agentkernel 0.18.1

Run AI coding agents in secure, isolated microVMs
Documentation
# Pi sandbox template
# Pre-configured for running Pi coding agent inside an isolated sandbox

[sandbox]
name = "pi-sandbox"
base_image = "node:22-alpine"
init_script = """
set -e
npm install -g @mariozechner/pi-coding-agent
"""

[agent]
preferred = "pi"
compatibility_mode = "pi"

[resources]
vcpus = 2
memory_mb = 1024

[secrets]
ANTHROPIC_API_KEY = "api.anthropic.com"
OPENAI_API_KEY = "api.openai.com"

[security]
profile = "moderate"

[security.domains]
# Pi supports multiple LLM providers
allow = ["api.anthropic.com", "api.openai.com", "generativelanguage.googleapis.com"]

[template]
description = "Pi coding agent sandbox"
category = "Agent Sandboxes"
help_text = """
How to use: Start the sandbox and run your workflow inside /workspace.
Example command: ls -la /workspace
Binaries available: node, npm, npx, pi
Services and ports: No long-running service is configured by default; only explicitly mapped ports are exposed.
"""