inis-strands-agents

Native inis.run sandbox provider for Strands Agents' strands.sandbox surface. Gives Strands its standard sandbox_bash and sandbox_file_editor tools backed by a real, isolated inis.run session instead of the local host.

Verified against strands-agents==1.50.2.

Install

pip install inis-strands-agents

Quickstart: attached (recommended)

One inis.run session for the whole conversation, owned by your app:

from inis import AsyncClient
from strands import Agent
from inis_strands_agents import InisSandbox

client = AsyncClient()
session = await client.sessions.create(egress_default="deny")
sandbox = InisSandbox.wrap(session)

agent = Agent(model="...", sandbox=sandbox)
await agent.invoke_async("list files in /workspace")
await agent.invoke_async("now write hello.txt")
await session.destroy()  # this app owns the session; the adapter never will

Owned: the adapter creates and destroys the session for you

from strands import Agent
from inis_strands_agents import InisSandbox

async with await InisSandbox.create(egress_default="deny") as sandbox:
    agent = Agent(model="...", sandbox=sandbox)
    await agent.invoke_async("...")
# session destroyed on exit

Either way, Agent(sandbox=...) registers sandbox_bash and sandbox_file_editor automatically — no separate tool wiring needed. Session create/destroy, egress, pause/resume, and fork stay host-controlled.

What it does

• execute_streaming (shell) — distinct stdout/stderr chunks, then a final ExecutionResult
• execute_code_streaming — inherited from PosixShellSandbox
• Binary-safe read_file/write_file/remove_file/list_files, routed to inis.run's native /files endpoints
• Per-call timeout — genuinely kills the remote process on expiry
• Per-call env — via a validated shell prefix (inis.run's exec API fixes env at session creation)
• Cancellation (asyncio task cancellation) — closes the underlying stream and kills the remote command

Notes

PTY isn't implemented: strands.sandbox's shell/file contract has no equivalent. ExecutionResult.output_files is always empty, same as every other shell-based Sandbox — read a produced file with read_file instead.

Development

pip install -e ".[dev]"
pip install -e ../python           # inis core SDK, editable
pytest

Links

• Docs: docs.inis.run
• Source: github.com/inis-run/sdk/tree/main/strands-agents-python
• Homepage: inis.run

Built and run in the EU. Your code and data never leave Europe.

License

MIT — see LICENSE.