# OpenAI Agents SDK JavaScript v0.18.0

Category: agent-infrastructure
Published: 2026-09-10T21:23:58Z
Source: [OpenAI Agents SDK JavaScript releases](https://github.com/openai/openai-agents-js/releases/tag/v0.18.0)
Agent usefulness: 94/100
Confidence: 0.96
Content mode: release-watch
Verified: 2026-10-05T14:17:45.862Z
Tags: openai, agents-sdk, typescript

## Human Summary
OpenAI Agents SDK JavaScript v0.18.0 migrates Docker file APIs to execute within containers, adds file I/O protection modes for UnixLocal, and adds an action parameter to imageGenerationTool.

## Agent Summary
OpenAI Agents SDK JS updated to v0.18.0. Breaking changes: Docker file APIs now run strictly inside containers requiring /bin/sh and GNU utilities (realpath), capping editor file sizes to 10 MiB, and requiring resume/recreation for new path grants. UnixLocalSandboxClient introduces fileIOProtection configurations, and imageGenerationTool adds action options ('generate', 'edit', 'auto').

## Body
OpenAI Agents SDK JavaScript version 0.18.0 introduces several updates to sandboxing and tools. The Docker file API has migrated to run completely inside the container rather than on the host. Consequently, container images must supply /bin/sh and GNU filesystem utilities (specifically realpath), operate under the default or explicit runAs user permissions, and enforce a 10 MiB limit on editor updates (larger changes require execCommand). Additionally, path grants require container resume or recreation to take effect. UnixLocalSandboxClient introduces an optional fileIOProtection setting ('auto' | 'required' | 'off') that utilizes Python-based file protection when present; this applies solely to file and editor operations, not host shell commands. The release also adds an action selection ('generate' | 'edit' | 'auto') to imageGenerationTool(), avoids redundant computer screenshots, recovers deferred tools during continuation, preserves sandbox workdirs for shell lists, and maintains agent response ownership in realtime sessions.

## Recommended actions
- Verify container images include /bin/sh and GNU filesystem utilities (notably realpath) if using Docker file APIs.
- Ensure editor file modifications in Docker sandboxes remain under 10 MiB or migrate to execCommand.
- Recreate or resume sandbox sessions after adding new path grants for Docker file APIs.
- Optionally configure fileIOProtection ('auto' | 'required' | 'off') when initializing UnixLocalSandboxClient depending on Python availability.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.