A zero-latency, client-side WebAssembly execution sandbox for DeepSeek Harness. Runs Python, JavaScript, and SQLite inside isolated Web Workers without backend server overhead.
CLI one-click launch, package managers, and Cordis integration
$ pnpm add @strukto-ai/mirageGuaranteed by TypeScript compile-time contracts, inter-plugin event bus calls enjoy zero-drift safety.
Supports dynamic runtime mounting and graceful unloading without restarting the primary host process.
Embeds multi-phase execution lifecycle guards, preventing context loss during long-horizon reasoning.
Designed for lightweight cross-platform environments, booting instantly across Node.js, Bun, and Deno.
Spawns an isolated Web Worker thread with an in-memory virtual filesystem.
Hydrates Pyodide or QuickJS WASM micro-kernels and standard library modules.
Executes target scripts with zero access to main-thread DOM or session cookies.
Pipes stdout, return values, and synthesized chart images back to the chat UI.
| Parameter | Type | Default | Description |
|---|---|---|---|
| runtimeLanguage | string | python | WASM sandbox runtime engine |
| executionTimeoutMs | number | 10000 | Worker execution timeout in milliseconds |
| preloadStandardLibs | boolean | true | Pre-warm scientific libraries in background |
Relies on microkernel lifecycle guards and fault-tolerant state machines for continuous reliability.
Native integration with SWE-bench workflows, automatically capturing diffs and verification metrics.
Separates reasoning from tool actions to independently locate and refactor multi-file codebases.
Safely orchestrates events across sandboxes to seamlessly link enterprise developer tooling.
Strictly isolate sub-process calls and network scope; deploy within Docker containers in production.
Configure adaptive exponential retries with strict timeouts to mitigate upstream model rate limits.
Persist state machine snapshots to survive hardware interruptions and resume instantly without loss.
Enable full trace logging, aggregating reasoning thought streams and tool I/O into your observability hub.
Increase the timeout parameter inside your YAML configuration and dispatch periodic heartbeat signals across the Cordis event bus. For long-running tool execution and model reasoning, configure persistent session snapshotting so suspended tasks can safely resume their exact context after interruptions, preventing the kernel from recycling active agent sessions prematurely.
The harness runtime natively provides end-to-end streaming hooks while its state machine automatically intercepts and strips <think> reasoning tags from model responses. Subscribe directly to the onThink event listener to consume live reasoning token streams in real-time, delivering typewriter animation to the user interface while persisting full trajectories for audit compliance.
Cordis microkernel uses directed acyclic graph topological sorting to dynamically resolve plugin dependencies. When shared services or runtime versions conflict, assign distinct isolated namespaces at the application entrypoint. Leveraging context injection alongside lazy activation ensures dependencies load strictly on-demand when tools are triggered, maintaining system stability and preventing memory bloat.
Combine isolated container sandboxing with fine-grained capability checks to prevent plugins from accessing sensitive files or unauthorized external networks. Enforce explicit runtime system call whitelisting through the microkernel, executing all third-party tool scripts inside isolated ephemeral containers to block arbitrary code execution and eliminate security privilege escalation risks entirely.
A zero-trust hardened container sandbox for executing untrusted AI code. Powered by Linux namespaces, strict seccomp syscall filters, and read-only rootfs with sub-millisecond cold starts.
A bidirectional safety firewall and policy enforcement proxy for DeepSeek Harness. Prevents prompt injection, redacts sensitive PII data, and intercepts dangerous CLI operations in real time.
An automated cryptographic sanitization and ephemeral cleanup guardian for DeepSeek Harness. Securely shreds temporary secrets, wipes memory key remnants, and clears untracked artifacts.