Foundational Infrastructure
for AI Agents

1mounts:▸ 6
26runtimes:?The engines a line can run on. Both python engines are registered — monty and pyodide — and this entry says which one python and python3 bind to; quickjs takes node and js. All are sandboxed, so their file I/O only reaches the mounts above. The builtin command engine is always present, so it is not listed.
27  # Choose your own runtime for python, node, and anything else you run.
28  - { name:montypyodide, captures: [python, python3] }
29  - { name: quickjs, captures: [node, js] }
30  # Route to e2b sandbox if python script has NumPy, see route.py
31  - name: e2b?Runs python that needs more than a browser has. Connect a store and a key, then put the script and its data where both sides can reach them:$ cp /repo/stats.py /repo/prices.csv /redis/$ python3 /redis/stats.py
32    captures: [python, python3]
33    config: { apiKey:  }
34 
35# Who takes the line, asked once before anything runs. It sits above the
36# bindings and below an explicit runtime argument.
37route_policy: route.py?A different door: asked once per line, before anything runs, and answering who runs it rather than whether it may. A runtime name places the line, a deny refuses it. It outranks the runtimes above and yields to a runtime named on the call.
38 
39# simple.js registers the CLI running in quickjs runtime.
40# On user alone: a cli is per workspace, and each profile has one.
41clis:+
42  simple:
43    script: simple.js?The program, run on the engine named beside it.
44runtime: quickjs
45 
46profiles:
47  admin:
48    commands:
49allow: [cd,pwd,ls,cat,echo,touch,mkdir,sed,cp,python3,python,history,whoami,man,open ]treeheadnodejs
50    policy:?A program the gate runs before every command this profile runs. It sees the command's context and reads the filesystem, and answers allow, ask or deny.
51      script: copy_redis.py?The program, run on the engine named beside it.
52runtime: monty
53 
54  user:
55    commands:
56allow: [cd,pwd,ls,cat,touch,python3,python,whoami,man,open,simple ]treeheadechomkdirsedhistorynodejscp
57    policy:?A program the gate runs before every command this profile runs. It sees the command's context and reads the filesystem, and answers allow, ask or deny.
58      script: ask_curl.py?The program, run on the engine named beside it.
59runtime: monty
60    mounts:
61      /tmp:
62        mode: read
63    paths:
64hide: [/secret,/github ]/repo/tmp/bin/redis/secret/aws.token