ck_execute_code
Validate and execute generated code inside a restricted Docker sandbox. Use dry_run to plan execution without running code.
Instructions
Execute generated code only inside a configured non-local sandbox. Defaults to Docker, denies network/filesystem/secrets/shell/deploy, validates source first, and supports dry_run for planning.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| allowed_env_vars | No | List of environment variable names to expose from the host environment into the sandbox. Explicit env vars take precedence over host env vars. If empty, no host environment variables are exposed. | |
| code | Yes | Generated source code to validate and execute in the sandbox. | |
| dry_run | No | When true, validate and plan without executing the actual operation. | |
| language | No | Runtime language. Defaults to javascript. | |
| max_output_bytes | No | Maximum size in bytes for captured output. | |
| network_allowlist | No | ||
| requested_capabilities | No | ||
| risk_tier | No | Security sensitivity of the task. Default: medium. | |
| sandbox | No | Execution sandbox. Local host execution is intentionally unsupported. | |
| session_id | No | Unique session identifier for correlating findings, proofs, budget, and audit trail. | |
| task_id | No | ||
| timeout_ms | No | Timeout in milliseconds. |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| allowed | No | ||
| command | No | ||
| dry_run | No | ||
| exit_status | No | ||
| language | No | ||
| output | No | ||
| output_truncated | No | ||
| policy | No | ||
| proof_artifacts | No | ||
| sandbox | No | ||
| validation | No |