{ "features_resolved": { "snapshot_any": true, "snapshot_mem": false, "fork": false, "pause_resume": true, "persistent_disk": true, "whole_disk": false, "persist_scope": true, "volumes": false, "auto_stop_idle": true, "long_sessions": true, "custom_image": true, "image_snapshot": true, "image_oci": false, "vm_isolation": true, "docker_inside": true, "nested_virt": false, "root": true, "systemd": null, "browser": true, "desktop": false, "computer_use": false, "code_interpreter": null, "browser_control": null, "desktop_control": null, "browser_and_desktop": false, "anti_bot": false, "captcha_solving": false, "residential_ip": false, "agent_harnesses": true, "ssh": true, "public_ipv4": false, "inbound_https": false, "custom_domain": null, "raw_tcp_inbound": null, "egress_allowlist": true, "open_internet": true, "static_egress_ip": false, "private_network": null, "self_host": true, "byoc": false, "open_source": true, "soc2": null, "hipaa": null, "sso": true, "gpu": false, "arm64": true, "windows": false, "macos": false, "lang_python": true, "lang_node": true, "lang_go": null, "lang_rust": null, "lang_java": null, "gpu_desktop": null, "credential_injection": true, "egress_http_rules": true, "wake_on_request": true, "live_resize": false, "fork_running": false, "memory_snapshot_fork": false, "webhooks": null, "scheduled_wakeups": true, "audit_logs": true, "eu_data_residency": null, "zero_data_retention": null, "scoped_api_keys": null, "spend_limits": null, "mcp_server": false, "usage_api": false, "snapshot_auto": true, "snapshot_on_demand": false, "harness_api": false, "own_agent_api": true, "fast_boot": null, "strong_isolation": true, "ingress_rules": false, "guest_firewall": true, "secret_proxy": true, "secret_proxy_any": true, "volume_attach": false, "volume_shared": false, "sidecar": null, "fuse": true, "kernel_features": true, "burst": null }, "company": { "id": "onecli", "checked": "2026-09-30", "company": "OneCLI", "ownership": { "value": "independent", "parent": null, "source": "https://www.ycombinator.com/companies/onecli", "quote": "OneCLI The open source AI teammates for your company. Active Founders Jonathan Fishner Founder/CEO Co-founder of OneCLI Guy Ben Aharon Founder/CTO Co-founder of OneCLI" }, "stage": { "value": "pre-seed", "source": "https://www.ycombinator.com/companies/onecli", "quote": "Backed by Y Combinator", "confidence": "low", "note": "Company is an active Y Combinator Summer 2026 batch company (same website domain onecli.sh, founders Jonathan Fishner CEO and Guy Ben Aharon CTO, confirming the hinted YC page is the same company). No press release, Crunchbase/Tracxn listing, or company statement disclosing a specific round, amount, or lead investor was found within the time budget; YC itself provides a standard pre-seed investment to batch companies, so stage is inferred as pre-seed with low confidence rather than left fully unknown." }, "accelerators": [ { "name": "Y Combinator", "batch": "Summer 2026", "source": "https://www.ycombinator.com/companies/onecli", "quote": "OneCLI Batch: Summer 2026 Status: Active Location: San Francisco Primary Partner: Brad Flora", "confidence": "high", "via": "research" } ], "total_funding_usd": { "value": null, "status": "unknown" }, "last_round": { "type": "unknown", "amount_usd": null, "date": null, "leads": [], "status": "unknown", "source": "", "quote": "" }, "investors": [ "Y Combinator" ], "portfolio_listings": [], "revenue": { "value": null, "status": "unknown" }, "employees": { "value": null, "source": "" }, "note": "Company is currently an Active Y Combinator company (Summer 2026 batch, San Francisco). Confirmed by matching domain (onecli.sh) and product description between onecli.sh and the YC directory page. Product started as an open-source secrets/credential gateway for AI agents (Show HN, 2026-03-12, by co-founder 'guyb3' i.e. Guy Ben Aharon) and has since grown into a broader 'AI teammates' / agent platform