# Docs

> Sandboxed tool execution for agents — TS SDK + JSON CLI over an OCI image.

Source: https://taskbox.n.yatsyk.com/docs

Taskbox runs agent tools in a disposable, rootless container. You hand it a
JSON `TaskSpec` and a runtime adapter; it returns a validated `TaskResult`
plus a stream of structured events — no host shell access, no leftover state.

The codebase ships as five public packages plus a kitchen-sink OCI image:

* [`@taskbox/schemas`](/docs/schemas) — Zod schemas + inferred types (the wire contract).
* [`@taskbox/core`](/docs/core) — runtime-agnostic engine: `runTask`, workspace, event bus, errors.
* [`@taskbox/podman`](/docs/podman) — `RuntimeAdapter` that runs tasks in rootless Podman.
* [`@taskbox/tools`](/docs/tools) — high-level SDK (`createTaskbox`, `media.downloadSubtitles`).
* [`@taskbox/cli`](/docs/cli) — `tbx` command (`doctor`, `prepare`, `media subtitles`).

The `@taskbox/images` package (private) holds the Dockerfile and runner script
for the kitchen-sink image consumed by adapters.