Repository navigation
Sandbox provider suggestion: Capsule (WebAssembly-based local alternative) #13
Description
Hi @bidah,
Your project looks great! I saw you're using cloud-based providers like E2B and Daytona to sandbox untrusted code. I've been building Capsule, a local alternative based on WebAssembly that's quite straightforward to implement.
In your current architecture, you could add it like this:
import { run } from '@capsule-run/sdk/runner';
const result = await run({
file: './sandbox.ts',
args: [untrustedCode],
});And in a separate file (sandbox.ts):
import { task } from "@capsule-run/sdk";
export const executeCode = task({
name: "executeCode",
compute: "LOW",
timeout: "10s",
ram: "64MB",
}, (code: string) => {
const fn = new Function(code);
return fn();
});
export const main = task({
name: "main",
compute: "MEDIUM"
}, async (code: string) => {
return executeCode(code);
});You can create tasks for your sandboxed actions and set limits per task: CPU (via compute units), memory, filesystem access, timeouts, and retries.
Here's the repo with more examples and documentation: https://github.com/mavdol/capsule
Hope this could be useful for your project!
Activity
bidah commentedon Feb 24, 2026
this is very interesting, we are pushing a local setup with claude code vs claude agent sdk, and in that regard that combined with a local sandboxing for the react native app makes sense.
mavdol commentedon Feb 24, 2026
Thanks @bidah ! Oh i see, yeah it could fit really well. Let me know if you ever need help implementing it or resources for your coding agent.
bidah commentedon Mar 12, 2026
go with a PR, we can test it
mavdol commentedon Mar 13, 2026
Hi! I just took a closer look at the codebase, and I realize I may have misunderstood the "E2B and Daytona SDK for secure code execution" line in the readme. I thought we were looking for a local alternative code interpreter sandbox.
The solution I built is more designed for stateless, isolated task execution like running individual Python/JavaScript code or other specific sandboxed tasks. From what I see, we probably need a full stateful environment (like Docker) for react native vibe code sdk.