(https://github.githubassets.com) (https://avatars.githubusercontent.com) (https://github-cloud.s3.amazonaws.com) (https://user-images.githubusercontent.com/) (https://github.githubassets.com) (https://avatars.githubusercontent.com)   (https://github.githubassets.com/assets/react-fa5e2e82e6e0ecc0.js)  (https://github.githubassets.com/assets/react-compiler-runtime-4610bd6d3de9c049.js)  (https://github.githubassets.com/assets/scheduler-58b860b049ca307c.js)  (https://github.githubassets.com/assets/react-dom-c7f52540bb6b77ed.js)  (https://github.githubassets.com/assets/react-dom-client-35b308126995de85.js)  (https://github.githubassets.com/assets/react-is-e0b593954b4706d8.js)  (https://github.githubassets.com/assets/react-jsx-runtime-4915cb0f5b3aff04.js)  (https://github.githubassets.com/assets/react-reconciler-8e99e505c4429605.js)  (../../github.githubassets.com/assets/light-3a3d2c708970e4e8.css)  (../../github.githubassets.com/assets/light_high_contrast-9c7b506bdc5ea73f.css)  (../../github.githubassets.com/assets/dark-c9dacb4ec19616db.css)  (../../github.githubassets.com/assets/dark_high_contrast-5ef38214a3eabc7d.css)                (../../github.githubassets.com/assets/primer-primitives-02e066689466a8cd.css)  (../../github.githubassets.com/assets/primer-38ae573fa780d76a.css)  (../../github.githubassets.com/assets/global-58d1122073b19732.css)  (../../github.githubassets.com/assets/github-11ab453cdcc1b7c1.css)  (../../github.githubassets.com/assets/repository-542ca59b4b92999d.css)  (../../github.githubassets.com/assets/code-b25a4886e30e3e5f.css)  (https://github.githubassets.com/assets/wp-runtime-46b3e325f566e7d7.js)  (https://github.githubassets.com/assets/app-foundation-799625033ee8341e.js)  (https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.js)  (https://github.githubassets.com/assets/fetch-utilities-27ed50f7568a5f72.js)  (https://github.githubassets.com/assets/ser-2defe2918d9c9884.js)  (../../github.githubassets.com/assets/app-runtime.47c2032941ed0c3c.module.css)  (https://github.githubassets.com/assets/catalyst-5bc36fa5a846f5a0.js)  (https://github.githubassets.com/assets/selector-observer-7ae05416e4a383ae.js)  (https://github.githubassets.com/assets/relative-time-element-b2d8b7dede692c9f.js)  (https://github.githubassets.com/assets/by-473024a3f6cb3892.js)  (https://github.githubassets.com/assets/ja9-b94de714266ba389.js)  (https://github.githubassets.com/assets/3h2-5f8899065b81d778.js)  (https://github.githubassets.com/assets/t2x-a8c06fc4dca92a53.js)  (https://github.githubassets.com/assets/z8-89489fe818ffc5f4.js)  (https://github.githubassets.com/assets/hjg-55b6d77c48226433.js)  (https://github.githubassets.com/assets/wc-a59655378c77af70.js)  (https://github.githubassets.com/assets/runtime-helpers-26f2970b9e869a17.js)  (https://github.githubassets.com/assets/aria-live-e0f60f15396869e3.js)  (https://github.githubassets.com/assets/hotkey-c8899bfd61abc3fe.js)  (https://github.githubassets.com/assets/react-core-ea672e85f35610d6.js)  (https://github.githubassets.com/assets/cc-99eedace671eb2b6.js)  (https://github.githubassets.com/assets/urv-453c749eec9d7d37.js)  (https://github.githubassets.com/assets/4t-f1181f796eb9ea15.js)  (https://github.githubassets.com/assets/pb0-b19b273276c337a2.js)  (https://github.githubassets.com/assets/6n-e6e586acca87c769.js)  (https://github.githubassets.com/assets/z-b2cf9f86cb4bed3b.js)  (https://github.githubassets.com/assets/9k-707f3c96c4acaae5.js)  (https://github.githubassets.com/assets/0r-4a2b771052825f69.js)  (https://github.githubassets.com/assets/ow-98d10140e8228c74.js)  (https://github.githubassets.com/assets/mv-f8391cd0ef287c80.js)  (https://github.githubassets.com/assets/eou-b91079b9ea7074de.js)  (https://github.githubassets.com/assets/eon-36af335a1906af16.js)  (https://github.githubassets.com/assets/yga-dd50cf95593467fe.js)  (../../github.githubassets.com/assets/react-core.ff78dca67876120f.module.css)  (https://github.githubassets.com/assets/n9-7f60e2a3809a50dd.js)  (https://github.githubassets.com/assets/liv-8d5d90262b623f12.js)  (https://github.githubassets.com/assets/primer-react-df146700e95373ad.js)  (https://github.githubassets.com/assets/nc-f9467792939baa36.js)  (https://github.githubassets.com/assets/qmp-308230626a2aedb0.js)  (https://github.githubassets.com/assets/to-b501df3e06c1799a.js)  (https://github.githubassets.com/assets/t7l-699ca510ac327acf.js)  (https://github.githubassets.com/assets/4u-bf6e08201764cb0a.js)  (https://github.githubassets.com/assets/s0-307dd28b274d0fad.js)  (https://github.githubassets.com/assets/fe-f8365f29462c346a.js)  (https://github.githubassets.com/assets/zd-61606dd1c14634aa.js)  (https://github.githubassets.com/assets/7v-88e5da497f84e96d.js)  (https://github.githubassets.com/assets/15-29e547ad6a5a3527.js)  (https://github.githubassets.com/assets/5w-452c3a937483ff49.js)  (https://github.githubassets.com/assets/ja-22b04aaf91e6217b.js)  (https://github.githubassets.com/assets/2-ab32434b896065e6.js)  (https://github.githubassets.com/assets/v0-89b9b8d8eaafbdf7.js)  (https://github.githubassets.com/assets/yr6-0a2f8039ed40ce5f.js)  (https://github.githubassets.com/assets/1p8-31d23072fa67ff09.js)  (https://github.githubassets.com/assets/3s-ebbc335534e40b2a.js)  (https://github.githubassets.com/assets/gw-6f4936e25ac917d3.js)  (https://github.githubassets.com/assets/4y-59cb1959b9b5aac1.js)  (https://github.githubassets.com/assets/0-c097ee47566335a6.js)  (https://github.githubassets.com/assets/jn-bc7dc311ab22f59b.js)  (https://github.githubassets.com/assets/fn-ffd44c69c9418c7d.js)  (https://github.githubassets.com/assets/q6j-256bc816dd682a0f.js)  (https://github.githubassets.com/assets/i2-5e26ac37ee961d06.js)  (https://github.githubassets.com/assets/b2-35e229a50d0f3d05.js)  (https://github.githubassets.com/assets/pg-10c94bf4f9e9df2f.js)  (https://github.githubassets.com/assets/lrk-ea49e115e48ba34b.js)  (https://github.githubassets.com/assets/mlz-fce49bd96df2c99f.js)  (https://github.githubassets.com/assets/dx-72390bda3ecf1bb9.js)  (https://github.githubassets.com/assets/sm-22346830d5e5a763.js)  (https://github.githubassets.com/assets/pr-7e5e6964ac1c13a7.js)  (https://github.githubassets.com/assets/ur-4cd875e44a87e9f6.js)  (https://github.githubassets.com/assets/up-9ba623fe31b3ad8b.js)  (https://github.githubassets.com/assets/gd-c0d7e6321e1379df.js)  (https://github.githubassets.com/assets/d0t-80ea085bb81f43f5.js)  (https://github.githubassets.com/assets/c28-1e45d23d47961036.js)  (https://github.githubassets.com/assets/tiw-bd5ca0d0b9443f44.js)  (https://github.githubassets.com/assets/kt-8f100cf7d7e55767.js)  (https://github.githubassets.com/assets/w7-4a19009ffa56f5cc.js)  (https://github.githubassets.com/assets/ik-3ffdf86429f50a81.js)  (../../github.githubassets.com/assets/primer-react-css.01917ab04fd4fee0.module.css)  (../../github.githubassets.com/assets/w7.860d2889c7ea8788.module.css)  (../../github.githubassets.com/assets/code-view.8f6686ce77506cf0.module.css)  GitHub - NVIDIA/OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. · GitHub      (repo_source) (https://github.githubassets.com/)   (https://github.com/opensearch.xml) (GitHub) (https://github.com/fluidicon.png) (GitHub)                        (https://github.githubassets.com/assets/pinned-octocat-093da3e6fa40.svg) (https://github.githubassets.com/favicons/favicon.png) (../../github.githubassets.com/favicons/favicon.svg)  (../manifest.json)   (OpenShell.html#start-of-content) Skip to content   (https://github.githubassets.com/assets/n6-452a6933958186aa.js)  (https://github.githubassets.com/assets/keyboard-shortcuts-dialog-9515d860c3e33a72.js)  (../../github.githubassets.com/assets/primer-react-css.01917ab04fd4fee0.module.css)  (../../github.githubassets.com/assets/keyboard-shortcuts-dialog.64e18daa120bcf2c.module.css)    (https://github.githubassets.com/assets/g6m-cc8319b2e8fb7f71.js)  (https://github.githubassets.com/assets/app-install-banner-partial-8b718c21535ba3bc.js)  (../../github.githubassets.com/assets/primer-react-css.01917ab04fd4fee0.module.css)  (../../github.githubassets.com/assets/app-install-banner-partial.a0b761705e3bb3c6.module.css)    (https://github.githubassets.com/assets/h3j-958ce4a5f2c43038.js)  (https://github.githubassets.com/assets/qz-56a40ef159856167.js)  (https://github.githubassets.com/assets/fz-cb55e83c29d0a351.js)  (https://github.githubassets.com/assets/x2u-3350b3adc8582e52.js)  (https://github.githubassets.com/assets/h4-bd2e6ae0f037d842.js)  (https://github.githubassets.com/assets/l8v-b6afd46013f0963f.js)  (https://github.githubassets.com/assets/it-b2af08afaf92d694.js)  (https://github.githubassets.com/assets/marketing-header-c2057cb785114eb2.js)  (../../github.githubassets.com/assets/primer-react-css.01917ab04fd4fee0.module.css)  (../../github.githubassets.com/assets/primer-react-brand-css.605c0b537201e723.module.css)  (../../github.githubassets.com/assets/marketing-header.f9cff99e98ee97fd.module.css)  Navigation Menu       (https://github.com/)    (https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FNVIDIA%2FOpenShell) Sign in       Appearance settings   Platform   AI CODE CREATION (https://github.com/features/copilot)    GitHub Copilot Write better code with AI    (https://github.com/features/ai/github-app)   GitHub Copilot app Direct agents from issue to merge    (https://github.com/mcp)    MCP Registry Integrate external tools       DEVELOPER WORKFLOWS (https://github.com/features/actions)   Actions Automate any workflow    (https://github.com/features/codespaces)    Codespaces Instant dev environments    (https://github.com/features/issues)    Issues Plan and track work    (https://github.com/features/code-review)   Code Review Manage code changes    (https://github.com/features/code-quality)    Code Quality Enforce quality at merge       APPLICATION SECURITY (https://github.com/security/advanced-security)   GitHub Advanced Security Find and fix vulnerabilities    (https://github.com/security/advanced-security/code-security)   Code security Secure your code as you build    (https://github.com/security/advanced-security/secret-protection)   Secret protection Stop leaks before they start       EXPLORE (https://github.com/why-github) Why GitHub   (https://docs.github.com) Documentation     (https://github.blog) Blog     (https://github.blog/changelog) Changelog     (https://github.com/marketplace) Marketplace       (https://github.com/features) View all features         Solutions   BY COMPANY SIZE (https://github.com/enterprise) Enterprises   (https://github.com/team) Small and medium teams   (https://github.com/enterprise/startups) Startups   (https://github.com/solutions/industry/nonprofits) Nonprofits      BY USE CASE (https://github.com/solutions/use-case/app-modernization) App Modernization   (https://github.com/solutions/use-case/devsecops) DevSecOps   (https://github.com/solutions/use-case/devops) DevOps   (https://github.com/solutions/use-case/ci-cd) CI/CD   (https://github.com/solutions/use-case) View all use cases         BY INDUSTRY (https://github.com/solutions/industry/healthcare) Healthcare   (https://github.com/solutions/industry/financial-services) Financial services   (https://github.com/solutions/industry/manufacturing) Manufacturing   (https://github.com/solutions/industry/government) Government   (https://github.com/solutions/industry) View all industries          (https://github.com/solutions) View all solutions         Resources   EXPLORE BY TOPIC (https://github.com/resources/articles?topic=ai) AI   (https://github.com/resources/articles?topic=software-development) Software Development   (https://github.com/resources/articles?topic=devops) DevOps   (https://github.com/resources/articles?topic=security) Security   (https://github.com/resources/articles) View all topics         EXPLORE BY TYPE (https://github.com/customer-stories) Customer stories   (https://github.com/resources/events) Events & webinars   (https://github.com/resources/whitepapers) Ebooks & reports   (https://github.com/solutions/executive-insights) Business insights   (https://skills.github.com) GitHub Skills        SUPPORT & SERVICES (https://docs.github.com) Documentation     (https://support.github.com) Customer support     (https://github.com/orgs/community/discussions) Community forum   (https://github.com/trust-center) Trust center   (https://github.com/partners) Partners       (https://github.com/resources) View all resources         Open Source   COMMUNITY (https://github.com/open-source/sponsors)   GitHub Sponsors Fund open source developers       PROGRAMS (https://securitylab.github.com) Security Lab     (https://maintainers.github.com) Maintainer Community     (https://stars.github.com) GitHub Stars     (https://archiveprogram.github.com) Archive Program        REPOSITORIES (https://github.com/topics) Topics   (https://github.com/trending) Trending   (https://github.com/collections) Collections          Enterprise   ENTERPRISE SOLUTIONS (https://github.com/enterprise)   Enterprise platform AI-powered developer platform       AVAILABLE ADD-ONS (https://github.com/security/advanced-security)   GitHub Advanced Security Enterprise-grade security features    (https://github.com/features/copilot/copilot-business)    Copilot for Business Enterprise-grade AI features    (https://github.com/enterprise/premium-support)   Premium Support Enterprise-grade 24/7 support           (https://github.com/pricing) Pricing      Search /       (https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FNVIDIA%2FOpenShell) Sign in    (https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=NVIDIA%2FOpenShell) Sign up       Appearance settings            You signed in with another tab or window. (OpenShell.html) Reload to refresh your session. You signed out in another tab or window. (OpenShell.html) Reload to refresh your session. You switched accounts on another tab or window. (OpenShell.html) Reload to refresh your session.    