boxcode

AI harness · CLI and IDE

The coding agent that waits for you.

Boxcode reads your files and runs your commands. Destructive actions wait for y/n. There is no allow-everything key — and catastrophic commands are never offered.

Download IDEExplore the CLI
curl -fsSL https://boxcode.sh/install.sh | bash

Checksum-verified binary — no Rust toolchain. Already installed? boxcode --upgrade

Boxcode IDEclick to focus
boxcode· agent

CLI · same agent
❯

Two surfaces. One brain.

The same agent in the terminal and the editor.

CLI

boxcode

A native Rust TUI. Sessions print as ordinary terminal output, so scrollback, selection, and search still work. MIT licensed. macOS, Linux, Windows.

  • Diffs for every write, before it lands
  • /plan, /rollback, /provider
  • Any OpenAI-compatible endpoint
CLI details

IDE

Boxcode IDE

A Code-OSS editor. The chat participant shells out to the same boxcode --acp binary already on your PATH. No second agent.

  • Ask, edit, and agent chat in the editor
  • Boxcode Light and Dark themes
  • Integrated browser for localhost
IDE details

The gate

You approve what can destroy.

Building something is dozens of ordinary steps. Prompting for every mkdir and npm install buries the dangerous ones. So deleting, force-pushing, publishing, and putting anything on the internet still wait for your yes — shown in full. Everything else just runs.

Without a gate

$ git push --force origin main
$ rm -rf dist node_modules
Done. The model kept going.

Twenty ordinary prompts get answered yes by reflex. The twenty-first is the one that destroys the branch.

With Boxcode

Run this command?
$ git push --force origin main
y run · n skip · esc skip

Destructive actions wait for your yes. Catastrophic commands are never offered. There is no allow-everything key.

How the harness works

Inspect, plan, edit, run — then wait where it matters.

  1. 01

    Describe the work

    A sentence carries the intent. There is no flag-heavy command for most of this, on purpose.

  2. 02

    It plans, edits, and runs

    /plan researches first. Every file change arrives as a diff against the disk as it is right now.

  3. 03

    You approve what can destroy

    /rollback undoes every file written this session. Shell commands that already ran are named, not pretended away.

Open endpoints

Point it at any OpenAI-compatible model.

Run /provider and pick one, or set BOXCODE_ENDPOINT. Hosted, self-hosted, or a model you deployed yourself — nothing is hardcoded to one vendor.

Need GPUs for open weights? Holbox GPU Router is a separate product.

Install

Start in the directory you already work in.

The CLI is a checksum-verified binary. The IDE is a Code-OSS build that talks to that same binary. Install both, or just the one you need.

Download IDE for your OS
curl -fsSL https://boxcode.sh/install.sh | bash