with paid Team/Scale/Enterprise tiers and named customers (Docker, MindsDB, Zoho, Coralogix, Kakao Entertainment, Cleo, Optibus, Reply.io, Kaiko, Percent, Pillar Security, Phase, Medallion, Glilot Capital) shown as logos on the homepage (unclear if these are customers or investors — Glilot Capital is an Israeli VC firm, so its presence in a 'Trusted by' logo row may actually indicate it is an investor rather than a customer; not independently confirmed). No specific funding round size, date, or additional lead investors beyond Y Combinator were found; treat funding stage/amount as low-confidence inference, not a confirmed figure." }, "id": "onecli", "name": "OneCLI", "url": "https://onecli.sh", "category": "agent-sandbox", "isolation": "vm", "modes": [ { "key": "native", "label": "Native product; see regime notes", "flags": [ "alt" ], "os": [ "linux" ], "regions": null, "gpu_only": false, "features": {}, "pricing": "resource", "vcpu_h": null, "ram_gib_h": null, "cpu_basis": "alloc", "ram_basis": "alloc", "active_floor": 0, "ram_per_vcpu": [ null, null ], "ram_fixed_per_vcpu": null, "vcpu_options": null, "min_vcpu": null, "max_vcpu": null, "max_ram_gib": null, "sizes": null, "pool_tiers": null, "requires_always_on": false, "always_on_month_per_instance": null, "commit_note": null, "min_billed_seconds": null, "granularity_s": null, "start_fee": null, "boot_overhead_s": null, "multiplier": 1, "windows_vcpu_h": null, "gpu": null, "note": "Incomplete or non-resource economics: rates remain null, never interpreted as free." } ], "storage": { "included_disk_gib": null, "disk_gib_month": null, "disk_billed_when_stopped": null, "snapshot_gib_month": null, "paused_ram_billed": null }, "network": { "egress_free_gib": null, "egress_gib": null, "ipv4_month": null, "ipv4_available": null, "internet": { "default": "configurable", "evidence": [ { "quote": "A computer: its own isolated sandbox, with a filesystem and a shell. The only way out is the gateway, so it reaches what you granted and nothing else.", "url": "https://onecli.sh/docs/llms-full.txt" }, { "quote": "Each level ends in a Default Rule, which decides what happens when nothing matched (Allow or Block).", "url": "https://onecli.sh/docs/llms-full.txt" }, { "quote": "blocked_by_default_policy | 403 | Nothing allowed the request (deny-by-default)", "url": "https://onecli.sh/docs/llms-full.txt" } ] } }, "plans": [ { "name": "Free", "fee": 0, "flags": [], "fee_is_credit": false, "included_usd": null, "per_seat": null, "concurrency": 3, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "" }, { "name": "Team BYOK", "fee": 149, "flags": [], "fee_is_credit": false, "included_usd": null, "per_seat": 0, "concurrency": 10, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "Yearly billing: $124/mo ($1,490/yr, save $298). 5 fixed seats, 10 agents, unlimited integration calls, 30-day audit log." }, { "name": "Scale BYOK", "fee": 499, "flags": [], "fee_is_credit": false, "included_usd": null, "per_seat": 49, "concurrency": 20, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "Yearly billing: $416/mo ($4,990/yr, save $998). 10 seats (+$49/seat), 20 agents, SSO & SAML, 90-day audit log." }, { "name": "Enterprise", "fee": null, "flags": [ "sales" ], "fee_is_credit": false, "included_usd": null, "per_seat": null, "concurrency": null, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "" }, { "name": "Team (hosted models)", "fee": 499, "flags": [], "fee_is_credit": false, "included_usd": 0, "per_seat": 0, "concurrency": 10, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "Same as Team BYOK plus hosted OpenAI/Anthropic/Google models under fair-use limits. Yearly $416/mo ($4,990/yr). 5 fixed seats, 10 agents." }, { "name": "Scale (hosted models)", "fee": 1999, "flags": [], "fee_is_credit": false, "included_usd": 0, "per_seat": 199, "concurrency": 20, "max_session_h": null, "max_vcpu": null, "max_ram_gib": null, "sizes_allowed": null, "note": "Scale plus hosted models. Yearly $1,666/mo ($19,990/yr). 