{"_id":"@vscode/sandbox-runtime","_rev":"2-566662b04e9ff649d5e0e2211564a39a","name":"@vscode/sandbox-runtime","dist-tags":{"latest":"0.0.1"},"versions":{"0.0.49-dev":{"name":"@vscode/sandbox-runtime","version":"0.0.49-dev","keywords":["sandbox","seatbelt","sandbox-exec","anthropic","claude","security","bubblewrap","network-filtering","filesystem-restrictions"],"author":{"name":"Anthropic PBC"},"license":"Apache-2.0","_id":"@vscode/sandbox-runtime@0.0.49-dev","maintainers":[{"name":"vscode-bot","email":"vscode-bot-npm@microsoft.com"},{"name":"microsoft1es","email":"npmjs@microsoft.com"}],"homepage":"https://github.com/anthropic-experimental/sandbox-runtime#readme","bugs":{"url":"https://github.com/anthropic-experimental/sandbox-runtime/issues"},"bin":{"srt":"dist/cli.js"},"tag":"latest","dist":{"shasum":"43eb91a569caa0ae90d0a53d1732b12d7b0ec666","tarball":"https://registry.npmjs.org/@vscode/sandbox-runtime/-/sandbox-runtime-0.0.49-dev.tgz","fileCount":79,"integrity":"sha512-9XellKxWsniM48hJLMKzKFA0SW2gJUS1vl6qnfrWcVb/zAPAY+U5/Ykkj3MIv2DG82DLZI6RdBQ7rYgc5wupJQ==","signatures":[{"sig":"MEUCIE0N8S6FfQ/7I3Yv476L0lQFkqivGKLKDpX4+mOb8vZeAiEAnN1dA8XNatZmGvzEka5RhYUOlZpm+fmKjix7qr0JiLw=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1268908},"main":"./dist/index.js","type":"module","_from":"file:M:\\SvcFab\\_App\\MS.Ess.PackageManager.Publisher_App2\\temp\\f0529330-a437-44be-be6e-bfb3451c9267\\vscode-sandbox-runtime-0.0.49-dev.tgz","types":"./dist/index.d.ts","engines":{"node":">=18.0.0"},"scripts":{"lint":"eslint 'src/**/*.ts' --fix --cache --cache-location=node_modules/.cache/.eslintcache","test":"bun test","build":"tsc","clean":"rm -rf dist","format":"prettier --write 'src/**/*.ts' --cache --log-level warn","prepare":"husky","typecheck":"tsc --noEmit","lint:check":"eslint 'src/**/*.ts' --cache --cache-location=node_modules/.cache/.eslintcache","build:seccomp":"bun vendor/seccomp/build.ts","prepublishOnly":"npm run clean && npm run build && cp -r vendor dist/"},"_npmUser":{"name":"microsoft1es","email":"npmjs@microsoft.com"},"_resolved":"M:\\SvcFab\\_App\\MS.Ess.PackageManager.Publisher_App2\\temp\\f0529330-a437-44be-be6e-bfb3451c9267\\vscode-sandbox-runtime-0.0.49-dev.tgz","_integrity":"sha512-9XellKxWsniM48hJLMKzKFA0SW2gJUS1vl6qnfrWcVb/zAPAY+U5/Ykkj3MIv2DG82DLZI6RdBQ7rYgc5wupJQ==","repository":{"url":"git+https://github.com/anthropic-experimental/sandbox-runtime.git","type":"git"},"description":"Anthropic Sandbox Runtime (ASRT) - A general-purpose tool for wrapping security boundaries around arbitrary processes","directories":{},"lint-staged":{"*.ts":["eslint --fix --cache --cache-location=node_modules/.cache/.eslintcache","prettier --write"]},"_nodeVersion":"18.5.0","dependencies":{"zod":"^3.24.1","commander":"^12.1.0","shell-quote":"^1.8.3","@pondwader/socks5-server":"^1.0.10"},"_hasShrinkwrap":false,"devDependencies":{"husky":"^9.1.7","eslint":"^9.14.0","globals":"^15.12.0","prettier":"3.3.3","@eslint/js":"^9.14.0","@types/bun":"^1.3.2","typescript":"^5.6.3","@types/node":"^18","lint-staged":"^16.2.6","eslint-plugin-n":"^17.16.2","typescript-eslint":"^8.13.0","@types/shell-quote":"^1.7.5","eslint-plugin-import":"^2.31.0","eslint-config-prettier":"^8.10.0","eslint-plugin-prettier":"^5.1.3","eslint-import-resolver-typescript":"^3.6.3"},"_npmOperationalInternal":{"tmp":"tmp/sandbox-runtime_0.0.49-dev_1777674564136_0.047492683296060045","host":"s3://npm-registry-packages-npm-production"}},"0.0.1":{"name":"@vscode/sandbox-runtime","version":"0.0.1","description":"A general-purpose tool for wrapping security boundaries around arbitrary