Danila Poyarkov 4751ebddbd feat(extensions): add sandbox extension for OS-level bash sandboxing (#673) ...

Uses @anthropic-ai/sandbox-runtime to enforce filesystem and network
restrictions on bash commands (sandbox-exec on macOS, bubblewrap on Linux).

Features:
- Per-project config via .pi/sandbox.json
- Global config via ~/.pi/agent/sandbox.json
- Enabled by default with sensible defaults
- --no-sandbox flag to disable
- /sandbox command to view current config

4751ebddbd · 2026-01-12 23:25:31 +01:00

History

..

.gitignore

feat(extensions): add sandbox extension for OS-level bash sandboxing (#673)

2026-01-12 23:25:31 +01:00

index.ts

feat(extensions): add sandbox extension for OS-level bash sandboxing (#673)

2026-01-12 23:25:31 +01:00

package-lock.json

feat(extensions): add sandbox extension for OS-level bash sandboxing (#673)

2026-01-12 23:25:31 +01:00

package.json

feat(extensions): add sandbox extension for OS-level bash sandboxing (#673)

2026-01-12 23:25:31 +01:00