Agent-native desktop terminal for working with the most powerful LLMs.
ROX.ONE is a beautiful, document-centric workspace for AI agents. Multi-session inbox, instant connections to any API or MCP server, fluid UI, no CLI required. Built on the Claude Agent SDK and the Pi SDK.
We build ROX.ONE with ROX.ONE.
v2 cycle (2026-05-21+). Active feature work flows through the 40-worktree parallel harness. v1 install instructions below are unchanged. Contributors: see
wt-meta/scaffold-ownership.yamlanddocs/superpowers/specs/2026-05-21-rox-one-parallel-worktree-harness-master.md.
Visible coordination banner, keep until 2026-05-19 23:59 UTC. Main history was rewritten for the R.11 rebrand cleanup. Existing clones must realign before new work:
git fetch origin --prune
git switch main
git reset --hard origin/mainCherry-pick any local-only commits onto the new main after the reset.
Note on code signing. ROX.ONE is currently distributed as ad-hoc-signed builds (no Apple Developer Program / Windows EV certificate). The install scripts below handle the OS trust prompts automatically and are the recommended path. Direct DMG/EXE downloads work too, but require a manual one-time bypass — see Manual install fallback below.
macOS / Linux — recommended (auto-handles macOS quarantine):
curl -fsSL https://app.rox.one/install-app.sh | bashWindows (PowerShell) — recommended (auto-unblocks downloaded EXE):
irm https://app.rox.one/install-app.ps1 | iexFrom source
git clone https://github.com/agisota/rox.one.git
cd rox.one
bun install
bun run electron:startThe source tree lives at the repository root. To smoke-test the bundled CLI from the checkout:
alias rox-cli="bun run $(pwd)/apps/cli/src/index.ts"
rox-cli pingIf you prefer to download the installer directly from the Releases page:
- macOS: double-clicking the
.dmgwill trigger Gatekeeper because the build is not notarized. Either:- Right-click → Open the first time, then click Open in the dialog, or
- Run
xattr -dr com.apple.quarantine /Applications/ROX.ONE.appafter dragging it to Applications.
- Windows: SmartScreen will flag the unsigned
.exe. Click More info → Run anyway. - Linux: AppImage /
.deb/.rpmwork without bypasses; ensure FUSE is installed for AppImage. On first launch the launcher will prompt forsudoto set the SUID bit onchrome-sandbox— this is a security feature (not malware) that enables Chromium's renderer sandbox; without it any renderer exploit becomes a full host compromise.
- macOS: Monterey 12.0 or newer is the build target (Monterey, Ventura, Sonoma, Sequoia, Tahoe). Apple silicon (arm64) and Intel (x64) are both supported. CI coverage is currently macOS 14 (Sonoma) + 15 (Sequoia) only — Monterey/Ventura are nominally supported (binary will install) but not automatically smoke-tested. Issues on 12/13 are best-effort fix.
- Windows: Windows 10 (1809) or newer; Windows 11 recommended. First launch shows a SmartScreen warning because builds are self-signed — click More info → Run anyway once.
- Linux: any glibc-based distribution with GTK 3 and
libnss3. Native packages for Ubuntu 22.04+/24.04, Debian 12, Fedora 40 (DEB/RPM) plus an AppImage that runs on most distros. NixOS users can install via the bundled flake.
- Multi-session inbox with status workflow, flagging, and AI-named sessions
- Multiple providers — Anthropic, Google AI Studio, ChatGPT Plus, GitHub Copilot, OpenAI
- Sources — connect any MCP server, REST API, or local filesystem in one prompt
- Skills — specialized agent instructions per workspace
- Permission modes — Explore, Ask to Edit, Auto, with custom rules
- Background tasks, event-driven automations, app-level theme (light/dark)
- Multi-file diff viewer
- Drag-drop attachments — images, PDFs, Office documents
- Launch the app
- Pick a provider (Anthropic, Google, OpenAI, GitHub Copilot…)
- Create a workspace
- Add a source — just describe it ("add Linear", "add Slack")
- Start a session
ROX.ONE descends from the Apache-2.0 upstream at https://github.com/lukilabs/rox-agents-oss. License and notice attribution are preserved in LICENSE, NOTICE, and TRADEMARK.md.
Apache 2.0 — see LICENSE.