Run Factory CLI in a network-locked container. All outbound traffic is routed through an enforcing proxy that applies the project's network policy.
See the main README for installation, architecture overview, and configuration options.
After running agentbox init (selecting "factory") and starting the sandbox, authenticate Factory CLI on first run.
Factory CLI supports OAuth authentication. Run the login command inside the container. This typically displays a URL and a code to enter in your browser.
Credentials persist in a Docker volume. You only need to do this once per project.
Inside the container:
factory
# or auto-approve mode:
factory --skip-permissions-unsafeAfterward, for CLI mode, stop the container:
agentbox compose down