The Construct is a single-binary CLI that boots a clean and isolated sandbox, preloaded with AI agents. MicroVMs by default (embedded, nothing to install), your OCI runtime as fallback. It keeps your host free of dependency sprawl, adds optional network isolation, and keeps your machine safe from prompt-injected or derping agents.
- One command to run any AGENT inside a secured, isolated sandbox, spawned from your cwd without path escape
- Zero Config: works out of the box on macOS, Linux, and Windows (WSL)
- MicroVM by default: hardware-level isolation via microsandbox; falls back to the best available OCI runtime on hosts without microVM support
- Daemon mode: reuse one sandbox across projects;
$HOMEdirectories are auto-learned, elsewhere add roots via[daemon] mount_pathsorconstruct sys daemon roots add - Network Isolation:
permissive,strict(allowlist), orofflinenetwork modes - SSH agent forwarding and a full clipboard bridge: text and image pasting for Claude, Copilot, Antigravity, Qwen, and Pi
- Host loopback browsing: headless browser agents reach host dev sites on
localhost/*.localhost - User-defined packages: apt, mise, bun, npm, pip, cargo, or gems
- Parallel workflows: git worktree management for parallel AI agent workflows
# One-line installer (macOS & Linux)
curl -fsSL https://raw.githubusercontent.com/EstebanForge/construct-cli/main/scripts/install.sh | bash
# Or manage with mise
mise use -g github:EstebanForge/construct-cli
# Or with Homebrew
brew install EstebanForge/tap/construct-cli# First-time setup (prepares the sandbox image, installs agents)
construct sys init
# Run an agent
construct claude "Help me refactor this function"
# PATH shims: bare `claude` runs sandboxed from any caller
construct sys shims --installMore examples and the full command list: Quick Reference. Running agents from orchestrators and IDEs: Harnesses.
14 agents: Claude Code, Codex, Pi, Pig, Antigravity, Copilot, OpenCode, Amp, Qwen, Cline, Droid, Goose, Crush, Kilo Code — plus Claude Code with custom provider endpoints (Zai GLM, MiniMax M2, Kimi K2, Qwen, Mimo).
| Topic | Description |
|---|---|
| Installation | Platform-specific installation, troubleshooting |
| Quick Reference | Everyday commands, examples, PATH shims |
| Configuration | Complete config reference for all settings |
| Security | Container security, secret redaction, best practices |
| Topic | Description |
|---|---|
| Hide Secrets Mode | Prevent agents from seeing raw secrets (experimental) |
| VM Backend | Default microVM isolation via microsandbox |
| Providers | Configure custom Claude API endpoints |
| Packages | User-defined package management |
| Architecture | Technical design and internals |
| Topic | Description |
|---|---|
| Agents | Complete list of supported agents |
| Clipboard | Clipboard bridge architecture |
| Development | Contributing and development guide |
| Contributing | Contribution guidelines |
Full index: docs/INDEX.md
- ✅ MicroVM isolation by default (
backend = "msb", microsandbox) with OCI fallback - ✅ Network isolation (permissive/strict/offline modes)
- ✅ Ephemeral sandboxes; no path escape outside the project root
- ✅ Secret redaction (experimental) — docs
- ✅ Reproducible CI builds with SHA256 checksums
Contributions are welcome! Please see:
MIT License - see LICENSE for details
Built with ❤️ for my kids. Go wild and experiment. Have fun.
Documentation: docs/ | Issues: GitHub Issues | Releases: GitHub Releases