Skip to main content
The kernel package provides the execution runtime, elicitation engine, and tools proxy that power Toolshed’s sandboxed script execution.

Runtime interface

ExecutionResult

Runtime implementations

RuntimeLocal

In-process execution using new Function(). No isolation — suitable only for local development with trusted scripts.

RuntimeVercel

Production runtime using Vercel Sandbox (Firecracker microVMs). Provides full isolation with configurable resources.

createRuntime(options)

Factory function that creates and configures a runtime:

ElicitationEngine

See the Elicitation Guide for usage details.

buildProxy(tools, invoke, searchTools?, describeTools?)

Builds the recursive ES Proxy that provides the tools.* namespace inside sandbox scripts.
  • tools.github.issues.list(args) invokes tool path github.issues.list
  • tools.search({ query, limit? }) searches the catalog
  • tools.describe.tool({ path }) gets a tool’s full definition
  • Enumeration is blocked — agents must use tools.search() to discover tools