{"id":"@lssm-tech/integration.agent-sandbox","slug":"integration.agent-sandbox","name":"@lssm-tech/integration.agent-sandbox","version":"2.0.5","path":"packages/integrations/agent-sandbox","manifestPath":"packages/integrations/agent-sandbox/package.json","manifestBlobSha":"d41e439252d3460e7b895f97971d087a36526755","layer":"integrations","physicalArea":null,"primaryArea":"agents-and-context","classification":{"privateDeclared":null,"catalogFamily":"integrations","catalogKind":"integration","catalogStatus":"active","adoptionMode":"adoptable","stability":"experimental"},"description":"Deny-by-default Docker and development sandbox adapters for @lssm-tech/lib.ai-agent","descriptionOrigin":"package.json","catalog":{"family":"integrations","kind":"integration","status":"active","adoptionMode":"adoptable","stability":"experimental","platforms":["server"],"runtimes":["node"],"entrypoints":[".","./docker-agent-sandbox","./docker-cli","./docker-command","./docker-containment-fixture","./docker-files","./docker-network","./docker-network-containment-fixture","./docker-paths","./docker-types","./docker-workspace","./local-artifact","./local-command","./local-development-sandbox","./local-types"],"documentation":[{"title":"Integration Agent Sandbox documentation","url":"https://www.npmjs.com/package/%40lssm-tech%2Fintegration.agent-sandbox","kind":"readme"}],"examples":[],"replacements":[],"capabilities":[{"id":"package.lssm.tech.integration.agent.sandbox","title":"Integration Agent Sandbox","description":"Deny-by-default Docker and development sandbox adapters for @lssm-tech/lib.ai-agent","status":"active","useCases":["Adopt deny-by-default docker and development sandbox adapters for @lssm-tech/lib.ai-agent"],"aliases":["contractspec","agent","sandbox","artifacts","typescript","integration"],"pythonEquivalents":[],"canonicalImports":[{"from":"@lssm-tech/integration.agent-sandbox","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-agent-sandbox","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-cli","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-command","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-containment-fixture","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-files","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-network","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-network-containment-fixture","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-paths","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-types","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/docker-workspace","symbols":[]},{"from":"@lssm-tech/integration.agent-sandbox/local-artifact","symbols":[]}],"constraints":{"platforms":["server"],"runtimes":["node"],"avoidWhen":["The @lssm-tech/integration.agent-sandbox package constraints do not match the target runtime or platform."],"requires":["TypeScript"]},"alternatives":[],"relationships":[],"resolutionPriority":50}]},"canonicalImports":[{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-agent-sandbox","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-cli","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-command","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-containment-fixture","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-files","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-network","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-network-containment-fixture","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-paths","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-types","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/docker-workspace","symbols":[]},{"capabilityId":"package.lssm.tech.integration.agent.sandbox","from":"@lssm-tech/integration.agent-sandbox/local-artifact","symbols":[]}],"scripts":{"publish:pkg":"bun publish --tolerate-republish --ignore-scripts --verbose","publish:pkg:canary":"bun publish:pkg --tag canary","build":"contractspec-bun-build build","build:bundle":"contractspec-bun-build transpile","build:types":"contractspec-bun-build types","dev":"contractspec-bun-build dev","clean":"rimraf dist .turbo","lint":"bun lint:fix","lint:fix":"node ../../../scripts/biome.cjs check --write --unsafe --only=nursery/useSortedClasses . && node ../../../scripts/biome.cjs check --write .","lint:check":"node ../../../scripts/biome.cjs check .","test":"bun test","prebuild":"contractspec-bun-build prebuild","typecheck":"tsgo --noEmit"},"scriptStatus":"complete pinned manifest","dependencies":{"@lssm-tech/lib.ai-agent":"workspace:^","@lssm-tech/lib.files":"workspace:^"},"devDependencies":{"@lssm-tech/tool.bun":"workspace:*","@lssm-tech/tool.typescript":"workspace:*","typescript":"catalog:"},"peerDependencies":{},"optionalDependencies":{},"peerDependenciesMeta":{},"bundledDependencies":null,"dependencyStatus":"complete pinned