What is box?

This repository gives you the official toolkits for working with Upstash Box, a service that lets you run AI coding agents in a secure, isolated sandbox. Instead of letting an AI assistant loose on your local computer, you spin it up in a controlled environment where it can read and write files, run code, interact with git, and take snapshots of its progress. The tools here let you control that sandbox from your own code or your terminal. At a high level, the repo contains three separate packages: a TypeScript SDK, a Python SDK, and a command-line interface (CLI). The SDKs are libraries you embed inside your own applications to talk to the Upstash Box service programmatically. The CLI is a terminal tool that provides an interactive, text-based interface for doing the same thing without having to write any code. Together, they bridge your projects to the cloud-based sandbox where the AI agent actually operates. A startup founder building an automated code-review tool could use the SDK to have an AI agent safely inspect a pull request in isolation. A product manager testing internal automation workflows could use the CLI to manually spin up an agent, hand it a task, and watch how it manages files and git commits in real time. The README doesn't go into deep detail about the full range of sandbox features, but it highlights that the environment supports streaming responses, structured outputs, file input and output, and git operations. The project is notable for how it handles releases. The JavaScript and Python tools are maintained and published completely independently, so a team using only the Python library never has to wait for JavaScript updates. The maintainers have also leaned heavily into automated security, using a system that publishes packages without requiring stored passwords or secret tokens. The README does not detail how the actual sandboxing mechanism works, but the focus remains squarely on giving developers secure, programmatic access to remote AI agents.