[sshine]

https://github.com/numtide/claudebox

[mistrial9]

> Intercepts all commands via Node.js instrumentation

[verdverm]

these are a dime a dozen now, many different takes, I have my own too

[sshine]

That's a valid perspective, but claudebox isn't my own take. It's Linux user namespaces using bubblewrap to achieve VM-grade sandboxing and near native-level DX with the ability to express your environment using Nix.

Most of those dime-a-dozen solutions employ Docker, so if you like to work inside a container, that's great.