feat: execution sandbox — per-thread hard isolation for the agent workspace (opt-in)#289

Merged

blove merged 24 commits into

mainfrom

feat/execution-sandbox

Jul 6, 2026

Commits on Jul 6, 2026

docs(spec): execution sandbox design

blove
and
claude
committed
docs(plan): execution sandbox implementation plan

blove
and
claude
committed
feat(workspace): sandbox provider contract types
blove
committed
feat(core): DawnConfig.sandbox key + typed config() helper

blove
and
claude
committed
chore(sandbox): scaffold @dawn-ai/sandbox package

blove
and
claude
committed
feat(sandbox): in-memory fakeSandbox provider for tests

blove
and
claude
committed
feat(sandbox): provider conformance kit

blove
and
claude
committed
feat(cli): SandboxManager per-thread lifecycle

blove
and
claude
committed
feat(cli): resolve sandbox manager + route the workspace into the thread sandbox

blove
and
claude
committed
feat(cli): sandbox manager singleton, DELETE/shutdown hooks, idle reaper

blove
and
claude
committed
test(runtime): sandbox wiring e2e via fakeSandbox (no Docker)

blove
and
claude
committed
fix(langchain): bypass materialized-agent cache when sandboxed — per-thread tool isolation

blove
and
claude
committed
feat(cli): dawn check validates sandbox config + runs provider preflight

blove
and
claude
committed
feat(sandbox): injectable docker CLI wrapper
blove
committed
feat(sandbox): docker filesystem + exec backends
blove
committed
feat(sandbox): dockerSandbox provider (acquire/release/destroy/preflight)
blove
committed
test(sandbox): gated real-Docker conformance + e2e CI lane
blove
committed
docs: execution sandbox guide
blove
committed
chore: changeset for execution sandbox (patch)
blove
committed
fix(cli): decouple sandbox scoping key from checkpoint thread_id in subagent dispatch

blove
and
claude
committed
chore(sandbox): align new package version with fixed group (0.8.5)
blove
committed
chore: lockfile after sandbox version align
blove
committed
fix(sandbox): review findings — writeFile parent dirs, drain-before-release shutdown, env key validation

blove
and
claude
committed
fix(cli): route startRuntimeServer shutdown through the listener close — sandbox cleanup on production shutdown
blove
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: execution sandbox — per-thread hard isolation for the agent workspace (opt-in)#289

feat: execution sandbox — per-thread hard isolation for the agent workspace (opt-in)#289
blove merged 24 commits into
mainfrom
feat/execution-sandbox

Commits on Jul 6, 2026

docs(spec): execution sandbox design

docs(plan): execution sandbox implementation plan

feat(workspace): sandbox provider contract types

feat(core): DawnConfig.sandbox key + typed config() helper

chore(sandbox): scaffold @dawn-ai/sandbox package

feat(sandbox): in-memory fakeSandbox provider for tests

feat(sandbox): provider conformance kit

feat(cli): SandboxManager per-thread lifecycle

feat(cli): resolve sandbox manager + route the workspace into the thread sandbox

feat(cli): sandbox manager singleton, DELETE/shutdown hooks, idle reaper

test(runtime): sandbox wiring e2e via fakeSandbox (no Docker)

fix(langchain): bypass materialized-agent cache when sandboxed — per-thread tool isolation

feat(cli): dawn check validates sandbox config + runs provider preflight

feat(sandbox): injectable docker CLI wrapper

feat(sandbox): docker filesystem + exec backends

feat(sandbox): dockerSandbox provider (acquire/release/destroy/preflight)

test(sandbox): gated real-Docker conformance + e2e CI lane

docs: execution sandbox guide

chore: changeset for execution sandbox (patch)

fix(cli): decouple sandbox scoping key from checkpoint thread_id in subagent dispatch

chore(sandbox): align new package version with fixed group (0.8.5)

chore: lockfile after sandbox version align

fix(sandbox): review findings — writeFile parent dirs, drain-before-release shutdown, env key validation

fix(cli): route startRuntimeServer shutdown through the listener close — sandbox cleanup on production shutdown