10 seats included, extra seat $199/mo, 20 agents." } ], "free": { "monthly_credit": 0, "one_time_credit": 0 }, "features": { "linux": true, "windows": false, "macos": false, "arm64": true, "gpu": false, "snapshot": "fs", "pause_resume": true, "fork": false, "persistent_disk": true, "volumes": null, "auto_stop_idle": true, "max_session_h": null, "custom_image": null, "docker_inside": true, "nested_virt": false, "root": true, "systemd": null, "browser": true, "desktop": false, "computer_use": false, "code_interpreter": null, "agent_harnesses": true, "ssh": true, "public_ipv4": false, "inbound_https": false, "custom_domain": null, "raw_tcp_inbound": null, "egress_allowlist": true, "static_egress_ip": false, "private_network": null, "self_host": true, "byoc": false, "open_source": true, "soc2": null, "hipaa": null, "sso": true, "gpu_types": [], "regions": null, "lang_python": true, "lang_node": true, "lang_go": null, "lang_rust": null, "lang_java": null, "gpu_desktop": null, "credential_injection": true, "egress_http_rules": true, "wake_on_request": true, "live_resize": false, "fork_running": false, "memory_snapshot_fork": false, "webhooks": null, "scheduled_wakeups": true, "audit_logs": true, "eu_data_residency": null, "zero_data_retention": null, "scoped_api_keys": null, "spend_limits": null, "mcp_server": false, "own_agent_api": true, "harness_api": false, "egress_allowlist_level": "domain", "guest_firewall": true, "secret_proxy": "any-http", "isolation": "kata", "image_oci": false, "anti_bot": false, "captcha_solving": false, "snapshot_auto": true, "volume_attach": false, "volume_shared": false, "ingress_rules": false, "egress_ip_type": "datacenter", "snapshot_on_demand": false, "max_session_unlimited": true, "open_internet": true, "usage_api": false, "persist_scope": "folder", "persist_path": "/workspace" }, "perf": { "cpu_runs_s": null, "cold_start_ms": null, "burst_tti_ms": null, "dax_s": null }, "caveats": [ "Free 3 seats/3 agents/500 calls and $5 AI credit; Team displayed $149 for 5 seats/10 agents with BYO key, Scale $499/10 seats/20 agents and $49 extra user. Model toggle changes totals; values not unconditional all-model subscription. VM shape and runtime caps unknown.", "Null values mean unknown, not free/unlimited. No model-token cost, tax or unverified ancillary charge included.", "Native browser/device/task/credit prices with unknown CPU/RAM are deliberately non-priceable. Check regime before interpreting any partial resource estimate.", "Hosted-model plans have fair-use token limits per session and per week. When a window is exhausted, requests go to a lightweight model until it resets (a soft cap, not overage billing). There is no metering or overage on integration calls.", "Hosted micro-VM size (vCPU/RAM/disk) is not published. The self-hosted runner defaults are 1 vCPU share, 2 GiB RAM, 512 pids and 4 sandboxes per host (RUNNER_SANDBOX_CPUS=1, RUNNER_SANDBOX_MEMORY_MB=2048, RUNNER_MAX_SANDBOXES=4). These describe self-host only." ], "sources": [ "https://www.ycombinator.com/companies/onecli", "https://onecli.sh/", "https://onecli.sh/pricing", "https://onecli.sh/docs" ], "fleet": { "default_max_instances": null, "default_max_vcpu": null, "default_max_gpus": null, "raise": null, "raise_time_days": null, "verification": "Free signup no credit card.", "tiers": null, "notes": "Agent identities/integration calls/model credits, not documented per-agent managed VMs. Number of registered agents must not become default_max_instances. No hosted fleet quota established.", "sources": [ "https://onecli.sh" ], "researched": "2026-09-28" }, "audit_2026_09_29": { "applied": 19, "source": "checked against the provider's live pricing and docs pages", "reviewed": 9 }, "feature_evidence": { "own_agent_api": { "value": true, "source": "https://github.com/onecli/onecli/blob/HEAD/packages/api/src/routes/conversations.ts", "quote": "// POST /conversations — start a new exchange with a hosted agent.", "note": "Harness = OneCLI's own hosted agent (bundled 'jcode' runtime behind the vendor-neutral @onecli/agent-protocol harness interface in the sandbox supervisor). Bearer-token REST routes: POST /conversations, GET /conversations?agentId=, GET /:id/events (transcript), GET /:id/stream (SSE live tail), POST /:id/turns, POST /:id/messages (follow-ups), POST /:turnId/abort. Documented UX is dashboard/Slack chat; these routes are not in the public API reference (source only). Claude Code/Codex/Cursor are not driven: 'onecli run -- claude' only wraps a local agent with gateway proxy settings.", "checked": "2026-09-29" }, "harness_api": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/packages/api/src/routes/conversations.ts", "quote": "// POST /conversations — start a new exchange with a hosted agent.", "note": "Harness = OneCLI's own hosted agent (bundled 'jcode' runtime behind the vendor-neutral @onecli/agent-protocol harness interface in the sandbox supervisor). Bearer-token REST routes: POST /conversations, GET /conversations?agentId=, GET /:id/events (transcript), GET /:id/stream (SSE live tail), POST /:id/turns, POST /:id/messages (follow-ups), POST /:turnId/abort. Documented UX is dashboard/Slack chat; these routes are not in the public API reference (source only). Claude Code/Codex/Cursor are not driven: 'onecli run -- claude' only wraps a local agent with gateway proxy settings.", "checked": "2026-09-29" }, "egress_allowlist": { "value": true, "source": "https://onecli.sh/docs/how-it-works.md", "quote": "Each agent lives in its own sandbox, and the only way out is the gateway, which checks every request against your policy and injects the credentials granted to that agent.", "note": "Policy rules with network targets by hostPattern (plus app/connection/secret targets), first-match, each level ends in a Default Rule (Allow or Block) so default-deny is possible; org rules are a ceiling agents/projects cannot loosen; also per-app host blocklists. Self-host runner: sandboxes join an internal Docker network 'that network has NO route out', gateway dual-homed (runner README), so non-HTTP egress is simply blocked. IP/CIDR rules not documented. External agents via 'onecli run' only get proxy env vars (not enforced).", "checked": "2026-09-29", "level": "domain" }, "egress_http_rules": { "value": true, "source": "https://onecli.sh/docs/guides/rules.md", "quote": "a **network** pattern (`{\"kind\":\"network\",\"hostPattern\":\"api.example.com\",\"pathPattern\":\"/v1/*\",\"method\":\"POST\"}`).", "note": "Host + path pattern + HTTP method, block/allow, per-agent rate limits (429), human approval holds, request-body conditions ('Conditions narrow a rule beyond its targets by inspecting the request body'), and per-tool rules for catalog apps. HTTPS inspected via MITM.", "checked": "2026-09-29" }, "guest_firewall": { "value": true, "source": null, "quote": null, "note": "OneCLI Cloud: 'One micro-VM per agent ... and root on that VM' (blog Why We Gave Every Agent a Computer), own kernel. Self-hosted Docker runner: sandboxes run with CapDrop ALL, no-new-privileges and default seccomp (runner README), so iptables/nftables would NOT work there.", "checked": "2026-09-29", "derived": true }, "secret_proxy": { "value": "any-http", "source": "https://onecli.sh/docs/how-it-works.md", "quote": "If allowed, the gateway matches the target host and path against the credentials **granted to that agent**, decrypts the match, and injects it as a header (e.g. `Authorization: Bearer ...