Sandbox: make it a differentiator (parallel disposable envs, snapshots, previews, network policy)
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 15/100
- Issue type
- Feature
- Clarity
- Needs clarification
- Activity status
- Active
- Tech stack
- electron, linux, typescript
- Domain
- devtools, infrastructure
Research direction
Start by reading the sandbox roadmap in this issue and the referenced local swarm issue #438; the body names scoped-runtime.ts and devcontainer.json as relevant entry points. Pick a single item from the list and trace its existing implementation before estimating the work. Done is not defined for the overall request, which spans sandbox execution, isolation, previews, networking, and hardening.
Written by the indexing model from the issue text.
Description
Audit 2026-10-18, phase 2, ranked by value against effort:
- True in-container execution for every route: proxy provider shell, file and web tools into the sandbox.
- A disposable sandbox per task or agent for the local swarm (#438).
- Snapshot and branch: try N approaches in parallel and apply the best.
- Preview servers with port forwarding to the in-app browser.
- A per-sandbox network allowlist with an egress proxy (modelled in scoped-runtime.ts, not implemented; allowlist currently maps to none).
- Reproducible environment from the repo's devcontainer.json.
- A resource view across all running sandboxes.
- Safe Full access inside the sandbox (depends on 1).
Hardening notes: strip setuid binaries from the image; document the userns posture for rootful Linux engines.
- Dominant language
- TypeScript
- Stars
- 3
- Forks
- 0
- Avg merge
- 17h 33m
- Merged PRs (30d)
- 163
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from musterhq/muster-code
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
musterhq/muster-code#866 ·
Maintainers usually reply within 1 day
-
p2 type:feature
Difficulty 5/5 Over a week Newbie friendliness 35/100
musterhq/muster-code#843 · 1 comment ·
Maintainers usually reply within 1 day
-
p1 type:feature
Difficulty 5/5 Over a week Newbie friendliness 25/100
musterhq/muster-code#840 ·
Maintainers usually reply within 1 day
-
p1 type:feature
Difficulty 5/5 Over a week Newbie friendliness 30/100
musterhq/muster-code#829 ·
Maintainers usually reply within 1 day
-
type:bug
Difficulty 3/5 1-2 days Newbie friendliness 70/100
musterhq/muster-code#815 ·
Maintainers usually reply within 1 day
All issues in musterhq/muster-code
Similar issues
-
[analytics-core] getQueryParams does not decode `+` as space and truncates values containing `=`Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
amplitude/Amplitude-TypeScript#2179 · 1 comment ·
Maintainers usually reply within 2 days
-
ci good first issue severity: low
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
TMHSDigital/GH-Arcade#111 ·
-
AsnIntegerConverter.toASN coerces strings with +value, rounding integers outside safe-integer rangeOpen
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
PeculiarVentures/asn1-schema#189 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 4 days
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100