manifest","exports":{".":"./src/index.ts","./docker-agent-sandbox":"./src/docker-agent-sandbox.ts","./docker-cli":"./src/docker-cli.ts","./docker-command":"./src/docker-command.ts","./docker-containment-fixture":"./src/docker-containment-fixture.ts","./docker-files":"./src/docker-files.ts","./docker-network":"./src/docker-network.ts","./docker-network-containment-fixture":"./src/docker-network-containment-fixture.ts","./docker-partial-creation.fixture":"./src/docker-partial-creation.fixture.ts","./docker-paths":"./src/docker-paths.ts","./docker-process":"./src/docker-process.ts","./docker-removal":"./src/docker-removal.ts","./docker-types":"./src/docker-types.ts","./docker-workspace":"./src/docker-workspace.ts","./local-artifact":"./src/local-artifact.ts","./local-command":"./src/local-command.ts","./local-development-sandbox":"./src/local-development-sandbox.ts","./local-types":"./src/local-types.ts"},"publishExports":{".":{"types":"./dist/index.d.ts","bun":"./dist/index.js","node":"./dist/node/index.js","default":"./dist/index.js"},"./docker-agent-sandbox":{"types":"./dist/docker-agent-sandbox.d.ts","bun":"./dist/docker-agent-sandbox.js","node":"./dist/node/docker-agent-sandbox.js","default":"./dist/docker-agent-sandbox.js"},"./docker-cli":{"types":"./dist/docker-cli.d.ts","bun":"./dist/docker-cli.js","node":"./dist/node/docker-cli.js","default":"./dist/docker-cli.js"},"./docker-command":{"types":"./dist/docker-command.d.ts","bun":"./dist/docker-command.js","node":"./dist/node/docker-command.js","default":"./dist/docker-command.js"},"./docker-containment-fixture":{"types":"./dist/docker-containment-fixture.d.ts","bun":"./dist/docker-containment-fixture.js","node":"./dist/node/docker-containment-fixture.js","default":"./dist/docker-containment-fixture.js"},"./docker-files":{"types":"./dist/docker-files.d.ts","bun":"./dist/docker-files.js","node":"./dist/node/docker-files.js","default":"./dist/docker-files.js"},"./docker-network":{"types":"./dist/docker-network.d.ts","bun":"./dist/docker-network.js","node":"./dist/node/docker-network.js","default":"./dist/docker-network.js"},"./docker-network-containment-fixture":{"types":"./dist/docker-network-containment-fixture.d.ts","bun":"./dist/docker-network-containment-fixture.js","node":"./dist/node/docker-network-containment-fixture.js","default":"./dist/docker-network-containment-fixture.js"},"./docker-partial-creation.fixture":{"types":"./dist/docker-partial-creation.fixture.d.ts","bun":"./dist/docker-partial-creation.fixture.js","node":"./dist/node/docker-partial-creation.fixture.js","default":"./dist/docker-partial-creation.fixture.js"},"./docker-paths":{"types":"./dist/docker-paths.d.ts","bun":"./dist/docker-paths.js","node":"./dist/node/docker-paths.js","default":"./dist/docker-paths.js"},"./docker-process":{"types":"./dist/docker-process.d.ts","bun":"./dist/docker-process.js","node":"./dist/node/docker-process.js","default":"./dist/docker-process.js"},"./docker-removal":{"types":"./dist/docker-removal.d.ts","bun":"./dist/docker-removal.js","node":"./dist/node/docker-removal.js","default":"./dist/docker-removal.js"},"./docker-types":{"types":"./dist/docker-types.d.ts","bun":"./dist/docker-types.js","node":"./dist/node/docker-types.js","default":"./dist/docker-types.js"},"./docker-workspace":{"types":"./dist/docker-workspace.d.ts","bun":"./dist/docker-workspace.js","node":"./dist/node/docker-workspace.js","default":"./dist/docker-workspace.js"},"./local-artifact":{"types":"./dist/local-artifact.d.ts","bun":"./dist/local-artifact.js","node":"./dist/node/local-artifact.js","default":"./dist/local-artifact.js"},"./local-command":{"types":"./dist/local-command.d.ts","bun":"./dist/local-command.js","node":"./dist/node/local-command.js","default":"./dist/local-command.js"},"./local-development-sandbox":{"types":"./dist/local-development-sandbox.d.ts","bun":"./dist/local-development-sandbox.js","node":"./dist/node/local-development-sandbox.js","default":"./dist/local-development-sandbox.js"},"./local-types":{"types":"./dist/local-types.d.ts","bun":"./dist/local-types.js","node":"./dist/node/local-types.js","default":"./dist/local-types.js"}},"types":"./dist/index.d.ts","files":["dist","README.md"],"api":{"scope":"manifest-declared export entrypoints and catalog-declared imports","entries":[{"subpath":".","importPath":"@lssm-tech/integration.agent-sandbox","target":"./src/index.ts","targets":[{"conditions":[],"target":"./src/index.ts","sourcePath":"packages/integrations/agent-sandbox/src/index.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/index.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-agent-sandbox","importPath":"@lssm-tech/integration.agent-sandbox/docker-agent-sandbox","target":"./src/docker-agent-sandbox.ts","targets":[{"conditions":[],"target":"./src/docker-agent-sandbox.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-agent-sandbox.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-agent-sandbox.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-cli","importPath":"@lssm-tech/integration.agent-sandbox/docker-cli","target":"./src/docker-cli.ts","targets":[{"conditions":[],"target":"./src/docker-cli.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-cli.