Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

Sandbox Support in GH CLI

Aperta
  • Qualcosa non va?
#1,223 2 commenti 2 reazioni 1 assegnatario Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

@patniko ci sta già lavorando.

Dal 19/5/2026.

Valutazione

Questa issue non è ancora stata valutata.

Descrizione

enhancement

Summary

Add first-class sandbox execution support for Copilot SDK sessions, so SDK consumers can run agent file edits, shell commands, MCP servers, and custom tools inside an isolated, resumable workspace rather than relying on the host process filesystem/network boundary.

Current state

From the public docs and examples, the SDK currently exposes several useful building blocks:

  • workingDirectory / session workspace configuration
  • availableTools / excludedTools
  • onPermissionRequest
  • onPreToolUse and onPostToolUse hooks
  • custom tools that can replace built-ins
  • a virtual filesystem sample that disables built-ins and backs file tools with an in-memory store

Those are helpful, but they do not appear to provide a first-class sandbox lifecycle or provider abstraction. As far as I can tell, there is no SDK-level API for:

  • creating or attaching a sandbox execution environment per session/run
  • selecting a sandbox provider, such as local process, Docker/container, hosted sandbox, or custom provider
  • mounting repositories/directories/object stores into the sandbox workspace
  • enforcing filesystem/network/process isolation below the tool-permission layer
  • snapshotting/restoring the sandbox workspace across sessions
  • running MCP servers inside the same restricted boundary
  • exposing sandbox artifacts/ports back to the host application

If this already exists and I missed it, a docs pointer would be great.

Motivation

Many agentic SDK use cases need more than tool allow/deny decisions. They need a concrete execution boundary for untrusted or model-directed work:

  • coding agents that edit files and run tests without touching the host directly
  • multi-tenant SaaS apps embedding Copilot agent workflows
  • eval harnesses that need reproducible, isolated workspaces
  • agents that install packages or run scripts
  • MCP servers that should be constrained to specific filesystem/network scopes
  • workflows that produce artifacts the host app can inspect after the run

The README says the SDK can enable first-party tools that perform filesystem operations, Git operations, and web requests. Permission hooks are useful for policy, but they are not a replacement for OS/container-level isolation.

Prior art / comparison

OpenAI Agents SDK has a first-class sandbox concept where the agent runtime can connect to local/Docker/hosted sandbox providers and the sandbox owns files, commands, ports, mounts, and persisted state.

Anthropic also has sandbox-runtime (srt), a lightweight sandboxing tool designed for agent/MCP/server process isolation using OS sandbox primitives and network/filesystem restrictions.

It would be valuable for Copilot SDK to expose an equivalent integration surface, while still preserving the existing Copilot SDK tool and hook model.

Proposed API direction

One possible shape:

const session = await client.createSession({
  model: "gpt-4.1",
  sandbox: {
    provider: "docker", // or "local", "hosted", custom provider adapter
    image: "ghcr.io/example/copilot-agent-sandbox:latest",
    workspace: {
      mounts: [
        { source: "/path/to/repo", target: "/workspace/repo", mode: "rw" },
      ],
      persist: true,
    },
    network: {
      allow: ["github.com", "registry.npmjs.org"],
      default: "deny",
    },
    resources: {
      cpu: 2,
      memoryMb: 4096,
      timeoutSeconds: 1800,
    },
  },
  onPermissionRequest: async (req) => ({ kind: "approved" }),
});
Lingua principale
TypeScript
Stelle
10.5k
Fork
1.5k
Merge medio
1g 7h
PR unite (30g)
98

Preparare l'ambiente

Apri in Codespaces

Avvia il container di sviluppo del progetto nel browser, con il tuo account GitHub.

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di github/copilot-sdk

Tutte le issue di github/copilot-sdk

Issue simili

Altre issue su TypeScript

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.