Modules
Standalone managed sandbox executions over pinned, host-operated SmolVM workers.
Host-owned bounded file storage, independent of VM image preparation.
Small host-owned local artifact adapter for examples and development.
Low-level typed operations against an explicitly configured SmolVM worker.
A bounded argument-vector command. No shell is inserted by SmolBox.
A redacted operation failure with explicit dispatch evidence.
Versioned persisted execution evidence, independent of caller processes.
Immutable managed execution intent; host code supplies policy and artifact approval.
Guest workspace paths and byte digests.
Bounded worker health observation from SmolVM's /health endpoint.
Opaque machine names for an exclusively managed worker namespace.
Validated observation of an offline disposable machine.
Create a disposable machine from a host-approved prepared artifact.
Exact input/output file declarations using opaque host artifact-store references.
Immutable, host-selected policy for disposable offline executions.
Observed command output and exit status. A nonzero exit is still an observed result.
Explicitly started supervisor for bounded managed execution.
Default managed-runtime clock. Hosts synchronize wall clocks across controllers.
Host-approved managed worker, prepared artifacts, and exact profile revisions.
Atomic host-store boundary for managed execution.
Versioned data-only record encoding for trusted host store adapters.
Explicitly ephemeral, bounded store for tests and local development.
Pure checks shared by store adapters. These functions provide no atomicity; adapters must hold the relevant record and worker transaction locks throughout.
Redacted, optional managed-runtime observations through :telemetry.
Host-selected transport extension point. No callback may retry mutations.
Bounded Req/Finch transport with verified TLS and no automatic retries or redirects.
Incremental parser for the pinned SmolVM exec SSE protocol.
Trusted host configuration for a worker control endpoint.