Embedded bash sandbox for agents, inspired by gVisor
README.md

@cvisor/cli #

The cVisor command line interface — a lightweight in-process Linux sandbox for untrusted and LLM-generated code.

npm install -g @cvisor/cli
cvisor run -- echo hello

npx @cvisor/cli -- echo hello   # or run it without installing

What gets installed #

The package itself is a thin launcher for the cvisor binary; the prebuilt binaries come from an optional dependency picked by npm for your host:

Host Package Binary
Linux x86_64 @cvisor/cli-linux-x64 cvisor
Linux aarch64 @cvisor/cli-linux-arm64 cvisor
macOS Apple silicon @cvisor/cli-darwin-arm64 cvisor

The Linux binaries are static musl builds, so they run on glibc and musl distros alike.

The daemon ships separately as @cvisor/daemon (npm install -g @cvisor/daemon → cvisord). It is Linux-only: on macOS the CLI boots a microVM and drives the daemon running inside it.