agent-sandbox

Package claude builds and runs the sandboxed `claude` command: it parses the launcher's arguments, constructs the `nono wrap … claude …` invocation (including the hook settings injected in hook mode), and executes it.

Package router routes a command to drop/host/container and executes it, independent of any transport (MCP, CLI).

Package safe holds shared helpers for the "safe" command wrappers.

Package dockercompose validates and runs docker compose invocations safely.

Package sandboxlifecycle decides whether the Docker sandbox needs starting and, when it does, brings it up — reporting whether the caller now owns it.

Package shellquote quotes strings as single shell tokens.