feat(agentwire): add minijail-based sandboxing for process agents

.devcontainer/run.sh

@@ -0,0 +1,24 @@
+#!/bin/bash
+# This script runs a command (or $SHELL if none is provided) in the dev container.
+# If the dev container isn't running yet, it will start it up.
+
+set -Eeuxo pipefail
+
+# We do this to be agnostic to cwd when we invoke the script.
+ORB_SW_DIR="$(realpath "$(dirname "${0}")/../")"
+
+# Figure out what the command we will execute will be, store it in CMD.
+if [ "$#" -eq "0" ]; then
+  CMD=$SHELL
+else
+  CMD="$@"
+fi
+
+# `devcontainer up` creates and starts the container or reuses the existing one.
+# Sed extracts the container ID from the stdout of the prior command.
+CONTAINER_ID=$(devcontainer up --workspace-folder "$ORB_SW_DIR" | sed 's/.*"containerId":"\([^"]*\)".*/\1/')
+
+# Actually execute CMD. We do this instead of devcontainer exec because the
+# latter caused issues with TUIs like neovim, whereas docker exec does not seem
+# to have these issues.
+docker exec -it -w /workspaces/"$(basename "${ORB_SW_DIR}")" -e SHELL=${SHELL} "$CONTAINER_ID" $CMD

agentwire/Cargo.toml

@@ -1,7 +1,10 @@
 [package]
 name = "agentwire"
-version = "0.0.1"
-authors = ["Valentyn Valiaiev <valentyn.valiaiev@toolsforhumanity.com>"]
+version = "1.1.0"
+authors = [
+	"Valentyn Valiaiev <valentyn.valiaiev@toolsforhumanity.com>",
+	"Bassam Sayed <bassam.sayed@toolsforhumanity.com>",
+]
 description = """
 A framework for asynchronous message-passing agents.
 """
@@ -15,13 +18,17 @@ rust-version.workspace = true
 
 [features]
 sandbox-network = []
+sandbox-minijail = ["dep:minijail", "dep:tempfile"]
 
 [dependencies.agentwire-macros]
 version = "=0.0.1"
 path = "macros"
 
 [dependencies]
 close_fds = "0.3.2"
+# linux-v18 tag - using rev for Nix compatibility
+minijail = { git = "https://github.com/google/minijail.git", rev = "3ce72e092f1ea94edc74545cd29df297e503d4fa", optional = true }
+tempfile = { version = "3", optional = true }
 futures = "0.3"
 libc = "0.2.93"
 nix = { version = "0.26.2", default-features = false, features = [