`) or query parameter.", "note": "Core product: Rust MITM gateway; generic secrets for any host pattern (header or query-param injection, value templates), plus anthropic/openai types, OAuth app connections with token refresh (40+ apps), AWS SigV4 request signing, GitHub tokens into API calls and git-over-HTTPS (Basic auth), Bitwarden/1Password vault pull. Agents see placeholders ('onecli-managed' stubs). Non-HTTP (databases, SSH, raw git://) not covered; in sandboxes such traffic has no route out. Also usable standalone for external agents via 'onecli run' or SDK-injected Docker proxy config.", "checked": "2026-09-29" }, "isolation": { "value": "kata", "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "e2fsprogs + util-linux serve the Kubernetes/Kata boot phase (the sandbox manager's boot.sh formats and mounts the raw block home, then setpriv-drops to `node` — plans/sandbox-platform.md step 2)", "note": "OneCLI Cloud runs each agent in its own Kata Containers sandbox ('each sandbox owns a whole kernel', per the same Dockerfile's podman comments), matching the blog's 'one micro-VM per agent'. Self-hosted Community/Enterprise editions instead run sandboxes as plain Docker containers (CapDrop ALL, no-new-privileges) — a shared-kernel container, not this isolation level.", "checked": "2026-09-30" }, "image_oci": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "COPY --from=jcode-runtime /opt/jcode /opt/jcode ... ENV ONECLI_JCODE_BINARY=/opt/jcode/jcode", "note": "Sandboxes boot from OneCLI's own pinned agent image (jcode runtime baked in); no documented way for a customer to supply their own Docker/OCI image to start a sandbox from.", "checked": "2026-09-30" }, "nested_virt": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "Rootless podman works on the hosted microVM substrate, where each sandbox owns a whole kernel.", "note": "The sandbox supports nested containers (rootless podman/docker, docker_inside=true) but nothing documents /dev/kvm or nested VM/emulator support inside the sandbox.", "checked": "2026-09-30" }, "desktop": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "xvfb is the fallback display for the rare tool that refuses headless mode", "note": "The sandbox ships a headless Chromium plus Xvfb as a rendering fallback, not a user-facing graphical desktop (no VNC/RDP/stream product surface documented).", "checked": "2026-09-30" }, "computer_use": { "value": false, "source": "https://onecli.sh/blog/why-we-gave-every-agent-a-computer", "quote": "A real browser, a real filesystem, and root on that VM, not on yours.", "note": "not offered: the agent drives its browser via Playwright/Puppeteer APIs (DOM/CDP), not a screenshot+click computer-use API; no such API is documented.", "checked": "2026-09-30" }, "anti_bot": { "value": false, "source": "https://onecli.sh/docs/how-it-works.md", "quote": "OneCLI runs each agent in its own sandbox on your infrastructure. A Rust gateway intercepts every outbound request, enforces policy, and injects credentials the agents never see.", "note": "not offered: outside the product's scope — OneCLI is a credential-injecting agent gateway/sandbox platform, not a scraping/stealth product.", "checked": "2026-09-30" }, "captcha_solving": { "value": false, "source": "https://onecli.sh/docs/how-it-works.md", "quote": "OneCLI runs each agent in its own sandbox on your infrastructure. A Rust gateway intercepts every outbound request, enforces policy, and injects credentials the agents never see.", "note": "not offered: outside the product's scope.", "checked": "2026-09-30" }, "ssh": { "value": true, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/ssh-terminator.Dockerfile", "quote": "OneCLI SSH terminator — the sandbox platform's SSH front door (hosted agents) ... It terminates ssh with the short-lived certificates the api mints and bridges each session into an agent's container", "note": "Hosted platform ships a dedicated SSH terminator service (short-lived certs, EXPOSE 2222) that bridges SSH sessions into an agent's sandbox; the agent image also bundles openssh-sftp-server/openssh-client for the SSH front door.", "checked": "2026-09-30" }, "snapshot": { "value": "fs", "source": "https://onecli.sh/docs/how-it-works.md", "quote": "The runner, polling