Quick Start

Quick Start

Get from zero to a working air-gapped workspace in about five minutes.

Prerequisites

• macOS (Windows planned for v0.0.4)
• Box Drive desktop app installed and signed in
• A Claude Code or Claude Cowork host

The plugin uses only the local Box Drive mount. It will never make a network call to Box during skill execution — that's the structural air-gap claim.

Install Box Drive (if not already)

1. Download from https://www.box.com/drive
2. Sign in with your Box account
3. Confirm the mount works: ls ~/Library/CloudStorage/Box-Box/ should show your Box content
4. Confirm FileVault is enabled (fdesetup status should report "FileVault is On") for the disk-encryption boundary

Install the plugin

mkdir -p ~/.claude/plugins/box-memory-onprem
curl -L -o /tmp/plugin.zip \
  https://github.com/mrdulasolutions/BOX-Onprem/releases/latest/download/box-memory-onprem-plugin.zip
unzip -o /tmp/plugin.zip -d ~/.claude/plugins/box-memory-onprem/

Or upload to Cowork via Settings → Plugins → Add plugin.

Verify Box Drive is detected

/box-drive-detect

The skill probes the mount path, writability, Box Drive process, and account email. If any check fails, it surfaces a clean error pointing at the fix (install Box Drive, sign in, etc.). It will not silently fall back to a network path.

Confirm trust posture

/box-airgap-status

Enumerates:

• Box data path: CLOSED via Box Drive
• Disk encryption: ON / OFF / unknown
• LLM provider: ask once per session, cache
• Trust boundary summary

Capture this output as a per-session audit artifact for compliance-sensitive workflows.

Bootstrap a workspace

/box-init my-workspace

Creates folders at ~/Library/CloudStorage/Box-Box/my-workspace/. Writes _box-memory.json and _index.json locally. Box Drive syncs to Box cloud on its own schedule.

Optional flags:

• --team=<name> — add a team subtree
• --parent=<relative-path> — workspace under a non-root path

Write a memory

/box-write We decided to use JWT instead of sessions because of mobile.

Memory file written locally. Index updated locally. Sync to cloud happens later (Box Drive's schedule).

Recall it

/box-recall jwt

Local _index.json lookup. Sub-second. No network, no AI Units.

Companion a binary

/box-companion files/contract.pdf

If PDF text extraction is available locally (e.g., via pdftotext or built-in agent capability), the agent reads + describes. If not, generates a sparse companion noting what wasn't parsed. Box AI Extract is not available in this variant — see Air-Gap Trust Model for why.

Next steps

• Architecture — the air-gap design rationale
• Compliance by Deployment — which regulatory regime fits which deployment
• Air-Gap Trust Model — full trust-boundary breakdown
• Supported LLM Configurations — pick an LLM that matches your compliance regime
• Security Layers — the 5-layer supply-chain hygiene model