{"_id":"agent-jail","_rev":"5-ad6d44fdcdde30a03a755ce19889b903","name":"agent-jail","dist-tags":{"latest":"0.5.0"},"versions":{"0.1.1":{"name":"agent-jail","version":"0.1.1","keywords":["sandbox","landlock","subprocess","security","isolation","agent","ai"],"license":"MIT","_id":"agent-jail@0.1.1","maintainers":[{"name":"miclivs","email":"livsmichael@gmail.com"}],"homepage":"https://github.com/Michaelliv/agent-jail","bugs":{"url":"https://github.com/Michaelliv/agent-jail/issues"},"os":["linux","darwin"],"bin":{"agent-jail":"bin/agent-jail.js"},"cpu":["x64","arm64"],"dist":{"shasum":"0b531858ca9001ee3cd7e2134ce9902d2abb01f4","tarball":"https://registry.npmjs.org/agent-jail/-/agent-jail-0.1.1.tgz","fileCount":5,"integrity":"sha512-M1iG8rUPaFX/7M1U/XkV8/5R3Wq9iik8E5RfpqtWeC6OwG1Gdvlx88JCBre7fVIazgWULWTvhG09P02JKN67Zw==","signatures":[{"sig":"MEUCIQCJydHaGaQ7L9sX85bI3YnTSoRU+/0x+Xp9uwE2rq8jjgIgCqS/lrgaZ140Fx1mOUKn+F12lwpyDn+Dkyj79Xu1ov4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/agent-jail@0.1.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":4016},"main":"index.js","types":"index.d.ts","engines":{"node":">=16"},"gitHead":"fcad0d525a623807ed82d09154cc9bfa1583f53e","_npmUser":{"name":"miclivs","email":"livsmichael@gmail.com"},"repository":{"url":"git+https://github.com/Michaelliv/agent-jail.git","type":"git"},"_npmVersion":"10.8.2","description":"Portable filesystem sandbox for spawning untrusted subprocesses. One static binary, picks the strongest backend available (uid switch on POSIX, Landlock on Linux 5.13+, or both layered).","directories":{},"_nodeVersion":"20.20.2","_hasShrinkwrap":false,"optionalDependencies":{"agent-jail-linux-x64":"0.1.1","agent-jail-darwin-x64":"0.1.1","agent-jail-linux-arm64":"0.1.1","agent-jail-darwin-arm64":"0.1.1"},"_npmOperationalInternal":{"tmp":"tmp/agent-jail_0.1.1_1776517962219_0.7093282954792126","host":"s3://npm-registry-packages-npm-production"}},"0.2.0":{"name":"agent-jail","version":"0.2.0","keywords":["sandbox","landlock","subprocess","security","isolation","agent","ai"],"license":"MIT","_id":"agent-jail@0.2.0","maintainers":[{"name":"miclivs","email":"livsmichael@gmail.com"}],"homepage":"https://github.com/Michaelliv/agent-jail","bugs":{"url":"https://github.com/Michaelliv/agent-jail/issues"},"os":["linux","darwin"],"bin":{"agent-jail":"bin/agent-jail.js"},"cpu":["x64","arm64"],"dist":{"shasum":"e16f58ff4de7bf6581241d7b8ed7b42a5aa7da29","tarball":"https://registry.npmjs.org/agent-jail/-/agent-jail-0.2.0.tgz","fileCount":5,"integrity":"sha512-RH3KmVErcwom/ncxv5MUNg2FFAX60/Jv2iossyhN7amFskx7qeF3hzgAm34aDkHclyLRmMs9E0CaWssk3lDjJg==","signatures":[{"sig":"MEUCIQDMWgMbaj0raHLxH8karbsknstwv7PvuEYPnhLlVPDDXwIgKjapd5f4ekxZrCK7klbo3/p4h09KafaWbK77A5T7qTY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/agent-jail@0.2.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":4016},"main":"index.js","types":"index.d.ts","engines":{"node":">=16"},"gitHead":"3c103bb5f81d9a9b3eeea2b3630cf164f4f88214","_npmUser":{"name":"miclivs","email":"livsmichael@gmail.com"},"repository":{"url":"git+https://github.com/Michaelliv/agent-jail.git","type":"git"},"_npmVersion":"10.8.2","description":"Portable filesystem sandbox for spawning untrusted subprocesses. One static binary, picks the strongest backend available (uid switch on POSIX, Landlock on Linux 5.13+, or both