kern-sandbox 0.2.16 → 0.2.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -1
- package/index.js +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -1,6 +1,11 @@
|
|
|
1
1
|
# kern-sandbox (Node.js / TypeScript)
|
|
2
2
|
|
|
3
|
-
**Run AI-generated code in a real sandbox, one fresh box per call
|
|
3
|
+
**Run AI-generated code in a fast, real sandbox, one fresh box per call.**
|
|
4
|
+
|
|
5
|
+
Fast means milliseconds, and it is two numbers rather than one: the box is the cheap part, and an
|
|
6
|
+
interpreter starting inside it costs more than the box does. Both depend on your machine, so they are
|
|
7
|
+
measured under [Prewarming](#prewarming-a-box-ready-before-the-call-arrives) with the machine and the method beside them, and the
|
|
8
|
+
runtime's own are in [BENCHMARKS.md](https://github.com/getkern/kern/blob/main/BENCHMARKS.md).
|
|
4
9
|
|
|
5
10
|
`kern-sandbox` is the Node and TypeScript binding for **[kern](https://getkern.dev)**: a rootless,
|
|
6
11
|
kernel-enforced sandbox out of one static binary, with no daemon, no VM and no cloud. An agent's
|
package/index.js
CHANGED
|
@@ -36,7 +36,7 @@ const crypto = require("crypto");
|
|
|
36
36
|
const zlib = require("zlib");
|
|
37
37
|
const { spawn, spawnSync } = require("child_process");
|
|
38
38
|
|
|
39
|
-
const VERSION = "0.2.
|
|
39
|
+
const VERSION = "0.2.18";
|
|
40
40
|
|
|
41
41
|
const DEFAULT_IMAGE = "python:3.12-slim";
|
|
42
42
|
const WORKSPACE = "/workspace"; // where the persistent workspace is mounted inside every box
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "kern-sandbox",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.18",
|
|
4
4
|
"description": "kern is a fast, rootless sandbox and virtual resource runtime for any workload, including untrusted and AI-generated code; kern-sandbox is its Node/TypeScript binding. Run untrusted or agent-generated code (Python/JS/Bash) in a real, kernel-enforced box in single-digit milliseconds, with no cloud, no account and no VM.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"sandbox",
|