processes.","type":"module","main":"./dist/index.js","types":"./dist/index.d.ts","bin":{"srt":"dist/cli.js"},"engines":{"node":">=18.0.0"},"scripts":{"build":"tsc","build:seccomp":"bun vendor/seccomp/build.ts","clean":"rm -rf dist","test":"bun test","typecheck":"tsc --noEmit","lint":"eslint 'src/**/*.ts' --fix --cache --cache-location=node_modules/.cache/.eslintcache","lint:check":"eslint 'src/**/*.ts' --cache --cache-location=node_modules/.cache/.eslintcache","format":"prettier --write 'src/**/*.ts' --cache --log-level warn","prepublishOnly":"npm run clean && npm run build && cp -r vendor dist/","prepare":"husky"},"dependencies":{"@pondwader/socks5-server":"^1.0.10","commander":"^12.1.0","shell-quote":"^1.8.3","zod":"^3.24.1"},"devDependencies":{"@eslint/js":"^9.14.0","@types/bun":"^1.3.2","@types/node":"^18","@types/shell-quote":"^1.7.5","eslint":"^9.14.0","eslint-config-prettier":"^8.10.0","eslint-import-resolver-typescript":"^3.6.3","eslint-plugin-import":"^2.31.0","eslint-plugin-n":"^17.16.2","eslint-plugin-prettier":"^5.1.3","globals":"^15.12.0","husky":"^9.1.7","lint-staged":"^16.2.6","prettier":"3.3.3","typescript":"^5.6.3","typescript-eslint":"^8.13.0"},"keywords":["sandbox","seatbelt","sandbox-exec","anthropic","claude","security","bubblewrap","network-filtering","filesystem-restrictions"],"author":{"name":"Anthropic PBC"},"license":"Apache-2.0","repository":{"type":"git","url":"git+https://github.com/anthropic-experimental/sandbox-runtime.git"},"bugs":{"url":"https://github.com/anthropic-experimental/sandbox-runtime/issues"},"homepage":"https://github.com/anthropic-experimental/sandbox-runtime#readme","lint-staged":{"*.ts":["eslint --fix --cache --cache-location=node_modules/.cache/.eslintcache","prettier --write"]},"_id":"@vscode/sandbox-runtime@0.0.1","_integrity":"sha512-Jy3iKmNXGD1HcLJkT3YS2l+n5S7H41buvMsZER/EC3nx24fSu1vhg1y9RDzLDwq7wEh7CZTEJBwRcYjV9OAFvQ==","_resolved":"M:\\SvcFab\\_App\\MS.Ess.PackageManager.Publisher_App2\\temp\\86a1f9de-b447-42ad-84f6-ab7e31883aad\\vscode-sandbox-runtime-0.0.1.tgz","_from":"file:M:\\SvcFab\\_App\\MS.Ess.PackageManager.Publisher_App2\\temp\\86a1f9de-b447-42ad-84f6-ab7e31883aad\\vscode-sandbox-runtime-0.0.1.tgz","tag":"latest","_nodeVersion":"18.5.0","dist":{"integrity":"sha512-Jy3iKmNXGD1HcLJkT3YS2l+n5S7H41buvMsZER/EC3nx24fSu1vhg1y9RDzLDwq7wEh7CZTEJBwRcYjV9OAFvQ==","shasum":"1e75f44119874f7fd9f044397a6c341fddd5cfb3","tarball":"https://registry.npmjs.org/@vscode/sandbox-runtime/-/sandbox-runtime-0.0.1.tgz","fileCount":79,"unpackedSize":1244804,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCICDJELFXTcF2+Yx0ryCsvr/yJsV0JQneqLe+TONU3BgYAiEAtcVVewE/DY3SxlFP2QQnnVuhmP3VDy47m5nttO/eBno="}]},"_npmUser":{"name":"microsoft1es","email":"npmjs@microsoft.com"},"directories":{},"maintainers":[{"name":"vscode-bot","email":"vscode-bot-npm@microsoft.com"},{"name":"microsoft1es","email":"npmjs@microsoft.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/sandbox-runtime_0.0.1_1777766463459_0.7583539192483368"},"_hasShrinkwrap":false}},"time":{"created":"2026-05-01T22:29:24.060Z","modified":"2026-05-03T00:01:03.802Z","0.0.49-dev":"2026-05-01T22:29:24.375Z","0.0.1":"2026-05-03T00:01:03.642Z"},"bugs":{"url":"https://github.com/anthropic-experimental/sandbox-runtime/issues"},"author":{"name":"Anthropic PBC"},"license":"Apache-2.0","homepage":"https://github.com/anthropic-experimental/sandbox-runtime#readme","keywords":["sandbox","seatbelt","sandbox-exec","anthropic","claude","security","bubblewrap","network-filtering","filesystem-restrictions"],"repository":{"type":"git","url":"git+https://github.com/anthropic-experimental/sandbox-runtime.git"},"description":"A general-purpose tool for wrapping security boundaries around arbitrary processes.","maintainers":[{"name":"vscode-bot","email":"vscode-bot-npm@microsoft.com"},{"name":"microsoft1es","email":"npmjs@microsoft.com"}],"readme":"# vscode-sandbox-runtime\n\nThis is an npm module and CLI for applying OS-level filesystem and network restrictions to arbitrary processes. This repository is a fork of [Anthropic Sandbox Runtime](https://github.com/anthropic-experimental/sandbox-runtime), adapted for VS Code packaging and distribution.