@bookingcare/infa

Sandbox execution for process-isolated agent tools with resource limits.

Installation

pnpm add @bookingcare/infa

Usage

import { createSandbox } from "@bookingcare/infa";

const sandbox = createSandbox({
  kind: "local",
  workdir: "/workspace",
  timeout: 30_000,
  maxOutput: 1024 * 1024,
  env: {
    PATH: "/usr/local/bin:/usr/bin:/bin",
  },
});

const result = await sandbox.exec("echo hello");

Sandboxed processes do not inherit the parent environment. Pass a safe PATH (and on Windows, SystemRoot/ComSpec) in env when commands need external binaries.

Sandbox also exposes readFile(), writeFile(), and editFile() for workspace-scoped file operations.