AI agent starters · Rank #1
sandbase-harness
Grade A: derived only from the two verdicts below. How grades work
Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.
Why this verdict
How we check →- 1356 commits by 9 contributors in the last 90 days (472 in the last 30). receipt ↗
- Latest release v0.3.8, 50 days ago. receipt ↗
- On current major: React, Tailwind CSS, Vercel AI SDK, Zod. receipt ↗
Snapshot: commit 427b52a on main, checked 2026-10-19 06:44 UTC. Receipts link to files at this exact commit.
Dependency freshness
| Package | Declared | Latest | Status |
|---|---|---|---|
| React react | 19.3.0 | 19.3.1 | Current |
| Tailwind CSS tailwindcss | 4.3.3 | 4.3.3 | Current |
| TypeScript typescript | 7.0.2 | 7.0.2 | Current |
| Vercel AI SDK ai | 7.0.128 | 7.0.143 | Current |
| Zod zod | 4.6.5 | 4.6.7 | Current |
Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.
What's in the stack
- Framework
- Vite
- API layer
- Hono
- Testing
- Vitest, Playwright
- i18n
- i18next
Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.
What the README says you get
- AISingle provider boundary
One active model provider boundary configured through Settings V2
- APIManaged Agents /v1 API
Claude Managed Agents-style `/v1` API and local Console
- APIResumable event streams
Resumable Server-Sent Events for session replay and debugging
- APIMCP toolsets and policies
MCP toolsets, permission policies, built-in tools, and skill packages
- APITypeScript SDK
TypeScript SDK at `managed-agents/sdk`
- APIOfficial SDK compatibility
an official Anthropic TypeScript SDK client drives it unchanged
- APICMA compatibility matrix
Coverage of the published Claude Managed Agents contract is declared entry by entry in `src/core/capabilities/matrix.ts`
- APILocal delegation subagent
Local delegation is registered separately as an extension.
- APISession budget ceiling
a session may declare a max_list_cost ceiling at creation
- DataSQLite metadata store
SQLite metadata by default for agents, sessions, environments, credential vaults, memory stores, files, skills, and API keys
- DeploySandbox backends
Sandbox backends: local process, Docker (per-session containers), Kubernetes (kubectl exec/cp), self-hosted worker queue
- DeployDevelopment container
The included development container installs dependencies and builds the runtime.
- TestingRelease gate script
Release gate: `npm run release:check`
- TestingSDK conformance test
executed on every pull request by `tests/conformance/official-sdk-quickstart.test.ts`
Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 12, 2026. Every item is checked against an exact README quote. A README claim is the maker's description, not something we tested.
Watch sandbase-harness
Get told if it goes dormant, gets archived, falls further behind on a core dependency, or changes its license or price.
History
Sep 29, 2026 → Oct 19, 2026. One square per check, colored by maintenance status. Hover for details.
Show as a table
| Date | Maintenance | Dependencies | Commits (90d) |
|---|---|---|---|
| Oct 19, 2026 | Active | Current deps | 1356 |
| Oct 12, 2026 | Active | Current deps | 1416 |
| Sep 29, 2026 | Active | Current deps | 1223 |
Sources
Every claim on this page comes from these public records, checked . Open them to verify.
- Commit history ↗ default branch (main) at the checked commit: pulse, contributors, last commit
- Releases ↗ latest release
- package.json ↗ declared dependency versions and stack (at commit 427b52a)
- README ↗ quoted features at the checked commit
- npm registry ↗ latest versions (each linked in the table above)