Sandbox runs currently share the host filesystem with no private workspace. Agent-written code that needs to read fixtures or write intermediate files can leave residue, mutate host files, or collide with concurrent runs.
Add a per-run tmpdir (injected as workdir) that is always wiped when the run ends, plus optional read-only mounts of host fixtures into that workspace. Wire it into run and runInWorker via ephemeralFs, and expose the lifecycle helpers for standalone use.
Sandbox runs currently share the host filesystem with no private workspace. Agent-written code that needs to read fixtures or write intermediate files can leave residue, mutate host files, or collide with concurrent runs.
Add a per-run tmpdir (injected as
workdir) that is always wiped when the run ends, plus optional read-only mounts of host fixtures into that workspace. Wire it intorunandrunInWorkerviaephemeralFs, and expose the lifecycle helpers for standalone use.