layered).","directories":{},"_nodeVersion":"20.20.2","_hasShrinkwrap":false,"optionalDependencies":{"agent-jail-linux-x64":"0.2.0","agent-jail-darwin-x64":"0.2.0","agent-jail-linux-arm64":"0.2.0","agent-jail-darwin-arm64":"0.2.0"},"_npmOperationalInternal":{"tmp":"tmp/agent-jail_0.2.0_1776520245781_0.4673702386028815","host":"s3://npm-registry-packages-npm-production"}},"0.3.0":{"name":"agent-jail","version":"0.3.0","keywords":["sandbox","landlock","subprocess","security","isolation","agent","ai"],"license":"MIT","_id":"agent-jail@0.3.0","maintainers":[{"name":"miclivs","email":"livsmichael@gmail.com"}],"homepage":"https://github.com/Michaelliv/agent-jail","bugs":{"url":"https://github.com/Michaelliv/agent-jail/issues"},"os":["linux","darwin"],"bin":{"agent-jail":"bin/agent-jail.js"},"cpu":["x64","arm64"],"dist":{"shasum":"884b1fa6dc9568648bc5b584544e207651355f75","tarball":"https://registry.npmjs.org/agent-jail/-/agent-jail-0.3.0.tgz","fileCount":5,"integrity":"sha512-l3hRUBTLtpidZvTUrQxPcK3eMqr/3SwICUNU2ugPyODPFzLRYjiEMQ7MOaYA+fLCv1UqjG4z89iddZ3pnjI0tQ==","signatures":[{"sig":"MEUCIA0nTVrUJsBTwQS0H8C7P+d7cMD0N8oP/9i6vLG4w4KCAiEAi34Zgzl0DDZbLg+1ILcJ63oYZXqmuAVTt0/VUtSNHhQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/agent-jail@0.3.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":4016},"main":"index.js","types":"index.d.ts","engines":{"node":">=16"},"gitHead":"73eccd56fafa2c005cfd3a67832d683a5c88955d","_npmUser":{"name":"miclivs","email":"livsmichael@gmail.com"},"repository":{"url":"git+https://github.com/Michaelliv/agent-jail.git","type":"git"},"_npmVersion":"10.8.2","description":"Portable filesystem sandbox for spawning untrusted subprocesses. One static binary, picks the strongest backend available (uid switch on POSIX, Landlock on Linux 5.13+, or both layered).","directories":{},"_nodeVersion":"20.20.2","_hasShrinkwrap":false,"optionalDependencies":{"agent-jail-linux-x64":"0.3.0","agent-jail-darwin-x64":"0.3.0","agent-jail-linux-arm64":"0.3.0","agent-jail-darwin-arm64":"0.3.0"},"_npmOperationalInternal":{"tmp":"tmp/agent-jail_0.3.0_1776522171566_0.38570566210551815","host":"s3://npm-registry-packages-npm-production"}},"0.4.0":{"name":"agent-jail","version":"0.4.0","keywords":["sandbox","landlock","subprocess","security","isolation","agent","ai"],"license":"MIT","_id":"agent-jail@0.4.0","maintainers":[{"name":"miclivs","email":"livsmichael@gmail.com"}],"homepage":"https://github.com/Michaelliv/agent-jail","bugs":{"url":"https://github.com/Michaelliv/agent-jail/issues"},"os":["linux","darwin"],"bin":{"agent-jail":"bin/agent-jail.js"},"cpu":["x64","arm64"],"dist":{"shasum":"a422fe5397591a86bd3ddb6d9de66eecb5e3c2ef","tarball":"https://registry.npmjs.org/agent-jail/-/agent-jail-0.4.0.tgz","fileCount":5,"integrity":"sha512-JUVQYRscN1KjAU4WnDP+fxBT/1GjPQCNmKhDLNWM0mg5f7+izLM1VNT7OmYD8Vafqwd8WYVSUffPrm4BtLSnbg==","signatures":[{"sig":"MEUCIQCqs1FfIcxtAn+K6llZPZdDoBoHsv7NiaTRtMQ4pRlC3gIgZTYA3nyxoEfxRXModtbgIe8K7WJ/oQgoQIYlbfaqM7A=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/agent-jail@0.4.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":4016},"main":"index.js","types":"index.d.ts","engines":{"node":">=16"},"gitHead":"a949b7194aff8da8b7d4d96f4898a235fa4bca2b","_npmUser":{"name":"miclivs","email":"livsmichael@gmail.com"},"repository":{"url":"git+https://github.com/Michaelliv/agent-jail.git","type":"git"},"_npmVersion":"10.8.2","description":"Portable filesystem sandbox for spawning untrusted subprocesses. One static binary, picks the strongest backend available (uid switch on POSIX, Landlock on Linux 5.13+, or both