Toolbox API

Version probe and the SDK handshake.

Future child-process environment updates applied at spawn time.

The process engine: exec, pty and code processes, their logs, stdin, signals and lifecycle.

Long-lived execution hosts (shell and language kernels) that processes run in.

Filesystem: listing, transfer (streamed both ways), search and replace, permissions, change watch.

Repository operations shelled out to the sandbox's git with askpass credentials.

Language servers: lifecycle, document sync, completions and symbols.

Listening-port discovery.

Guest resource metrics.

Pull remote changes into an attached volume; publication remains internal.

Docker Engine startup status: whether the image's Docker was started, who owns it, and where its logs are. Read-only.

Desktop automation addon, lazily started on first request and relayed over loopback. Every route answers 503 ADDON_UNAVAILABLE when the addon is not staged.

Runner-only lifecycle operations on :2281 — entrypoint gate, secret injection, bucket mounts, self-delete. Not reachable through the toolbox proxy.