diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0e40822..2662421 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,27 +13,23 @@ env:
 
 jobs:
   ci:
-    name: Test, Format, Lint
+    name: ${{ matrix.worker }}
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        worker: [image-resize, sandbox-docker, sandbox-firecracker]
     defaults:
       run:
-        working-directory: image-resize
+        working-directory: ${{ matrix.worker }}
     steps:
       - uses: actions/checkout@v4
-
       - uses: dtolnay/rust-toolchain@stable
         with:
           components: rustfmt, clippy
-
       - uses: Swatinem/rust-cache@v2
         with:
-          workspaces: image-resize -> target
-
-      - name: Check formatting
-        run: cargo fmt --all -- --check
-
-      - name: Run clippy
-        run: cargo clippy --all-targets --all-features -- -D warnings
-
-      - name: Run tests
-        run: cargo test --all-features
+          workspaces: ${{ matrix.worker }} -> target
+      - run: cargo fmt --all -- --check
+      - run: cargo clippy --all-targets --all-features -- -D warnings
+      - run: cargo test --all-features
diff --git a/README.md b/README.md
index 03076d6..eb3d2b8 100644
--- a/README.md
+++ b/README.md
@@ -1,71 +1,137 @@
-# Motia Workers
+# III Workers
 
-Worker modules for the [III engine](https://github.com/motia).
+Worker modules for the [III engine](https://github.com/iii-hq/iii).
 
-## Modules
+Each worker is a standalone Rust binary that connects to the engine via WebSocket, registers functions and triggers, and uses the engine's built-in state. No custom SDKs — consume workers through iii-sdk (`iii.trigger()`).
+
+## Workers
 
 ### image-resize
 
-A Rust-based image resize worker that connects to the III engine via WebSocket and processes images through stream channels.
+Image resize worker using stream channels.
 
 **Supported formats:** JPEG, PNG, WebP (including cross-format conversion)
 
-**Resize strategies:**
-
 | Strategy | Behavior |
 |---|---|
-| `scale-to-fit` | Scales the image to fit within the target dimensions, preserving aspect ratio (default) |
-| `crop-to-fit` | Scales and center-crops to fill the exact target dimensions |
+| `scale-to-fit` | Scales to fit within target dimensions, preserving aspect ratio (default) |
+| `crop-to-fit` | Scales and center-crops to fill exact target dimensions |
+
+```bash
+cd image-resize && cargo build --release
+./target/release/image-resize --url ws://127.0.0.1:49134
+```
+
+---
 
-**Features:**
-- EXIF orientation auto-correction
-- Configurable quality per format (JPEG, WebP)
-- Per-request parameter overrides (dimensions, quality, strategy, output format)
-- Module manifest output (`--manifest`)
+### sandbox-docker
 
-#### Prerequisites
+Docker container sandbox. Creates isolated containers, executes commands, runs code, reads/writes files.
 
-- Rust 1.70+
-- A running III engine instance
+**Functions registered:**
 
-#### Build
+| Function ID | Description |
+|---|---|
+| `sandbox::create` | Create a Docker container with security hardening |
+| `sandbox::get` | Get sandbox details by ID |
+| `sandbox::list` | List all sandboxes |
+| `sandbox::kill` | Stop and remove a sandbox |
+| `exec::run` | Execute a shell command inside a sandbox |
+| `exec::code` | Write and run a code snippet (Python, JavaScript, Bash) |
+| `fs::read` | Read a file from a sandbox |
+| `fs::write` | Write a file to a sandbox |
+| `fs::list` | List directory contents |
+
+**Security:** `pids_limit=256`, `cap_drop=[NET_RAW, SYS_ADMIN, MKNOD]`, `no-new-privileges`, `network=none` by default.
 
 ```bash
-cd image-resize
-cargo build --release
+cd sandbox-docker && cargo build --release
+./target/release/sandbox-docker --url ws://127.0.0.1:49134
 ```
 
-#### Usage
+**Usage from iii-sdk:**
 
-```bash
-# Run with defaults (connects to ws://127.0.0.1:49134)
-./target/release/image-resize
+```typescript
+const sbx = await iii.trigger({ functionId: 'sandbox::create', payload: { image: 'python:3.12-slim' } });
+const result = await iii.trigger({ functionId: 'exec::run', payload: { id: sbx.id, command: 'echo hello' } });
+const code = await iii.trigger({ functionId: 'exec::code', payload: { id: sbx.id, code: 'print(42)', language: 'python' } });
+await iii.trigger({ functionId: 'sandbox::kill', payload: { id: sbx.id } });
+```
+
+**Configuration (`config.yaml`):**
+
+```yaml
+default_image: python:3.12-slim
+default_timeout: 3600
+default_memory: 512
+max_sandboxes: 50
+workspace_dir: /workspace
+```
+
+---
 
-# Custom config and engine URL
-./target/release/image-resize --config ./config.yaml --url ws://host:port
+### sandbox-firecracker
 
-# Print module manifest
-./target/release/image-resize --manifest
+KVM CoW fork sandbox for sub-millisecond VM spawning. Hardware-enforced isolation via Intel VT-x / AMD-V. **Linux-only.**
+
+**How it works:** Loads a pre-built VM template (CPU state + memory dump) into a `memfd` at startup. Each `sandbox::create` call forks via `mmap(MAP_PRIVATE)` — Copy-on-Write memory mapping. Spawn time: ~0.8ms. Memory overhead: ~265KB per sandbox.
+
+**Functions registered:**
+
+| Function ID | Description |
+|---|---|
+| `sandbox::create` | Fork a new KVM VM from template (~0.8ms) |
+| `sandbox::get` | Get sandbox details by ID |
+| `sandbox::list` | List all sandboxes |
+| `sandbox::kill` | Kill VM (munmap + close KVM fds) |
+| `exec::run` | Execute command via serial I/O |
+| `exec::code` | Run code snippet via serial I/O (Python, JavaScript, Bash) |
+
+**Communication:** Serial I/O (16550 UART at COM1). No networking, no filesystem — code in, output out.
+
+```bash
+cd sandbox-firecracker && cargo build --release
+./target/release/sandbox-firecracker --url ws://127.0.0.1:49134 --config config.yaml
 ```
 
-#### Configuration
+**Usage from iii-sdk:**
 
-Create a `config.yaml` file:
+```typescript
+const vm = await iii.trigger({ functionId: 'sandbox::create', payload: { language: 'python' } });
+const result = await iii.trigger({ functionId: 'exec::code', payload: { id: vm.id, code: 'print(42)' } });
+await iii.trigger({ functionId: 'sandbox::kill', payload: { id: vm.id } });
+```
+
+**Configuration (`config.yaml`):**
 
 ```yaml
-width: 200        # default target width
-height: 200       # default target height
-strategy: scale-to-fit  # or crop-to-fit
-quality:
-  jpeg: 85
-  webp: 80
+vmstate_path: ./template/vmstate
+memfile_path: ./template/mem
+mem_size_mb: 256
+default_timeout: 30
+max_sandboxes: 1000
 ```
 
-All fields are optional and fall back to the defaults shown above.
+**Prerequisites:** Linux with KVM enabled, pre-built Firecracker VM template (vmstate + memory dump).
+
+---
 
-#### Tests
+## Building
+
+Each worker is a standalone Rust crate:
 
