Free and open source

Sandboxing Shell 
for AI Coding Agents

Let AI agents run free…  
without letting them run wild.

npm install -g @colony2/shai
Get Started View on GitHub

Secure by Default

Read-only workspace, network filtering, and container isolation protect your system from unintended agent actions.

Built for Cellular Development

Establish clear boundaries and guardrails. Agents can read all workspace code for context but only modify designated areas, preventing scope creep and overreach.

Composable Security Policies

Resource sets, application rules, and selective elevation provide fine-grained access control.

Works with Any Tool

Compatible with Claude Code, Codex, Gemini CLI and any other CLI-based AI coding agent.

Network Filtering

HTTP/HTTPS allowlists control exactly which APIs and services your agents can access. Block unwanted connections by default.

Ephemeral Containers

Each session runs in a fresh container. No persistent modifications to your system. Exit and it’s gone.