Documentation

Everything you need to get bx running and connected.

Installation

macOS / Linux

curl -sSL install.blax-cat.com | sh

Windows (PowerShell)

iwr install.blax-cat.com/install.ps1 | iex

Manual download

Download from install.blax-cat.com or GitHub releases.

FilePlatform
bx-darwin-arm64macOS — Apple Silicon
bx-darwin-amd64macOS — Intel
bx-linux-amd64Linux — x86_64
bx-linux-arm64Linux — ARM64
bx-windows-amd64.exeWindows (coming soon)

Sign in

Login is required to access sessions from the web or mobile client. Local tabs work without an account.

bx login
email: you@example.com
sending code…
enter 6-digit code: 482917
logged in as you@example.com

A 6-digit OTP is sent to your email via Resend. No password required. Rate limited to 10 requests per hour.

bx whoami   # show signed-in email
bx logout   # remove credentials

Quick start

# Start a session (auto-spawns the daemon)
bx

# List running sessions
bx list

# Reconnect to a session
bx attach blax-1

# Detach: press Ctrl+C

# Kill all sessions
bx kill-all
Local tabs work without login. Run bx login only when you need web/mobile access.

Commands

CommandDescription
bx / new [name]Start a new session. Auto-names if no name given.
bx listList active sessions. Aliases: ls, tabs
bx attach <name|id>Reconnect to an existing session.
bx sessionShow info about the current session (from inside).
bx rename <name|id> <new>Rename a session. Alias: mv
bx kill <name|id>Terminate a session.
bx kill-allTerminate all sessions.
bx loginSign in with email OTP.
bx logoutRemove stored credentials.
bx whoamiShow signed-in email.
bx updateDownload and install the latest version.
bx uninstallRemove bx binary and all data from this machine.
bx doctorDiagnose common issues.
bx versionPrint version.

Web client

Open app.blax-cat.com, sign in with your email, and your sessions appear automatically.

Mobile app

iOS and Android apps are in development. Use the web client from your mobile browser for now.

Uninstall

bx uninstall

Stops the daemon, removes all config/state directories, and deletes the binary. If you get a permission error on the binary removal, run with sudo:

sudo bx uninstall

What gets removed:

PathContents
~/.config/bx/Config file and credentials
~/.local/state/bx/Daemon log
~/.local/share/bx/Unix socket
/usr/local/bin/bxBinary

End-to-end encryption

All terminal data is encrypted before leaving your machine.

Key exchange:  X25519 ECDH (ephemeral keypair per connection)
Key derivation: HKDF-SHA256  →  32-byte AES key
Encryption:    AES-256-GCM  (random 12-byte nonce per frame)

bx daemon  ──[ciphertext only]──▶  relay  ──▶  client
The relay never sees plaintext. Even if the relay is compromised, terminal data remains private.

How it works

Your terminal
  └── bx daemon  ──── encrypted tunnel ────▶  relay
                                                 │
                                                 ▼
                                       Web / Mobile client

Daemon

Auto-spawned on first bx run. Keeps sessions alive after terminal close.

PathPurpose
$XDG_RUNTIME_DIR/bx/sockUnix socket (IPC)
~/.local/share/bx/sockFallback socket
~/.local/state/bx/daemon.logDaemon logs
~/.config/bx/credentialsAuth credentials (0600)
bx daemon  # start manually for debugging