xicilion

xicilion / boxsh

Public

A sandboxed POSIX shell with a concurrent JSON-line RPC mode

86
4
100% credibility
Found Apr 06, 2026 at 86 stars -- GitGems finds repos before they trend. Get early access to the next one.
Sign Up Free
AI Analysis
JavaScript
AI Summary

boxsh is a sandboxed POSIX shell that provides isolated command execution using Linux namespaces and overlay filesystems, with support for concurrent JSON RPC for AI agents and automation.

How It Works

1
๐Ÿ” Discover boxsh

You hear about a safe playground for running shell commands without risking your files or system.

2
๐Ÿ› ๏ธ Get boxsh ready

Download the code and build the simple program that runs on your Linux machine.

3
๐Ÿš€ Launch safe shell

Run boxsh --try in your project folder to step into a protected space where changes stay separate.

4
๐Ÿงช Play and experiment

Create, edit, or delete files freely โ€“ your real project stays untouched underneath.

5
๐Ÿ” Review what changed

Exit the shell and check the temporary folder to see exactly which files were affected.

6
Choose your way
๐Ÿ’ฌ
Interactive shell

Drop in for safe manual commands anytime.

๐Ÿค–
Automated mode

Link it to tools for hands-free command running.

โœ… Everything safe

Your experiments are isolated, changes reviewed, and your system protected.

Sign up to see the full architecture

5 more

Sign Up Free

Star Growth

See how this repo grew from 86 to 86 stars Sign Up Free
Repurpose This Repo

Repurpose is a Pro feature

Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.

Unlock Repurpose
AI-Generated Review

What is boxsh?

Boxsh delivers a sandboxed POSIX shell with concurrent JSON-line RPC mode, letting AI agents, build systems, or Node.js apps drive isolated shell commands over stdin/stdout. It mounts read-only bases under copy-on-write overlays for zero-cost workspaces, blocks network/PID leaks via Linux namespaces, and runs parallel workers sharing large deps like node_modules. Quick-try mode spins up a root shell on your CWD, capturing changes in a temp upper layer.

Why is it gaining traction?

Unlike Docker or bwrap, boxsh needs no external toolsโ€”just a static binary with crash recovery, per-request timeouts, and non-blocking file tools (read/write/edit with unified diffs). Concurrent RPC streams out-of-order responses, perfect for scaling shell tasks without interference. The JS SDK simplifies Node integration for boxshirts or boxshop scripts.

Who should use this?

AI devs sandboxing agent commands, frontend/backend teams dry-running npm builds or migrations, or ops folks testing deploys without git. Suits JavaScript-heavy stacks needing POSIX shell RPC, like concurrent boxschuhe workflows or boxshop24 automation.

Verdict

Solid for isolated shell execution if you're in Node.jsโ€”RPC mode and overlays deliver real wins. At 86 stars and 1.0% credibility, it's immature (light docs, no gapps polish), but strong tests and MIT license make it worth prototyping.

(198 words)

Sign up to read the full AI review Sign Up Free

Similar repos coming soon.