outbound-only, picks up the turn and boots or wakes the agent's sandbox. The sandbox has a durable workspace volume that survives park and wake.", "note": "Persistence is via a durable filesystem volume (/workspace) that survives park/wake, not a documented memory/process snapshot; running processes are not restored, so this is filesystem-level, not memory.", "checked": "2026-09-30" }, "snapshot_auto": { "value": true, "source": "https://onecli.sh/docs/how-it-works.md", "quote": "idle sandboxes are parked to free resources ... The runner ... boots or wakes the agent's sandbox. The sandbox has a durable workspace volume that survives park and wake.", "note": "Disk state is preserved automatically across the automatic park (idle stop) / wake (auto-restart on next message) cycle, with no explicit snapshot API call required.", "checked": "2026-09-30" }, "fork": { "value": false, "source": "https://onecli.sh/docs/cli/onecli-cli.md", "quote": "onecli agents create --name \"My Agent\" --identifier my-agent", "note": "Agents/sandboxes are created fresh; no documented way to clone/fork an existing agent's sandbox into a new one.", "checked": "2026-09-30" }, "fork_running": { "value": false, "source": "https://onecli.sh/docs/cli/onecli-cli.md", "quote": "onecli agents create --name \"My Agent\" --identifier my-agent", "note": "Depends on fork, which is not offered.", "checked": "2026-09-30" }, "memory_snapshot_fork": { "value": false, "source": "https://onecli.sh/docs/cli/onecli-cli.md", "quote": "onecli agents create --name \"My Agent\" --identifier my-agent", "note": "No fork feature is documented at all, so memory-preserving fork is not offered.", "checked": "2026-09-30" }, "pause_resume": { "value": true, "source": "https://onecli.sh/docs/how-it-works.md", "quote": "idle sandboxes are parked to free resources ... The runner ... boots or wakes the agent's sandbox.", "note": "Sandboxes are 'parked' (paused, freeing resources) when idle and 'woken' again on the next turn.", "checked": "2026-09-30" }, "wake_on_request": { "value": true, "source": "https://onecli.sh/docs/how-it-works.md", "quote": "The runner, polling outbound-only, picks up the turn and boots or wakes the agent's sandbox.", "note": "An incoming message/turn automatically wakes a parked sandbox.", "checked": "2026-09-30" }, "volume_attach": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "VOLUME [\"/workspace\"]", "note": "Each sandbox gets exactly one built-in durable workspace volume; no documented API/CLI to attach additional persistent volumes.", "checked": "2026-09-30" }, "volume_shared": { "value": false, "source": "https://onecli.sh/blog/why-we-gave-every-agent-a-computer", "quote": "Nothing it does reaches another agent, another employee, or your systems. If it breaks something, it breaks only its own computer.", "note": "Each agent's sandbox and its workspace volume are isolated from every other agent; no shared-volume feature is documented.", "checked": "2026-09-30" }, "agent_harnesses": { "value": true, "source": "https://onecli.sh/docs/guides/coding-agents.md", "quote": "| Claude Code | `onecli run -- claude` | | Cursor | `onecli run -- cursor` | | Codex | `onecli run -- codex` | | Hermes | `onecli run -- hermes` | | OpenCode | `onecli run -- opencode` | | OpenClaw | `onecli run -- openclaw gateway run` |", "note": "OneCLI documents first-class support for Claude Code, Cursor, Codex, Hermes, OpenCode and OpenClaw via `onecli run`, with auto-installed skill files — but this wraps the harness running on the USER's own machine/CI, gateway-routed; it is not a preinstalled template inside the hosted OneCLI Cloud sandbox itself, which instead runs OneCLI's own bundled 'jcode' agent runtime.", "checked": "2026-09-30" }, "mcp_server": { "value": false, "source": "https://onecli.sh/docs/guides/credential-stubs/general-app.md", "quote": "Create placeholder credential files so MCP servers can start without real secrets. The