Dosu LogoDosu Logo
Ask
Join our Discord
agentaPublic
Agenta
Documentsagenta
Sandbox Provider Configuration
Sandbox Provider Configuration
Type
Topic
Status
Published
Created
Jul 16, 2026
Updated
Jul 16, 2026
Created by
Dosu Bot
Updated by
Dosu Bot

Sandbox Provider Configuration#

The sandbox picker in the agent playground is driven by the AGENTA_RUNNER_ENABLED_SANDBOX_PROVIDERS environment variable, which controls which execution environments (e.g., local, daytona) are shown to users in the UI. This replaces the older binary AGENTA_SANDBOX_LOCAL_ALLOWED flag, which could not express a full provider list .


Environment Variable Pipeline#

At container start, web/entrypoint.sh reads AGENTA_RUNNER_ENABLED_SANDBOX_PROVIDERS, normalizes it (lowercase, whitespace stripped), and re-exports it as AGENTA_ENABLED_SANDBOX_PROVIDERS . This value is then injected into the frontend runtime as window.__env.NEXT_PUBLIC_AGENTA_ENABLED_SANDBOX_PROVIDERS.

Default: If the variable is unset or empty, entrypoint.sh defaults to local β€” guaranteeing the picker always has at least one option .


getEnabledSandboxProviders() Helper#

Two mirrored implementations exist:

  • web/oss/src/lib/helpers/dynamicEnv.ts β€” used by the OSS frontend
  • web/packages/agenta-shared/src/api/env.ts β€” exported via @agenta/shared/api for shared packages

Both functions read NEXT_PUBLIC_AGENTA_ENABLED_SANDBOX_PROVIDERS, split on commas, trim and lowercase each entry, and fall back to ["local"] if the result is empty .


UI Filtering in useModelHarness.tsx#

The sandbox picker options are computed in web/packages/agenta-entity-ui/src/DrillInView/SchemaControls/agentTemplate/useModelHarness.tsx . The old logic filtered based on isSandboxLocalEnabled() (a boolean); the new logic intersects the schema-declared options with the enabled set from getEnabledSandboxProviders(), so only providers the deployment actually supports appear in the dropdown .


Permission Controls: Hidden for local#

The same file also hides sandbox permission knobs (network egress, filesystem, enforcement, allowlist) when sandbox.kind === "local" . Since local runs as an unconfined host process, these permission settings have no effect and were previously misleading.


Key Files#

FileRole
web/entrypoint.shDerives & injects AGENTA_ENABLED_SANDBOX_PROVIDERS into window.__env
web/oss/src/lib/helpers/dynamicEnv.tsgetEnabledSandboxProviders() for OSS package
web/packages/agenta-shared/src/api/env.tsgetEnabledSandboxProviders() for shared package
web/packages/agenta-shared/src/api/index.tsExports getEnabledSandboxProviders from @agenta/shared/api
web/packages/agenta-entity-ui/.../useModelHarness.tsxConsumes enabled set to filter picker options; hides local permission knobs

Operator Configuration#

Set the environment variable on the runner/web container:

AGENTA_RUNNER_ENABLED_SANDBOX_PROVIDERS=local,daytona
  • Comma-separated, case-insensitive β€” normalized at startup.
  • Unset or empty β†’ defaults to local only.
  • Providers not in this list are hidden from the picker, regardless of what the schema declares.

See also: PR #5150 β€” permissive-by-default sandbox/egress with hardening gate for the runner-side sandbox enforcement model that this UI configuration exposes.

Documents
Agent and App Rename System
Agent Durable Storage
Agent Model Configuration and Validation
Agent Playground Streaming
Agent Runner Timeout Enforcement
Agent Session Continuity
Authentication Access Controls
Chat Message Components
Client-Tool Registry and Render Hints
Codex Harness Integration
Credential and Secrets Management
Drive File Browsing
Evaluator Management UI
File Attachment Handling
Human-in-the-Loop Tool Approval
Jotai State Management
MCP Tool Execution
Model Provider Integration
Mount Archive Export
Object Store File Iteration
Organization Navigation and Switching
Passwordless Authentication
Playground Output Components
Playground Session Management
Playground Streaming and Content Block Support
Playground Tool Configuration
Playground Variant Architecture
Redis Permission Caching
Runner Service Infrastructure
Sandbox Infrastructure
Sandbox Provider Configuration
Schema-Driven Elicitation
Self-Hosting Configuration
Session Pool Management
Skill Management
Tool Permission System
Tool Result Handling and Resume Flow
Workflow Reference Model
Workflow Run Context and Commit State
Workflow Slug System