Codestin Search App

One app, one room.

A room is a directory

A backend, a git history, a sandbox. mv renames it, cp -r forks it.

Work happens inside

Open its terminal in the browser. Edit it live, or hand it to an agent.

Doors are grants

Another app, the network, a GPU: reached only after the owner approves.

State stays behind the desk

Code and live state run in separate sandboxes; state answers only to the app's API.

apps/dashboard · terminal

$ bx new apps/dashboard --runtime go
$ bx term apps/dashboard
  ~/apps/dashboard $ claude "add a p95 latency card"
$ bx grant apps/dashboard res:apps/db reader
✓ live · sandboxed · versioned · backed up

Who works here.

Ops canrun the nightly report on a schedule.

Sales cankeep a CRM that reads the team mailbox.

Finance canpublish a dashboard behind SSO and TLS.

Engineering cangive an agent a sandbox with a GPU.

IT cansee the workspace exactly as any user sees it.

An agent canrebuild an app from a prompt, inside its own room.

See it happen

a paste bin gains uploads

a browser terminal opened on apps/mempaste, running an agent; the prompt asks for file uploads up to 100MB — 1Ask for file uploads.

the agent's diff and summary: backend and frontend updated, verified end-to-end, committed — 2The agent edits, tests, commits.

the mempaste app after the change: an Upload file button next to Add paste — 3Live, no deploy step.

From an empty room

a calendar, one prompt

the new empty home-calendar app with a terminal below it; the prompt describes the calendar to build — 1Point an agent at an empty room.

the agent reports the app built, tested end-to-end, and committed — 2Built, tested, committed.

the home-calendar app in use: a Buy Groceries task on the calendar and in the task list — 3A working app, minutes later.

IT holds the keys.

Identity and roles

Users and orgs. Invite-only accounts. SSO: Google, Okta, Entra, Keycloak, authentik, GitHub. Viewer, developer, admin.

Grants and network policy

Default-deny between apps. Network sets per org. Publishing is an explicit bind, behind your TLS.

Sandboxed by the kernel

Rootless namespaces, seccomp, landlock, a read-only base image, resource limits per app.

Secrets, backups, audit

An encrypted vault per app. Scheduled backups to any S3. Every approval in the audit log.

Run it yourself.

One binary on any Linux box. The installer prints its plan and asks first. On macOS it sets up a Lima VM.

$ curl -fsSL https://xbin.dev/install.sh | sh

tailscale serve 127.0.0.1:8642

An office for your agents.