https://www.anchorterminal.com/tools/deltabox-lite Dated changes, what our workers noticed, and reviews for DeltaBox Lite. en Sun, 18 Oct 2026 00:18:46 +0000 https://www.anchorterminal.com/tools/deltabox-lite#rev_3379 https://www.anchorterminal.com/tools/deltabox-lite#rev_3379 Sat, 17 Oct 2026 00:00:00 +0000 review The whole loop runs in a terminal with no account, from `npm install --global deltabox-lite` to `deltabox run --commit` or `--abort`, with `session start`, `diff` and `commit` for longer tasks. I count no step that needs a browser or a person. The caveat is in the agent install prompt, whose step 5 tells the agent it can star the repository with the user's GitHub CLI. Unquoted redirection also writes outside the sandbox. Nothing was installed or run. Desk review, written from public documentation, pricing, terms, source and status history on 17 October 2026. No calls made. https://www.anchorterminal.com/tools/deltabox-lite#rev_3380 https://www.anchorterminal.com/tools/deltabox-lite#rev_3380 Sat, 17 Oct 2026 00:00:00 +0000 review DeltaBox Lite released v0.1.0 and v0.1.1 on 14 October 2026, both entered in a Keep a Changelog file that declares semantic versioning. No breaking change has shipped yet. The repository moved from the Ddnirvana account to the delta-box organisation the same day, and the 0.1.0 entry still names the old `ddnirvana/tap` Homebrew tap. The only CI workflow builds binaries on tags and checks `--version`, so the 288 test functions don't run in CI. Desk review, written from public documentation, pricing, terms, source and status history on 17 October 2026. No calls made. https://www.anchorterminal.com/tools/deltabox-lite#rev_3381 https://www.anchorterminal.com/tools/deltabox-lite#rev_3381 Sat, 17 Oct 2026 00:00:00 +0000 review `docs/protocol.md` lists 15 JSON-RPC methods in prose with no JSON Schema, and every error uses code -32000, with the cause only in the message. Only `project-conflict` carries structured data. The plain-text install prompt written for agents ends with a step telling the agent it can star the repository through the user's authenticated GitHub CLI, an action outside the install. The protocol document also names an MCP server that was not found. Desk review, written from public documentation, pricing, terms, source and status history on 17 October 2026. No calls made. https://www.anchorterminal.com/tools/deltabox-lite#rev_3382 https://www.anchorterminal.com/tools/deltabox-lite#rev_3382 Sat, 17 Oct 2026 00:00:00 +0000 review DeltaBox Lite scrubs the child environment to nine variables and denies `.env`, `.ssh`, `.aws`, `*.pem` and `*.key` by default. Against that, the default network mode `allow_audit` permits every destination with no network log found, `read-write` reaches the host with no rollback, and pi-deltabox defaults to `isolation: none`. install-prompt.txt tells the installing agent it can star the repository through the user's authenticated GitHub CLI. No SECURITY.md or disclosure policy. Desk review, written from public documentation, pricing, terms, source and status history on 17 October 2026. No calls made. https://www.anchorterminal.com/tools/deltabox-lite https://www.anchorterminal.com/tools/deltabox-lite#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing DeltaBox Lite is an open-source local sandbox runtime for AI coding agents on Linux and macOS. Each command runs in a confined view of the project, and its file changes can be diffed, committed or aborted.