RewindBox

⚡ Lightning-fast, time-traveling sandbox CLI for AI agents — zero-risk snapshot & rollback engine built in Rust.

---

RewindBox is a terminal-first sandbox and snapshot engine for AI agents. It wraps every agent run in a guarded workspace, snapshots the full state, and lets you rewind time — rolling back files, vault data, firewall policy, and audit logs to any earlier checkpoint with a single command. Built for developer-security workflows where an AI agent must experiment freely without ever risking your machine.

Why RewindBox

• 🧠 Think for AI agents, not against them — run agents in a sandbox that can always be unwound.
• ⏪ Time-travel debugging — step through history, preview a state, and restore it.
• 🔐 Developer-security first — firewall rules, encrypted vault, and a tamper-evident audit journal.
• 🖥️ Beautiful terminal UI — ANSI-native help, live panels, and a pixel-art brand splash, no web dashboard required.
• 🦀 One static binary — a fast, dependency-lean rust-cli with zero runtime interpreter.

Features

• 📸 Snapshots — capture the entire workspace state (files, vault, firewall, audit trail) instantly.
• ⏮️ Rewind — roll back to any snapshot; nothing is lost, everything is recoverable.
• 🖥️ Terminal UI — a polished, cross-platform terminal-ui dashboard with a TUI engine.
• 🔀 Multi-agent hub — approvals, delegation, and inter-agent history.
• 🕰️ Time Travel — replay sessions and diff any two points in history.
• 🗄️ Encrypted vault — AES-GCM sealed secrets, never written in the clear.
• 🧯 Firewall policy — per-command execution limits for risky agent actions.
• 📜 Audit journal — append-only chronological log of every operation.
• 🔌 MCP + API surfaces — plug agents into MCP servers or the REST surface.

Quick Start

# initialize a RewindBox workspace
rewindbox init

# snapshot the current state before running an agent
rewindbox snapshot

# run an AI agent inside the sandbox
rewindbox run --agent <NAME>

# rewind the workspace to an earlier snapshot
rewindbox rewind

Full command set:

Command	Purpose
init	initialize a workspace as a sandbox
snapshot	capture the current state
run	run an AI agent inside the sandbox
rewind	restore a previous snapshot
status	show the workspace state
diff / search	compare / query snapshot metadata
recover	rescue the workspace after a crash
firewall	open the firewall policy dashboard
watch	run a command under firewall limits

Installation

Prebuilt Binaries

Download the latest release for your platform from the Releases page.

Platform	Asset	Arch
Windows	rewindbox-x86_64-pc-windows-msvc.exe	amd64
Linux	rewindbox-x86_64-unknown-linux-gnu	amd64
macOS (Intel)	rewindbox-x86_64-apple-darwin	amd64
macOS (Apple Silicon)	rewindbox-aarch64-apple-darwin	arm64

Manual Installation Flow

You can run the installers locally:

Windows (PowerShell):

powershell -ExecutionPolicy Bypass -File install.ps1

Linux / macOS (Bash):

sh install.sh

From Source

git clone https://github.com/yassine-ceo/rewindbox.git
cd rewindbox
cargo build --release

CLI UI Architecture

RewindBox renders everything through a small ANSI layout engine:

• Frame-based rendering — every screen is built as styled rows with explicit column math.
• Adaptive layout — the help grid reflows from three columns down to a narrow fallback so it never wraps.
• Pixel-art branding — the version splash draws a lips glyph as true-color double blocks.
• VT-safe color — ANSI processing is enabled explicitly on Windows consoles, and color auto-disables when output is piped or NO_COLOR is set.

Building

Requires Rust 1.85+.

cargo build --release
cargo test

Contributing

Issues and pull requests are welcome. Please run cargo fmt and cargo clippy before submitting — see CONTRIBUTING.md for the full development workflow, commit convention, and pull request checklist.

Security issues should be reported privately — see SECURITY.md.

License

MIT — see LICENSE.