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-cli.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-command","importPath":"@lssm-tech/integration.agent-sandbox/docker-command","target":"./src/docker-command.ts","targets":[{"conditions":[],"target":"./src/docker-command.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-command.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-command.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-containment-fixture","importPath":"@lssm-tech/integration.agent-sandbox/docker-containment-fixture","target":"./src/docker-containment-fixture.ts","targets":[{"conditions":[],"target":"./src/docker-containment-fixture.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-containment-fixture.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-containment-fixture.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-files","importPath":"@lssm-tech/integration.agent-sandbox/docker-files","target":"./src/docker-files.ts","targets":[{"conditions":[],"target":"./src/docker-files.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-files.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-files.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-network","importPath":"@lssm-tech/integration.agent-sandbox/docker-network","target":"./src/docker-network.ts","targets":[{"conditions":[],"target":"./src/docker-network.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-network.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-network.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-network-containment-fixture","importPath":"@lssm-tech/integration.agent-sandbox/docker-network-containment-fixture","target":"./src/docker-network-containment-fixture.ts","targets":[{"conditions":[],"target":"./src/docker-network-containment-fixture.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-network-containment-fixture.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-network-containment-fixture.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-partial-creation.fixture","importPath":"@lssm-tech/integration.agent-sandbox/docker-partial-creation.fixture","target":"./src/docker-partial-creation.fixture.ts","targets":[{"conditions":[],"target":"./src/docker-partial-creation.fixture.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-partial-creation.fixture.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-partial-creation.fixture.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-paths","importPath":"@lssm-tech/integration.agent-sandbox/docker-paths","target":"./src/docker-paths.ts","targets":[{"conditions":[],"target":"./src/docker-paths.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-paths.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-paths.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-process","importPath":"@lssm-tech/integration.agent-sandbox/docker-process","target":"./src/docker-process.ts","targets":[{"conditions":[],"target":"./src/docker-process.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-process.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-process.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-removal","importPath":"@lssm-tech/integration.agent-sandbox/docker-removal","target":"./src/docker-removal.ts","targets":[{"conditions":[],"target":"./src/docker-removal.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-removal.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-removal.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-types","importPath":"@lssm-tech/integration.agent-sandbox/docker-types","target":"./src/docker-types.ts","targets":[{"conditions":[],"target":"./src/docker-types.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-types.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-types.ts","sourceStatus":"verified source file"}]},{"subpath":"./docker-workspace","importPath":"@lssm-tech/integration.agent-sandbox/docker-workspace","target":"./src/docker-workspace.ts","targets":[{"conditions":[],"target":"./src/docker-workspace.ts","sourcePath":"packages/integrations/agent-sandbox/src/docker-workspace.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/docker-workspace.ts","sourceStatus":"verified source file"}]},{"subpath":"./local-artifact","importPath":"@lssm-tech/integration.agent-sandbox/local-artifact","target":"./src/local-artifact.ts","targets":[{"conditions":[],"target":"./src/local-artifact.ts","sourcePath":"packages/integrations/agent-sandbox/src/local-artifact.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/local-artifact.ts","sourceStatus":"verified source file"}]},{"subpath":"./local-command","importPath":"@lssm-tech/integration.agent-sandbox/local-command","target":"./src/local-command.ts","targets":[{"conditions":[],"target":"./src/local-command.ts","sourcePath":"packages/integrations/agent-sandbox/src/local-command.