Skip to content

barakchamo/boxer

vdev

Runs the agent's shell commands in a sandbox — a microVM or a container — keyed to the git worktree. Portable core: the boxer skill and the boxer MCP server (boxer_run, boxer_status). Client hooks live in the reverse-domain directories.

boxer Agent Plugins package

Generated by boxer package plugin dev. Do not edit; regenerate.

One directory, valid for every client at once (Agent Plugins 1.0.0):

PathStandardPurpose
plugin.jsonAgent Plugins manifestname, version, description
skills/boxer/Agent SkillsSKILL.md, scripts/ (run, task, status, brief) and references/BRIEF.md
mcp.jsonAgent Plugins MCP configthe run tool: boxer_run, boxer_status (boxer mcp)
AGENTS.mdagents.mdthe same instruction for clients that read a context file
<reverse-domain>/client extension directorieshooks and shims per client; every other client must ignore them

Client directories, each with its own README and install steps:

ClientDirectoryNative files this directory also carries
Claude Codecom.anthropic.claude-code/.claude-plugin/plugin.json, agents/boxed.md
Codex CLIcom.openai.codex/.codex-plugin/plugin.json, .agents/plugins/marketplace.json (local marketplace wrapper)
GitHub Copilot CLIcom.github.copilot/
Grok Buildai.x.grok/.grok-plugin/plugin.json
Gemini CLIcom.google.gemini-cli/gemini-extension.json (hooks copied to hooks/ in the gemini-cli view only)
Kimi Codeai.moonshot.kimi-code/
DSHcom.deepseek.dsh/
OpenCodeai.opencode/
piworks.earendil.pi/

The namespace names are boxer's choice until each client publishes its own. The spec only requires a reverse-domain form.

Install

boxer install <client> writes one client's files into the repository's own configuration, hooks included. boxer package <client> renders the part of this directory that one client reads (its view), for installing through the client's own plugin command.

boxer install claude-code          # or codex, gemini-cli, grok, opencode, pi, kimi, dsh
boxer install copilot --user       # Copilot has no project-level layer

The published plugin, npx plugins add BarakChamo/boxer (or boxer integrations add plugin), installs the skill and the boxed agent. It does not install hooks. Run boxer install <client> for those.

boxer must be on PATH. Hooks and the MCP server call it by name.

Nothing here is rendered from anyone's configuration: every file is byte-identical for every user apart from the release version. Configuration reaches the agent at run time, through boxer brief, the session-start hooks, and the boxer://brief MCP resource.