 ```bash
-cd image-resize
+cd <worker-name>
+cargo build --release
 cargo test
 ```
+
+## CLI flags
+
+All workers support:
+
+| Flag | Default | Description |
+|---|---|---|
+| `--url` | `ws://127.0.0.1:49134` | III engine WebSocket URL |
+| `--config` | `./config.yaml` | Path to config file |
+| `--manifest` | — | Print module manifest JSON and exit |
diff --git a/image-resize/src/manifest.rs b/image-resize/src/manifest.rs
index 8866885..5e1df87 100644
--- a/image-resize/src/manifest.rs
+++ b/image-resize/src/manifest.rs
@@ -41,7 +41,7 @@ mod tests {
         let parsed: serde_json::Value = serde_json::from_str(&json).unwrap();
         assert!(parsed.is_object(), "Manifest must be valid JSON object");
         assert_eq!(parsed["name"], "image-resize");
-        assert_eq!(parsed["version"], "0.1.0");
+        assert_eq!(parsed["version"], env!("CARGO_PKG_VERSION"));
     }
 
     #[test]
diff --git a/registry/index.json b/registry/index.json
index e152a66..92e183d 100644
--- a/registry/index.json
+++ b/registry/index.json
@@ -20,6 +20,45 @@
                 }
             },
             "version": "0.1.2"
+        },
+        "sandbox-docker": {
+            "description": "Docker container sandbox worker — create, exec, filesystem ops",
+            "repo": "iii-hq/workers",
+            "tag_prefix": "sandbox-docker",
+            "supported_targets": ["aarch64-apple-darwin", "x86_64-unknown-linux-gnu"],
+            "has_checksum": true,
+            "default_config": {
+                "class": "workers::sandbox_docker::SandboxDockerWorker",
+                "config": {
+                    "default_image": "python:3.12-slim",
+                    "default_timeout": 3600,
+                    "default_memory": 512,
+                    "max_sandboxes": 50,
+                    "workspace_dir": "/workspace"
+                }
+            },
+            "version": "0.1.0"
+        },
+        "sandbox-firecracker": {
+            "description": "KVM CoW fork sandbox worker — sub-ms spawn, hardware isolation (Linux-only)",
+            "repo": "iii-hq/workers",
+            "tag_prefix": "sandbox-firecracker",
+            "supported_targets": ["x86_64-unknown-linux-gnu"],
+            "has_checksum": true,
+            "default_config": {
+                "class": "workers::sandbox_firecracker::SandboxFirecrackerWorker",
+                "config": {
+                    "vmstate_path": "./template/vmstate",
+                    "memfile_path": "./template/mem",
+                    "mem_size_mb": 256,
+                    "default_timeout": 30,
+                    "max_sandboxes": 1000,
+                    "max_cmd_timeout": 60,
+                    "max_output_bytes": 1048576,
+                    "default_language": "python"
+                }
+            },
+            "version": "0.1.0"
         }
     }
 }
diff --git a/sandbox-docker/Cargo.lock b/sandbox-docker/Cargo.lock
new file mode 100644
index 0000000..4c62799
--- /dev/null
+++ b/sandbox-docker/Cargo.lock
@@ -0,0 +1,2912 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "anstream"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
+
+[[package]]
+name = "anstyle-parse"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "bitflags"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "bollard"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97ccca1260af6a459d75994ad5acc1651bcabcbdbc41467cc9786519ab854c30"
+dependencies = [
+ "base64",
+ "bollard-stubs",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "hex",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-named-pipe",
+ "hyper-util",
+ "hyperlocal",
+ "log",
+ "pin-project-lite",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "serde_repr",
+ "serde_urlencoded",
+ "thiserror",
+ "tokio",
+ "tokio-util",
+ "tower-service",
+ "url",
+ "winapi",
+]
+
+[[package]]
+name = "bollard-stubs"
+version = "1.47.1-rc.27.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f179cfbddb6e77a5472703d4b30436bff32929c0aa8a9008ecf23d1d3cdd0da"
+dependencies = [
+ "serde",
+ "serde_repr",
+ "serde_with",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
+
+[[package]]
+name = "bytes"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
+
+[[package]]
+name = "cc"
+version = "1.2.57"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a0dd1ca384932ff3641c8718a02769f1698e7563dc6974ffd03346116310423"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "chrono"
+version = "0.4.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c673075a2e0e5f4a1dde27ce9dee1ea4558c7ffe648f576438a20ca1d2acc4b0"
+dependencies = [
+ "iana-time-zone",
+ "num-traits",
+ "serde",
+ "windows-link",
+]
+
+[[package]]
+name = "clap"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b193af5b67834b676abd72466a96c1024e6a6ad978a1f484bd90b85c94041351"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1110bd8a634a1ab8cb04345d8d878267d57c3cf1b38d91b71af6686408bbca6a"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "const-hex"
+version = "1.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "531185e432bb31db1ecda541e9e7ab21468d4d844ad7505e0546a49b4945d49b"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "proptest",
+ "serde_core",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "data-encoding"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
+
+[[package]]
+name = "deranged"
+version = "0.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
+dependencies = [
+ "powerfmt",
+ "serde_core",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "either"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "filetime"
+version = "0.2.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f98844151eee8917efc50bd9e8318cb963ae8b297431495d3f758616ea5c57db"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "libredox",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-macro"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+
+[[package]]
+name = "futures-task"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+
+[[package]]
+name = "futures-util"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+dependencies = [
+ "futures-core",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+ "wasip2",
+ "wasip3",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f44da3a8150a6703ed5d34e164b875fd14c2cdab9af1252a9a1020bde2bdc54"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap 2.13.0",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
+
+[[package]]
+name = "hashbrown"
+version = "0.15.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+dependencies = [
+ "foldhash",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hostname"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "617aaa3557aef3810a6369d0a99fac8a080891b68bd9f9812a1eeda0c0730cbd"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "windows-link",
+]
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "hyper"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "httpdate",
+ "itoa",
+ "pin-project-lite",
+ "pin-utils",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-named-pipe"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73b7d8abf35697b81a825e386fc151e0d503e8cb5fcb93cc8669c376dfd6f278"
+dependencies = [
+ "hex",
+ "hyper",
+ "hyper-util",
+ "pin-project-lite",
+ "tokio",
+ "tower-service",
+ "winapi",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots",
+]
+
+[[package]]
+name = "hyper-timeout"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b90d566bffbce6a75bd8b09a05aa8c2cb1fabb6cb348f8840c9e4c90a0d83b0"
+dependencies = [
+ "hyper",
+ "hyper-util",
+ "pin-project-lite",
+ "tokio",
+ "tower-service",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "hyperlocal"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "986c5ce3b994526b3cd75578e62554abd09f0899d6206de48b3e96ab34ccc8c7"
+dependencies = [
+ "hex",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "pin-project-lite",
+ "tokio",
+ "tower-service",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.65"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
+
+[[package]]
+name = "icu_properties"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
+
+[[package]]
+name = "icu_provider"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "id-arena"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "iii-sdk"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e5a1f47aebab918d49a98ece7b1db77649cfb6f785bc29db1753e2edb848005"
+dependencies = [
+ "async-trait",
+ "futures-util",
+ "hostname",
+ "opentelemetry",
+ "opentelemetry-http",
+ "opentelemetry-proto",
+ "opentelemetry_sdk",
+ "prost",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "sysinfo",
+ "thiserror",
+ "tokio",
+ "tokio-tungstenite",
+ "tracing",
+ "uuid",
+]
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown 0.12.3",
+ "serde",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.16.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d98f6fed1fde3f8c21bc40a1abb88dd75e67924f9cffc3ef95607bad8017f8e2"
+
+[[package]]
+name = "iri-string"
+version = "0.7.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8e7418f59cc01c88316161279a7f665217ae316b388e58a0d10e29f54f1e5eb"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itertools"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "js-sys"
+version = "0.3.91"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b49715b7073f385ba4bc528e5747d02e66cb39c6146efb66b781f131f0fb399c"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "leb128fmt"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
+
+[[package]]
+name = "libc"
+version = "0.2.183"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5b646652bf6661599e1da8901b3b9522896f01e736bad5f723fe7a3a27f899d"
+
+[[package]]
+name = "libredox"
+version = "0.1.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1744e39d1d6a9948f4f388969627434e31128196de472883b39f148769bfe30a"
+dependencies = [
+ "bitflags",
+ "libc",
+ "plain",
+ "redox_syscall",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
+
+[[package]]
+name = "litemap"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
+
+[[package]]
+name = "mio"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "ntapi"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3b335231dfd352ffb0f8017f3b6027a4917f7df785ea2143d8af2adc66980ae"
+dependencies = [
+ "winapi",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050"
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "objc2-io-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33fafba39597d6dc1fb709123dfa8289d39406734be322956a69f0931c73bb15"
+dependencies = [
+ "libc",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "opentelemetry"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b84bcd6ae87133e903af7ef497404dda70c60d0ea14895fc8a5e6722754fc2a0"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "js-sys",
+ "pin-project-lite",
+ "thiserror",
+ "tracing",
+]
+
+[[package]]
+name = "opentelemetry-http"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7a6d09a73194e6b66df7c8f1b680f156d916a1a942abf2de06823dd02b7855d"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "http",
+ "opentelemetry",
+ "reqwest",
+]
+
+[[package]]
+name = "opentelemetry-proto"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7175df06de5eaee9909d4805a3d07e28bb752c34cab57fa9cff549da596b30f"
+dependencies = [
+ "base64",
+ "const-hex",
+ "opentelemetry",
+ "opentelemetry_sdk",
+ "prost",
+ "serde",
+ "serde_json",
+ "tonic",
+ "tonic-prost",
+]
+
+[[package]]
+name = "opentelemetry_sdk"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e14ae4f5991976fd48df6d843de219ca6d31b01daaab2dad5af2badeded372bd"
+dependencies = [
+ "futures-channel",
+ "futures-executor",
+ "futures-util",
+ "opentelemetry",
+ "percent-encoding",
+ "rand",
+ "thiserror",
+ "tokio",
+ "tokio-stream",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pin-project"
+version = "1.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1749c7ed4bcaf4c3d0a3efc28538844fb29bcdd7d2b67b2be7e20ba861ff517"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9b20ed30f105399776b9c883e68e536ef602a16ae6f596d2c473591d6ad64c6"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "plain"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
+
+[[package]]
+name = "potential_utf"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "prettyplease"
+version = "0.2.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
+dependencies = [
+ "proc-macro2",
+ "syn",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "proptest"
+version = "1.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37566cb3fdacef14c0737f9546df7cfeadbfbc9fef10991038bf5015d0c80532"
+dependencies = [
+ "bitflags",
+ "num-traits",
+ "rand",
+ "rand_chacha",
+ "rand_xorshift",
+ "regex-syntax",
+ "unarray",
+]
+
+[[package]]
+name = "prost"
+version = "0.14.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2ea70524a2f82d518bce41317d0fae74151505651af45faf1ffbd6fd33f0568"
+dependencies = [
+ "bytes",
+ "prost-derive",
+]
+
+[[package]]
+name = "prost-derive"
+version = "0.14.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27c6023962132f4b30eb4c172c91ce92d933da334c59c23cddee82358ddafb0b"
+dependencies = [
+ "anyhow",
+ "itertools",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash",
+ "rustls",
+ "socket2",
+ "thiserror",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2",
+ "tracing",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "rand"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+dependencies = [
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "rand_xorshift"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "513962919efc330f829edb2535844d1b912b0fbe2ca165d613e4e8788bb05a5a"
+dependencies = [
+ "rand_core",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce70a74e890531977d37e532c34d45e9055d2409ed08ddba14529471ed0be16"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "ref-cast"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f354300ae66f76f1c85c5f84693f0ce81d747e2c3f21a45fef496d89c960bf7d"
+dependencies = [
+ "ref-cast-impl",
+]
+
+[[package]]
+name = "ref-cast-impl"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7186006dcb21920990093f30e3dea63b7d6e977bf1256be20c3563a5db070da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "webpki-roots",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
+
+[[package]]
+name = "rustix"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "758025cb5fccfd3bc2fd74708fd4682be41d99e5dff73c377c0646c6012c73a4"
+dependencies = [
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be040f8b0a225e40375822a563fa9524378b9d63112f53e19ffff34df5d33fdd"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df33b2b81ac578cabaf06b89b0631153a3f416b0a886e8a7a1707fb51abbd1ef"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ryu"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
+
+[[package]]
+name = "sandbox-docker"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "bollard",
+ "bytes",
+ "clap",
+ "futures-util",
+ "iii-sdk",
+ "serde",
+ "serde_json",
+ "serde_yaml",
+ "tar",
+ "tokio",
+ "tracing",
+ "tracing-subscriber",
+ "uuid",
+]
+
+[[package]]
+name = "schemars"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd191f9397d57d581cddd31014772520aa448f65ef991055d7f61582c65165f"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2b42f36aa1cd011945615b92222f6bf73c599a102a300334cd7f8dbeec726cc"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_repr"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175ee3e80ae9982737ca543e96133087cbd9a485eecc3bc4de9c1a37b47ea59c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_with"
+version = "3.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd5414fad8e6907dbdd5bc441a50ae8d6e26151a03b1de04d89a5576de61d01f"
+dependencies = [
+ "base64",
+ "chrono",
+ "hex",
+ "indexmap 1.9.3",
+ "indexmap 2.13.0",
+ "schemars 0.9.0",
+ "schemars 1.2.1",
+ "serde_core",
+ "serde_json",
+ "time",
+]
+
+[[package]]
+name = "serde_yaml"
+version = "0.9.34+deprecated"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47"
+dependencies = [
+ "indexmap 2.13.0",
+ "itoa",
+ "ryu",
+ "serde",
+ "unsafe-libyaml",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "socket2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "syn"
+version = "2.0.117"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "sysinfo"
+version = "0.38.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92ab6a2f8bfe508deb3c6406578252e491d299cbbf3bc0529ecc3313aee4a52f"