\n\n## How it works\n\n- Install the `@vscode/sandbox-runtime` package as a dependency or global CLI.\n- Configure filesystem and network restrictions in `~/.srt-settings.json`, or pass a custom configuration with `srt --settings <path>`.\n- Run commands through the `srt` CLI, or use the exported `SandboxManager` API to wrap commands programmatically.\n- The runtime applies native sandboxing primitives: `sandbox-exec` on macOS and `bubblewrap`/seccomp-based isolation on Linux.\n- Network access is mediated through local HTTP and SOCKS proxy helpers so allowed and denied domains can be enforced for the sandboxed process tree.\n\n## Usage example\n\nInstall the package and run a command through the sandbox:\n\n```bash\nnpm install -g @vscode/sandbox-runtime\n\ncat > ~/.srt-settings.json <<'JSON'\n{\n  \"network\": {\n    \"allowedDomains\": [\"example.com\"],\n    \"deniedDomains\": []\n  },\n  \"filesystem\": {\n    \"denyRead\": [\"~/.ssh\"],\n    \"allowRead\": [],\n    \"allowWrite\": [\".\"],\n    \"denyWrite\": [\".env\"]\n  }\n}\nJSON\n\nsrt \"curl https://example.com\"\n```\n\nUse the package from Node.js or TypeScript:\n\n```ts\nimport { SandboxManager, type SandboxRuntimeConfig } from '@vscode/sandbox-runtime'\nimport { spawn } from 'node:child_process'\n\nconst config: SandboxRuntimeConfig = {\n  network: {\n    allowedDomains: ['example.com'],\n    deniedDomains: [],\n  },\n  filesystem: {\n    denyRead: ['~/.ssh'],\n    allowRead: [],\n    allowWrite: ['.'],\n    denyWrite: ['.env'],\n  },\n}\n\nawait SandboxManager.initialize(config)\n\nconst command = await SandboxManager.wrapWithSandbox('curl https://example.com')\nconst child = spawn(command, { shell: true, stdio: 'inherit' })\n\nchild.on('exit', async () => {\n  await SandboxManager.reset()\n})\n```\n\n## Contributing\n\nThis project welcomes contributions and suggestions. Most contributions require\nyou to agree to a Contributor License Agreement (CLA) declaring that you have\nthe right to, and actually do, grant us the rights to use your contribution. For\ndetails, visit [https://cla.opensource.microsoft.com](https://cla.opensource.microsoft.com/).\n\nWhen you submit a pull request, a CLA bot will automatically determine whether\nyou need to provide a CLA and decorate the PR appropriately (e.g., status check,\ncomment). Simply follow the instructions provided by the bot. You will only need\nto do this once across all repos using our CLA.\n\nThis project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/). For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.\n\n## Trademarks\n\nThis project may contain trademarks or logos for projects, products, or\nservices. Authorized use of Microsoft trademarks or logos is subject to and must follow [Microsoft's Trademark & Brand Guidelines](https://www.microsoft.com/en-us/legal/intellectualproperty/trademarks/usage/general). Use of Microsoft trademarks or logos in modified versions of this project must\nnot cause confusion or imply Microsoft sponsorship. Any use of third-party\ntrademarks or logos are subject to those third-party's policies.\n","readmeFilename":"README.md"}