PACKAGE EXPLORERView in registry

agents-terminal

PyPI

Jailed terminal CLI for agent computer-use (policy + driver)

Versions collected1

Direct dependencies0From release 0.0.5

Last observed20 Oct, 23:29 UTC

README

Version 0.0.5 documentation

agents-terminal

Policy-bound jailed terminal for agent execution.
argv in, stripped env out. No MCP server.

Quickstart

pip install agents-terminal

There is no init. The harness calls agents-terminal run. Nothing is written into IDE configs.

[!TIP] 🤖 Agent-Driven Setup: Give your coding agent this repo (clone or URL), then tell it to "install agents-terminal and run commands through it."

Source checkouts can also be installed and managed with vand.

What it does

Agents do not get a shell string. run takes an argv vector after --, so the host shell never parses the command.

The child inherits an allowlist, not the parent environment. Default names: PATH, HOME, USER, SHELL, TEMP / TMP, locale (LANG, LC_ALL, TERM), Windows roots (SYSTEMROOT, WINDIR), git author/committer, GITHUB_TOKEN, GH_TOKEN. Anything else is dropped unless you extend the list.

On timeout the process tree is killed (job object / process group). Working directory defaults to AGENTS_WORKSPACE_DIR or ~/.agents/workspace, created if missing.

Drivers

Driver	When	Backend
`subprocess`	Windows / macOS stand-in, and the fallback	Allowlisted env, directory confinement, process-tree timeout
`openshell`	Linux / Docker / OpenShell on `PATH`	`openshell sandbox create`
`auto` (default)	Starting point	`openshell` when that binary is on `PATH` (or inside WSL on Windows), else `subprocess`

Set AGENTS_TERMINAL_DRIVER=openshell|subprocess|auto.

Environment

Variable	Description
`AGENTS_TERMINAL_DRIVER`	`auto` (default), `subprocess`, or `openshell`
`AGENTS_WORKSPACE_DIR`	Working directory (default `~/.agents/workspace`)
`AGENTS_TERMINAL_POLICY`	Path to a JSON policy file (`driver`, `env_allow`, `timeout_sec`, `cwd`, …)
`AGENTS_TERMINAL_ENV_ALLOW`	Extra names, comma-separated, appended to the default allowlist. Alias: `AGENTS_TERMINAL_EXTRA_ENV`
`AGENTS_TERMINAL_ENV_PASSTHROUGH`	`1` / `true` / `yes` copies the full parent environment and skips the allowlist

CLI

One command. No MCP. Machine-readable catalog: python -m agents_terminal --help-json.

Command	Purpose
`agents-terminal run -- <argv…>`	Run that argv under the policy. No shell

No subcommand prints help. Exit code is the child's exit code.

agents-terminal run -- echo hello

ABI

Contract in abi/:

WHY.md — argv and an allowlisted env
POLICY.md — drivers, env, workspace, timeout
CLI.md — run

Tests

python -m unittest discover -s tests -v

License

MIT. See LICENSE.

Downloads & popularity

Awaiting observations

No metric observations yet

Download counts and popularity will appear here as the collector receives them.

Versions 1

Collected releases

Version	Published	Direct dependencies	Open version
0.0.5	6 Oct 2026	0

Package advisories

No matching advisories collected

This describes our collected data; it is not a security assessment.

Repository

PENDING

lolaplex/agents-terminal

Shared repository data · GitHub

License detected in repository: Not collected

Metadata history

Meaningful changes

Current collected state Current

Observed since 20 Oct, 23:29 UTC

No superseded metadata states collected. Unchanged observations do not create new revisions.

Record identity

package:205b1f5a36fab03eaa2a0e7a70e4d4e39143d4f7f0df6914638ff49aa5a42a7b