layered).","directories":{},"_nodeVersion":"20.20.2","_hasShrinkwrap":false,"optionalDependencies":{"agent-jail-linux-x64":"0.4.0","agent-jail-darwin-x64":"0.4.0","agent-jail-linux-arm64":"0.4.0","agent-jail-darwin-arm64":"0.4.0"},"_npmOperationalInternal":{"tmp":"tmp/agent-jail_0.4.0_1776595479873_0.21363014057245122","host":"s3://npm-registry-packages-npm-production"}},"0.5.0":{"os":["linux","darwin"],"_id":"agent-jail@0.5.0","bin":{"agent-jail":"bin/agent-jail.js"},"cpu":["x64","arm64"],"bugs":{"url":"https://github.com/Michaelliv/agent-jail/issues"},"dist":{"shasum":"a8fd35d801bfb7f7acf5bc5b2980f45e21b07cb4","tarball":"https://registry.npmjs.org/agent-jail/-/agent-jail-0.5.0.tgz","fileCount":5,"integrity":"sha512-WbespCt9adJsEXjOK8d0PmUml7FYDPHYGCDju2zG0eP0d9QR5OWTCTnKrVtK54UApznpgexKMD4y1dVpVxe4jA==","signatures":[{"sig":"MEQCIBKYVTjUpSxuDZIT72fcLT0Gc1IwwU6MO9MmQlGn5NVcAiAtqZA9SAQTw4QSd4ltROzYEbkatwJ8uTbroYvIifOqZA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEYCIQC5xCdOcnksa2wyChnyJGru4sCkLyN9OOoK4gvCJLjc8QIhAJPkjVjtyH7hokoeVVBRbJZIc1nQB4+JgUas8BciFl5O"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/agent-jail@0.5.0","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":4016},"main":"index.js","name":"agent-jail","types":"index.d.ts","engines":{"node":">=16"},"gitHead":"e561d916872f5bf97d5a16673cb4a3cf4e76970f","license":"MIT","version":"0.5.0","_npmUser":{"name":"miclivs","email":"livsmichael@gmail.com"},"homepage":"https://github.com/Michaelliv/agent-jail","keywords":["sandbox","landlock","subprocess","security","isolation","agent","ai"],"repository":{"url":"git+https://github.com/Michaelliv/agent-jail.git","type":"git"},"_npmVersion":"10.8.2","description":"Portable filesystem sandbox for spawning untrusted subprocesses. One static binary, picks the strongest backend available (uid switch on POSIX, Landlock on Linux 5.13+, or both layered).","directories":{},"maintainers":[{"name":"miclivs","email":"livsmichael@gmail.com"}],"_nodeVersion":"20.20.2","_hasShrinkwrap":false,"optionalDependencies":{"agent-jail-linux-x64":"0.5.0","agent-jail-darwin-x64":"0.5.0","agent-jail-linux-arm64":"0.5.0","agent-jail-darwin-arm64":"0.5.0"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/agent-jail_0.5.0_1789485732831_0.7173102659964214"}}},"time":{"created":"2026-04-18T13:12:42.150Z","modified":"2026-09-15T15:22:13.356Z","0.1.1":"2026-04-18T13:12:42.349Z","0.2.0":"2026-04-18T13:50:45.939Z","0.3.0":"2026-04-18T14:22:51.715Z","0.4.0":"2026-04-19T10:44:40.012Z","0.5.0":"2026-09-15T15:22:12.925Z"},"bugs":{"url":"https://github.com/Michaelliv/agent-jail/issues"},"license":"MIT","homepage":"https://github.com/Michaelliv/agent-jail","keywords":["sandbox","landlock","subprocess","security","isolation","agent","ai"],"repository":{"url":"git+https://github.com/Michaelliv/agent-jail.git","type":"git"},"description":"Portable filesystem sandbox for spawning untrusted subprocesses. One static binary, picks the strongest backend available (uid switch on POSIX, Landlock on Linux 5.13+, or both layered).","maintainers":[{"name":"miclivs","email":"livsmichael@gmail.com"}],"readme":"# agent-jail\n\nPortable filesystem sandbox for spawning untrusted subprocesses. One\nstatic binary, picks the strongest backend available at runtime: uid\nswitch on POSIX, Landlock on Linux 5.13+, or both layered.\n\nFull docs: https://github.com/Michaelliv/agent-jail\n\n## Install\n\n```sh\nnpm install agent-jail\n```\n\nThis installs the platform-specific binary via `optionalDependencies`.\nOne of `agent-jail-linux-x64`, `agent-jail-linux-arm64`,\n`agent-jail-darwin-x64`, `agent-jail-darwin-arm64` will be installed;\nthe rest are skipped by npm's `os`/`cpu` gating.\n\n## Use from Node\n\n```js\nimport { path } from \"agent-jail\";\nimport { spawn } from \"node:child_process\";\n\nspawn(path, [\n  \"--best-effort\",\n  \"--system-ro\",\n  \"--rw\", workspace,\n  \"--hide\", secrets,\n  \"--\", \"my-agent\",\n], { stdio: \"inherit\" });\n```\n\n## Use as a CLI\n\n```sh\nnpx agent-jail --version\nnpx agent-jail --best-effort --system-ro --rw /tmp/work -- /usr/bin/true\n```\n\n## License\n\nMIT.\n","readmeFilename":"README.md"}