Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.litellm-agent-platform.ai/llms.txt

Use this file to discover all available pages before exploring further.

A sandbox is one Kubernetes pod that runs a single agent session. It contains the harness container (the agent itself) and the vault sidecar.

​
Session lifecycle

StatusWhat it means
creatingProvisioning the pod and starting the harness.
readyHarness is up and accepting messages or terminal attaches.
deadSession ended — explicitly stopped or reaped after 24h idle.
failedCould not reach ready. failure_reason explains why.

​
Idle timeout

A ready session that receives no traffic for 24 hours is reaped by the reconciler. The pod is deleted; status flips to dead. The countdown resets on every message or terminal interaction. Press Ctrl-D in lap to detach without stopping — the session stays alive; reconnect with lap <agent-name>.

​
Per-session env vars

Pass short-lived secrets the vault should proxy but never persist: 
curl -s $LAP_URL/api/v1/managed_agents/agents/$AGENT_ID/session \
  -H "Authorization: Bearer $MASTER_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "title": "open a PR",
    "env_vars": {
      "GITHUB_TOKEN": "ghp_...",
      "CIRCLECI_TOKEN": "cci_..."
    }
  }'
Constraints (enforced at create time):
  • ≤ 50 keys
  • ≤ 16 KB total
  • Keys match ^[A-Za-z_][A-Za-z0-9_]*$
  • Cannot overlap reserved keys

​
Harness types

Harnessharness_idInterfaceBest for
Claude Codeclaude-codePTY over WebSocketInteractive terminal work
CodexcodexPTY over WebSocketInteractive terminal work
opencodeopencodeJSON message APIAutomation, CI
Claude Agent SDKclaude-agent-sdkJSON message APIAutomation with Anthropic’s SDK
TUI harnesses (Claude Code, Codex) attach with lap. API harnesses receive messages via POST /sessions/{id}/message.