Complete documentation for The Construct CLI.
- Installation - Get started with Construct
- Configuration - Configure all settings
- Security - Security features and best practices
- Host Exec Bridge - Proxy host-only binaries into the sandbox
- README - Project overview and quick start
-
- Platform-specific instructions
- Container runtime setup
- Post-installation verification
-
- Runtime settings
- Network modes
- Security options
- Provider configuration
-
- Container isolation
- Secret redaction (experimental)
- Security best practices
Hide Secrets Mode - Complete guide
Prevents LLM agents from accessing raw secrets in your project:
- File redaction (
.env, config files, credentials) - Environment variable masking
- Isolated workspace (OverlayFS/APFS)
- Stream-time output masking
Providers Guide - Configure custom Claude endpoints
Supported providers:
- Zai GLM
- MiniMax M2
- Kimi K2
- Qwen
- Mimo
- And more...
Packages Guide - Customize your sandbox
Install additional packages:
- apt (Debian/Ubuntu)
- brew (Homebrew)
- bun (Bun package manager)
- npm (Node.js)
- pip (Python)
Architecture Design - Technical internals
- System architecture
- Component interactions
- Security model
- Performance considerations
- Extension points
Clipboard Bridge - Clipboard integration
- Text and image paste support
- Per-agent compatibility
- Platform-specific behavior
- Troubleshooting
Development Guide - Contributing to Construct
- Build from source
- Run tests
- Code organization
- Pull request process
Contributing Guidelines - Contribution standards
- Code style guidelines
- Commit message conventions
- Issue reporting
- Feature requests
Security Guide - Complete security reference
Topics covered:
- Container isolation
- User permissions
- Filesystem boundaries
- Network isolation
- Build integrity
Hide Secrets Mode - User guide for experimental feature
- Quick start guide
- Configuration options
- Use cases and examples
- Troubleshooting
- Limitations and future enhancements
Configuration Guide - Complete reference
All settings explained:
- Runtime configuration
- Sandbox options
- Network isolation
- Security settings
- Agent configuration
- Daemon settings
- Provider setup
- Package management
Installation Guide - Detailed installation instructions
- macOS (native runtime, Docker Desktop, OrbStack)
- Linux (Podman, Docker)
- Windows (WSL2)
- Troubleshooting
- Uninstallation
| Document | Description |
|---|---|
| README | Project overview, highlights, quick start |
| Installation | Platform-specific installation guide |
| Configuration | Complete configuration reference |
| Security | Security features and best practices |
| Hide Secrets | Secret redaction user guide |
| Providers | Custom Claude API endpoints |
| Packages | User-defined package management |
| Architecture | Technical design and internals |
| Clipboard | Clipboard integration details |
| Development | Contributing and development |
| Contributing | Contribution guidelines |
construct --help # Show all commands
construct sys doctor # System health check
construct sys config # Edit configuration
construct sys exec -- <cmd> # Run command inside container- Full docs: docs/
- Project README: ../README.md
- GitHub Issues: Report issues
- GitHub Discussions: Ask questions
Installation:
curl -fsSL https://raw.githubusercontent.com/EstebanForge/construct-cli/main/scripts/install.sh | bashFirst run:
construct sys initRun agent:
construct claude "Help me with this code"Configuration:
construct sys config # Opens config in editor