Execute untrusted code safely in your AI product

import { Sandbox } from '@simplesandbox/sdk'

const client = Sandbox()
const sandbox = await client.sandboxes.create({ image: 'python:3.12-slim' })

await sandbox.exec('pip install --quiet pandas', { timeoutMs: 60_000 })

const program = `
import pandas as pd

data = {'product': ['A', 'B', 'C'], 'sales': [100, 200, 150]}
df = pd.DataFrame(data)
print(df['sales'].sum())
`

await sandbox.files.write('script.py', program)
const result = await sandbox.exec('python script.py', { timeoutMs: 30_000 })

console.log(result.stdout.trim())

await sandbox.kill()

import { Sandbox } from '@simplesandbox/sdk'

const client = Sandbox()
const sandbox = await client.sandboxes.create({
	image: 'node:lts-alpine3.22',
	timeoutMs: 60_000,
})

const script = `
const fs = require('fs')

fs.writeFileSync('/tmp/output.json', JSON.stringify({ generated: Date.now() }))
console.log('wrote output.json')
`

await sandbox.files.write('/tmp/script.js', script)
const result = await sandbox.exec('node /tmp/script.js')
const output = await sandbox.files.read('/tmp/output.json')

console.log(result.stdout)
console.log('File contents:', output)

await sandbox.kill()

import { Sandbox } from '@simplesandbox/sdk'

const client = Sandbox()
const sandbox = await client.sandboxes.create({ image: 'python:3.12-slim' })

const flaskApp = `
from flask import Flask
app = Flask(__name__)

@app.get('/')
def hello():
	return 'Hello from Sandbox!'

if __name__ == '__main__':
	app.run(host='::', port=5000)
`

await sandbox.files.write('server.py', flaskApp)
await sandbox.exec('pip install flask')
await sandbox.exec('python server.py >/tmp/server.log 2>&1', { background: true })

const host = sandbox.expose(5000)
console.log(`Preview URL: https://${host}`)

// Clean sandbox later
// await sandbox.kill()

import { Sandbox } from '@simplesandbox/sdk'

const client = Sandbox()
const sandbox = await client.sandboxes.create({ image: 'node:lts-alpine3.22' })

const expressApp = `
const express = require('express')
const app = express()

app.get('/', (req, res) => {
	res.json({ message: 'Hello from Sandbox!' })
})

app.listen(3000, '::', () => console.log('server listening on 3000'))
`

await sandbox.exec('mkdir app')
await sandbox.files.write('app/app.js', expressApp)
await sandbox.exec('cd app && npm init -y')
await sandbox.exec('cd app && npm install express')
await sandbox.exec('cd app && node app.js >/tmp/server.log 2>&1', { background: true })

const host = sandbox.expose(3000)
console.log(`API available at https://${host}`)