Sandbox Environment

Every agent run executes in an isolated container (sandbox) with a pre-configured environment. The sandbox is created fresh for each run and destroyed after completion.

What’s pre-installed

Component	Version	Description
AI Agent	Latest	AI coding agent with tool use, file editing, and web fetching
casedev CLI	v0.1.1+	Pre-authenticated CLI for all Case.dev services
Node.js	22	Runtime for scripts and tools
curl	System	HTTP requests

The casedev CLI

The CLI is pre-authenticated with a scoped API key — no login required. The agent can call any Case.dev service:

Vault operations

# List vaults
casedev vault list

# Search a vault
casedev vault search --id vault_abc --query "force majeure clauses"

# Upload a file (see the CLI reference for the full 4-step flow)
casedev vault upload \
  --id vault_abc \
  --filename report.md \
  --content-type text/markdown

# Download files
casedev vault:objects download --id vault_abc --object-id obj_xyz -o report.md

See the CLI File uploads reference for the complete upload flow (presigned URL → S3 PUT → confirm → ingest).

Legal research

# Search case law, statutes, and regulations
casedev legal:v1 find --query "employment discrimination ADA"

# Deep research with multiple query variations
casedev legal:v1 research --query "trade secret misappropriation"

# Search US patents
casedev legal:v1 patent-search --query "natural language processing" --assignee "Google"

# Federal court docket search
casedev legal:v1 docket --query "securities class action" --date-filed-min 2020-01-01

Web search

# Web search
casedev search:v1 search --query "recent SCOTUS rulings on digital privacy"

# Fetch and extract text from a URL
casedev search:v1 contents --urls https://example.com/ruling.pdf

Other services

# OCR a document by URL
casedev ocr:v1 process --document-url "https://..."

# Transcribe audio stored in a vault
casedev voice:transcription create --vault-id vault_abc --object-id obj_xyz

# Chat completion
casedev llm:v1:chat create-completion \
  --model anthropic/claude-sonnet-4.6 \
  --message '{"role":"user","content":"..."}'

Run casedev --help inside the sandbox to see all available commands, and casedev <resource> --help for per-resource flags. Command names are colon-separated (vault:objects, llm:v1:chat), not space-separated.

Agent tools

The AI agent has access to these tools for working within the sandbox:

Tool	Description
`bash`	Execute shell commands (including the casedev CLI)
`read`	Read files from the sandbox filesystem
`write`	Create or overwrite files
`edit`	Make targeted edits to existing files
`glob`	Find files by pattern
`grep`	Search file contents
`webfetch`	Fetch and parse web pages
`todowrite`	Track multi-step task progress

The agent uses these tools autonomously to complete your prompt. For example, when asked to “search a vault and compile a report,” it will:

Run casedev vault list via bash to find vaults
Run casedev vault search --id <vault_id> --query ... to find relevant content
Use write to create a markdown report
Run the casedev vault upload → S3 PUT → casedev vault confirm-upload flow to store the report
Run casedev vault:objects create-presigned-url to obtain a download URL

Sandbox resources

Resource	Default	Configurable
CPU	2 cores	Yes, via `sandbox.cpu`
Memory	2048 MiB	Yes, via `sandbox.memoryMiB`
Timeout	30 minutes	No
Disk	Ephemeral	No
Network	Full outbound	No

Configure resources when creating the agent:

curl -X POST https://api.case.dev/agent/v1/agents \
  -H "Authorization: Bearer $CASEDEV_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Heavy Processor",
    "instructions": "Process large document sets.",
    "sandbox": {
      "cpu": 4,
      "memoryMiB": 4096
    }
  }'

casedev agent:v1:agents create \
  --name "Heavy Processor" \
  --instructions "Process large document sets." \
  --sandbox '{"cpu":4,"memoryMiB":4096}'

const agent = await client.agents.create({
  name: 'Heavy Processor',
  instructions: 'Process large document sets.',
  sandbox: {
    cpu: 4,
    memoryMiB: 4096,
  },
})

agent = client.agent.v1.agents.create(
    name="Heavy Processor",
    instructions="Process large document sets.",
    sandbox={"cpu": 4, "memory_mib": 4096},
)

agent, _ := client.Agent.V1.Agents.New(ctx, casedev.AgentV1AgentNewParams{
    Name:         casedev.F("Heavy Processor"),
    Instructions: casedev.F("Process large document sets."),
    Sandbox: casedev.F(casedev.AgentV1AgentNewParamsSandbox{
        CPU:       casedev.F(int64(4)),
        MemoryMiB: casedev.F(int64(4096)),
    }),
})

Filesystem

The sandbox starts in /workspace with a clean filesystem. The agent can create, read, and modify files freely. Key paths:

Path	Purpose
`/workspace`	Working directory
`/workspace/agent.json`	Agent configuration (auto-generated)
`/usr/local/bin/casedev`	CLI binary

The sandbox filesystem is ephemeral. Files are destroyed when the run completes. To persist results, upload them to a vault using the casedev vault upload presigned-URL flow.

Security model

Each sandbox is fully isolated:

Dedicated container — no shared state between runs
Scoped API key — the agent’s key only has access to authorized vaults and services
Network isolation — outbound access only, no inbound connections
Auto-cleanup — sandbox is destroyed after run completes or times out

The agent’s API key is automatically revoked if the agent is deleted.

Limitations

Limitation	Details
No inbound networking	The sandbox cannot receive incoming connections
30-minute timeout	Long-running tasks must complete within this window
No GPU	CPU-only environment
No persistent storage	Use vaults for any data that needs to survive the run
Single session	One agent session per run

Get Started

Platform

Resources

Sandbox Environment

What’s pre-installed

The casedev CLI

Vault operations

Legal research

Web search

Other services

Agent tools

Sandbox resources

Filesystem

Security model

Limitations

​What’s pre-installed

​The casedev CLI

​Vault operations

​Legal research

​Web search

​Other services

​Agent tools

​Sandbox resources

​Filesystem

​Security model

​Limitations

What’s pre-installed

The casedev CLI

Vault operations

Legal research

Web search

Other services

Agent tools

Sandbox resources

Filesystem

Security model

Limitations