Taskbox runs agent tools in a disposable, rootless container. You hand it a
JSON TaskSpec and a runtime adapter; it returns a validated TaskResult
plus a stream of structured events — no host shell access, no leftover state.
The codebase ships as five public packages plus a kitchen-sink OCI image:
@taskbox/schemas— Zod schemas + inferred types (the wire contract).@taskbox/core— runtime-agnostic engine:runTask, workspace, event bus, errors.@taskbox/podman—RuntimeAdapterthat runs tasks in rootless Podman.@taskbox/tools— high-level SDK (createTaskbox,media.downloadSubtitles).@taskbox/cli—tbxcommand (doctor,prepare,media subtitles).
The @taskbox/images package (private) holds the Dockerfile and runner script
for the kitchen-sink image consumed by adapters.