A simulated bash environment with an in-memory virtual filesystem, written in TypeScript.
Designed for AI agents that need a secure, sandboxed bash environment.
Supports optional network access via curl with secure-by-default URL filtering.
Note: This is beta software. Use at your own risk and please provide feedback.
Table of Contents
Security model
The shell only has access to the provided file system.
Execution is protected against infinite loops or recursion. However, Bash is not fully robust against DOS from input. If you need to be robust against this, use process isolation at the OS level.
Binaries or even WASM are inherently unsupported (Use Vercel Sandbox or a similar product if a full VM is needed).
There is no network access by default.
... continue reading