Local Commands in the OS Sandbox

import { LocalWorkspace, loadSandboxPolicy, workspaceTools } from '@cogitator-ai/core';
import { OsSandbox } from '@cogitator-ai/sandbox';
import type { WorkspaceExecResult } from '@cogitator-ai/types';

const availability = await OsSandbox.probe();
if (!availability.available) throw new Error(`No OS sandbox here: ${availability.reason}`);

const root = './project';
const { policy } = await loadSandboxPolicy(root);
const sandbox = new OsSandbox({
  policy: policy.enabled ? policy : { network: { allowedDomains: ['registry.npmjs.org'] } },
});
const workspace = new LocalWorkspace({ root, exec: { sandbox } });
await workspace.start();

const [runCommand, deleteFile] = workspaceTools(workspace, {
  tools: ['run_command', 'delete_file'],
});
const context = { agentId: 'demo', runId: 'demo', signal: new AbortController().signal };

for (const command of ['echo ok > ok.txt', 'echo no > ~/escape.txt', 'curl -s https://example.com']) {
  const result = (await runCommand.execute({ command }, context)) as WorkspaceExecResult;
  console.log(command, '->', result.exitCode, result.sandbox?.violations);
}

await deleteFile.execute({ path: 'ok.txt' }, context);
const [entry] = await workspace.listTrash();
await workspace.restoreFromTrash(entry.id);

await workspace.dispose();
await sandbox.dispose();

pnpm add @cogitator-ai/core @cogitator-ai/sandbox
Linux only: apt-get install bubblewrap socat

npx tsx os-sandbox.ts

npx tsx examples/infrastructure/08-os-sandbox.ts