최근 완료된 8시간 회차 사이 GitHub 스타 증가량 순
Qwen3.5‑4B 전용 조향형 뉴런 탐색기, 모든 MLP 뉴런을 밀어 결과를 보관·탐색
Rust 코드를 실시간으로 편집하고, 실행 중인 프로그램에서 밀리초 단위로 변화를 확인
TraceRoot는 오픈소스 에이전트‑네이티브 개선 레이어로, 생산 추적·탐지 신호·평가를 코딩 워크플로에 통합합니다
대만 제작, 단일 Go 바이너리 자체 호스팅 AI 에이전트, 도구 작성·테스트·MCP로 Claude Code·Codex 공유
대형 AI 모델을 내 PC에서 실행: Strata 엔진에서 Qwen3.8‑Flash‑Next, GLM 5.3 Flash 등 다양한 모델 지원
README 전체를 불러오는 중입니다. 아래는 저장된 발췌입니다.
Run Claude Code, Codex or Pi in a container with a bubblewrap sandbox.
The sandbox isolates host credentials and IDE sockets, limits writable paths,
and blocks access to internal networks except explicitly allowed devices.
On a Linux host with uv
and rootless Podman:
The launcher pulls the matching prebuilt image and starts sandboxed Claude
Code in your project. Log in when prompted. Later runs reuse the project's
container; agent logins and memory persist across container recreation.
No repository clone or devcontainer setup is needed.README 전문 보기 ↗Run Claude Code, Codex or Pi in a container with a bubblewrap sandbox. The sandbox isolates host credentials and IDE sockets, limits writable paths, and blocks access to internal networks except explicitly allowed devices.
On a Linux host with uv and rootless Podman:
uv tool install claude-sandbox
cd ~/src/my-project
claude-sandbox
The launcher pulls the matching prebuilt image and starts sandboxed Claude Code in your project. Log in when prompted. Later runs reuse the project's container; agent logins and memory persist across container recreation. No repository clone or devcontainer setup is needed.
Choose another agent with claude-sandbox codex or claude-sandbox pi.
The host must provide /dev/net/tun and support unprivileged user namespaces.
Rootless Docker is untested; rootless Podman is the supported runtime.
Getting started covers first login and verification. Use the container image covers configuration, persistence and toolchains.
On the host:
uv tool upgrade claude-sandbox
claude-sandbox --recreate
Run the second command in each project you want to update. Recreation removes container-local packages and forge logins; project files and shared agent settings remain. See Upgrade.
Inside a Debian/Ubuntu devcontainer, as root:
uvx claude-sandbox install
claude
The container needs --device=/dev/net/tun. For automatic installation on
rebuild, follow Sandbox a team devcontainer.
Install without uv
covers pipx, pip and the clone fallback.
Agent tools can be steered by malicious content or make mistakes. The sandbox
limits the damage: the project is writable, host secrets are masked, and the
network jail blocks lateral access to internal hosts. Run claude-sandbox verify to check the installed isolation.
The project files and credentials you explicitly share remain accessible to the agent, and internet access stays open. Read the threat model for the boundaries and architecture for the implementation.
Documentation includes guides, configuration reference and design decisions. DLS users start here.
The sandbox is a Python package that uses the standard library only and has no runtime dependencies (ADR 26). The same package is the host launcher, the installer and the in-container wrapper, which runs on a pinned, root-owned interpreter that agents cannot modify. See the contributing guide for tests and the isolated documentation toolchain.
See LICENSE.