pi-sandbox

ProGovernanceFSL-1.1-ALv2

OS-level isolation. The agent can only touch what you've explicitly allowed - paths, domains, and operations.

Capabilities

System-level enforcement - Bubblewrap + seccomp on Linux, sandbox-exec on macOS.
Permission gate per command, with path and domain allowlists applied to every shell execution.
Per-project policy keyed by working directory.
Inline approval prompts in your terminal for new domains or paths.

Requirements

Linux: bubblewrap.
macOS: built-in sandbox-exec (no install needed).

Installation Instructions

Install the whole bundle

npx --yes @bastilleworks/bastille-install bastilleworks-pro-<version>.tgz

Or install this module only

npx --yes @bastilleworks/bastille-install bastilleworks-pi-sandbox-<version>.tgz

The installer fetches @bastilleworks/shared from public npm automatically. Replace <version> with the version you downloaded.

Usage Instructions

Pi command

/sandbox

Configuration lives in ~/.pi/agent/sandbox/ - default.json for fallback policy, projects.json for per-project overrides. Project lookup is longest-prefix match on the canonicalized working directory.

Uninstall

Uninstall this extension

pi uninstall npm:@bastilleworks/pi-sandbox

Or uninstall the entire bundle

npx --yes @bastilleworks/bastille-install uninstall bastilleworks-pro-<version>.tgz

Notes

Requires a valid Polar license.

All modules