# capsule

> A secure, durable runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.

- **URL**: https://www.freshcrate.ai/projects/capsule
- **Author**: mavdol
- **Category**: Security
- **Latest version**: `v0.8.10` (2026-04-27)
- **License**: Apache-2.0
- **Source**: https://github.com/mavdol/capsule
- **Language**: Rust
- **GitHub**: 278 stars, 18 forks
- **Registry**: github
- **Tags**: `agentic-workflow`, `ai-agents`, `code-execution`, `code-interpreter`, `javascript`, `llm`, `python`, `rust`

## Description

A secure, durable runtime to sandbox AI agent tasks. Run untrusted code in isolated WebAssembly environments.

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v0.8.10` | 2026-04-27 | High | ## Improvements  ### TypeScript SDK Polyfills  - Add more built-in methods to fs - Add a real Wasi‑based stats system for files and folders - Add support for symlinks inside sandboxes |
| `v0.8.9` | 2026-04-22 | High | # Release notes  ### Rust Core improvements - Fix cache issues for multi-language projects - Improve task reporter to have better logs  ### Typescript SDK - Fix worker process issue for `run()` command - Fix absolute path issue for fs polyfills  ### Python SDK - Fix worker process issue for `run()` command |
| `v0.8.8` | 2026-04-17 | High | # Smaller Python bundle, worker mode, and path fixes  ## Improvements  ### Core - **Worker mode**: Added a `--worker` option to reduce child process overhead when using the `run()` function. - **Trace rebuild fix**: Fixed trace rebuild for projects using both Python and TypeScript sandboxes.  ### SDKs - **Smaller Python bundle**: Only import the necessary built-ins, reducing the overall size. - **TypeScript path fixes**: Resolved absolute path issues with `fs` polyfills. |
| `v0.8.7` | 2026-04-14 | High | # Path resolution, polyfills, and large argument support  > [!NOTE] > This release bundles several improvements made since v0.8.0 (versions 0.8.1 to 0.8.6 were internal steps).  ## Core Improvements  - **`--args-file` option**:  Bypass inline argument limits by passing arguments via a file. ```bash capsule run main.ts --args-file /tmp/tmp-file.txt # avoid inline limit ``` With this improvement, the `run()` function now handles large inputs more reliably.  - **Virtual CWD support** : |
| `v0.8.0` | 2026-04-09 | High | # Richer execution metrics  This release adds more visibility into each task's behavior.  ## What's New  ### Core improvements  You now get memory usage and outbound network requests for every task.  Example response:  ```json {   "success": true,   "result": "Hello from Capsule!",   "error": null,   "execution": {     "task_name": "data_processor",     "duration_ms": 1523,     "retries": 0,     "fuel_consumed": 45000,     "ram_used": 1200000,     "host_requests": [{ ... } |
| `v0.7.2` | 2026-03-30 | Medium | # Dynamic Directory Aliases (`--mount`) & Adapter Sessions  ## Core Improvements  Added `--mount` flag (CLI) and `mounts` parameter (SDK) to mount a host directory into the sandbox under an alias. ```bash # Mount a session workspace and expose it as "workspace" inside the task capsule run main.py --mount restricted-folder/sessions/abc123_workspace::workspace  # Multiple directories capsule run main.py \   --mount restricted-folder/sessions/abc123_workspace::workspace \   --mount rest |
| `v0.7.1` | 2026-03-24 | Medium | # Restricted Network Access by Default  ### Improvements  - Explicit allowed hosts are now required `allowed_hosts: ["anthropic.com"]` or `["*"]` to allow all hosts |
| `v0.7.0` | 2026-03-23 | Medium | # Prebuilt Sandbox Adapters & Python Component toolchain Improvements  This release adds prebuilt sandbox adapters for Python and TypeScript, plus improvements to Python's component toolchain.  ## What's New  ### TypeScript   #### Prebuilt Sandbox for Python & JavaScript  The `@capsule-run/adapter` package offers the same capabilities for TypeScript/JavaScript projects.  ```javascript import { runPython, runJavaScript } from '@capsule-run/adapter';  const pythonSandbox = await run |
| `v0.6.5` | 2026-03-09 | Low | # Extend linux compatibility to older version  ### improvements - Support glibc 2.28+ |
| `v0.6.4` | 2026-03-09 | Low | # Linux universal compatibility  ## What's new  ### Linux improvements - Rebuilt `linux-x64` binary as a static MUSL binary — no more GLIBC version requirements, works on Debian Bookworm, Ubuntu 22.04, Alpine, and any Linux distro - Added `linux-arm64` support (AWS Graviton, Apple Silicon Docker, Raspberry Pi) |

## Dependency audit

- **Score**: 100/100
- **Total deps**: 0
- **Resolved**: 0
- **Unresolved**: 0
- **License conflicts**: 0
- **Warnings**: 0
- **Scanned**: 2026-06-01

## Citation

- HTML: https://www.freshcrate.ai/projects/capsule
- Markdown: https://www.freshcrate.ai/projects/capsule.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/capsule/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._