Discobox Runs Coding Agents in Disposable, Isolated Sandboxes

Summary

Discobox is a coding-agent sandbox that creates disposable environments, each with its own copy of a repository, services, Docker setup, desktop, and browser. It is designed to let multiple agents work against one project in parallel while leaving the developer’s original checkout available. Claude Code, Codex, and OpenCode are included, while other terminal agents can be packaged into an image. A box clones the selected repository state, lets the agent make commits, and returns work through ordinary Git operations: users can apply commits locally, push from the box, or open a pull request. The `discobox apply` command fetches and cherry-picks committed changes in a scratch worktree, preserves commit metadata, records what has already been applied, and leaves the branch unchanged if conflicts prevent a clean application. Uncommitted work is skipped. Boxes can be rebased on the latest repository state so agents resolve overlapping changes away from the main checkout. Users can connect through the terminal, SSH, VS Code, Zed, VNC, or noVNC, and the CLI and OpenAPI API support automation. Discobox supports macOS, Linux, and Windows. Its isolation model combines virtual machines and containers, separate mTLS identities, outbound proxy policies, request auditing, and managed credentials represented inside boxes by domain-bound sentinels. Additional access requires a human grant with a host scope and expiry. An LLM judge checks privileged credential use against those grants, but because the judge currently runs inside the box, the project describes it as a guardrail rather than a security boundary against a compromised agent. Stable, latest, and edge release channels are available, with package-manager and install-script options.