gondolin

Everything you want to add can be made as an extension, and pi has many ready extension to be added. For example, Sandbox: `https://github.com/earendil-works/gondolin` The sandbox extension is at https://github.com/earendil-works/pi/tree/main/packages/codi... And the extension at `https://github.com/earendil-works/pi/tree/main/packages/codi...` Which can also be found under `/@earendil-works/pi-coding-agent/examples/extensions/gondolin` at the npm modules In case of omp, not sure if it's already at the node module package but you can just grab it from the links I shared and set it up.

https://github.com/earendil-works/gondolin/issues/115 for once

I'd say it's not ready for prime time yet unfortunately: https://github.com/earendil-works/gondolin/issues/115

https://github.com/earendil-works/gondolin is another project addressing a similar use-case.

I’ve been tinkering with Gondolin, a micro-vm agent sandbox. Here’s an example config: https://github.com/earendil-works/gondolin/blob/main/host/ex...

this won't solve the problem. Instead you need to do what hardsnow is doing: https://news.ycombinator.com/item?id=47133573 Or what the https://github.com/earendil-works/gondolin is doing

I've been collecting a list of sandboxing related projects as well, some lower level than others. I wish I had time to evaluate them all: - https://github.com/jingkaihe/matchlock - https://github.com/mishushakov/libkrun-go - https://github.com/earendil-works/gondolin - https://github.com/butter-dot-dev/bvisor - https://github.com/amlalabs/amla-sandbox - https://github.com/eryx-org/eryx - https://github.com/containers/bubblewrap (not new) - https://github.com/coplane/localsandbox - https://github.com/sd2k/conch - https://github.com/Gerharddc/litterbox - https://github.com/finbarr/yolobox - https://github.com/coventry/sandbox-codex - https://github.com/osks/ctenv - https://github.com/tianon/gosu - https://github.com/colony-2/shai - https://github.com/rcarmo/agentbox - https://github.com/coder/httpjail - https://github.com/bytecodealliance/c

So like… a container or a VM? > if it tried I would get a popup Ok, that's not implemented yet but using a custom FUSE-based file system (or using something like Armin Rohnacher's new sandboxing solution[0]) it shouldn't be too hard. I bet you could ask Claude to write that. :) [0]: https://github.com/earendil-works/gondolin

There are a lot of options in this space. Armin Ronacher is working on Gondolin (https://github.com/earendil-works/gondolin) for example. I built agentd as a layer in front of this stuff so you can expose secure shell capabilities over the network as a tool rather than baking it into the harness, or running the harness in that environment.