start = trueto start the agent at once and boot in the background. - Check with a real command. Ask the agent to run
node -p process.platform(orpython3 -c 'import sys; print(sys.platform)'). It printslinuxfrom the sandbox, even on a Mac.
Only the programs in intercept go to the sandbox. The default list covers the usual build tools
(npm, node, python, go, make, cargo and more). git, gh and ssh always stay on your
machine. See what gets sandboxed.
Skill or plugin only
npx skills add BarakChamo/boxer --skill boxer or npx plugins add BarakChamo/boxer teach an
agent about boxer without enforcing anything. See Skill and plugin.