AI沙盒

Usage

The quickest way to get started is with a flake template. If you prefer a shell.nix, see shells/ for ready-to-use examples. Authentication is covered below.

Environment variable tokens (recommended)

Export your token in the host terminal before launching the sandbox — tokens are evaluated at runtime to prevent them from leaking into the Nix store:

```

mirror your agent's config

bash-sandboxed = sandbox.mkSandbox { pkg = pkgs.bashInteractive; binName = "bash"; outName = "bash-sandboxed"; allowedPackages = [ pkgs.coreutils ]; stateDirs = [ "$HOME/.claude" ]; stateFiles = []; restrictNetwork = true; allowedDomains = { "httpbin.org" = "*"; }; };

Running `bash-sandboxed` drops you into a shell with exactly the same filesystem view and restrictions your agent will see. Try:

See [`debug/bash.shell.nix`](debug/bash.shell.nix) for a ready-to-use template (has `restrictNetwork = true` with `httpbin.org` allowed for testing).

**Network issues:** If `restrictNetwork = true` and requests are failing, check which domains are being blocked:

You may need to add them to `allowedDomains`.

**macOS:** after a failure, you can query the system log for sandbox denials:

If you are unable to debug, or suspect the AI can't access a file or folder it should have access to by default, please raise an issue.