@@ -0,0 +166,4 @@
+        self._config = config
+        host_root = config.host_sandbox_path
+        if not host_root:
+            host_root = "/tmp/sandbox"

@@ -0,0 +302,4 @@
+        # values (e.g. workspace_folder) are not corrupted.
+        output = self._parse_output(exec_result.stdout)
+        output = self._map_output_paths(output)
+        output["container_metadata"] = metadata.model_dump()

@@ -0,0 +342,4 @@
+
+        # Validate host path falls within the sandbox root to prevent
+        # path traversal attacks (e.g. /workspace/../../etc/shadow).
+        sandbox_root = Path(self._path_mapper.host_root).resolve()

@@ -0,0 +372,4 @@
+        # Write captured content to host path
+        dest = Path(host_path)
+        dest.parent.mkdir(parents=True, exist_ok=True)
+        dest.write_text(result.stdout, encoding="utf-8")

@@ -0,0 +430,4 @@
+            *self._devcontainer_target_args(),
+            "--",
+            "cat",
+            container_path,

@@ -0,0 +445,4 @@
+        """
+        start = time.monotonic()
+        try:
+            proc = subprocess.run(

@@ -0,0 +543,4 @@
+                return parsed
+            return {"result": parsed}
+        except (json.JSONDecodeError, TypeError):
+            return {"raw_output": stdout.strip()}

@@ -180,0 +181,4 @@
+                    ),
+                    duration_ms=0.0,
+                )
+            return self._container_executor.execute_tool(tool_name, inputs)

@@ -0,0 +404,4 @@
+
+    def _build_exec_command(self, tool_name: str, inputs: dict[str, Any]) -> list[str]:
+        """Build the ``devcontainer exec`` command for tool execution."""
+        inputs_json = json.dumps(inputs)

@@ -0,0 +445,4 @@
+        """
+        start = time.monotonic()
+        try:
+            proc = subprocess.run(

@@ -0,0 +459,4 @@
+                duration_ms=elapsed,
+                timed_out=False,
+            )
+        except subprocess.TimeoutExpired as exc:

@@ -0,0 +118,4 @@
+# ---------------------------------------------------------------------------
+
+
+def _normalise(path: str) -> str:

@@ -180,0 +181,4 @@
+                    ),
+                    duration_ms=0.0,
+                )
+            return self._container_executor.execute_tool(tool_name, inputs)