Let agents loose.
Safely.
Scared of getting pwned because your agent has the same privileges as you?
Run many coding agents at once, on your own machines, each fully isolated. You stay in control.
- MIT
- docker · podman · Apple container
- Linux · macOS
Diagram: on your machine, the devsandbox dashboard is connected to three sandboxes, web, web-2 and web-3. Each is its own container with an agent you run inside it: web uses your checkout in ../web, web-2 and web-3 their own git worktrees on branches sandbox/web-2 and sandbox/web-3. All three share one postgres service. From the dashboard you open any sandbox in VS Code, attached to its container.
Arrow keys or j and k select an instance, o opens it in VS Code, Escape closes VS Code, t opens a terminal on it, s stops or starts it, d removes it (or cancels its build), l shows its logs, b its build log, p forwards a port, Enter opens the config explorer, colon opens the command prompt where Tab completes and Escape cancels, left and right arrows or 1 to 4 switch tabs, question mark shows help. In a terminal, keys go to the shell and Escape returns to the dashboard; square brackets switch terminals and x closes one. Tab leaves the preview.
devsbd notify "…"- ↑/k ↓/j
- move selection
- tab 1-4
- switch · jump to tab
- enter, e
- config explorer
- :
- command prompt
- r
- run / rename
- o
- open in VS Code
- s
- stop / start
- l
- logs (Instances)
- b
- build log (Instances)
- p
- forward a port
- d
- rm / cancel build (Instances)
- d
- stop forward (Ports)
- t
- open terminal
- [ / ]
- prev / next terminal
- x
- close terminal
- ctrl-]
- terminal ⇄ dashboard
In this preview ←/→ switch tabs (Tab leaves it; click a tab instead), esc closes VS Code or leaves a terminal, and the ▾ web row is picked with a click. In the : prompt Tab completes; in the config explorer t toggles original / resolved.
esc or ? to close
- 01
Define sandboxes once
A
devsandboxes.tomlnames the image, your repo folder and the services, like postgres. - 02
One sandbox per agent
Each
devsandbox runstarts a container on its own worktree and branch. Start your agent inside it. - 03
Watch and jump in
The dashboard shows every sandbox and the notifications sent from inside. Press
oto open one in VS Code.
Everything an agent needs.
Nothing it shouldn't have.
A sandbox per agent
Every container your app needs, database included, on a network of its own.
Quick startSame stack, many times
Run it again for the next agent. Each copy is provisioned for you.
Run agents in parallelSecrets stay home
Your keys sign from the host and ports open when you ask. It feels like working on your machine.
ssh-agent and git pushBuilt on standards
devcontainer images and Features: reuse what the community already wrote.
Port a devcontainer.json