Module sandbox 

Sandboxed code execution for MCP tools and agent-generated code.

Provides Wasmtime or remote HTTP execution backends. (A microsandbox/ libkrun runner existed as an optional feature but was removed in re-remediate-stale-rustsec: it never compiled — its test called a nonexistent API — and pinned vulnerable hickory-proto into Cargo.lock.)

Re-exports

pub use runner::SandboxRunner;

pub use session_manager::SessionManager;

pub use types::*;

Modules

bindings

Immutable host configuration for sandbox execution. Child policies select opaque grants from this capture; they never resolve environment variables, mount paths, endpoints or credentials again.

execution

Trusted-host ownership of ephemeral sandbox operations. Dropping a model stream cancels its operation, not the task that owns creation and cleanup. Unknown create/destroy outcomes are retained; mutations are never replayed.

mcp_tools

MCP tool definitions for sandbox code execution.

platform

remote_runner

runner

session_manager

types

wasmtime_runner