{
  "id": "extension-interface:sandbox",
  "_kind": "ExtensionInterface",
  "_file": "extensions/extension-interfaces/sandbox.yaml",
  "_cluster": "extensions",
  "attributes": {
    "interfaceVersion": "1.0.0",
    "description": "Sandbox",
    "displayName": "Sandbox",
    "concern": "Bounded execution for untrusted code and shell commands.",
    "surface": "`exec(cmd, limits)` runs a command under CPU/mem/network/file\nlimits and returns a typed result.\n",
    "builtInDefault": "Direct host shell with no sandboxing. Permission prompts only.\n",
    "notableImpls": [
      "tool-server:filesystem-mcp"
    ]
  },
  "outgoingEdges": [],
  "incomingEdges": [
    {
      "from": "tool-server:filesystem-mcp",
      "to": "extension-interface:sandbox",
      "kind": "implements",
      "attributes": {}
    },
    {
      "from": "tool-server:postgres-mcp",
      "to": "extension-interface:sandbox",
      "kind": "implements",
      "attributes": {}
    },
    {
      "from": "tool-server:sqlite-mcp",
      "to": "extension-interface:sandbox",
      "kind": "implements",
      "attributes": {}
    }
  ]
}