koda-cli 0.2.10

A high-performance AI coding agent for macOS and Linux
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

# koda-cli

CLI frontend for the [Koda](https://github.com/lijunzh/koda) AI coding agent.

Built with [ratatui](https://ratatui.rs/) for an inline TUI experience —
streaming markdown, tab completion, diff previews, and approval widgets
without ever leaving the terminal.

## Install

```bash
cargo install koda-cli
```

On first run, an onboarding wizard guides you through provider and API key setup.

## Quick start

```bash
koda                              # Interactive REPL
koda --provider anthropic         # Use a cloud provider
koda -p "fix the bug in auth.rs"  # Headless one-shot
koda server --stdio               # ACP server for editor integration
```

## Approval modes

Cycle with `Shift+Tab`:

| Mode | Behavior |
|------|----------|
| **Auto** | Local mutations auto-approved, destructive ops need confirmation |
| **Confirm** | Every non-read action requires confirmation |

## Sandbox

Opt-in process sandboxing restricts what the Bash tool can do:

```bash
# Restrict writes to project dir + /tmp
koda --sandbox project

# + block reads to credential dirs (~/.ssh, ~/.aws, ~/.gnupg, …)
koda --sandbox strict

# Via environment variable
export KODA_SANDBOX=strict
```

macOS uses `sandbox-exec` (seatbelt); Linux uses `bwrap` (bubblewrap).
Sub-agents inherit the parent’s sandbox mode and can never run weaker.
See the [sandbox reference](https://lijunzh.github.io/koda/sandbox.html)
for the full list of protected paths.

See the [User Manual](https://lijunzh.github.io/koda/) for full documentation.

## License

MIT