+dependencies = [
+ "libc",
+ "memchr",
+ "ntapi",
+ "objc2-core-foundation",
+ "objc2-io-kit",
+ "windows",
+]
+
+[[package]]
+name = "tar"
+version = "0.4.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22692a6476a21fa75fdfc11d452fda482af402c008cdbaf3476414e122040973"
+dependencies = [
+ "filetime",
+ "libc",
+ "xattr",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "time"
+version = "0.3.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "743bd48c283afc0388f9b8827b976905fb217ad9e647fae3a379a9283c4def2c"
+dependencies = [
+ "deranged",
+ "itoa",
+ "num-conv",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7694e1cfe791f8d31026952abf09c69ca6f6fa4e1a1229e18988f06a04a12dca"
+
+[[package]]
+name = "time-macros"
+version = "0.2.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e70e4c5a0e0a8a4823ad65dfe1a6930e4f4d756dcd9dd7939022b5e8c501215"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e61e67053d25a4e82c844e8424039d9745781b3fc4f32b8d55ed50f5f667ef3"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.50.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27ad5e34374e03cfffefc301becb44e9dc3c17584f414349ebe29ed26661822d"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c55a2eff8b69ce66c84f85e1da1c233edc36ceb85a2058d11b0d6a3c7e7569c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-stream"
+version = "0.1.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32da49809aab5c3bc678af03902d4ccddea2a87d028d86392a4b1560c6906c70"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d25a406cddcc431a75d3d9afc6a7c0f7428d4891dd973e4d54c56b46127bf857"
+dependencies = [
+ "futures-util",
+ "log",
+ "tokio",
+ "tungstenite",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tonic"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fec7c61a0695dc1887c1b53952990f3ad2e3a31453e1f49f10e75424943a93ec"
+dependencies = [
+ "async-trait",
+ "base64",
+ "bytes",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-timeout",
+ "hyper-util",
+ "percent-encoding",
+ "pin-project",
+ "sync_wrapper",
+ "tokio",
+ "tokio-stream",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tonic-prost"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a55376a0bbaa4975a3f10d009ad763d8f4108f067c7c2e74f3001fb49778d309"
+dependencies = [
+ "bytes",
+ "prost",
+ "tonic",
+]
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "indexmap 2.13.0",
+ "pin-project-lite",
+ "slab",
+ "sync_wrapper",
+ "tokio",
+ "tokio-util",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8"
+dependencies = [
+ "bitflags",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "iri-string",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7f578e5945fb242538965c2d0b04418d38ec25c79d160cd279bf0731c8d319"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "tungstenite"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8628dcc84e5a09eb3d8423d6cb682965dea9133204e8fb3efee74c2a0c259442"
+dependencies = [
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand",
+ "sha1",
+ "thiserror",
+ "utf-8",
+]
+
+[[package]]
+name = "typenum"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
+
+[[package]]
+name = "unarray"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eaea85b334db583fe3274d12b4cd1880032beab409c0d774be044d4480ab9a94"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "unsafe-libyaml"
+version = "0.2.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861"
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a68d3c8f01c0cfa54a75291d83601161799e4a89a39e0929f4b0354d88757a37"
+dependencies = [
+ "getrandom 0.4.2",
+ "js-sys",
+ "serde_core",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.2+wasi-0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasip3"
+version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6532f9a5c1ece3798cb1c2cfdba640b9b3ba884f5db45973a6f442510a87d38e"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.64"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e9c5522b3a28661442748e09d40924dfb9ca614b21c00d3fd135720e48b67db8"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18a2d50fcf105fb33bb15f00e7a77b772945a2ee45dcf454961fd843e74c18e6"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03ce4caeaac547cdf713d280eda22a730824dd11e6b8c3ca9e42247b25c631e3"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75a326b8c223ee17883a4251907455a2431acc2791c98c26279376490c378c16"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-encoder"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
+dependencies = [
+ "leb128fmt",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasm-metadata"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
+dependencies = [
+ "anyhow",
+ "indexmap 2.13.0",
+ "wasm-encoder",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
+dependencies = [
+ "bitflags",
+ "hashbrown 0.15.5",
+ "indexmap 2.13.0",
+ "semver",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.91"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "854ba17bb104abfb26ba36da9729addc7ce7f06f5c0f90f3c391f8461cca21f9"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22cfaf3c063993ff62e73cb4311efde4db1efb31ab78a3e5c457939ad5cc0bed"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections",
+ "windows-core",
+ "windows-future",
+ "windows-numerics",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link",
+ "windows-result",
+ "windows-strings",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core",
+ "windows-link",
+ "windows-threading",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core",
+ "windows-link",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "wit-bindgen"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
+dependencies = [
+ "wit-bindgen-rust-macro",
+]
+
+[[package]]
+name = "wit-bindgen-core"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
+dependencies = [
+ "anyhow",
+ "heck",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-bindgen-rust"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
+dependencies = [
+ "anyhow",
+ "heck",
+ "indexmap 2.13.0",
+ "prettyplease",
+ "syn",
+ "wasm-metadata",
+ "wit-bindgen-core",
+ "wit-component",
+]
+
+[[package]]
+name = "wit-bindgen-rust-macro"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
+dependencies = [
+ "anyhow",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wit-bindgen-core",
+ "wit-bindgen-rust",
+]
+
+[[package]]
+name = "wit-component"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
+dependencies = [
+ "anyhow",
+ "bitflags",
+ "indexmap 2.13.0",
+ "log",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "wasm-encoder",
+ "wasm-metadata",
+ "wasmparser",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-parser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
+dependencies = [
+ "anyhow",
+ "id-arena",
+ "indexmap 2.13.0",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-xid",
+ "wasmparser",
+]
+
+[[package]]
+name = "writeable"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
+
+[[package]]
+name = "xattr"
+version = "1.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
+dependencies = [
+ "libc",
+ "rustix",
+]
+
+[[package]]
+name = "yoke"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "efbb2a062be311f2ba113ce66f697a4dc589f85e78a4aea276200804cea0ed87"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e8bc7269b54418e7aeeef514aa68f8690b8c0489a06b0136e5f57c4c5ccab89"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+
+[[package]]
+name = "zerotrie"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/sandbox-docker/Cargo.toml b/sandbox-docker/Cargo.toml
new file mode 100644
index 0000000..9ff1e0e
--- /dev/null
+++ b/sandbox-docker/Cargo.toml
@@ -0,0 +1,27 @@
+[workspace]
+
+[package]
+name = "sandbox-docker"
+version = "0.1.0"
+edition = "2021"
+publish = false
+
+[[bin]]
+name = "sandbox-docker"
+path = "src/main.rs"
+
+[dependencies]
+iii-sdk = { version = "0.9.0", features = ["otel"] }
+bollard = "0.18"
+bytes = "1"
+tokio = { version = "1", features = ["rt-multi-thread", "macros", "sync", "signal"] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+serde_yaml = "0.9"
+anyhow = "1"
+tar = "0.4"
+uuid = { version = "1", features = ["v4"] }
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", features = ["fmt", "env-filter"] }
+futures-util = "0.3"
+clap = { version = "4", features = ["derive"] }
diff --git a/sandbox-docker/build.rs b/sandbox-docker/build.rs
new file mode 100644
index 0000000..81caa36
--- /dev/null
+++ b/sandbox-docker/build.rs
@@ -0,0 +1,6 @@
+fn main() {
+    println!(
+        "cargo:rustc-env=TARGET={}",
+        std::env::var("TARGET").unwrap()
+    );
+}
diff --git a/sandbox-docker/config.yaml b/sandbox-docker/config.yaml
new file mode 100644
index 0000000..c2fadfd
--- /dev/null
+++ b/sandbox-docker/config.yaml
@@ -0,0 +1,8 @@
+default_image: python:3.12-slim
+default_timeout: 3600
+default_memory: 512
+default_cpu: 1.0
+max_sandboxes: 50
+max_cmd_timeout: 300
+workspace_dir: /workspace
+pool_size: 0
diff --git a/sandbox-docker/src/config.rs b/sandbox-docker/src/config.rs
new file mode 100644
index 0000000..d494ce0
--- /dev/null
+++ b/sandbox-docker/src/config.rs
@@ -0,0 +1,125 @@
+use anyhow::Result;
+use serde::Deserialize;
+
+#[derive(Deserialize, Debug, Clone)]
+pub struct SandboxWorkerConfig {
+    #[serde(default = "default_image")]
+    pub default_image: String,
+    #[serde(default = "default_timeout")]
+    pub default_timeout: u64,
+    #[serde(default = "default_memory")]
+    pub default_memory: u64,
+    #[serde(default = "default_cpu")]
+    pub default_cpu: f64,
+    #[serde(default = "default_max_sandboxes")]
+    pub max_sandboxes: usize,
+    #[serde(default = "default_max_cmd_timeout")]
+    pub max_cmd_timeout: u64,
+    #[serde(default = "default_workspace_dir")]
+    pub workspace_dir: String,
+    #[serde(default)]
+    pub pool_size: usize,
+}
+
+fn default_image() -> String {
+    "python:3.12-slim".to_string()
+}
+
+fn default_timeout() -> u64 {
+    3600
+}
+
+fn default_memory() -> u64 {
+    512
+}
+
+fn default_cpu() -> f64 {
+    1.0
+}
+
+fn default_max_sandboxes() -> usize {
+    50
+}
+
+fn default_max_cmd_timeout() -> u64 {
+    300
+}
+
+fn default_workspace_dir() -> String {
+    "/workspace".to_string()
+}
+
+impl Default for SandboxWorkerConfig {
+    fn default() -> Self {
+        SandboxWorkerConfig {
+            default_image: default_image(),
+            default_timeout: default_timeout(),
+            default_memory: default_memory(),
+            default_cpu: default_cpu(),
+            max_sandboxes: default_max_sandboxes(),
+            max_cmd_timeout: default_max_cmd_timeout(),
+            workspace_dir: default_workspace_dir(),
+            pool_size: 0,
+        }
+    }
+}
+
+pub fn load_config(path: &str) -> Result<SandboxWorkerConfig> {
+    let contents = std::fs::read_to_string(path)?;
+    let config: SandboxWorkerConfig = serde_yaml::from_str(&contents)?;
+    Ok(config)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_config_defaults() {
+        let config: SandboxWorkerConfig = serde_yaml::from_str("{}").unwrap();
+        assert_eq!(config.default_image, "python:3.12-slim");
+        assert_eq!(config.default_timeout, 3600);
+        assert_eq!(config.default_memory, 512);
+        assert!((config.default_cpu - 1.0).abs() < f64::EPSILON);
+        assert_eq!(config.max_sandboxes, 50);
+        assert_eq!(config.max_cmd_timeout, 300);
+        assert_eq!(config.workspace_dir, "/workspace");
+        assert_eq!(config.pool_size, 0);
+    }
+
+    #[test]
+    fn test_config_custom() {
+        let yaml = r#"
+default_image: node:20-slim
+default_timeout: 1800
+default_memory: 1024
+default_cpu: 2.0
+max_sandboxes: 100
+max_cmd_timeout: 600
+workspace_dir: /home/user
+pool_size: 5
+"#;
+        let config: SandboxWorkerConfig = serde_yaml::from_str(yaml).unwrap();
+        assert_eq!(config.default_image, "node:20-slim");
+        assert_eq!(config.default_timeout, 1800);
+        assert_eq!(config.default_memory, 1024);
+        assert!((config.default_cpu - 2.0).abs() < f64::EPSILON);
+        assert_eq!(config.max_sandboxes, 100);
+        assert_eq!(config.max_cmd_timeout, 600);
+        assert_eq!(config.workspace_dir, "/home/user");
+        assert_eq!(config.pool_size, 5);
+    }
+
+    #[test]
+    fn test_sandbox_worker_config_default() {
+        let config = SandboxWorkerConfig::default();
+        assert_eq!(config.default_image, "python:3.12-slim");
+        assert_eq!(config.default_timeout, 3600);
+        assert_eq!(config.default_memory, 512);
+        assert!((config.default_cpu - 1.0).abs() < f64::EPSILON);
+        assert_eq!(config.max_sandboxes, 50);
+        assert_eq!(config.max_cmd_timeout, 300);
+        assert_eq!(config.workspace_dir, "/workspace");
+        assert_eq!(config.pool_size, 0);
+    }
+}
diff --git a/sandbox-docker/src/docker.rs b/sandbox-docker/src/docker.rs
new file mode 100644
index 0000000..ff027b6
--- /dev/null
+++ b/sandbox-docker/src/docker.rs
@@ -0,0 +1,345 @@
+use anyhow::{anyhow, Result};
+use bollard::container::{Config, CreateContainerOptions, LogOutput, RemoveContainerOptions};
+use bollard::exec::{CreateExecOptions, StartExecResults};
+use bollard::image::CreateImageOptions;
+use bollard::Docker;
+use bytes::Bytes;
+use futures_util::StreamExt;
+use std::collections::HashMap;
+use std::time::Instant;
+
+use crate::types::{ExecResult, FileInfo};
+
+const OUTPUT_CAP: usize = 10 * 1024 * 1024;
+const CONTAINER_PREFIX: &str = "iii-sbx";
+
+pub fn connect_docker() -> Result<Docker> {
+    Docker::connect_with_local_defaults().map_err(|e| anyhow!("failed to connect to Docker: {e}"))
+}
+
+pub async fn ensure_image(docker: &Docker, image: &str) -> Result<()> {
+    let mut stream = docker.create_image(
+        Some(CreateImageOptions {
+            from_image: image,
+            ..Default::default()
+        }),
+        None,
+        None,
+    );
+
+    while let Some(result) = stream.next().await {
+        match result {
+            Ok(info) => {
+                if let Some(status) = &info.status {
+                    tracing::debug!(status = %status, "pulling image");
+                }
+            }
+            Err(e) => return Err(anyhow!("failed to pull image {image}: {e}")),
+        }
+    }
+
+    Ok(())
+}
+
+pub struct ContainerOpts<'a> {
+    pub id: &'a str,
+    pub image: &'a str,
+    pub memory_mb: u64,
+    pub cpu: f64,
+    pub network: bool,
+    pub env: &'a HashMap<String, String>,
+    pub workdir: &'a str,
+}
+
+pub async fn create_container(docker: &Docker, opts: &ContainerOpts<'_>) -> Result<String> {
+    let id = opts.id;
+    let image = opts.image;
+    let memory_mb = opts.memory_mb;
+    let cpu = opts.cpu;
+    let network = opts.network;
+    let env = opts.env;
+    let workdir = opts.workdir;
+    let container_name = format!("{CONTAINER_PREFIX}-{id}");
+
+    let env_vec: Vec<String> = env.iter().map(|(k, v)| format!("{k}={v}")).collect();
+
+    let nano_cpus = (cpu * 1_000_000_000.0) as i64;
+    let memory_bytes = (memory_mb as i64) * 1024 * 1024;
+
+    let network_mode = if network {
+        None
+    } else {
+        Some("none".to_string())
+    };
+
+    let host_config = bollard::models::HostConfig {
+        memory: Some(memory_bytes),
+        nano_cpus: Some(nano_cpus),
+        pids_limit: Some(256),
+        cap_drop: Some(vec!["ALL".to_string()]),
+        security_opt: Some(vec!["no-new-privileges:true".to_string()]),
+        network_mode,
+        ..Default::default()
+    };
+
+    let config = Config {
+        image: Some(image.to_string()),
+        cmd: Some(vec![
+            "tail".to_string(),
+            "-f".to_string(),
+            "/dev/null".to_string(),
+        ]),
+        working_dir: Some(workdir.to_string()),
+        env: Some(env_vec),
+        user: Some("1000:1000".to_string()),
+        host_config: Some(host_config),
+        ..Default::default()
+    };
+
+    docker
+        .create_container(
+            Some(CreateContainerOptions {
+                name: container_name.clone(),
+                ..Default::default()
+            }),
+            config,
+        )
+        .await
+        .map_err(|e| anyhow!("failed to create container: {e}"))?;
+
+    docker
+        .start_container::<String>(&container_name, None)
+        .await
+        .map_err(|e| anyhow!("failed to start container: {e}"))?;
+
+    Ok(container_name)
+}
+
+pub async fn exec_in_container(
+    docker: &Docker,
+    container_name: &str,
+    command: Vec<String>,
+    timeout_ms: u64,
+) -> Result<ExecResult> {
+    let exec = docker
+        .create_exec(
+            container_name,
+            CreateExecOptions {
+                attach_stdout: Some(true),
+                attach_stderr: Some(true),
+                cmd: Some(command),
+                ..Default::default()
+            },
+        )
+        .await
+        .map_err(|e| anyhow!("failed to create exec: {e}"))?;
+
+    let start = Instant::now();
+    let mut stdout = String::new();
+    let mut stderr = String::new();
+    let mut total_bytes = 0usize;
+    let mut timed_out = false;
+    let mut truncated = false;
+
+    let output = docker
+        .start_exec(&exec.id, None)
+        .await
+        .map_err(|e| anyhow!("failed to start exec: {e}"))?;
+
+    if let StartExecResults::Attached { mut output, .. } = output {
+        let deadline = tokio::time::Instant::now() + tokio::time::Duration::from_millis(timeout_ms);
+
+        loop {
+            let next = tokio::time::timeout_at(deadline, output.next()).await;
+            match next {
+                Ok(Some(Ok(msg))) => {
+                    let chunk = match &msg {
+                        LogOutput::StdOut { message } => {
+                            let s = String::from_utf8_lossy(message);
+                            stdout.push_str(&s);
+                            message.len()
+                        }
+                        LogOutput::StdErr { message } => {
+                            let s = String::from_utf8_lossy(message);
+                            stderr.push_str(&s);
+                            message.len()
+                        }
+                        _ => 0,
+                    };
+                    total_bytes += chunk;
+                    if total_bytes > OUTPUT_CAP {
+                        stderr.push_str("\n[output truncated: 10MB limit exceeded]");
+                        truncated = true;
+                        break;
+                    }
+                }
+                Ok(Some(Err(e))) => {
+                    return Err(anyhow!("exec stream error: {e}"));
+                }
+                Ok(None) => break,
+                Err(_) => {
+                    stderr.push_str("\n[timeout exceeded]");
+                    timed_out = true;
+                    break;
+                }
+            }
+        }
+    }
+
+    let inspect = docker
+        .inspect_exec(&exec.id)
+        .await
+        .map_err(|e| anyhow!("failed to inspect exec: {e}"))?;
+
+    let exit_code = if timed_out || truncated {
+        -1
+    } else {
+        inspect.exit_code.unwrap_or(-1)
+    };
+    let duration_ms = start.elapsed().as_millis() as u64;
+
+    Ok(ExecResult {
+        exit_code,
+        stdout,
+        stderr,
+        duration_ms,
+    })
+}
+
+pub async fn copy_to_container(
+    docker: &Docker,
+    container_name: &str,
+    path: &str,
+    content: &[u8],
+) -> Result<()> {
+    let parent = std::path::Path::new(path)
+        .parent()
+        .unwrap_or(std::path::Path::new("/"));
+    let filename = std::path::Path::new(path)
+        .file_name()
+        .ok_or_else(|| anyhow!("invalid file path: {path}"))?
+        .to_string_lossy()
+        .to_string();
+
+    let mut archive = tar::Builder::new(Vec::new());
+    let mut header = tar::Header::new_gnu();
+    header.set_path(&filename)?;
+    header.set_size(content.len() as u64);
+    header.set_mode(0o644);
+    header.set_cksum();
+    archive.append(&header, content)?;
+    let tar_bytes = archive.into_inner()?;
+
+    docker
+        .upload_to_container(
+            container_name,
+            Some(bollard::container::UploadToContainerOptions {
+                path: parent.to_string_lossy().to_string(),
+                ..Default::default()
+            }),
+            Bytes::from(tar_bytes),
+        )
+        .await
+        .map_err(|e| anyhow!("failed to copy file to container: {e}"))?;
+
+    Ok(())
+}
+
+pub async fn read_file(
+    docker: &Docker,
+    container_name: &str,
+    path: &str,
+    timeout_ms: u64,
+) -> Result<String> {
+    let result = exec_in_container(
+        docker,
+        container_name,
+        vec!["cat".to_string(), "--".to_string(), path.to_string()],
+        timeout_ms,
+    )
+    .await?;
+
+    if result.exit_code != 0 {
+        return Err(anyhow!("failed to read file {path}: {}", result.stderr));
+    }
+
+    Ok(result.stdout)
+}
+
+pub async fn list_dir(
+    docker: &Docker,
+    container_name: &str,
+    path: &str,
+    timeout_ms: u64,
+) -> Result<Vec<FileInfo>> {
+    let result = exec_in_container(
+        docker,
+        container_name,
+        vec![
+            "find".to_string(),
+            "--".to_string(),
+            path.to_string(),
+            "-mindepth".to_string(),
+            "1".to_string(),
+            "-maxdepth".to_string(),
+            "1".to_string(),
+            "-printf".to_string(),
+            "%y %s %p\\0".to_string(),
+        ],
+        timeout_ms,
+    )
+    .await?;
+
+    if result.exit_code != 0 {
+        return Err(anyhow!(
+            "failed to list directory {path}: {}",
+            result.stderr
+        ));
+    }
+
+    let mut entries = Vec::new();
+    for record in result.stdout.split('\0') {
+        if record.is_empty() {
+            continue;
+        }
+        let parts: Vec<&str> = record.splitn(3, ' ').collect();
+        if parts.len() < 3 {
+            continue;
+        }
+        let is_directory = parts[0] == "d";
+        let size = parts[1].parse::<u64>().unwrap_or(0);
+        let entry_path = parts[2].to_string();
+        let name = std::path::Path::new(&entry_path)
+            .file_name()
+            .map(|n| n.to_string_lossy().to_string())
+            .unwrap_or_default();
+
+        entries.push(FileInfo {
+            name,
+            path: entry_path,
+            size,
+            is_directory,
+        });
+    }
+
+    Ok(entries)
+}
+
+pub async fn stop_and_remove(docker: &Docker, id: &str) -> Result<()> {
+    let container_name = format!("{CONTAINER_PREFIX}-{id}");
+
+    let _ = docker.stop_container(&container_name, None).await;
+
+    docker
+        .remove_container(
+            &container_name,
+            Some(RemoveContainerOptions {
+                force: true,
+                ..Default::default()
+            }),
+        )
+        .await
+        .map_err(|e| anyhow!("failed to remove container {container_name}: {e}"))?;
+
+    Ok(())
+}
diff --git a/sandbox-docker/src/functions/exec.rs b/sandbox-docker/src/functions/exec.rs
new file mode 100644
index 0000000..75c6332
--- /dev/null
+++ b/sandbox-docker/src/functions/exec.rs
@@ -0,0 +1,141 @@
+use iii_sdk::{IIIError, TriggerRequest};
+use serde_json::{json, Value};
+
+use crate::config::SandboxWorkerConfig;
+use crate::docker;
+
+pub async fn handle_run(
+    iii: &iii_sdk::III,
+    docker_client: &bollard::Docker,
+    config: &SandboxWorkerConfig,
+    payload: Value,
+) -> Result<Value, IIIError> {
+    let id = payload
+        .get("id")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?;
+
+    let command = payload
+        .get("command")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: command".to_string()))?;
+
+    let timeout_ms = payload
+        .get("timeout_ms")
+        .and_then(|v| v.as_u64())
+        .unwrap_or(config.max_cmd_timeout * 1000)
+        .min(config.max_cmd_timeout * 1000);
+
+    let existing = iii
+        .trigger(TriggerRequest {
+            function_id: "state::get".into(),
+            payload: json!({
+                "scope": "sandbox",
+                "key": id,
+            }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state get failed: {e}")))?;
+
+    if existing.is_null() {
+        return Err(IIIError::Handler(format!("sandbox not found: {id}")));
+    }
+
+    let container_name = format!("iii-sbx-{id}");
+
+    let result = docker::exec_in_container(
+        docker_client,
+        &container_name,
+        vec!["sh".to_string(), "-c".to_string(), command.to_string()],
+        timeout_ms,
+    )
+    .await
+    .map_err(|e| IIIError::Handler(format!("exec failed: {e}")))?;
+
+    serde_json::to_value(&result)
+        .map_err(|e| IIIError::Handler(format!("serialization failed: {e}")))
+}
+
+pub async fn handle_code(
+    iii: &iii_sdk::III,
+    docker_client: &bollard::Docker,
+    config: &SandboxWorkerConfig,
+    payload: Value,
+) -> Result<Value, IIIError> {
+    let id = payload
+        .get("id")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?;
+
+    let code = payload
+        .get("code")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: code".to_string()))?;
+
+    let language = payload
+        .get("language")
+        .and_then(|v| v.as_str())
+        .unwrap_or("python");
+
+    let timeout_ms = payload
+        .get("timeout_ms")
+        .and_then(|v| v.as_u64())
+        .unwrap_or(config.max_cmd_timeout * 1000)
+        .min(config.max_cmd_timeout * 1000);
+
+    let existing = iii
+        .trigger(TriggerRequest {
+            function_id: "state::get".into(),
+            payload: json!({
+                "scope": "sandbox",
+                "key": id,
+            }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state get failed: {e}")))?;
+
+    if existing.is_null() {
+        return Err(IIIError::Handler(format!("sandbox not found: {id}")));
+    }
+
+    let (ext, interpreter) = match language {
+        "python" | "python3" => ("py", "python3"),
+        "javascript" | "js" | "node" => ("js", "node"),
+        "bash" | "sh" => ("sh", "bash"),
+        other => {
+            return Err(IIIError::Handler(format!("unsupported language: {other}")));
+        }
+    };
+
+    let container_name = format!("iii-sbx-{id}");
+    let unique_id = uuid::Uuid::new_v4();
+    let code_path = format!("/tmp/code_{unique_id}.{ext}");
+
+    docker::copy_to_container(docker_client, &container_name, &code_path, code.as_bytes())
+        .await
+        .map_err(|e| IIIError::Handler(format!("failed to write code file: {e}")))?;
+
+    let result = docker::exec_in_container(
+        docker_client,
+        &container_name,
+        vec![interpreter.to_string(), code_path.clone()],
+        timeout_ms,
+    )
+    .await
+    .map_err(|e| IIIError::Handler(format!("code exec failed: {e}")))?;
+
+    let _ = docker::exec_in_container(
+        docker_client,
+        &container_name,
+        vec!["rm".to_string(), "-f".to_string(), code_path],
+        5000,
+    )
+    .await;
+
+    serde_json::to_value(&result)
+        .map_err(|e| IIIError::Handler(format!("serialization failed: {e}")))
+}
diff --git a/sandbox-docker/src/functions/fs.rs b/sandbox-docker/src/functions/fs.rs
new file mode 100644
index 0000000..b491055
--- /dev/null
+++ b/sandbox-docker/src/functions/fs.rs
@@ -0,0 +1,171 @@
+use iii_sdk::{IIIError, TriggerRequest};
+use serde_json::{json, Value};
+
+use crate::config::SandboxWorkerConfig;
+use crate::docker;
+
+fn validate_path(path: &str, workspace_dir: &str) -> Result<(), IIIError> {
+    use std::path::{Component, Path};
+    let p = Path::new(path);
+    for c in p.components() {
+        if matches!(c, Component::ParentDir) {
+            return Err(IIIError::Handler("path traversal not allowed".to_string()));
+        }
+    }
+    let normalized = p.to_path_buf();
+    let ws = Path::new(workspace_dir);
+    let tmp = Path::new("/tmp");
+    if !normalized.starts_with(ws) && !normalized.starts_with(tmp) {
+        return Err(IIIError::Handler(format!(
+            "path must be under {} or /tmp",
+            workspace_dir
+        )));
+    }
+    Ok(())
+}
+
+pub async fn handle_read(
+    iii: &iii_sdk::III,
+    docker_client: &bollard::Docker,
+    config: &SandboxWorkerConfig,
+    payload: Value,
+) -> Result<Value, IIIError> {
+    let id = payload
+        .get("id")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?;
+
+    let path = payload
+        .get("path")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: path".to_string()))?;
+
+    validate_path(path, &config.workspace_dir)?;
+
+    let existing = iii
+        .trigger(TriggerRequest {
+            function_id: "state::get".into(),
+            payload: json!({
+                "scope": "sandbox",
+                "key": id,
+            }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state get failed: {e}")))?;
+
+    if existing.is_null() {
+        return Err(IIIError::Handler(format!("sandbox not found: {id}")));
+    }
+
+    let container_name = format!("iii-sbx-{id}");
+    let timeout_ms = config.max_cmd_timeout * 1000;
+
+    let content = docker::read_file(docker_client, &container_name, path, timeout_ms)
+        .await
+        .map_err(|e| IIIError::Handler(format!("read failed: {e}")))?;
+
+    Ok(json!({
+        "path": path,
+        "content": content,
+    }))
+}
+
+pub async fn handle_write(
+    iii: &iii_sdk::III,
+    docker_client: &bollard::Docker,
+    config: &SandboxWorkerConfig,
+    payload: Value,
+) -> Result<Value, IIIError> {
+    let id = payload
+        .get("id")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?;
+
+    let path = payload
+        .get("path")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: path".to_string()))?;
+
+    let content = payload
+        .get("content")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: content".to_string()))?;
+
+    validate_path(path, &config.workspace_dir)?;
+
+    let existing = iii
+        .trigger(TriggerRequest {
+            function_id: "state::get".into(),
+            payload: json!({
+                "scope": "sandbox",
+                "key": id,
+            }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state get failed: {e}")))?;
+
+    if existing.is_null() {
+        return Err(IIIError::Handler(format!("sandbox not found: {id}")));
+    }
+
+    let container_name = format!("iii-sbx-{id}");
+
+    docker::copy_to_container(docker_client, &container_name, path, content.as_bytes())
+        .await
+        .map_err(|e| IIIError::Handler(format!("write failed: {e}")))?;
+
+    Ok(json!({
+        "path": path,
+        "size": content.len(),
+    }))
+}
+
+pub async fn handle_list(
+    iii: &iii_sdk::III,
+    docker_client: &bollard::Docker,
+    config: &SandboxWorkerConfig,
+    payload: Value,
+) -> Result<Value, IIIError> {
+    let id = payload
+        .get("id")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?;
+
+    let path = payload
+        .get("path")
+        .and_then(|v| v.as_str())
+        .unwrap_or(&config.workspace_dir);
+
+    validate_path(path, &config.workspace_dir)?;
+
+    let existing = iii
+        .trigger(TriggerRequest {
+            function_id: "state::get".into(),
+            payload: json!({
+                "scope": "sandbox",
+                "key": id,
+            }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state get failed: {e}")))?;
+
+    if existing.is_null() {
+        return Err(IIIError::Handler(format!("sandbox not found: {id}")));
+    }
+
+    let container_name = format!("iii-sbx-{id}");
+    let timeout_ms = config.max_cmd_timeout * 1000;
+
+    let entries = docker::list_dir(docker_client, &container_name, path, timeout_ms)
+        .await
+        .map_err(|e| IIIError::Handler(format!("list failed: {e}")))?;
+
+    serde_json::to_value(&entries)
+        .map_err(|e| IIIError::Handler(format!("serialization failed: {e}")))
+}
diff --git a/sandbox-docker/src/functions/mod.rs b/sandbox-docker/src/functions/mod.rs
new file mode 100644
index 0000000..1729996
--- /dev/null
+++ b/sandbox-docker/src/functions/mod.rs
@@ -0,0 +1,382 @@
+pub mod exec;
+pub mod fs;
+pub mod sandbox;
+
+use iii_sdk::{RegisterFunctionMessage, III};
+use serde_json::json;
+use std::future::Future;
+use std::pin::Pin;
+use std::sync::Arc;
+
+use crate::config::SandboxWorkerConfig;
+
+pub fn register_all(
+    iii: &Arc<III>,
+    docker: Arc<bollard::Docker>,
+    config: Arc<SandboxWorkerConfig>,
+) {
+    register_sandbox_create(iii, docker.clone(), config.clone());
+    register_sandbox_get(iii);
+    register_sandbox_list(iii);
+    register_sandbox_kill(iii, docker.clone());
+    register_exec_run(iii, docker.clone(), config.clone());
+    register_exec_code(iii, docker.clone(), config.clone());
+    register_fs_read(iii, docker.clone(), config.clone());
+    register_fs_write(iii, docker.clone(), config.clone());
+    register_fs_list(iii, docker, config);
+}
+
+fn register_sandbox_create(
+    iii: &Arc<III>,
+    docker: Arc<bollard::Docker>,
+    config: Arc<SandboxWorkerConfig>,
+) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "sandbox::create".to_string(),
+            description: Some("Create a Docker sandbox container".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "image": { "type": "string", "description": "Docker image to use" },
+                    "timeout": { "type": "integer", "description": "TTL in seconds" },
+                    "memory": { "type": "integer", "description": "Memory limit in MB" },
+                    "cpu": { "type": "number", "description": "CPU cores" },
+                    "network": { "type": "boolean", "description": "Enable network access" },
+                    "env": { "type": "object", "description": "Environment variables" },
+                    "workdir": { "type": "string", "description": "Working directory" }
+                }
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string" },
+                    "image": { "type": "string" },
+                    "status": { "type": "string" },
+                    "created_at": { "type": "integer" },
+                    "expires_at": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<
+            Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>,
+        > {
+            let iii = iii_clone.clone();
+            let docker = docker.clone();
+            let config = config.clone();
+            Box::pin(async move { sandbox::handle_create(&iii, &docker, &config, payload).await })
+        },
+    );
+}
+
+fn register_sandbox_get(iii: &Arc<III>) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "sandbox::get".to_string(),
+            description: Some("Get sandbox details by ID".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID" }
+                },
+                "required": ["id"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string" },
+                    "image": { "type": "string" },
+                    "status": { "type": "string" },
+                    "created_at": { "type": "integer" },
+                    "expires_at": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<
+            Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>,
+        > {
+            let iii = iii_clone.clone();
+            Box::pin(async move { sandbox::handle_get(&iii, payload).await })
+        },
+    );
+}
+
+fn register_sandbox_list(iii: &Arc<III>) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "sandbox::list".to_string(),
+            description: Some("List all active sandboxes".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {}
+            })),
+            response_format: Some(json!({
+                "type": "array",
+                "items": {
+                    "type": "object",
+                    "properties": {
+                        "id": { "type": "string" },
+                        "image": { "type": "string" },
+                        "status": { "type": "string" }
+                    }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<
+            Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>,
+        > {
+            let iii = iii_clone.clone();
+            Box::pin(async move { sandbox::handle_list(&iii, payload).await })
+        },
+    );
+}
+
+fn register_sandbox_kill(iii: &Arc<III>, docker: Arc<bollard::Docker>) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "sandbox::kill".to_string(),
+            description: Some("Stop and remove a sandbox container".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID to kill" }
+                },
+                "required": ["id"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string" },
+                    "status": { "type": "string" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<
+            Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>,
+        > {
+            let iii = iii_clone.clone();
+            let docker = docker.clone();
+            Box::pin(async move { sandbox::handle_kill(&iii, &docker, payload).await })
+        },
+    );
+}
+
+fn register_exec_run(
+    iii: &Arc<III>,
+    docker: Arc<bollard::Docker>,
+    config: Arc<SandboxWorkerConfig>,
+) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "exec::run".to_string(),
+            description: Some("Execute a shell command in a sandbox".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID" },
+                    "command": { "type": "string", "description": "Shell command to execute" },
+                    "timeout_ms": { "type": "integer", "description": "Timeout in milliseconds" }
+                },
+                "required": ["id", "command"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "exit_code": { "type": "integer" },
+                    "stdout": { "type": "string" },
+                    "stderr": { "type": "string" },
+                    "duration_ms": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<
+            Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>,
+        > {
+            let iii = iii_clone.clone();
+            let docker = docker.clone();
+            let config = config.clone();
+            Box::pin(async move { exec::handle_run(&iii, &docker, &config, payload).await })
+        },
+    );
+}
+
+fn register_exec_code(
+    iii: &Arc<III>,
+    docker: Arc<bollard::Docker>,
+    config: Arc<SandboxWorkerConfig>,
+) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "exec::code".to_string(),
+            description: Some("Write and execute code in a sandbox".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID" },
+                    "code": { "type": "string", "description": "Source code to execute" },
+                    "language": { "type": "string", "enum": ["python", "javascript", "bash"], "description": "Programming language" },
+                    "timeout_ms": { "type": "integer", "description": "Timeout in milliseconds" }
+                },
+                "required": ["id", "code"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "exit_code": { "type": "integer" },
+                    "stdout": { "type": "string" },
+                    "stderr": { "type": "string" },
+                    "duration_ms": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>> {
+            let iii = iii_clone.clone();
+            let docker = docker.clone();
+            let config = config.clone();
+            Box::pin(async move {
+                exec::handle_code(&iii, &docker, &config, payload).await
+            })
+        },
+    );
+}
+
+fn register_fs_read(
+    iii: &Arc<III>,
+    docker: Arc<bollard::Docker>,
+    config: Arc<SandboxWorkerConfig>,
+) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "fs::read".to_string(),
+            description: Some("Read a file from a sandbox".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID" },
+                    "path": { "type": "string", "description": "File path to read" }
+                },
+                "required": ["id", "path"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "path": { "type": "string" },
+                    "content": { "type": "string" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<
+            Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>,
+        > {
+            let iii = iii_clone.clone();
+            let docker = docker.clone();
+            let config = config.clone();
+            Box::pin(async move { fs::handle_read(&iii, &docker, &config, payload).await })
+        },
+    );
+}
+
+fn register_fs_write(
+    iii: &Arc<III>,
+    docker: Arc<bollard::Docker>,
+    config: Arc<SandboxWorkerConfig>,
+) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "fs::write".to_string(),
+            description: Some("Write a file to a sandbox".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID" },
+                    "path": { "type": "string", "description": "File path to write" },
+                    "content": { "type": "string", "description": "File content" }
+                },
+                "required": ["id", "path", "content"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "path": { "type": "string" },
+                    "size": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<
+            Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>,
+        > {
+            let iii = iii_clone.clone();
+            let docker = docker.clone();
+            let config = config.clone();
+            Box::pin(async move { fs::handle_write(&iii, &docker, &config, payload).await })
+        },
+    );
+}
+
+fn register_fs_list(
+    iii: &Arc<III>,
+    docker: Arc<bollard::Docker>,
+    config: Arc<SandboxWorkerConfig>,
+) {
+    let iii_clone = iii.clone();
+    let _fn_ref = iii.register_function(
+        RegisterFunctionMessage {
+            id: "fs::list".to_string(),
+            description: Some("List files in a sandbox directory".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID" },
+                    "path": { "type": "string", "description": "Directory path to list" }
+                },
+                "required": ["id"]
+            })),
+            response_format: Some(json!({
+                "type": "array",
+                "items": {
+                    "type": "object",
+                    "properties": {
+                        "name": { "type": "string" },
+                        "path": { "type": "string" },
+                        "size": { "type": "integer" },
+                        "is_directory": { "type": "boolean" }
+                    }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        move |payload: serde_json::Value| -> Pin<
+            Box<dyn Future<Output = Result<serde_json::Value, iii_sdk::IIIError>> + Send>,
+        > {
+            let iii = iii_clone.clone();
+            let docker = docker.clone();
+            let config = config.clone();
+            Box::pin(async move { fs::handle_list(&iii, &docker, &config, payload).await })
+        },
+    );
+}
diff --git a/sandbox-docker/src/functions/sandbox.rs b/sandbox-docker/src/functions/sandbox.rs
new file mode 100644
index 0000000..448a988
--- /dev/null
+++ b/sandbox-docker/src/functions/sandbox.rs
@@ -0,0 +1,221 @@
+use iii_sdk::{IIIError, TriggerRequest};
+use serde_json::{json, Value};
+use std::collections::HashMap;
+use std::time::{SystemTime, UNIX_EPOCH};
+
+use crate::config::SandboxWorkerConfig;
+use crate::docker;
+use crate::types::{Sandbox, SandboxConfig};
+
+fn now_secs() -> u64 {
+    SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_secs()
+}
+
+pub async fn handle_create(
+    iii: &iii_sdk::III,
+    docker_client: &bollard::Docker,
+    config: &SandboxWorkerConfig,
+    payload: Value,
+) -> Result<Value, IIIError> {
+    let existing = iii
+        .trigger(TriggerRequest {
+            function_id: "state::list".into(),
+            payload: json!({ "scope": "sandbox" }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state list failed: {e}")))?;
+
+    let count = existing.as_array().map(|a| a.len()).unwrap_or(0);
+
+    if count >= config.max_sandboxes {
+        return Err(IIIError::Handler(format!(
+            "sandbox limit reached ({}/{})",
+            count, config.max_sandboxes
+        )));
+    }
+
+    let id = uuid::Uuid::new_v4().to_string();
+    let image = payload
+        .get("image")
+        .and_then(|v| v.as_str())
+        .unwrap_or(&config.default_image)
+        .to_string();
+    let timeout = payload
+        .get("timeout")
+        .and_then(|v| v.as_u64())
+        .unwrap_or(config.default_timeout);
+    let memory = payload
+        .get("memory")
+        .and_then(|v| v.as_u64())
+        .unwrap_or(config.default_memory);
+    let cpu = payload
+        .get("cpu")
+        .and_then(|v| v.as_f64())
+        .unwrap_or(config.default_cpu);
+    let network = payload
+        .get("network")
+        .and_then(|v| v.as_bool())
+        .unwrap_or(false);
+    let workdir = payload
+        .get("workdir")
+        .and_then(|v| v.as_str())
+        .unwrap_or(&config.workspace_dir)
+        .to_string();
+
+    let env_map: HashMap<String, String> = payload
+        .get("env")
+        .and_then(|v| serde_json::from_value(v.clone()).ok())
+        .unwrap_or_default();
+
+    docker::ensure_image(docker_client, &image)
+        .await
+        .map_err(|e| IIIError::Handler(format!("image pull failed: {e}")))?;
+
+    docker::create_container(
+        docker_client,
+        &docker::ContainerOpts {
+            id: &id,
+            image: &image,
+            memory_mb: memory,
+            cpu,
+            network,
+            env: &env_map,
+            workdir: &workdir,
+        },
+    )
+    .await
+    .map_err(|e| IIIError::Handler(format!("container creation failed: {e}")))?;
+
+    let created_at = now_secs();
+    let expires_at = created_at + timeout;
+
+    let sandbox = Sandbox {
+        id: id.clone(),
+        image: image.clone(),
+        status: "running".to_string(),
+        created_at,
+        expires_at,
+        config: SandboxConfig {
+            image: Some(image),
+            timeout: Some(timeout),
+            memory: Some(memory),
+            cpu: Some(cpu),
+            network: Some(network),
+            env: Some(env_map),
+            workdir: Some(workdir),
+        },
+    };
+
+    let sandbox_value = serde_json::to_value(&sandbox)
+        .map_err(|e| IIIError::Handler(format!("serialization failed: {e}")))?;
+
+    if let Err(e) = iii
+        .trigger(TriggerRequest {
+            function_id: "state::set".into(),
+            payload: json!({
+                "scope": "sandbox",
+                "key": id,
+                "value": sandbox_value,
+            }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+    {
+        let _ = docker::stop_and_remove(docker_client, &id).await;
+        return Err(IIIError::Handler(format!("state set failed: {e}")));
+    }
+
+    Ok(sandbox_value)
+}
+
+pub async fn handle_get(iii: &iii_sdk::III, payload: Value) -> Result<Value, IIIError> {
+    let id = payload
+        .get("id")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?;
+
+    let result = iii
+        .trigger(TriggerRequest {
+            function_id: "state::get".into(),
+            payload: json!({
+                "scope": "sandbox",
+                "key": id,
+            }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state get failed: {e}")))?;
+
+    if result.is_null() {
+        return Err(IIIError::Handler(format!("sandbox not found: {id}")));
+    }
+
+    Ok(result)
+}
+
+pub async fn handle_list(iii: &iii_sdk::III, _payload: Value) -> Result<Value, IIIError> {
+    let result = iii
+        .trigger(TriggerRequest {
+            function_id: "state::list".into(),
+            payload: json!({ "scope": "sandbox" }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state list failed: {e}")))?;
+
+    Ok(result)
+}
+
+pub async fn handle_kill(
+    iii: &iii_sdk::III,
+    docker_client: &bollard::Docker,
+    payload: Value,
+) -> Result<Value, IIIError> {
+    let id = payload
+        .get("id")
+        .and_then(|v| v.as_str())
+        .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?;
+
+    let existing = iii
+        .trigger(TriggerRequest {
+            function_id: "state::get".into(),
+            payload: json!({
+                "scope": "sandbox",
+                "key": id,
+            }),
+            action: None,
+            timeout_ms: None,
+        })
+        .await
+        .map_err(|e| IIIError::Handler(format!("state get failed: {e}")))?;
+
+    if existing.is_null() {
+        return Err(IIIError::Handler(format!("sandbox not found: {id}")));
+    }
+
+    docker::stop_and_remove(docker_client, id)
+        .await
+        .map_err(|e| IIIError::Handler(format!("container removal failed: {e}")))?;
+
+    iii.trigger(TriggerRequest {
+        function_id: "state::delete".into(),
+        payload: json!({
+            "scope": "sandbox",
+            "key": id,
+        }),
+        action: None,
+        timeout_ms: None,
+    })
+    .await
+    .map_err(|e| IIIError::Handler(format!("state delete failed: {e}")))?;
+
+    Ok(json!({ "id": id, "status": "killed" }))
+}
diff --git a/sandbox-docker/src/main.rs b/sandbox-docker/src/main.rs
new file mode 100644
index 0000000..866ca13
--- /dev/null
+++ b/sandbox-docker/src/main.rs
@@ -0,0 +1,85 @@
+use anyhow::Result;
+use clap::Parser;
+use iii_sdk::{register_worker, InitOptions, OtelConfig};
+use std::sync::Arc;
+
+mod config;
+mod docker;
+mod functions;
+mod manifest;
+mod types;
+
+#[derive(Parser, Debug)]
+#[command(name = "sandbox-docker", about = "III engine Docker sandbox worker")]
+struct Cli {
+    #[arg(long, default_value = "./config.yaml")]
+    config: String,
+
+    #[arg(long, default_value = "ws://127.0.0.1:49134")]
+    url: String,
+
+    #[arg(long)]
+    manifest: bool,
+}
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    tracing_subscriber::fmt()
+        .with_env_filter(
+            tracing_subscriber::EnvFilter::try_from_default_env()
+                .unwrap_or_else(|_| tracing_subscriber::EnvFilter::new("info")),
+        )
+        .init();
+
+    let cli = Cli::parse();
+
+    if cli.manifest {
+        let manifest = manifest::build_manifest();
+        println!("{}", serde_json::to_string_pretty(&manifest).unwrap());
+        return Ok(());
+    }
+
+    let worker_config = match config::load_config(&cli.config) {
+        Ok(c) => {
+            tracing::info!(
+                image = %c.default_image,
+                timeout = c.default_timeout,
+                max_sandboxes = c.max_sandboxes,
+                pool_size = c.pool_size,
+                "loaded config from {}",
+                cli.config
+            );
+            c
+        }
+        Err(e) => {
+            tracing::warn!(error = %e, path = %cli.config, "failed to load config, using defaults");
+            config::SandboxWorkerConfig::default()
+        }
+    };
+
+    let config = Arc::new(worker_config);
+
+    let docker_client =
+        Arc::new(docker::connect_docker().expect("failed to connect to Docker daemon"));
+
+    tracing::info!(url = %cli.url, "connecting to III engine");
+
+    let iii = Arc::new(register_worker(
+        &cli.url,
+        InitOptions {
+            otel: Some(OtelConfig::default()),
+            ..Default::default()
+        },
+    ));
+
+    functions::register_all(&iii, docker_client, config);
+
+    tracing::info!("all sandbox functions registered, waiting for invocations");
+
+    tokio::signal::ctrl_c().await?;
+
+    tracing::info!("sandbox-docker shutting down");
+    iii.shutdown_async().await;
+
+    Ok(())
+}
diff --git a/sandbox-docker/src/manifest.rs b/sandbox-docker/src/manifest.rs
new file mode 100644
index 0000000..91a8d0c
--- /dev/null
+++ b/sandbox-docker/src/manifest.rs
@@ -0,0 +1,66 @@
+use serde::Serialize;
+
+#[derive(Serialize)]
+pub struct ModuleManifest {
+    pub name: String,
+    pub version: String,
+    pub description: String,
+    pub default_config: serde_json::Value,
+    pub supported_targets: Vec<String>,
+}
+
+pub fn build_manifest() -> ModuleManifest {
+    ModuleManifest {
+        name: env!("CARGO_PKG_NAME").to_string(),
+        version: env!("CARGO_PKG_VERSION").to_string(),
+        description: "III engine Docker sandbox worker".to_string(),
+        default_config: serde_json::json!({
+            "class": "modules::sandbox_docker::SandboxDockerModule",
+            "config": {
+                "default_image": "python:3.12-slim",
+                "default_timeout": 3600,
+                "default_memory": 512,
+                "default_cpu": 1.0,
+                "max_sandboxes": 50,
+                "max_cmd_timeout": 300,
+                "workspace_dir": "/workspace",
+                "pool_size": 0
+            }
+        }),
+        supported_targets: vec![env!("TARGET").to_string()],
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_manifest_json_output() {
+        let manifest = build_manifest();
+        let json = serde_json::to_string_pretty(&manifest).unwrap();
+        let parsed: serde_json::Value = serde_json::from_str(&json).unwrap();
+        assert!(parsed.is_object(), "Manifest must be valid JSON object");
+        assert_eq!(parsed["name"], "sandbox-docker");
+    }
+
+    #[test]
+    fn test_manifest_has_required_fields() {
+        let manifest = build_manifest();
+        let json = serde_json::to_string_pretty(&manifest).unwrap();
+        let parsed: serde_json::Value = serde_json::from_str(&json).unwrap();
+        assert!(parsed["default_config"]["class"].is_string());
+        assert_eq!(
+            parsed["default_config"]["config"]["default_image"],
+            "python:3.12-slim"
+        );
+        assert_eq!(parsed["default_config"]["config"]["default_timeout"], 3600);
+        assert_eq!(parsed["default_config"]["config"]["default_memory"], 512);
+        assert_eq!(parsed["default_config"]["config"]["max_sandboxes"], 50);
+        assert_eq!(
+            parsed["default_config"]["config"]["workspace_dir"],
+            "/workspace"
+        );
+        assert!(!manifest.supported_targets.is_empty());
+    }
+}
diff --git a/sandbox-docker/src/types.rs b/sandbox-docker/src/types.rs
new file mode 100644
index 0000000..d8eb6bc
--- /dev/null
+++ b/sandbox-docker/src/types.rs
@@ -0,0 +1,46 @@
+use serde::{Deserialize, Serialize};
+use std::collections::HashMap;
+
+#[derive(Deserialize, Serialize, Debug, Clone, Default)]
+pub struct SandboxConfig {
+    #[serde(default)]
+    pub image: Option<String>,
+    #[serde(default)]
+    pub timeout: Option<u64>,
+    #[serde(default)]
+    pub memory: Option<u64>,
+    #[serde(default)]
+    pub cpu: Option<f64>,
+    #[serde(default)]
+    pub network: Option<bool>,
+    #[serde(default)]
+    pub env: Option<HashMap<String, String>>,
+    #[serde(default)]
+    pub workdir: Option<String>,
+}
+
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct Sandbox {
+    pub id: String,
+    pub image: String,
+    pub status: String,
+    pub created_at: u64,
+    pub expires_at: u64,
+    pub config: SandboxConfig,
+}
+
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct ExecResult {
+    pub exit_code: i64,
+    pub stdout: String,
+    pub stderr: String,
+    pub duration_ms: u64,
+}
+
+#[derive(Deserialize, Serialize, Debug, Clone)]
+pub struct FileInfo {
+    pub name: String,
+    pub path: String,
+    pub size: u64,
+    pub is_directory: bool,
+}
diff --git a/sandbox-firecracker/Cargo.lock b/sandbox-firecracker/Cargo.lock
new file mode 100644
index 0000000..70b91e3
--- /dev/null
+++ b/sandbox-firecracker/Cargo.lock
@@ -0,0 +1,2585 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "anstream"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
+
+[[package]]
+name = "anstyle-parse"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.102"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
+
+[[package]]
+name = "bytes"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
+
+[[package]]
+name = "cc"
+version = "1.2.57"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a0dd1ca384932ff3641c8718a02769f1698e7563dc6974ffd03346116310423"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "clap"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b193af5b67834b676abd72466a96c1024e6a6ad978a1f484bd90b85c94041351"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1110bd8a634a1ab8cb04345d8d878267d57c3cf1b38d91b71af6686408bbca6a"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "clap_lex"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
+
+[[package]]
+name = "colorchoice"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
+
+[[package]]
+name = "const-hex"
+version = "1.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "531185e432bb31db1ecda541e9e7ab21468d4d844ad7505e0546a49b4945d49b"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "proptest",
+ "serde_core",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "data-encoding"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "either"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-macro"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
+
+[[package]]
+name = "futures-task"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
+
+[[package]]
+name = "futures-util"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
+dependencies = [
+ "futures-core",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi 5.3.0",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+ "wasip2",
+ "wasip3",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f44da3a8150a6703ed5d34e164b875fd14c2cdab9af1252a9a1020bde2bdc54"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.15.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+dependencies = [
+ "foldhash",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hostname"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "617aaa3557aef3810a6369d0a99fac8a080891b68bd9f9812a1eeda0c0730cbd"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "windows-link",
+]
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "hyper"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "itoa",
+ "pin-project-lite",
+ "pin-utils",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots",
+]
+
+[[package]]
+name = "hyper-timeout"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b90d566bffbce6a75bd8b09a05aa8c2cb1fabb6cb348f8840c9e4c90a0d83b0"
+dependencies = [
+ "hyper",
+ "hyper-util",
+ "pin-project-lite",
+ "tokio",
+ "tower-service",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96547c2556ec9d12fb1578c4eaf448b04993e7fb79cbaad930a656880a6bdfa0"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-channel",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
+
+[[package]]
+name = "icu_properties"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
+
+[[package]]
+name = "icu_provider"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "id-arena"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "iii-sdk"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e5a1f47aebab918d49a98ece7b1db77649cfb6f785bc29db1753e2edb848005"
+dependencies = [
+ "async-trait",
+ "futures-util",
+ "hostname",
+ "opentelemetry",
+ "opentelemetry-http",
+ "opentelemetry-proto",
+ "opentelemetry_sdk",
+ "prost",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "sysinfo",
+ "thiserror",
+ "tokio",
+ "tokio-tungstenite",
+ "tracing",
+ "uuid",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.16.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d98f6fed1fde3f8c21bc40a1abb88dd75e67924f9cffc3ef95607bad8017f8e2"
+
+[[package]]
+name = "iri-string"
+version = "0.7.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8e7418f59cc01c88316161279a7f665217ae316b388e58a0d10e29f54f1e5eb"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itertools"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
+
+[[package]]
+name = "js-sys"
+version = "0.3.91"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b49715b7073f385ba4bc528e5747d02e66cb39c6146efb66b781f131f0fb399c"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "kvm-bindings"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa4933174d0cc4b77b958578cd45784071cc5ae212c2d78fbd755aaaa6dfa71a"
+dependencies = [
+ "vmm-sys-util",
+]
+
+[[package]]
+name = "kvm-ioctls"
+version = "0.19.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e013ae7fcd2c6a8f384104d16afe7ea02969301ea2bb2a56e44b011ebc907cab"
+dependencies = [
+ "bitflags 2.11.0",
+ "kvm-bindings",
+ "libc",
+ "vmm-sys-util",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "leb128fmt"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
+
+[[package]]
+name = "libc"
+version = "0.2.183"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5b646652bf6661599e1da8901b3b9522896f01e736bad5f723fe7a3a27f899d"
+
+[[package]]
+name = "litemap"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
+
+[[package]]
+name = "mio"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "ntapi"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3b335231dfd352ffb0f8017f3b6027a4917f7df785ea2143d8af2adc66980ae"
+dependencies = [
+ "winapi",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags 2.11.0",
+]
+
+[[package]]
+name = "objc2-io-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33fafba39597d6dc1fb709123dfa8289d39406734be322956a69f0931c73bb15"
+dependencies = [
+ "libc",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "opentelemetry"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b84bcd6ae87133e903af7ef497404dda70c60d0ea14895fc8a5e6722754fc2a0"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "js-sys",
+ "pin-project-lite",
+ "thiserror",
+ "tracing",
+]
+
+[[package]]
+name = "opentelemetry-http"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7a6d09a73194e6b66df7c8f1b680f156d916a1a942abf2de06823dd02b7855d"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "http",
+ "opentelemetry",
+ "reqwest",
+]
+
+[[package]]
+name = "opentelemetry-proto"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7175df06de5eaee9909d4805a3d07e28bb752c34cab57fa9cff549da596b30f"
+dependencies = [
+ "base64",
+ "const-hex",
+ "opentelemetry",
+ "opentelemetry_sdk",
+ "prost",
+ "serde",
+ "serde_json",
+ "tonic",
+ "tonic-prost",
+]
+
+[[package]]
+name = "opentelemetry_sdk"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e14ae4f5991976fd48df6d843de219ca6d31b01daaab2dad5af2badeded372bd"
+dependencies = [
+ "futures-channel",
+ "futures-executor",
+ "futures-util",
+ "opentelemetry",
+ "percent-encoding",
+ "rand",
+ "thiserror",
+ "tokio",
+ "tokio-stream",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pin-project"
+version = "1.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1749c7ed4bcaf4c3d0a3efc28538844fb29bcdd7d2b67b2be7e20ba861ff517"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9b20ed30f105399776b9c883e68e536ef602a16ae6f596d2c473591d6ad64c6"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "potential_utf"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "prettyplease"
+version = "0.2.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
+dependencies = [
+ "proc-macro2",
+ "syn",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "proptest"
+version = "1.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37566cb3fdacef14c0737f9546df7cfeadbfbc9fef10991038bf5015d0c80532"
+dependencies = [
+ "bitflags 2.11.0",
+ "num-traits",
+ "rand",
+ "rand_chacha",
+ "rand_xorshift",
+ "regex-syntax",
+ "unarray",
+]
+
+[[package]]
+name = "prost"
+version = "0.14.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2ea70524a2f82d518bce41317d0fae74151505651af45faf1ffbd6fd33f0568"
+dependencies = [
+ "bytes",
+ "prost-derive",
+]
+
+[[package]]
+name = "prost-derive"
+version = "0.14.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27c6023962132f4b30eb4c172c91ce92d933da334c59c23cddee82358ddafb0b"
+dependencies = [
+ "anyhow",
+ "itertools",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash",
+ "rustls",
+ "socket2",
+ "thiserror",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "434b42fec591c96ef50e21e886936e66d3cc3f737104fdb9b737c40ffb94c098"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2",
+ "tracing",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
+[[package]]
+name = "rand"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+dependencies = [
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "rand_xorshift"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "513962919efc330f829edb2535844d1b912b0fbe2ca165d613e4e8788bb05a5a"
+dependencies = [
+ "rand_core",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "webpki-roots",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
+
+[[package]]
+name = "rustls"
+version = "0.23.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "758025cb5fccfd3bc2fd74708fd4682be41d99e5dff73c377c0646c6012c73a4"
+dependencies = [
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be040f8b0a225e40375822a563fa9524378b9d63112f53e19ffff34df5d33fdd"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df33b2b81ac578cabaf06b89b0631153a3f416b0a886e8a7a1707fb51abbd1ef"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ryu"
+version = "1.0.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
+
+[[package]]
+name = "sandbox-firecracker"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "clap",
+ "iii-sdk",
+ "kvm-bindings",
+ "kvm-ioctls",
+ "libc",
+ "serde",
+ "serde_json",
+ "serde_yaml",
+ "subtle",
+ "tokio",
+ "tracing",
+ "tracing-subscriber",
+ "uuid",
+ "vmm-sys-util",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_yaml"
+version = "0.9.34+deprecated"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47"
+dependencies = [
+ "indexmap",
+ "itoa",
+ "ryu",
+ "serde",
+ "unsafe-libyaml",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "socket2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "syn"
+version = "2.0.117"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "sysinfo"
+version = "0.38.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92ab6a2f8bfe508deb3c6406578252e491d299cbbf3bc0529ecc3313aee4a52f"
+dependencies = [
+ "libc",
+ "memchr",
+ "ntapi",
+ "objc2-core-foundation",
+ "objc2-io-kit",
+ "windows",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e61e67053d25a4e82c844e8424039d9745781b3fc4f32b8d55ed50f5f667ef3"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.50.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27ad5e34374e03cfffefc301becb44e9dc3c17584f414349ebe29ed26661822d"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c55a2eff8b69ce66c84f85e1da1c233edc36ceb85a2058d11b0d6a3c7e7569c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-stream"
+version = "0.1.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32da49809aab5c3bc678af03902d4ccddea2a87d028d86392a4b1560c6906c70"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d25a406cddcc431a75d3d9afc6a7c0f7428d4891dd973e4d54c56b46127bf857"
+dependencies = [
+ "futures-util",
+ "log",
+ "tokio",
+ "tungstenite",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tonic"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fec7c61a0695dc1887c1b53952990f3ad2e3a31453e1f49f10e75424943a93ec"
+dependencies = [
+ "async-trait",
+ "base64",
+ "bytes",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-timeout",
+ "hyper-util",
+ "percent-encoding",
+ "pin-project",
+ "sync_wrapper",
+ "tokio",
+ "tokio-stream",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tonic-prost"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a55376a0bbaa4975a3f10d009ad763d8f4108f067c7c2e74f3001fb49778d309"
+dependencies = [
+ "bytes",
+ "prost",
+ "tonic",
+]
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "indexmap",
+ "pin-project-lite",
+ "slab",
+ "sync_wrapper",
+ "tokio",
+ "tokio-util",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8"
+dependencies = [
+ "bitflags 2.11.0",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "iri-string",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7f578e5945fb242538965c2d0b04418d38ec25c79d160cd279bf0731c8d319"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "tungstenite"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8628dcc84e5a09eb3d8423d6cb682965dea9133204e8fb3efee74c2a0c259442"
+dependencies = [
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand",
+ "sha1",
+ "thiserror",
+ "utf-8",
+]
+
+[[package]]
+name = "typenum"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
+
+[[package]]
+name = "unarray"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eaea85b334db583fe3274d12b4cd1880032beab409c0d774be044d4480ab9a94"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "unsafe-libyaml"
+version = "0.2.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861"
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.22.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a68d3c8f01c0cfa54a75291d83601161799e4a89a39e0929f4b0354d88757a37"
+dependencies = [
+ "getrandom 0.4.2",
+ "js-sys",
+ "serde_core",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "vmm-sys-util"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d1435039746e20da4f8d507a72ee1b916f7b4b05af7a91c093d2c6561934ede"
+dependencies = [
+ "bitflags 1.3.2",
+ "libc",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.2+wasi-0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasip3"
+version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6532f9a5c1ece3798cb1c2cfdba640b9b3ba884f5db45973a6f442510a87d38e"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.64"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e9c5522b3a28661442748e09d40924dfb9ca614b21c00d3fd135720e48b67db8"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18a2d50fcf105fb33bb15f00e7a77b772945a2ee45dcf454961fd843e74c18e6"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03ce4caeaac547cdf713d280eda22a730824dd11e6b8c3ca9e42247b25c631e3"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75a326b8c223ee17883a4251907455a2431acc2791c98c26279376490c378c16"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-encoder"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
+dependencies = [
+ "leb128fmt",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasm-metadata"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
+dependencies = [
+ "anyhow",
+ "indexmap",
+ "wasm-encoder",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
+dependencies = [
+ "bitflags 2.11.0",
+ "hashbrown 0.15.5",
+ "indexmap",
+ "semver",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.91"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "854ba17bb104abfb26ba36da9729addc7ce7f06f5c0f90f3c391f8461cca21f9"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22cfaf3c063993ff62e73cb4311efde4db1efb31ab78a3e5c457939ad5cc0bed"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections",
+ "windows-core",
+ "windows-future",
+ "windows-numerics",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link",
+ "windows-result",
+ "windows-strings",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core",
+ "windows-link",
+ "windows-threading",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core",
+ "windows-link",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "wit-bindgen"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
+dependencies = [
+ "wit-bindgen-rust-macro",
+]
+
+[[package]]
+name = "wit-bindgen-core"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
+dependencies = [
+ "anyhow",
+ "heck",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-bindgen-rust"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
+dependencies = [
+ "anyhow",
+ "heck",
+ "indexmap",
+ "prettyplease",
+ "syn",
+ "wasm-metadata",
+ "wit-bindgen-core",
+ "wit-component",
+]
+
+[[package]]
+name = "wit-bindgen-rust-macro"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
+dependencies = [
+ "anyhow",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wit-bindgen-core",
+ "wit-bindgen-rust",
+]
+
+[[package]]
+name = "wit-component"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
+dependencies = [
+ "anyhow",
+ "bitflags 2.11.0",
+ "indexmap",
+ "log",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "wasm-encoder",
+ "wasm-metadata",
+ "wasmparser",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-parser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
+dependencies = [
+ "anyhow",
+ "id-arena",
+ "indexmap",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-xid",
+ "wasmparser",
+]
+
+[[package]]
+name = "writeable"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
+
+[[package]]
+name = "yoke"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "efbb2a062be311f2ba113ce66f697a4dc589f85e78a4aea276200804cea0ed87"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e8bc7269b54418e7aeeef514aa68f8690b8c0489a06b0136e5f57c4c5ccab89"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+
+[[package]]
+name = "zerotrie"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/sandbox-firecracker/Cargo.toml b/sandbox-firecracker/Cargo.toml
new file mode 100644
index 0000000..363ab22
--- /dev/null
+++ b/sandbox-firecracker/Cargo.toml
@@ -0,0 +1,28 @@
+[workspace]
+
+[package]
+name = "sandbox-firecracker"
+version = "0.1.0"
+edition = "2021"
+publish = false
+
+[[bin]]
+name = "sandbox-firecracker"
+path = "src/main.rs"
+
+[dependencies]
+iii-sdk = { version = "0.9.0", features = ["otel"] }
+kvm-ioctls = "0.19"
+kvm-bindings = { version = "0.10", features = ["fam-wrappers"] }
+vmm-sys-util = "0.12"
+libc = "0.2"
+tokio = { version = "1", features = ["rt-multi-thread", "macros", "sync", "signal"] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+serde_yaml = "0.9"
+anyhow = "1"
+uuid = { version = "1", features = ["v4"] }
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", features = ["fmt", "env-filter"] }
+subtle = "2"
+clap = { version = "4", features = ["derive"] }
diff --git a/sandbox-firecracker/build.rs b/sandbox-firecracker/build.rs
new file mode 100644
index 0000000..81caa36
--- /dev/null
+++ b/sandbox-firecracker/build.rs
@@ -0,0 +1,6 @@
+fn main() {
+    println!(
+        "cargo:rustc-env=TARGET={}",
+        std::env::var("TARGET").unwrap()
+    );
+}
diff --git a/sandbox-firecracker/config.yaml b/sandbox-firecracker/config.yaml
new file mode 100644
index 0000000..6076ad6
--- /dev/null
+++ b/sandbox-firecracker/config.yaml
@@ -0,0 +1,8 @@
+vmstate_path: ./template/vmstate
+memfile_path: ./template/mem
+mem_size_mb: 256
+default_timeout: 30
+max_sandboxes: 1000
+max_cmd_timeout: 60
+max_output_bytes: 1048576
+default_language: python
diff --git a/sandbox-firecracker/src/config.rs b/sandbox-firecracker/src/config.rs
new file mode 100644
index 0000000..35e145b
--- /dev/null
+++ b/sandbox-firecracker/src/config.rs
@@ -0,0 +1,129 @@
+use anyhow::Result;
+use serde::Deserialize;
+
+#[derive(Deserialize, Debug, Clone)]
+pub struct SandboxConfig {
+    #[serde(default = "default_vmstate_path")]
+    pub vmstate_path: String,
+    #[serde(default = "default_memfile_path")]
+    pub memfile_path: String,
+    #[serde(default = "default_mem_size_mb")]
+    pub mem_size_mb: usize,
+    #[serde(default = "default_timeout")]
+    pub default_timeout: u64,
+    #[serde(default = "default_max_sandboxes")]
+    pub max_sandboxes: usize,
+    #[serde(default = "default_max_cmd_timeout")]
+    pub max_cmd_timeout: u64,
+    #[serde(default = "default_max_output_bytes")]
+    pub max_output_bytes: usize,
+    #[serde(default = "default_language")]
+    pub default_language: String,
+}
+
+fn default_vmstate_path() -> String {
+    "./template/vmstate".to_string()
+}
+
+fn default_memfile_path() -> String {
+    "./template/mem".to_string()
+}
+
+fn default_mem_size_mb() -> usize {
+    256
+}
+
+fn default_timeout() -> u64 {
+    30
+}
+
+fn default_max_sandboxes() -> usize {
+    1000
+}
+
+fn default_max_cmd_timeout() -> u64 {
+    60
+}
+
+fn default_max_output_bytes() -> usize {
+    1_048_576
+}
+
+fn default_language() -> String {
+    "python".to_string()
+}
+
+impl Default for SandboxConfig {
+    fn default() -> Self {
+        SandboxConfig {
+            vmstate_path: default_vmstate_path(),
+            memfile_path: default_memfile_path(),
+            mem_size_mb: default_mem_size_mb(),
+            default_timeout: default_timeout(),
+            max_sandboxes: default_max_sandboxes(),
+            max_cmd_timeout: default_max_cmd_timeout(),
+            max_output_bytes: default_max_output_bytes(),
+            default_language: default_language(),
+        }
+    }
+}
+
+pub fn load_config(path: &str) -> Result<SandboxConfig> {
+    let contents = std::fs::read_to_string(path)?;
+    let config: SandboxConfig = serde_yaml::from_str(&contents)?;
+    Ok(config)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_config_defaults() {
+        let config: SandboxConfig = serde_yaml::from_str("{}").unwrap();
+        assert_eq!(config.vmstate_path, "./template/vmstate");
+        assert_eq!(config.memfile_path, "./template/mem");
+        assert_eq!(config.mem_size_mb, 256);
+        assert_eq!(config.default_timeout, 30);
+        assert_eq!(config.max_sandboxes, 1000);
+        assert_eq!(config.max_cmd_timeout, 60);
+        assert_eq!(config.max_output_bytes, 1_048_576);
+        assert_eq!(config.default_language, "python");
+    }
+
+    #[test]
+    fn test_config_custom() {
+        let yaml = r#"
+vmstate_path: /opt/vm/state
+memfile_path: /opt/vm/mem
+mem_size_mb: 512
+default_timeout: 60
+max_sandboxes: 500
+max_cmd_timeout: 120
+max_output_bytes: 2097152
+default_language: node
+"#;
+        let config: SandboxConfig = serde_yaml::from_str(yaml).unwrap();
+        assert_eq!(config.vmstate_path, "/opt/vm/state");
+        assert_eq!(config.memfile_path, "/opt/vm/mem");
+        assert_eq!(config.mem_size_mb, 512);
+        assert_eq!(config.default_timeout, 60);
+        assert_eq!(config.max_sandboxes, 500);
+        assert_eq!(config.max_cmd_timeout, 120);
+        assert_eq!(config.max_output_bytes, 2_097_152);
+        assert_eq!(config.default_language, "node");
+    }
+
+    #[test]
+    fn test_sandbox_config_default() {
+        let config = SandboxConfig::default();
+        assert_eq!(config.vmstate_path, "./template/vmstate");
+        assert_eq!(config.memfile_path, "./template/mem");
+        assert_eq!(config.mem_size_mb, 256);
+        assert_eq!(config.default_timeout, 30);
+        assert_eq!(config.max_sandboxes, 1000);
+        assert_eq!(config.max_cmd_timeout, 60);
+        assert_eq!(config.max_output_bytes, 1_048_576);
+        assert_eq!(config.default_language, "python");
+    }
+}
diff --git a/sandbox-firecracker/src/exec.rs b/sandbox-firecracker/src/exec.rs
new file mode 100644
index 0000000..834fdaf
--- /dev/null
+++ b/sandbox-firecracker/src/exec.rs
@@ -0,0 +1,234 @@
+use anyhow::{bail, Result};
+use kvm_ioctls::VcpuExit;
+use std::time::{Duration, Instant};
+
+use crate::kvm::serial::is_serial_port;
+use crate::types::{ExecResult, VmInstance};
+
+fn make_done_marker() -> String {
+    format!("DONE_{:032x}", uuid::Uuid::new_v4().as_u128())
+}
+
+pub fn run_code(
+    vm: &mut VmInstance,
+    code: &str,
+    language: &str,
+    timeout: Duration,
+    max_output: usize,
+) -> Result<ExecResult> {
+    let (ext, interpreter) = match language {
+        "python" | "python3" => ("py", "python3"),
+        "node" | "javascript" | "js" => ("js", "node"),
+        "ruby" => ("rb", "ruby"),
+        "bash" | "sh" => ("sh", "bash"),
+        other => bail!("unsupported language: {other}"),
+    };
+
+    let delim = format!("HEREDOC_{:016x}", rand_u64());
+    let marker = make_done_marker();
+
+    let cmd = format!(
+        "cat <<'{delim}' > /tmp/code.{ext}\n{code}\n{delim}\n{interpreter} /tmp/code.{ext}; EXIT_CODE=$?; echo \"${{EXIT_CODE}} {marker}\"\n"
+    );
+
+    run_command_with_marker(vm, &cmd, &marker, timeout, max_output)
+}
+
+pub fn run_command(
+    vm: &mut VmInstance,
+    command: &str,
+    timeout: Duration,
+    max_output: usize,
+) -> Result<ExecResult> {
+    let marker = make_done_marker();
+    let wrapped = format!("{command}; EXIT_CODE=$?; echo \"${{EXIT_CODE}} {marker}\"\n");
+    run_command_with_marker(vm, &wrapped, &marker, timeout, max_output)
+}
+
+fn run_command_with_marker(
+    vm: &mut VmInstance,
+    command: &str,
+    marker: &str,
+    timeout: Duration,
+    max_output: usize,
+) -> Result<ExecResult> {
+    let start = Instant::now();
+    let deadline = start + timeout;
+
+    let input = format!("{command}\n");
+    vm.serial.queue_input(input.as_bytes());
+
+    loop {
+        if Instant::now() > deadline {
+            let raw = vm.serial.take_output();
+            vm.serial.clear_output();
+            let truncated = truncate_output(&raw, max_output);
+            return Ok(ExecResult {
+                exit_code: -1,
+                stdout: truncated,
+                stderr: "execution timed out".to_string(),
+                duration_us: start.elapsed().as_micros() as u64,
+            });
+        }
+
+        match vm.vcpu_fd.run() {
+            Ok(VcpuExit::IoOut(port, data)) => {
+                if is_serial_port(port) {
+                    vm.serial.handle_io_out(port, data);
+
+                    if vm.serial.output_contains(marker) {
+                        let raw = vm.serial.take_output();
+                        let (exit_code, stdout) = parse_exit_code(&raw, marker);
+                        let truncated = truncate_output(&stdout, max_output);
+                        return Ok(ExecResult {
+                            exit_code,
+                            stdout: truncated,
+                            stderr: String::new(),
+                            duration_us: start.elapsed().as_micros() as u64,
