跳转至

apogee-ai-sandbox

Run untrusted code (or agent code) in isolated sandboxes with policy gates.

This page is being expanded

The tables below are generated from the package source, so they are accurate. Narrative guides and worked examples are being written module by module.

Public API

Everything below is exported from the package root, so from apogee_ai_sandbox import X works for each name.

Layer Symbols
Application build_request
Application · DTOs RunCodeDTO, RunResultDTO
Application · Use cases KillJobUseCase, ListBackendsUseCase, RunCodeStreamUseCase, RunCodeUseCase
Domain EgressAllowlist, ExecutionRequest, ExecutionResult, Fingerprint, JobStatus, Language, NetworkPolicy, OutputCacheKey, Quotas, SandboxFile, SandboxJob, StreamChunk
Domain · Enums SandboxKind
Domain · Exceptions EgressBlockedException, ExecutionTimeoutException, FingerprintMissingException, JobNotFoundException, LanguageNotSupportedException, QuotaExceededException, SandboxError, SandboxNotAvailableException
Domain · Protocols (ports) IFingerprintCache, IQuotaEnforcer, ISandbox
Infrastructure BubblewrapSandbox, CodeInterpreterTool, DaytonaSandboxAdapter, DockerSandboxAdapter, E2BSandboxAdapter, EchoSandbox, EgressAllowlistGate, FirejailSandbox, InMemoryFingerprintCache, InMemoryQuotaEnforcer, JsonFingerprintCache, LocalProcessSandbox, ModalSandboxAdapter, NotebookRunnerTool, SandboxRegistry, SandboxTool, SandboxToolDefinition, ShellRunnerTool, SqlRunnerTool, default_tool_catalog

Install

Bash
pip install apogee-ai-sandbox

The base install has no required third-party dependency. Each extra unlocks one adapter.

Extra Pulls in
e2b e2b-code-interpreter>=1.0
modal modal>=0.64
daytona daytona-sdk>=0.10
docker docker>=7.0
all e2b-code-interpreter>=1.0, modal>=0.64, daytona-sdk>=0.10, docker>=7.0

CLI

Installed as a console script, and registered as an apogee plugin so the same subcommands work under the global binary.

Bash
apogee-sandbox --help