Dismiss alert     (https://github.githubassets.com/assets/cn-1b0e3f3e5de609f6.js)  (https://github.githubassets.com/assets/0b-a7be65069037ffea.js)  (https://github.githubassets.com/assets/t5-2c5d26edae56bda2.js)  (https://github.githubassets.com/assets/5l-60d6b21dcbe3c5b7.js)  (https://github.githubassets.com/assets/1a-76a60fd58c2fa34b.js)  (https://github.githubassets.com/assets/zxp-712c49df0caa3ebe.js)  (https://github.githubassets.com/assets/9t-cf29b4cbc838698f.js)  (https://github.githubassets.com/assets/r3j-2177885dae8b60eb.js)  (https://github.githubassets.com/assets/1tw-b73c2806670e858c.js)  (https://github.githubassets.com/assets/fp-9e8d00d506738dbc.js)  (https://github.githubassets.com/assets/sb-c6bba711348c7a7c.js)  (https://github.githubassets.com/assets/aj-7444763a0a51ca63.js)  (https://github.githubassets.com/assets/3h4-3d890b52746ef5aa.js)  (https://github.githubassets.com/assets/li6-7de87a6b55f755f3.js)  (https://github.githubassets.com/assets/mse-9e75d7cb47e1f075.js)  (https://github.githubassets.com/assets/global-nav-bar-37579a2b479c7352.js)  (../../github.githubassets.com/assets/primer-react-css.01917ab04fd4fee0.module.css)  (../../github.githubassets.com/assets/global-nav-bar.cb08c0f10ef097e7.module.css)  (https://github.com/NVIDIA) NVIDIA   (OpenShell.html) OpenShell        Repository navigation  (OpenShell.html)    Code   (https://github.com/NVIDIA/OpenShell/issues)     Issues 368 (368)    (https://github.com/NVIDIA/OpenShell/pulls)    Pull requests 186 (186)    (https://github.com/NVIDIA/OpenShell/discussions)    Discussions   (https://github.com/NVIDIA/OpenShell/actions)    Actions   (https://github.com/NVIDIA/OpenShell/projects)    Projects   (https://github.com/NVIDIA/OpenShell/security)    Security and quality   (https://github.com/NVIDIA/OpenShell/pulse)    Insights     Moreitems              (../../avatars.githubusercontent.com/u/1728152@s=60&v=4)   (OpenShell.html)   (NVIDIA)  (OpenShell) (OpenShell.html) OpenShell   Public    (https://github.com/login?return_to=%2FNVIDIA%2FOpenShell)    Notifications   You must be signed in to change notification settings  (https://github.com/login?return_to=%2FNVIDIA%2FOpenShell)    Fork1.8k  (1.8k )     (https://github.com/login?return_to=%2FNVIDIA%2FOpenShell)    Star17.6k  (17.6k )    You must be signed in to star a repository      About  OpenShell is the safe, private runtime for autonomous AI agents.   (https://docs.nvidia.com/openshell/latest/) (https://docs.nvidia.com/openshell/latest/) docs.nvidia.com/openshell/latest/   Resources  (OpenShell.html#readme-ov-file)   Readme   (OpenShell.html#Apache-2.0-1-ov-file)   Apache-2.0 license   Code of conduct  (OpenShell.html#coc-ov-file)   Code of conduct   Contributing  (OpenShell.html#contributing-ov-file)   Contributing   Security policy  (OpenShell.html#security-ov-file)   Security policy   (https://github.com/NVIDIA/OpenShell/activity)   Activity   (https://github.com/NVIDIA/OpenShell/custom-properties)   Custom properties    Stars    17.6k stars  Watchers    69 watching  Forks  (https://github.com/NVIDIA/OpenShell/forks)   1.8k  forks     (https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FNVIDIA%2FOpenShell&report=NVIDIA+%28user%29) Report repository            main           (https://github.com/NVIDIA/OpenShell/branches)    Branches   (https://github.com/NVIDIA/OpenShell/tags)    Tags    (https://github.com/NVIDIA/OpenShell/branches)    (https://github.com/NVIDIA/OpenShell/tags)          (Go to file) ()      Go to file        Code         Open more actions menu     Latest commit   History (https://github.com/NVIDIA/OpenShell/commits/main/)    1,851 Commits     (https://github.com/NVIDIA/OpenShell/commits/main/)      1,851 Commits      Folders and files Name  Name  (Last commit message) Last commit message   (Last commit date) Last commit date       (This path skips through empty directories) (https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills) .agents/ skills         (This path skips through empty directories) (https://github.com/NVIDIA/OpenShell/tree/main/.agents/skills) .agents/ skills               (.cargo) (https://github.com/NVIDIA/OpenShell/tree/main/.cargo) .cargo        (.cargo) (https://github.com/NVIDIA/OpenShell/tree/main/.cargo) .cargo              (.claude) (https://github.com/NVIDIA/OpenShell/tree/main/.claude) .claude        (.claude) (https://github.com/NVIDIA/OpenShell/tree/main/.claude) .claude              (.config) (https://github.com/NVIDIA/OpenShell/tree/main/.config) .config        (.config) (https://github.com/NVIDIA/OpenShell/tree/main/.config) .config              (.github) (https://github.com/NVIDIA/OpenShell/tree/main/.github) .github        (.github) (https://github.com/NVIDIA/OpenShell/tree/main/.github) .github              (This path skips through empty directories) (https://github.com/NVIDIA/OpenShell/tree/main/.opencode/agents) .opencode/ agents         (This path skips through empty directories) (https://github.com/NVIDIA/OpenShell/tree/main/.opencode/agents) .opencode/ agents               (crates) (https://github.com/NVIDIA/OpenShell/tree/main/crates) crates        (crates) (https://github.com/NVIDIA/OpenShell/tree/main/crates) crates              (deploy) (https://github.com/NVIDIA/OpenShell/tree/main/deploy) deploy        (deploy) (https://github.com/NVIDIA/OpenShell/tree/main/deploy) deploy              (docs) (https://github.com/NVIDIA/OpenShell/tree/main/docs) docs        (docs) (https://github.com/NVIDIA/OpenShell/tree/main/docs) docs              (e2e) (https://github.com/NVIDIA/OpenShell/tree/main/e2e) e2e        (e2e) (https://github.com/NVIDIA/OpenShell/tree/main/e2e) e2e              (examples) (https://github.com/NVIDIA/OpenShell/tree/main/examples) examples        (examples) (https://github.com/NVIDIA/OpenShell/tree/main/examples) examples              (fern) (https://github.com/NVIDIA/OpenShell/tree/main/fern) fern        (fern) (https://github.com/NVIDIA/OpenShell/tree/main/fern) fern              (nix) (https://github.com/NVIDIA/OpenShell/tree/main/nix) nix        (nix) (https://github.com/NVIDIA/OpenShell/tree/main/nix) nix              (proto) (https://github.com/NVIDIA/OpenShell/tree/main/proto) proto        (proto) (https://github.com/NVIDIA/OpenShell/tree/main/proto) proto              (providers) (https://github.com/NVIDIA/OpenShell/tree/main/providers) providers        (providers) (https://github.com/NVIDIA/OpenShell/tree/main/providers) providers              (python) (https://github.com/NVIDIA/OpenShell/tree/main/python) python        (python) (https://github.com/NVIDIA/OpenShell/tree/main/python) python              (rfc) (https://github.com/NVIDIA/OpenShell/tree/main/rfc) rfc        (rfc) (https://github.com/NVIDIA/OpenShell/tree/main/rfc) rfc              (scripts) (https://github.com/NVIDIA/OpenShell/tree/main/scripts) scripts        (scripts) (https://github.com/NVIDIA/OpenShell/tree/main/scripts) scripts              (sdk) (https://github.com/NVIDIA/OpenShell/tree/main/sdk) sdk        (sdk) (https://github.com/NVIDIA/OpenShell/tree/main/sdk) sdk              (skills) (https://github.com/NVIDIA/OpenShell/tree/main/skills) skills        (skills) (https://github.com/NVIDIA/OpenShell/tree/main/skills) skills              (snap) (https://github.com/NVIDIA/OpenShell/tree/main/snap) snap        (snap) (https://github.com/NVIDIA/OpenShell/tree/main/snap) snap              (tasks) (https://github.com/NVIDIA/OpenShell/tree/main/tasks) tasks        (tasks) (https://github.com/NVIDIA/OpenShell/tree/main/tasks) tasks              (telemetry) (https://github.com/NVIDIA/OpenShell/tree/main/telemetry) telemetry        (telemetry) (https://github.com/NVIDIA/OpenShell/tree/main/telemetry) telemetry              (tests) (https://github.com/NVIDIA/OpenShell/tree/main/tests) tests        (tests) (https://github.com/NVIDIA/OpenShell/tree/main/tests) tests              (.dockerignore) (https://github.com/NVIDIA/OpenShell/blob/main/.dockerignore) .dockerignore        (.dockerignore) (https://github.com/NVIDIA/OpenShell/blob/main/.dockerignore) .dockerignore              (.env.example) (https://github.com/NVIDIA/OpenShell/blob/main/.env.example) .env.example        (.env.example) (https://github.com/NVIDIA/OpenShell/blob/main/.env.example) .env.example              (.gitattributes) (https://github.com/NVIDIA/OpenShell/blob/main/.gitattributes) .gitattributes        (.gitattributes) (https://github.com/NVIDIA/OpenShell/blob/main/.gitattributes) .gitattributes              (.gitignore) (https://github.com/NVIDIA/OpenShell/blob/main/.gitignore) .gitignore        (.gitignore) (https://github.com/NVIDIA/OpenShell/blob/main/.gitignore) .gitignore              (.markdownlint-cli2.jsonc) (https://github.com/NVIDIA/OpenShell/blob/main/.markdownlint-cli2.jsonc) .markdownlint-cli2.jsonc        (.markdownlint-cli2.jsonc) (https://github.com/NVIDIA/OpenShell/blob/main/.markdownlint-cli2.jsonc) .markdownlint-cli2.jsonc              (.packit.yaml) (https://github.com/NVIDIA/OpenShell/blob/main/.packit.yaml) .packit.yaml        (.packit.yaml) (https://github.com/NVIDIA/OpenShell/blob/main/.packit.yaml) .packit.yaml              (.python-version) (https://github.com/NVIDIA/OpenShell/blob/main/.python-version) .python-version        (.python-version) (https://github.com/NVIDIA/OpenShell/blob/main/.python-version) .python-version              (.trivyignore.yaml) (https://github.com/NVIDIA/OpenShell/blob/main/.trivyignore.yaml) .trivyignore.yaml        (.trivyignore.yaml) (https://github.com/NVIDIA/OpenShell/blob/main/.trivyignore.yaml) .trivyignore.yaml              (AGENTS.md) (https://github.com/NVIDIA/OpenShell/blob/main/AGENTS.md) AGENTS.md        (AGENTS.md) (https://github.com/NVIDIA/OpenShell/blob/main/AGENTS.md) AGENTS.md              (CI.md) (https://github.com/NVIDIA/OpenShell/blob/main/CI.md) CI.md        (CI.md) (https://github.com/NVIDIA/OpenShell/blob/main/CI.md) CI.md              (CLAUDE.md) (https://github.com/NVIDIA/OpenShell/blob/main/CLAUDE.md) CLAUDE.md        (CLAUDE.md) (https://github.com/NVIDIA/OpenShell/blob/main/CLAUDE.md) CLAUDE.md              (CODE_OF_CONDUCT.md) (https://github.com/NVIDIA/OpenShell/blob/main/CODE_OF_CONDUCT.md) CODE_OF_CONDUCT.md        (CODE_OF_CONDUCT.md) (https://github.com/NVIDIA/OpenShell/blob/main/CODE_OF_CONDUCT.md) CODE_OF_CONDUCT.md              (CONTRIBUTING.md) (https://github.com/NVIDIA/OpenShell/blob/main/CONTRIBUTING.md) CONTRIBUTING.md        (CONTRIBUTING.md) (https://github.com/NVIDIA/OpenShell/blob/main/CONTRIBUTING.md) CONTRIBUTING.md              (Cargo.lock) (https://github.com/NVIDIA/OpenShell/blob/main/Cargo.lock) Cargo.lock        (Cargo.lock) (https://github.com/NVIDIA/OpenShell/blob/main/Cargo.lock) Cargo.lock              (Cargo.toml) (https://github.com/NVIDIA/OpenShell/blob/main/Cargo.toml) Cargo.toml        (Cargo.toml) (https://github.com/NVIDIA/OpenShell/blob/main/Cargo.toml) Cargo.toml              (DCO) (https://github.com/NVIDIA/OpenShell/blob/main/DCO) DCO        (DCO) (https://github.com/NVIDIA/OpenShell/blob/main/DCO) DCO              (GOVERNANCE.md) (https://github.com/NVIDIA/OpenShell/blob/main/GOVERNANCE.md) GOVERNANCE.md        (GOVERNANCE.md) (https://github.com/NVIDIA/OpenShell/blob/main/GOVERNANCE.md) GOVERNANCE.md              (LICENSE) (https://github.com/NVIDIA/OpenShell/blob/main/LICENSE) LICENSE        (LICENSE) (https://github.com/NVIDIA/OpenShell/blob/main/LICENSE) LICENSE              (MAINTAINERS.md) (https://github.com/NVIDIA/OpenShell/blob/main/MAINTAINERS.md) MAINTAINERS.md        (MAINTAINERS.md) (https://github.com/NVIDIA/OpenShell/blob/main/MAINTAINERS.md) MAINTAINERS.md              (README.md) (https://github.com/NVIDIA/OpenShell/blob/main/README.md) README.md        (README.md) (https://github.com/NVIDIA/OpenShell/blob/main/README.md) README.md              (SECURITY.md) (https://github.com/NVIDIA/OpenShell/blob/main/SECURITY.md) SECURITY.md        (SECURITY.md) (https://github.com/NVIDIA/OpenShell/blob/main/SECURITY.md) SECURITY.md              (STYLEGUIDE.md) (https://github.com/NVIDIA/OpenShell/blob/main/STYLEGUIDE.md) STYLEGUIDE.md        (STYLEGUIDE.md) (https://github.com/NVIDIA/OpenShell/blob/main/STYLEGUIDE.md) STYLEGUIDE.md              (TESTING.md) (https://github.com/NVIDIA/OpenShell/blob/main/TESTING.md) TESTING.md        (TESTING.md) (https://github.com/NVIDIA/OpenShell/blob/main/TESTING.md) TESTING.md              (THIRD-PARTY-NOTICES) (https://github.com/NVIDIA/OpenShell/blob/main/THIRD-PARTY-NOTICES) THIRD-PARTY-NOTICES        (THIRD-PARTY-NOTICES) (https://github.com/NVIDIA/OpenShell/blob/main/THIRD-PARTY-NOTICES) THIRD-PARTY-NOTICES              (about.toml) (https://github.com/NVIDIA/OpenShell/blob/main/about.toml) about.toml        (about.toml) (https://github.com/NVIDIA/OpenShell/blob/main/about.toml) about.toml              (buf.yaml) (https://github.com/NVIDIA/OpenShell/blob/main/buf.yaml) buf.yaml        (buf.yaml) (https://github.com/NVIDIA/OpenShell/blob/main/buf.yaml) buf.yaml              (deny.toml) (https://github.com/NVIDIA/OpenShell/blob/main/deny.toml) deny.toml        (deny.toml) (https://github.com/NVIDIA/OpenShell/blob/main/deny.toml) deny.toml              (flake.lock) (https://github.com/NVIDIA/OpenShell/blob/main/flake.lock) flake.lock        (flake.lock) (https://github.com/NVIDIA/OpenShell/blob/main/flake.lock) flake.lock              (flake.nix) (https://github.com/NVIDIA/OpenShell/blob/main/flake.nix) flake.nix        (flake.nix) (https://github.com/NVIDIA/OpenShell/blob/main/flake.nix) flake.nix              (install.sh) (https://github.com/NVIDIA/OpenShell/blob/main/install.sh) install.sh        (install.sh) (https://github.com/NVIDIA/OpenShell/blob/main/install.sh) install.sh              (mise.lock) (https://github.com/NVIDIA/OpenShell/blob/main/mise.lock) mise.lock        (mise.lock) (https://github.com/NVIDIA/OpenShell/blob/main/mise.lock) mise.lock              (mise.toml) (https://github.com/NVIDIA/OpenShell/blob/main/mise.toml) mise.toml        (mise.toml) (https://github.com/NVIDIA/OpenShell/blob/main/mise.toml) mise.toml              (openshell.spec) (https://github.com/NVIDIA/OpenShell/blob/main/openshell.spec) openshell.spec        (openshell.spec) (https://github.com/NVIDIA/OpenShell/blob/main/openshell.spec) openshell.spec              (pyproject.toml) (https://github.com/NVIDIA/OpenShell/blob/main/pyproject.toml) pyproject.toml        (pyproject.toml) (https://github.com/NVIDIA/OpenShell/blob/main/pyproject.toml) pyproject.toml              (rust-toolchain.toml) (https://github.com/NVIDIA/OpenShell/blob/main/rust-toolchain.toml) rust-toolchain.toml        (rust-toolchain.toml) (https://github.com/NVIDIA/OpenShell/blob/main/rust-toolchain.toml) rust-toolchain.toml              (snapcraft.yaml) (https://github.com/NVIDIA/OpenShell/blob/main/snapcraft.yaml) snapcraft.yaml        (snapcraft.yaml) (https://github.com/NVIDIA/OpenShell/blob/main/snapcraft.yaml) snapcraft.yaml              (uv.lock) (https://github.com/NVIDIA/OpenShell/blob/main/uv.lock) uv.lock        (uv.lock) (https://github.com/NVIDIA/OpenShell/blob/main/uv.lock) uv.lock            View all files        Repository files navigation  (OpenShell.html#)    README   (OpenShell.html#)    Code of conduct   (OpenShell.html#)    Contributing   (OpenShell.html#)    Apache-2.0 license   (OpenShell.html#)    Security     Moreitems               (OpenShell)   (https://github.com/NVIDIA/OpenShell/blob/main/LICENSE) (License)  (https://pypi.org/project/openshell/) (PyPI)  (https://github.com/NVIDIA/OpenShell/blob/main/SECURITY.md) (Security Policy)  (https://docs.nvidia.com/openshell/latest/index.html) (Documentation)     Important New in OpenShell 0.1.x: a stable release cadence, new isolation primitives, an expanded extension surface, and new APIs. (https://docs.nvidia.com/openshell/latest/upgrade/0-1-0) Read the 0.1.0 upgrade guide .  