Alternatives
Products that do what Ash, an Agent Sandbox for Mac does
Ash is a macOS sandbox that restricts AI coding agents. It limits access to files, networks, processes, IO devices, and environment variables. You can use Ash with any CLI coding agent by wrapping it in a single command: `ash run -- `. I typically use it with Claude to stay safe while avoiding repetitive prompts: `ash run -- claude --dangerously-skip-permissions`. Ash restricts resources via the Endpoint Security and Network Extension frameworks. These frameworks are significantly more powerful than the sandbox-exec tool. Each session is driven by a policy file. Any out-of-policy action is…
- 1
- 2
- 3YR
Jan 2026 · github.com
- 4
- 5AO
Hi! I’m Nathan: an ML Engineer at Mozilla.ai: I built agent-of-empires (aoe): a CLI application to help you manage all of your running Claude Code/Opencode sessions and know when they are waiting for you. - Written in rust and relies on tmux for security and reliability - Monitors state of cli sessions to tell you when an agent is running vs idle vs waiting for your input - Manage sessions by naming them, grouping them, configuring profiles for various settings I'm passionate about getting self-hosted open-weight LLMs to be valid options to compete with proprietary closed models. One…
Jan 2026 · github.com
- 6
- 7
- 8PS
I originally was just messing with pi-autoresearch. Gave it a sample task to build the most portable coding agent. First cut was 6 KB of shell. Great for one-shots, unusable interactively. I was shocked it actually worked. Started building up -- adding features — but with a self-imposed rule: no new dependencies, and sub 500 LOC. This thing had to be truly portable. Just sh, curl, awk. System primitives only. Which means I did some genuinely disgusting things in awk, including JSON parsing and the OpenAI Responses tool loop with reasoning items carried across turns. It's now ~400 lines. In…
Apr 2026 · pu.dev
- 9AS
WASM sandbox for running LLM-generated code safely. Agents get a bash-like shell and can only call tools you provide, with constraints you define. No Docker, no subprocess, no SaaS — just pip install amla-sandbox
Jan 2026 · github.com
- 10
- 11
- 12BD
Hi HN, we’re Nick and Drew, and we’re building boxes.dev – the first cloud-only agentic dev environment (ADE) that gives every Codex and Claude Code agent its own cloud computer. We’re two engineers who previously built Gem (co-founder/CTO and first hire), and we spent the last year coding almost exclusively using Codex and Claude Code. It’s been a huge change to how we code, and it’s been exhilarating seeing the models keep getting better – but we eventually realized that developing on localhost was holding us back: - Git worktrees are clunky to set up and use for parallelizing work -…
Jun 2026 · boxes.dev
- 13
- 14
- 15YC
I made this for myself, and it seemed like it might be useful to others. I'd love some feedback, both on the threat model and the tool itself. I hope you find it useful! Backstory: I've been using many agents in parallel as I work on a somewhat ambitious financial analysis tool. I was juggling agents working on epics for the linear solver, the persistence layer, the front-end, and planning for the second-generation solver. I was losing my mind playing whack-a-mole with the permission prompts. YOLO mode felt so tempting. And yet. Then it occurred to me: what if YOLO mode isn't so bad?…
Jan 2026 · github.com
- 16
- 17SC
Hi HN! Smooth CLI (https://www.smooth.sh) is a browser that agents like Claude Code can use to navigate the web reliably, quickly, and affordably. It lets agents specify tasks using natural language, hiding UI complexity, and allowing them to focus on higher-level intents to carry out complex web tasks. It can also use your IP address while running browsers in the cloud, which helps a lot with roadblocks like captchas (https://docs.smooth.sh/features/use-my-ip). Here’s a demo: https://www.youtube.com/watch?v=62jthcU705k Docs start at…
Feb 2026 · docs.smooth.sh
- 18
- 19
Local sandboxes for AI agents on your Mac, Linux, bare metal
Aug 2026 · github.com
- 20
- 21SA
Since I mostly work within the terminal, I wanted an AI coding assistant that integrates seamlessly with it. Something I could call from SSH, integrate into scripts or just invoke quickly without leaving the shell. Most existing tools (at the time) were either closed, required various dependencies, or tied to a specific vendor. I wanted a free, open-source alternative that: - installs with a single binary (useful on bare servers) - talks to any LLM endpoint and especially self-hosted open weight model - could run headless, composable, and Unix-like SHAI stands for SHell AI! Along the way I…
Oct 2025 · github.com
- 22SA
We’ve been working with automating coding agents in sandboxes as of late. It’s bewildering how poorly standardized and difficult to use each agent varies between each other. We open-sourced the Sandbox Agent SDK based on tools we built internally to solve 3 problems: 1. Universal agent API: interact with any coding agent using the same API 2. Running agents inside the sandbox: Agent Sandbox provides a Rust binary that serves the universal agent API over HTTP, instead of having to futz with undocumented interfaces 3. Universal session schema: persisting sessions is always problematic, since…
Jan 2026 · github.com
- 23BM
Wrapper around Apple's macOS sandbox-exec tool, which usually sandboxes native apps. It is "allow-first" i.e. it will not overprotect everything, just crucial information and therefore allows most tools to run without issues. Limiting is done using a .gitignore like file schema. Further TOML config options available. I built it because Docker sandboxing requires config and planning. Build in sandboxing of AI tools instead is limited to the very tools themselves, instead I wanted to have a simple cage around Claude running inside VSCode. Also needed to protect files inside a folder like…
Apr 2026 · github.com
- 24
A local-first AI chief-of-staff for your inbox and tasks
29d ago · youtube.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →