[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-92335":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":16,"subscribersCount":16,"size":16,"stars1d":16,"stars7d":16,"stars30d":17,"stars90d":16,"forks30d":16,"starsTrendScore":16,"compositeScore":18,"rankGlobal":10,"rankLanguage":10,"license":19,"archived":20,"fork":20,"defaultBranch":21,"hasWiki":22,"hasPages":20,"topics":23,"createdAt":10,"pushedAt":10,"updatedAt":24,"readmeContent":25,"aiSummary":26,"trendingCount":16,"starSnapshotCount":16,"syncStatus":27,"lastSyncTime":28,"discoverSource":29},92335,"code-interpreter","ClickHouse\u002Fcode-interpreter","ClickHouse","Sandboxed code execution API for AI agents: powers LibreChat's Code Interpreter","",null,"TypeScript",61,17,52,3,0,8,44.57,"Apache License 2.0",false,"main",true,[],"2026-07-22 04:02:05","# Code Interpreter\n\nSandboxed code execution service for LibreChat, providing secure execution of user-submitted code with file storage and tool calling capabilities.\n\n## Overview\n\nCode Interpreter (internally `codeapi`, the prefix used by its env vars, images, and helm chart) is a multi-component service that enables LibreChat to safely execute user code in isolated sandboxes. It consists of five independently scalable components that communicate via Redis queues and S3-compatible storage.\n\n## Components\n\n- **API** - HTTP gateway that accepts code execution requests and returns results\n- **Worker Sandbox** - Executes code in NsJail (or libkrun microVM) sandboxes with resource limits\n- **File Server** - Manages file uploads\u002Fdownloads via S3 (IRSA authentication)\n- **Tool Call Server** - Handles programmatic tool calls from within sandbox sessions\n- **Package Init** - One-time job that pre-installs language runtimes (Python, Node, Bun) onto a shared PVC\n\n## Architecture\n\n1. LibreChat sends a code execution request to the **API**\n2. API enqueues the job in Redis\n3. **Worker Sandbox** picks up the job and executes code inside an isolated sandbox\n4. Files are persisted\u002Fretrieved via the **File Server** (backed by S3)\n5. Tool calls from within sandboxes are routed through the **Tool Call Server**\n\n## Sandbox Isolation\n\nTwo modes are supported:\n\n- **NsJail mode** (`kvmEnabled: false`): Direct NsJail sandboxing with Linux namespaces and cgroups\n- **MicroVM mode** (`kvmEnabled: true`): libkrun microVM with its own kernel, NsJail runs inside the guest\n\n## Security disclaimer\n\nThis service exists to run arbitrary, untrusted code — treat every\ndeployment decision accordingly.\n\nIn its full hardened configuration — MicroVM mode (`kvmEnabled: true`, so\nsandboxed code runs under a separate guest kernel) with NsJail inside the\nguest, seccomp filtering, the egress gateway in front of all\nsandbox-originated traffic, network policies applied, signed execution\nmanifests, and `hardenedSandboxMode` left on — it is reasonably secure and\ndesigned with defense in depth. NsJail-only mode shares the host kernel and\nprovides meaningfully weaker isolation: it is appropriate for local\ndevelopment, not for executing untrusted code from people you don't trust.\n\nNo software is 100% secure. Sandbox escapes, kernel vulnerabilities, and\nmisconfiguration are all real risks for any code-execution system. Keep the\nhardening defaults on, run the stack on isolated infrastructure with least\nprivilege, keep hosts patched, and deploy responsibly. If you believe you\nhave found a vulnerability, please report it privately rather than opening a\npublic issue (see [CONTRIBUTING](CONTRIBUTING.md)).\n\n## Local Development\n\n```bash\ndocker-compose up --build\n```\n\nLocal Docker Compose files set `CODEAPI_INTERNAL_SERVICE_TOKEN` to a shared\ndevelopment value by default. Production deployments must override it with a\nstrong secret; when it is unset, file object routes and Tool Call Server\nsession-management routes stay unauthenticated for backwards compatibility.\n\n## Health Checks\n\n- API: `GET \u002Fv1\u002Fhealth`\n- Worker: `GET \u002Fhealth` and `GET \u002Fready`\n- File Server: `GET \u002Fhealth` and `GET \u002Fready`\n- Tool Call Server: `GET \u002Fhealth`\n","这是一个为AI代理提供沙盒化代码执行能力的后端服务，核心功能包括安全隔离的代码运行环境（支持NsJail容器化与libkrun微虚拟机双模式）、文件存储管理（S3兼容）、工具调用中继及多语言运行时预装（Python\u002FNode\u002FBun）。采用Redis队列解耦、组件独立伸缩架构，强调纵深防御设计，适用于需动态执行用户提交代码的AI聊天应用（如LibreChat）或低信任度交互式编程场景。",2,"2026-07-08 04:30:09","CREATED_QUERY"]