gateway fills in values at request time.", "note": "OneCLI supports OTHER MCP servers running behind its gateway (credential stubs so they can boot), but does not itself ship an MCP server that a client (e.g. Claude Desktop) can use to create/manage/control OneCLI sandboxes.", "checked": "2026-09-30" }, "lang_python": { "value": true, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "python3 python3-pip python3-venv ... python3 --version && pip3 --version", "note": "Python 3 with pip and venv is baked into and verified in the hosted agent sandbox image.", "checked": "2026-09-30" }, "lang_node": { "value": true, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "FROM node:22.23.2-trixie-slim AS runner ... [(\"command -v node\")] = \"/usr/local/bin/node\"", "note": "The sandbox image is built on a Node.js 22 base and Node is verified present on PATH for the sandbox user.", "checked": "2026-09-30" }, "public_ipv4": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/runner.Dockerfile", "quote": "The control channel the sandboxes dial. Not published to the host: it is reachable only on the container networks (§3.3 — no inbound ports).", "note": "Sandboxes are outbound-only with no inbound ports/public IP of their own; the only inbound path is the shared SSH-terminator front door with short-lived certs, not a per-machine public IPv4.", "checked": "2026-09-30" }, "inbound_https": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/runner.Dockerfile", "quote": "Not published to the host: it is reachable only on the container networks (§3.3 — no inbound ports).", "note": "No documented feature to expose an HTTPS URL to reach a port/webserver running inside a sandbox (architecture is outbound-only).", "checked": "2026-09-30" }, "ingress_rules": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/ssh-terminator.Dockerfile", "quote": "It terminates ssh with the short-lived certificates the api mints and bridges each session into an agent's container", "note": "The only inbound surface is the SSH front door gated by short-lived certificates; there is no documented provider-side ingress control (IP allowlists, security groups, private/auth URLs) for exposed application ports.", "checked": "2026-09-30" }, "gpu": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "--disable-gpu because there is no GPU anywhere this image runs.", "note": "Explicitly documented in the build: no GPU is present on the sandbox substrate.", "checked": "2026-09-30" }, "windows": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "FROM node:22.23.2-trixie-slim AS runner", "note": "Sandbox guest OS is Debian Linux; no Windows machine option is documented.", "checked": "2026-09-30" }, "macos": { "value": false, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "FROM node:22.23.2-trixie-slim AS runner", "note": "Sandbox guest OS is Debian Linux; no macOS machine option is documented.", "checked": "2026-09-30" }, "arm64": { "value": true, "source": "https://github.com/onecli/onecli/blob/HEAD/docker/agent.Dockerfile", "quote": "case \"$TARGETARCH\" in arm64) ASSET=\"jcode-linux-aarch64\";", "note": "The agent image build explicitly targets and vendors an aarch64 jcode binary alongside amd64, i.e. multi-arch including arm64.", "checked": "2026-09-30" }, "byoc": { "value": false, "source": "https://onecli.sh/docs/self-hosting/overview.md", "quote": "A connector deployment is coming, pairing the OneCLI Cloud dashboard and API with a gateway and database that run inside your network, so credentials never leave it.", "note": "The closest thing to BYOC (provider-managed control plane, customer-network data plane) is an explicitly not-yet-shipped 'connector deployment'; today it's either fully self-operated self-hosting or fully OneCLI-operated Cloud, not a managed deployment into the customer's own cloud account.", "checked": "2026-09-30" }, "egress_ip_type": { "value": "datacenter", "source": "https://onecli.sh/docs/how-it-works.md", "quote": "Rust