OpenShell is the safe, private runtime for fleets of autonomous AI agents. Agents are most useful when they can read files, install packages, call APIs, and use credentials. OpenShell gives them that capability without giving them unrestricted access to your data, secrets, or network. You declare what each agent can touch in a policy, and OpenShell enforces it. How It Works (OpenShell.html#how-it-works)     OpenShell governs what agents can do in two ways: it instruments the kernel to enforce policy on every file access, system call, and network connection at runtime, and it uses formal verification to check what a policy change would allow before it is applied. Kernel-level enforcement. Each agent runs in an isolated sandbox. Kernel controls confine which files it can access and which system calls it can make, and every network connection passes through a policy check before it leaves the sandbox. Agents never see real credentials; OpenShell adds them only to requests bound for approved endpoints. Formally verified policy changes. Before a policy change is approved, OpenShell uses formal verification to flag risky new access it would grant, such as reaching a new host with credentials or calling a new API method, so those changes wait for human review.  See (https://docs.nvidia.com/openshell/latest/about/architecture) Architecture for how the gateway, supervisor, and sandbox fit together. Quickstart (OpenShell.html#quickstart)     You need Linux, macOS on Apple Silicon, or Windows with WSL 2 (experimental), plus Docker, Podman, or host virtualization. See the (https://docs.nvidia.com/openshell/latest/about/support-matrix) Support Matrix for details. curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | sh
openshell sandbox create --name demo  The installer sets up the CLI and a local gateway. The default sandbox image is minimal Ubuntu with no agent installed. To run a real agent, follow (https://docs.nvidia.com/openshell/latest/about/run-your-first-agent) Run Your First Agent : it runs OpenCode against a free OpenRouter model and shows how to approve new access as the agent needs it. Explore Further (OpenShell.html#explore-further)     (https://docs.nvidia.com/openshell/latest/how-it-works/sandboxes/overview) Sandboxes : images, runtimes, GPUs, and lifecycle. (https://docs.nvidia.com/openshell/latest/how-it-works/policies/overview) Policies : filesystem, network, and process rules, with the (https://docs.nvidia.com/openshell/latest/how-it-works/policies/advisor) advisor and (https://docs.nvidia.com/openshell/latest/how-it-works/policies/prover) prover for reviewing changes. (https://docs.nvidia.com/openshell/latest/how-it-works/providers/overview) Providers : credentials that work only at approved endpoints, including (https://docs.nvidia.com/openshell/latest/how-it-works/inference) inference . (https://docs.nvidia.com/openshell/latest/how-it-works/gateways/overview) Gateways : the control plane for sandboxes, policy, and access. (https://docs.nvidia.com/openshell/latest/kubernetes/setup) Kubernetes : deploy the gateway with Helm. Your CNI must enforce NetworkPolicy . (https://docs.nvidia.com/openshell/latest/extensibility/overview) Extensibility : middleware, interceptors, and compute drivers. (https://docs.nvidia.com/openshell/latest/tutorials/first-network-policy) Tutorials : step-by-step policy and agent walkthroughs. (https://docs.nvidia.com/openshell/latest/about/installation#prerelease-and-development-builds) Prerelease and development builds : try an upcoming release or the latest commit on main .  