CLI Reference
Sandbox Lifecycle
| Command | Description |
|---|
sandbox init | Create Kind cluster + deploy (or apply RBAC in remote mode) |
sandbox create <name> [--agent claude|codex] | Create a new sandbox pod |
sandbox delete <name> | Delete a sandbox |
sandbox list | List all sandboxes with status |
sandbox destroy | Tear down Kind cluster (skipped in remote mode) |
Session Management
| Command | Description |
|---|
sandbox open <name> [-p port] | Port-forward to browser terminal (default :7681) |
sandbox terminal <name> | Attach to bash tmux session |
sandbox agent <name> | Attach to agent tmux session |
Checkpointing
| Command | Description |
|---|
sandbox checkpoint <name> --label <label> | Save workspace snapshot |
sandbox restore <name> --from <label> [--agent codex] | Create new sandbox from checkpoint |
Checkpoints are stored at ~/.sandbox/checkpoints/<label>.tar.gz.
Server
| Command | Description |
|---|
sandbox serve [--port 3000] | Start API + static UI server |
Agents
Claude Code (default)
Runs claude --dangerously-skip-permissions with Opus 4.6. On first access, prompts for authentication — type /login and follow the flow.
OpenAI Codex
Runs codex --dangerously-bypass-approvals-and-sandbox.
sandbox create mybox --agent codex
Amazon Bedrock
sandbox create agent1 \
--bedrock \
--aws-region us-east-1 \
--aws-token <your-bedrock-bearer-token>