Agents

.cargo/audit.toml

@@ -8,4 +8,12 @@ ignore = [
     # rsa 0.9.10 Marvin Attack (timing sidechannel). No fix available. Transitive
     # dependency via sqlx-mysql — Hadrian doesn't use RSA keys for MySQL auth.
     "RUSTSEC-2023-0071",
+    # hickory-proto 0.25.2 NSEC3 unbounded loop and O(n²) name-compression DoS.
+    # Pulled in only by microsandbox-network (the `runtime-microsandbox` feature,
+    # off in every default profile) for in-microVM DNS resolution behind the
+    # sandbox egress allowlist. microsandbox 0.4.5 pins the hickory 0.25.x line
+    # (see the dependency comment in Cargo.toml); a fixed 0.26.x requires a
+    # microsandbox bump. Hadrian's own resolver uses hickory-resolver 0.26.1.
+    "RUSTSEC-2026-0118",
+    "RUSTSEC-2026-0119",
 ]

.github/workflows/ci.yml

@@ -31,7 +31,7 @@ jobs:
         run: rustup install nightly && rustup component add rustfmt --toolchain nightly
 
       - name: Install dependencies
-        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev tesseract-ocr tesseract-ocr-eng
+        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev libcap-ng-dev tesseract-ocr tesseract-ocr-eng
 
       - name: Cache cargo
         uses: Swatinem/rust-cache@v2
@@ -85,7 +85,7 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
 
       - name: Install dependencies
-        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev tesseract-ocr tesseract-ocr-eng
+        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev libcap-ng-dev tesseract-ocr tesseract-ocr-eng
 
       - name: Cache cargo
         uses: Swatinem/rust-cache@v2
@@ -202,7 +202,7 @@ jobs:
 
       - name: Install dependencies (Linux full)
         if: matrix.features == 'full' && runner.os == 'Linux'
-        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev
+        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev libcap-ng-dev
 
       - name: Install dependencies (macOS)
         if: runner.os == 'macOS'
@@ -436,7 +436,7 @@ jobs:
       - name: Install build deps for samael
         run: |
           sudo apt-get update
-          sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev pkg-config libssl-dev
+          sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libcap-ng-dev pkg-config libssl-dev
 
       - name: Regenerate Hadrian OpenAPI spec
         run: cargo run --release -- openapi --output openapi/hadrian.openapi.json

.github/workflows/release.yml

@@ -166,7 +166,7 @@ jobs:
 
       - name: Install dependencies (Linux full/standard)
         if: runner.os == 'Linux' && (contains(matrix.features, 'full') || contains(matrix.features, 'standard'))
-        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev libssl-dev pkg-config
+        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev libcap-ng-dev libssl-dev pkg-config
 
       - name: Install dependencies (macOS)
         if: runner.os == 'macOS'
@@ -301,7 +301,7 @@ jobs:
           shared-key: publish
 
       - name: Install dependencies
-        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev tesseract-ocr tesseract-ocr-eng
+        run: sudo apt-get update && sudo apt-get install -y libxml2-dev libxslt1-dev libxmlsec1-dev libclang-dev libcap-ng-dev tesseract-ocr tesseract-ocr-eng
 
       - name: Publish to crates.io
         run: cargo publish --no-default-features --features headless --allow-dirty

CLAUDE.md

@@ -19,15 +19,18 @@ Read files in `agent_instructions/` for detailed guidance on specific tasks:
 
 - `adding_admin_endpoint.md` — Admin endpoints and pagination patterns
 - `adding_frontend_tool.md` — Frontend tools
-- `adding_provider.md` — LLM providers
-- `architecture.md` — Multi-tenancy, auth, RBAC, SSO, request flow, RAG, chat modes, caching
+- `adding_provider.md` — LLM providers (and how server-side tools rewrite)
+- `adding_runtime.md` — Shell-tool runtime backends (passthrough, microsandbox, opensandbox, …)
+- `architecture.md` — Multi-tenancy, auth, RBAC, SSO, request flow, RAG, chat modes, caching, server-side tools
 - `ci_cd.md` — CI, release, and deploy pipelines
 - `configuration.md` — Config sections, feature flags, provider options
+- `containers.md` — Responses-API containers, shell tool, lifecycle, file staging
 - `database_changes.md` — Database migrations and schema changes
 - `documentation.md` — Documentation site, writing guidelines, Storybook embeds
 - `frontend_conventions.md` — Frontend conventions, accessibility (WCAG 2.1 AA)
 - `key_files.md` — Comprehensive file listing by subsystem
 - `modifying_chat_ui.md` — Chat UI performance (stores, selectors, memoization)
+- `responses_pipeline.md` — Foreground/background streaming pipeline, server-tool loop
 - `testing.md` — Provider e2e tests (wiremock), university E2E tests
 - `wasm.md` — WASM build architecture and frontend development
 
@@ -61,6 +64,17 @@ Hierarchical profiles (default: `full`):
 - **`headless`** — full without embedded assets
 - **`wasm`** — Browser-only build (see `agent_instructions/wasm.md`)
 
+Shell-tool runtime backends are gated by their own feature flags (off by default in every
+profile so the heavy SDKs are opt-in):
+
+- **`runtime-microsandbox`** — pulls in the microsandbox SDK + microVM dependencies for the
+  in-process `microsandbox` runtime.
+- **`runtime-opensandbox`** — pulls in the HTTP client glue for the Alibaba OpenSandbox
+  Lifecycle API. No new system dependencies.
+
+`passthrough_openai` and `client_passthrough` runtimes are always available; they require no
+extra cargo features. See `agent_instructions/containers.md`.
+
 ```bash
 cargo build --no-default-features --features tiny       # Smallest binary
 cargo build --no-default-features --features minimal    # Fast compile