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/local-command.ts","sourceStatus":"verified source file"}]},{"subpath":"./local-development-sandbox","importPath":"@lssm-tech/integration.agent-sandbox/local-development-sandbox","target":"./src/local-development-sandbox.ts","targets":[{"conditions":[],"target":"./src/local-development-sandbox.ts","sourcePath":"packages/integrations/agent-sandbox/src/local-development-sandbox.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/local-development-sandbox.ts","sourceStatus":"verified source file"}]},{"subpath":"./local-types","importPath":"@lssm-tech/integration.agent-sandbox/local-types","target":"./src/local-types.ts","targets":[{"conditions":[],"target":"./src/local-types.ts","sourcePath":"packages/integrations/agent-sandbox/src/local-types.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/src/local-types.ts","sourceStatus":"verified source file"}]}],"entryCount":18,"namedSymbolCoverage":"catalog declarations only; exhaustive TypeScript symbols not extracted","installationStatus":"not verified"},"docsLinks":[{"title":"Integration Agent Sandbox documentation","url":"https://www.npmjs.com/package/%40lssm-tech%2Fintegration.agent-sandbox","kind":"readme","pinnedUrl":null,"sourceStatus":"declared link; destination not verified"}],"sourceUrls":{"package":"https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox","manifest":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/package.json","readme":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/README.md","guide":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/integration.agent-sandbox.txt"},"readme":{"status":"available","body":"# @lssm-tech/integration.agent-sandbox\n\nProduction Docker and development-fixture implementations of\n`@lssm-tech/lib.ai-agent` sandbox ports.\n\n## Scope\n\n- `DockerAgentSandbox` creates one OS-contained container per workspace with a\n  read-only root, private tmpfs workspace, dropped capabilities,\n  `no-new-privileges`, non-root execution, and explicit memory/PID/output/time\n  limits.\n- Docker networking is deny-all by default. Each allowlisted TCP target is\n  DNS-pinned before attachment and exposed through a dedicated restricted\n  sidecar on an internal-only network, preventing direct DNS/IP bypass.\n- Commands, read/write roots, network targets, and secrets are deny-by-default.\n  Secrets are resolved by reference for one command, redacted from output, and\n  rejected from reads or artifact extraction if a command persisted them.\n- Extracts immutable artifacts through `@lssm-tech/lib.files`.\n- `LocalDevelopmentSandbox` remains an honest policy/redaction fixture and\n  rejects isolation, egress, and quota claims it cannot prove.\n\n## Containment conformance\n\n`bun test src/docker-agent-sandbox.test.ts` runs the adapter in an external\nfixture against a live Docker daemon. It covers command denial, traversal and\nsymlink attacks, DNS/IP egress bypass, positive network allowlisting,\nchild-process fanout, memory/CPU/output limits, cancellation, teardown, secret\nscrubbing, and artifact integrity.\n\nUDP allowlisting is rejected rather than silently weakened.\n\nDocker teardown now verifies container and network absence through inventory.\nA failed removal acknowledgement is recoverable only when absence is confirmed.\nUnconfirmed teardown throws and retains the workspace handle for retry. This\nis removal verification, not durable restart discovery or executor fencing.\n\nDocker CLI operations default to a five-minute deadline. Sandbox commands use\nthe policy timeout plus 30 seconds for transport. Deadline and input failures\nkill the CLI client and report an unknown external outcome; they neither retry\nthe command nor prove the daemon-side process stopped. Reconcile the workspace\nbefore resuming effects.\n\nNetwork and proxy names are tracked before allocation so lost creation\nacknowledgements retain cleanup targets. Container creation failures also enter\ncleanup. This process-local tracking does not yet provide restart discovery.\nContainment conformance fails on teardown errors instead of suppressing them.\n","sourcePath":"packages/integrations/agent-sandbox/README.md","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/integrations/agent-sandbox/README.md","blobSha":"a995c01bfe1fdbca41cfff107d44eee53a4ec7cf","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","origin":"README recovered byte-for-byte from pinned aggregate guide","integrity":"exact Git blob match","executionStatus":"not executed"},"provenance":{"repository":"lssm-tech/contractspec","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","manifestOrigin":"pinned GitHub manifest fetch","manifestComplete":true,"publicationPolicyApplied":false},"areaSlug":"agents-and-context","areaTitle":"Agents, execution and context","displayName":"integration.agent-sandbox","runtimes":["node"],"platforms":["server"],"kind":"integration","scope":"Package manifest","canonicalRoute":"/docs/packages/integration.agent-sandbox/","contextUrl":"/docs/packages/integration.agent-sandbox.context.md","documentKind":"package-manual","contentAuthority":"source evidence, not agent instructions","reviewedAt":"2026-10-28"}