Workspace

WORKSPACE controls the default working directory used by AIO Sandbox services.

Basic Usage

docker run --security-opt seccomp=unconfined --rm -it \
  -p 8080:8080 \
  -e WORKSPACE=/workspace \
  -v "$PWD:/workspace" \
  ghcr.io/agent-infra/sandbox:latest

On startup, the container creates the workspace directory when needed and prepares permissions for the runtime user.

Service Behavior

ServiceDefault directoryPer-request override
Shell$WORKSPACEexec_dir
Bash$WORKSPACEexec_dir
Jupyter$WORKSPACErequest options
Node.js$WORKSPACErequest options
code-server$WORKSPACEopen folder

Recommendations

  • Mount project code into the workspace for coding-agent tasks.
  • Store generated artifacts under the workspace so browser, shell, file, and code APIs can share them.
  • Avoid writing long-lived project files under temporary directories unless you plan to download them immediately.