feat(sandbox): integrate @anthropic-ai/sandbox-runtime as outer sandbox layer#7

Merged

linuxdevel merged 13 commits intomainfrom

feat/sandbox-runtime-integration

Mar 20, 2026

Commits on Mar 20, 2026

chore(sandbox): add @anthropic-ai/sandbox-runtime git dependency
linuxdevel
committed
feat(sandbox): extend NetworkPolicy type and EnforcementLayers/KernelCapabilities
linuxdevel
committed
feat(sandbox): add PolicyBuilder.toRuntimeConfig() translating to SandboxRuntimeConfig
linuxdevel
committed
feat(sandbox): replace unshare detection with sandbox-runtime dependency checks
linuxdevel
committed
feat(sandbox): rewrite Sandbox.execute() to use SandboxManager.wrapWithSandbox()
linuxdevel
committed
feat(cli): initialize SandboxManager network proxy before constructing Sandbox
linuxdevel
committed
feat(cli): update doctor checks for sandbox-runtime

linuxdevel
and
claude
committed
feat(sandbox): inject C helper via --policy-file for Landlock + cap-drop inside bwrap

linuxdevel
and
claude
committed
fix(sandbox): filter denyRead paths by real directories to avoid bwrap failure

linuxdevel
and
claude
committed
docs: update documentation for sandbox-runtime integration

linuxdevel
and
claude
committed
fix(cli): add @anthropic-ai/sandbox-runtime as direct CLI dependency

linuxdevel
and
claude
committed
fix(core): handle slow_down in device flow poll and add fetch timeouts

linuxdevel
and
claude
committed
fix(core): add fetch timeout to getCopilotToken

linuxdevel
and
claude
committed