scriptoriumadmin/ReMe
1
0
Fork 0
mirror of https://github.com/agentscope-ai/ReMe.git synced 2026-10-27 06:15:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 9
ReMe/plugins/home
History
酱牛肉 4b47a01b79 Harden AutoBash policy and macOS sandbox supervision
2026-10-13 13:41:04 +08:00
..
src/reme_home Harden AutoBash policy and macOS sandbox supervision 2026-10-13 13:41:04 +08:00
tests Harden AutoBash policy and macOS sandbox supervision 2026-10-13 13:41:04 +08:00
pyproject.toml Add sandboxed Python execution and home AutoBash plugin 2026-10-11 17:11:51 +08:00
README.md Refine file sandbox limits and executor checks 2026-10-12 22:13:22 +08:00

README.md

Home plugin

Provides the auto_bash job through an independently enabled ReMe plugin.

Install it into the same Python environment as ReMe:

reme plugins install plugins/home

Enable it in an application config with plugins: [home]. The plugin then contributes the auto_bash job, which can be run with reme start config=<your-config.yaml> job=auto_bash command=pwd.

The job defaults to read-only command validation and a 60-second timeout. Set is_read_only=false to disable command validation. Supplying read_only_paths or writable_paths enables a file sandbox (Bubblewrap on Linux, Seatbelt on macOS), with sandbox paths identical to their host paths. On Linux, the memory_limit_mib cgroup limit defaults to 4096 MiB; 0 disables it. Supplying the limit requires a path policy. macOS has no memory limit and warns when a nonzero value is supplied.