Gateway: intercepts outbound requests (HTTPS included, via MITM) and injects credentials. Agents authenticate with access tokens via Proxy-Authorization headers.", "note": "derived: all outbound traffic (self-host or OneCLI Cloud) leaves via the Rust gateway running on ordinary cloud/VPC/on-prem compute; no residential/mobile proxy network is documented, so the outbound IP is an ordinary datacenter/hosting IP.", "checked": "2026-09-30" }, "snapshot_on_demand": { "value": false, "source": "https://onecli.sh/docs/cli/onecli-cli.md", "quote": "onecli agents list / onecli agents create --name X --identifier Y / onecli config set project payments-app", "note": "The full CLI reference (auth, agents, apps, org, config, migrate) has no snapshot/checkpoint command, and no API-reference page under docs mentions one; state persistence is only the automatic durable /workspace volume across park/wake, not an on-demand snapshot API.", "checked": "2026-09-30" }, "live_resize": { "value": false, "source": "https://onecli.sh/docs/cli/onecli-cli.md", "quote": "onecli agents list / onecli agents create --name X --identifier Y", "note": "No documented API/CLI command changes a running sandbox's CPU or RAM; self-hosted sandbox resources are fixed via static runner env vars (RUNNER_SANDBOX_MEMORY_MB, RUNNER_SANDBOX_CPUS) set at deploy time, not adjustable per running sandbox.", "checked": "2026-09-30" }, "static_egress_ip": { "value": false, "source": "https://onecli.sh/docs/how-it-works.md", "quote": "Rust Gateway: intercepts outbound requests (HTTPS included, via MITM) and injects credentials.", "note": "No docs page mentions a fixed/dedicated outbound IP for allowlisting purposes (searched how-it-works, quickstart, self-hosting, integrations pages); egress goes through the gateway host's own IP, whatever it happens to be.", "checked": "2026-09-30" }, "max_session_h": { "value": "none", "source": "https://onecli.sh/docs/how-it-works.md", "quote": "idle sandboxes are parked to free resources ... The runner, polling outbound-only, picks up the turn and boots or wakes the agent's sandbox.", "note": "Sandboxes are per-agent persistent identities that park when idle and wake on the next message; no published maximum session/run duration exists (the runner's 'reap' only removes orphaned objects no longer known to the control plane, not sessions that exceed a time limit).", "checked": "2026-09-30" }, "usage_api": { "value": false, "source": "https://onecli.sh/docs/llms-full.txt", "quote": "Pricing scales with the number of agents you run, not with how much they work. If you want to cap an agent's usage, set your own rate-limit policy rules.", "note": "granularity: account-only; cost: no; OneCLI bills by subscription plan (Free/Team/Scale) based on fixed agent count and human seats, with no resource metering. The API reference includes 70+ endpoints but no usage/billing endpoints. Rate-limit policy rules allow capping per-agent usage, but there is no programmatic API to retrieve billable usage data per sandbox, per tag, or per project. Usage visibility is dashboard-only (activity log) with no exportable usage metrics API.", "confidence": "high", "checked": "2026-10-01" }, "persist_scope": { "value": "folder", "source": "https://onecli.sh/docs/how-it-works.md", "quote": "idle sandboxes are parked to free resources ... The runner ... boots or wakes the agent's sandbox. The sandbox has a durable workspace volume that survives park and wake.", "note": "Only /workspace survives a stop; the rest of the filesystem (packages installed elsewhere) resets.", "checked": "2026-10-01" } }, "locations": [], "locations_source": "https://onecli.sh/docs/self-hosting/overview.md", "locations_quote": "If you don't need to run in your own infrastructure, OneCLI Cloud is the fastest way to use OneCLI: no operations work, and it's always up to date.", "locations_checked": "2026-10-01" }