Return to Notes

Release · 2026-09-02 · 3 min read

Amber v0.1.2 Agent Sandbox

By Amber Core Team

Amber v0.1.2 Agent Sandbox

Amber v0.1.2 turns the runtime into a tool process for Agent hosts. Models stay outside (OpenAI, Anthropic, llama.cpp). Amber executes JS/TS tools under a default-deny permission broker.

What shipped

  • amber run --sandbox denies fs/net/env/run, then overlays --allow-* or --permission-policy.
  • --allow-read ./workspace is a directory prefix jail, not an exact-path allow.
  • --audit-log writes JSONL decisions (kind, action, resource, decision). It does not record env values or file contents.
  • --export-tools prints tool schemas from tools.json or exported functions.
  • amber session is stdin JSON-RPC (tools/list, tools/call). --isolate-per-call creates a new isolate per call.
  • amber mcp is an MCP stdio server for the same tool file.
  • Node conformance is 24 fixtures, including Agent denial paths.

Example

amber run --sandbox --permission-policy examples/agent/echo.policy.json --export-tools examples/agent/echo_tool.ts
amber session --sandbox --permission-policy examples/agent/echo.policy.json examples/agent/echo_tool.ts

See Current Scope for what is stable versus preview. feature=ai is not a product LLM.