Agent Skills (OpenShell.html#agent-skills)     Install the public OpenShell skills for your coding agent: npx skills add NVIDIA/OpenShell  The skills teach your agent to drive the OpenShell CLI, write sandbox policies, and debug gateways and inference routing. They live in (https://github.com/NVIDIA/OpenShell/blob/main/skills) skills/  and work without an OpenShell source checkout. SDKs (OpenShell.html#sdks)     SDKs connect applications to an OpenShell gateway. They do not install the CLI. Use the same OpenShell release for the SDK and the gateway when possible. Language Install Docs   Python uv add openshell  (https://github.com/NVIDIA/OpenShell/blob/main/python/openshell) README   TypeScript npm install @nvidia/openshell-sdk (GitHub Packages) (https://github.com/NVIDIA/OpenShell/blob/main/sdk/typescript/README.md) README   Go go get github.com/NVIDIA/OpenShell/sdk/go@latest  (https://github.com/NVIDIA/OpenShell/blob/main/sdk/go/README.md) README   Rust cargo add openshell-sdk --git https://github.com/NVIDIA/OpenShell --tag <release-tag>  (https://github.com/NVIDIA/OpenShell/blob/main/docs/sdk/rust.mdx) Installation and usage      Community (OpenShell.html#community)     Questions and discussion: (https://github.com/NVIDIA/OpenShell/discussions) GitHub Discussions  Bug reports and feature requests: (https://github.com/NVIDIA/OpenShell/issues) GitHub Issues , using the issue templates Security vulnerabilities: follow (https://github.com/NVIDIA/OpenShell/blob/main/SECURITY.md) SECURITY.md . Do not open a GitHub issue. Roadmap: (https://github.com/orgs/NVIDIA/projects/233) OpenShell Roadmap and the (https://github.com/orgs/NVIDIA/projects/233/views/6) RFC board  Try it in the cloud: (https://brev.nvidia.com/launchable/deploy/now?launchableID=env-3Ap3tL55zq4a8kew1AuW0FpSLsg) Brev Launchable   OpenShell is built agent-first: it is developed with the same agent-driven workflows it enables. See (https://github.com/NVIDIA/OpenShell/blob/main/CONTRIBUTING.md) CONTRIBUTING.md for development setup and the contribution workflow, and (https://github.com/NVIDIA/OpenShell/blob/main/AGENTS.md) AGENTS.md for repository coding conventions. Telemetry (OpenShell.html#telemetry)     OpenShell collects anonymous telemetry, limited to operational categories and counts, to help improve the project. It does not collect sandbox names, hostnames, file paths, prompts, credentials, provider or model names, or user content. To disable it, set OPENSHELL_TELEMETRY_ENABLED=false on the gateway, or server.telemetryEnabled=false for Helm installs. You can also compile telemetry out entirely. See (https://docs.nvidia.com/openshell/latest/observability/telemetry) Telemetry for details and the (https://github.com/NVIDIA/OpenShell/blob/main/telemetry/README.md) community telemetry reports for published usage trends. Notice and Disclaimer (OpenShell.html#notice-and-disclaimer)     This software automatically retrieves, accesses or interacts with external materials. Those retrieved materials are not distributed with this software and are governed solely by separate terms, conditions and licenses. You are solely responsible for finding, reviewing and complying with all applicable terms, conditions, and licenses, and for verifying the security, integrity and suitability of any retrieved materials for your specific use case. This software is provided "AS IS", without warranty of any kind. The author makes no representations or warranties regarding any retrieved materials, and assumes no liability for any losses, damages, liabilities or legal consequences from your use or inability to use this software or any retrieved materials. Use this software and the retrieved materials at your own risk. License (OpenShell.html#license)     This project is licensed under the (https://github.com/NVIDIA/OpenShell/blob/main/LICENSE) Apache License 2.0 .          About  OpenShell is the safe, private runtime for autonomous AI agents.   (https://docs.nvidia.com/openshell/latest/) (https://docs.nvidia.com/openshell/latest/) docs.nvidia.com/openshell/latest/   Resources  (OpenShell.html#readme-ov-file)   Readme   (OpenShell.html#Apache-2.0-1-ov-file)   Apache-2.0 license   Code of conduct  (OpenShell.html#coc-ov-file)   Code of conduct   Contributing  (OpenShell.html#contributing-ov-file)   Contributing   Security policy  (OpenShell.html#security-ov-file)   Security policy   (https://github.com/NVIDIA/OpenShell/activity)   Activity   (https://github.com/NVIDIA/OpenShell/custom-properties)   Custom properties    Stars    17.6k stars  Watchers    69 watching  Forks  (https://github.com/NVIDIA/OpenShell/forks)   1.8k  forks     (https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FNVIDIA%2FOpenShell&report=NVIDIA+%28user%29) Report repository    Releases     Packages    Used by    Contributors    Languages                            Footer (https://github.com)    © 2026 GitHub, Inc.   Footer navigation (https://docs.github.com/site-policy/github-terms/github-terms-of-service) Terms  (https://docs.github.com/site-policy/privacy-policies/github-privacy-statement) Privacy  (https://github.com/security) Security  (https://www.githubstatus.com/) Status  (https://github.community/) Community  (https://docs.github.com/) Docs  (https://support.github.com?tags=dotcom-footer) Contact  Manage cookies    Do not share my personal information              You can’t perform that action at this time.