@picco-agent/runtime-bwrap
v0.1.0
Published
Picco bubblewrap runtime: per-session Linux filesystem isolation for pi sessions.
Readme
@picco-agent/runtime-bwrap
bubblewrap sandbox runtime for picco. Each session runs in an isolated Linux namespace with read-only system mounts and a per-session writable working directory.
Install
npm install @picco-agent/core @picco-agent/runtime-bwrapRequires bubblewrap ≥ 0.8 on Linux.
Usage
import { createAgent } from "@picco-agent/core";
import { bwrap } from "@picco-agent/runtime-bwrap";
const agent = createAgent({
name: "assistant",
runtime: bwrap({
mounts: ["/home/me/notes", { source: "/some/tree", mode: "ro" }],
}),
});