edict_run
Execute WebAssembly modules in a secure sandbox with controlled access to filesystem, network, and crypto via host adapters. Supports execution limits and deterministic replay.
Instructions
Execute a compiled WebAssembly module (provided as base64) in a sandboxed runtime. The WASM VM has no ambient authority — filesystem, network, and crypto access are provided exclusively through host adapters. Returns standard output, exit code, and any sandbox limit errors. Supports optional execution limits (timeout, memory, sandbox directory) and external WASM modules for import interop. Set record: true to capture all non-deterministic host responses in a replay token for deterministic reproduction.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| wasmBase64 | Yes | The base64 encoded WebAssembly module to execute | |
| limits | No | Optional execution sandbox limits | |
| externalModules | No | External WASM modules keyed by import namespace (base64-encoded). Edict programs can import functions from these modules. | |
| record | No | When true, capture all non-deterministic host responses (random, time, IO, HTTP) in a replay token. The token is included in the response and can be passed to edict_replay for exact reproduction. |