+                        });
+                    }
+                }
+            }
+            Ok(VcpuExit::IoIn(port, data)) => {
+                if is_serial_port(port) {
+                    let byte = vm.serial.handle_io_in(port);
+                    if !data.is_empty() {
+                        data[0] = byte;
+                    }
+                }
+            }
+            Ok(VcpuExit::Hlt) => {
+                let raw = vm.serial.take_output();
+                let truncated = truncate_output(&raw, max_output);
+                return Ok(ExecResult {
+                    exit_code: -2,
+                    stdout: truncated,
+                    stderr: "VM halted".to_string(),
+                    duration_us: start.elapsed().as_micros() as u64,
+                });
+            }
+            Ok(VcpuExit::Shutdown) => {
+                let raw = vm.serial.take_output();
+                let truncated = truncate_output(&raw, max_output);
+                return Ok(ExecResult {
+                    exit_code: -3,
+                    stdout: truncated,
+                    stderr: "VM shutdown".to_string(),
+                    duration_us: start.elapsed().as_micros() as u64,
+                });
+            }
+            Ok(_) => {}
+            Err(e) => {
+                if e.errno() == libc::EAGAIN || e.errno() == libc::EINTR {
+                    continue;
+                }
+                bail!("KVM_RUN failed: {e}");
+            }
+        }
+    }
+}
+
+fn parse_exit_code(raw: &str, marker: &str) -> (i32, String) {
+    if let Some(marker_pos) = raw.rfind(marker) {
+        let before_marker = &raw[..marker_pos];
+
+        let code_start = before_marker.rfind('\n').map(|p| p + 1).unwrap_or(0);
+
+        let code_str = before_marker[code_start..].trim();
+        let exit_code = code_str.parse::<i32>().unwrap_or(-1);
+        let stdout = before_marker[..code_start].to_string();
+
+        (exit_code, stdout)
+    } else {
+        (-1, raw.to_string())
+    }
+}
+
+fn truncate_output(s: &str, max_bytes: usize) -> String {
+    if s.len() <= max_bytes {
+        s.to_string()
+    } else {
+        let mut end = max_bytes;
+        while end > 0 && !s.is_char_boundary(end) {
+            end -= 1;
+        }
+        format!("{}... [truncated]", &s[..end])
+    }
+}
+
+fn rand_u64() -> u64 {
+    let mut buf = [0u8; 8];
+    // SAFETY: getrandom reads random bytes into a valid, stack-allocated buffer.
+    let ret = unsafe { libc::getrandom(buf.as_mut_ptr() as *mut libc::c_void, 8, 0) };
+    if ret != 8 {
+        // Fallback: use process-level entropy sources if getrandom fails or short-reads.
+        let fallback = std::time::SystemTime::now()
+            .duration_since(std::time::UNIX_EPOCH)
+            .unwrap_or_default()
+            .as_nanos() as u64
+            ^ std::process::id() as u64;
+        return fallback;
+    }
+    u64::from_ne_bytes(buf)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_parse_exit_code_success() {
+        let marker = "DONE_test123";
+        let raw = format!("hello world\n0 {marker}");
+        let (code, stdout) = parse_exit_code(&raw, marker);
+        assert_eq!(code, 0);
+        assert_eq!(stdout, "hello world\n");
+    }
+
+    #[test]
+    fn test_parse_exit_code_nonzero() {
+        let marker = "DONE_test456";
+        let raw = format!("error output\n1 {marker}");
+        let (code, stdout) = parse_exit_code(&raw, marker);
+        assert_eq!(code, 1);
+        assert_eq!(stdout, "error output\n");
+    }
+
+    #[test]
+    fn test_parse_exit_code_missing_marker() {
+        let marker = "DONE_missing";
+        let raw = "partial output";
+        let (code, stdout) = parse_exit_code(raw, marker);
+        assert_eq!(code, -1);
+        assert_eq!(stdout, "partial output");
+    }
+
+    #[test]
+    fn test_make_done_marker_unique() {
+        let m1 = make_done_marker();
+        let m2 = make_done_marker();
+        assert_ne!(m1, m2);
+        assert!(m1.starts_with("DONE_"));
+    }
+
+    #[test]
+    fn test_truncate_output_within_limit() {
+        let s = "short";
+        assert_eq!(truncate_output(s, 100), "short");
+    }
+
+    #[test]
+    fn test_truncate_output_exceeds_limit() {
+        let s = "hello world this is a long string";
+        let result = truncate_output(s, 10);
+        assert!(result.contains("... [truncated]"));
+        assert!(result.len() < s.len() + 20);
+    }
+
+    #[test]
+    fn test_truncate_output_utf8_boundary() {
+        let s = "hello \u{1F600} world";
+        let result = truncate_output(s, 8);
+        assert!(result.contains("... [truncated]"));
+    }
+}
diff --git a/sandbox-firecracker/src/functions/exec.rs b/sandbox-firecracker/src/functions/exec.rs
new file mode 100644
index 0000000..d14b16a
--- /dev/null
+++ b/sandbox-firecracker/src/functions/exec.rs
@@ -0,0 +1,127 @@
+use iii_sdk::IIIError;
+use serde_json::Value;
+use std::future::Future;
+use std::pin::Pin;
+use std::sync::Arc;
+use std::time::Duration;
+
+use crate::config::SandboxConfig;
+use crate::VmRegistry;
+
+pub fn build_run_handler(
+    _url: String,
+    config: Arc<SandboxConfig>,
+    registry: VmRegistry,
+) -> impl Fn(Value) -> Pin<Box<dyn Future<Output = Result<Value, IIIError>> + Send>>
+       + Send
+       + Sync
+       + 'static {
+    move |payload: Value| {
+        let config = config.clone();
+        let registry = registry.clone();
+
+        Box::pin(async move {
+            let sandbox_id = payload
+                .get("sandbox_id")
+                .and_then(|v| v.as_str())
+                .or_else(|| payload.get("id").and_then(|v| v.as_str()))
+                .ok_or_else(|| IIIError::Handler("missing sandbox_id or id".to_string()))?
+                .to_string();
+
+            let command = payload
+                .get("command")
+                .and_then(|v| v.as_str())
+                .ok_or_else(|| IIIError::Handler("missing required field: command".to_string()))?
+                .to_string();
+
+            let timeout_secs = payload
+                .get("timeout")
+                .and_then(|v| v.as_u64())
+                .unwrap_or(config.max_cmd_timeout);
+
+            let timeout_secs = timeout_secs.min(config.max_cmd_timeout);
+            let timeout = Duration::from_secs(timeout_secs);
+            let max_output = config.max_output_bytes;
+
+            let vm_arc = {
+                let map = registry.read().await;
+                map.get(&sandbox_id)
+                    .cloned()
+                    .ok_or_else(|| IIIError::Handler(format!("sandbox not found: {sandbox_id}")))?
+            };
+
+            let result = tokio::task::spawn_blocking(move || {
+                let mut vm = vm_arc.blocking_lock();
+                crate::exec::run_command(&mut vm, &command, timeout, max_output)
+            })
+            .await
+            .map_err(|e| IIIError::Handler(format!("spawn_blocking join error: {e}")))?
+            .map_err(|e| IIIError::Handler(format!("exec failed: {e}")))?;
+
+            serde_json::to_value(&result)
+                .map_err(|e| IIIError::Handler(format!("serialization failed: {e}")))
+        })
+    }
+}
+
+pub fn build_code_handler(
+    _url: String,
+    config: Arc<SandboxConfig>,
+    registry: VmRegistry,
+) -> impl Fn(Value) -> Pin<Box<dyn Future<Output = Result<Value, IIIError>> + Send>>
+       + Send
+       + Sync
+       + 'static {
+    move |payload: Value| {
+        let config = config.clone();
+        let registry = registry.clone();
+
+        Box::pin(async move {
+            let sandbox_id = payload
+                .get("sandbox_id")
+                .and_then(|v| v.as_str())
+                .or_else(|| payload.get("id").and_then(|v| v.as_str()))
+                .ok_or_else(|| IIIError::Handler("missing sandbox_id or id".to_string()))?
+                .to_string();
+
+            let code = payload
+                .get("code")
+                .and_then(|v| v.as_str())
+                .ok_or_else(|| IIIError::Handler("missing required field: code".to_string()))?
+                .to_string();
+
+            let language = payload
+                .get("language")
+                .and_then(|v| v.as_str())
+                .map(|s| s.to_string());
+
+            let timeout_secs = payload
+                .get("timeout")
+                .and_then(|v| v.as_u64())
+                .unwrap_or(config.max_cmd_timeout);
+
+            let timeout_secs = timeout_secs.min(config.max_cmd_timeout);
+            let timeout = Duration::from_secs(timeout_secs);
+            let max_output = config.max_output_bytes;
+            let lang = language.unwrap_or_else(|| config.default_language.clone());
+
+            let vm_arc = {
+                let map = registry.read().await;
+                map.get(&sandbox_id)
+                    .cloned()
+                    .ok_or_else(|| IIIError::Handler(format!("sandbox not found: {sandbox_id}")))?
+            };
+
+            let result = tokio::task::spawn_blocking(move || {
+                let mut vm = vm_arc.blocking_lock();
+                crate::exec::run_code(&mut vm, &code, &lang, timeout, max_output)
+            })
+            .await
+            .map_err(|e| IIIError::Handler(format!("spawn_blocking join error: {e}")))?
+            .map_err(|e| IIIError::Handler(format!("exec failed: {e}")))?;
+
+            serde_json::to_value(&result)
+                .map_err(|e| IIIError::Handler(format!("serialization failed: {e}")))
+        })
+    }
+}
diff --git a/sandbox-firecracker/src/functions/mod.rs b/sandbox-firecracker/src/functions/mod.rs
new file mode 100644
index 0000000..923c00f
--- /dev/null
+++ b/sandbox-firecracker/src/functions/mod.rs
@@ -0,0 +1,208 @@
+use iii_sdk::{RegisterFunctionMessage, III};
+use serde_json::json;
+use std::sync::Arc;
+
+use crate::config::SandboxConfig;
+use crate::kvm::template::Template;
+use crate::VmRegistry;
+
+mod exec;
+mod sandbox;
+
+pub fn register_all(
+    iii: &III,
+    url: &str,
+    template: Arc<Template>,
+    config: Arc<SandboxConfig>,
+    registry: VmRegistry,
+) {
+    let handler = sandbox::build_create_handler(
+        url.to_string(),
+        template.clone(),
+        config.clone(),
+        registry.clone(),
+    );
+    let _fn_create = iii.register_function(
+        RegisterFunctionMessage {
+            id: "sandbox::create".to_string(),
+            description: Some("Fork a new KVM sandbox from the pre-loaded template".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "language": {
+                        "type": "string",
+                        "enum": ["python", "node", "javascript", "ruby", "bash"],
+                        "description": "Runtime language for the sandbox"
+                    },
+                    "timeout": {
+                        "type": "integer",
+                        "description": "Sandbox lifetime in seconds"
+                    }
+                }
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string" },
+                    "language": { "type": "string" },
+                    "status": { "type": "string" },
+                    "created_at": { "type": "integer" },
+                    "expires_at": { "type": "integer" },
+                    "fork_time_us": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        handler,
+    );
+
+    let handler = sandbox::build_get_handler(url.to_string());
+    let _fn_get = iii.register_function(
+        RegisterFunctionMessage {
+            id: "sandbox::get".to_string(),
+            description: Some("Get sandbox metadata by ID".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID" }
+                },
+                "required": ["id"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string" },
+                    "language": { "type": "string" },
+                    "status": { "type": "string" },
+                    "created_at": { "type": "integer" },
+                    "expires_at": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        handler,
+    );
+
+    let handler = sandbox::build_list_handler(url.to_string());
+    let _fn_list = iii.register_function(
+        RegisterFunctionMessage {
+            id: "sandbox::list".to_string(),
+            description: Some("List all active sandboxes".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {}
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "sandboxes": {
+                        "type": "array",
+                        "items": {
+                            "type": "object",
+                            "properties": {
+                                "id": { "type": "string" },
+                                "language": { "type": "string" },
+                                "status": { "type": "string" }
+                            }
+                        }
+                    }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        handler,
+    );
+
+    let handler = sandbox::build_kill_handler(url.to_string(), registry.clone());
+    let _fn_kill = iii.register_function(
+        RegisterFunctionMessage {
+            id: "sandbox::kill".to_string(),
+            description: Some("Kill and remove a sandbox".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "id": { "type": "string", "description": "Sandbox ID to kill" }
+                },
+                "required": ["id"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "killed": { "type": "boolean" },
+                    "id": { "type": "string" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        handler,
+    );
+
+    let handler = exec::build_run_handler(url.to_string(), config.clone(), registry.clone());
+    let _fn_run = iii.register_function(
+        RegisterFunctionMessage {
+            id: "exec::run".to_string(),
+            description: Some("Run a shell command in a sandbox".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "sandbox_id": { "type": "string", "description": "Target sandbox ID" },
+                    "id": { "type": "string", "description": "Target sandbox ID (alias for sandbox_id)" },
+                    "command": { "type": "string", "description": "Shell command to execute" },
+                    "timeout": { "type": "integer", "description": "Command timeout in seconds" }
+                },
+                "required": ["command"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "exit_code": { "type": "integer" },
+                    "stdout": { "type": "string" },
+                    "stderr": { "type": "string" },
+                    "duration_us": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        handler,
+    );
+
+    let handler = exec::build_code_handler(url.to_string(), config.clone(), registry.clone());
+    let _fn_code = iii.register_function(
+        RegisterFunctionMessage {
+            id: "exec::code".to_string(),
+            description: Some("Run code in a sandbox using the configured language interpreter".to_string()),
+            request_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "sandbox_id": { "type": "string", "description": "Target sandbox ID" },
+                    "id": { "type": "string", "description": "Target sandbox ID (alias for sandbox_id)" },
+                    "code": { "type": "string", "description": "Source code to execute" },
+                    "language": { "type": "string", "description": "Language override (defaults to sandbox language)" },
+                    "timeout": { "type": "integer", "description": "Execution timeout in seconds" }
+                },
+                "required": ["code"]
+            })),
+            response_format: Some(json!({
+                "type": "object",
+                "properties": {
+                    "exit_code": { "type": "integer" },
+                    "stdout": { "type": "string" },
+                    "stderr": { "type": "string" },
+                    "duration_us": { "type": "integer" }
+                }
+            })),
+            metadata: None,
+            invocation: None,
+        },
+        handler,
+    );
+
+    tracing::info!(
+        "registered 6 functions: sandbox::create, sandbox::get, sandbox::list, sandbox::kill, exec::run, exec::code"
+    );
+}
diff --git a/sandbox-firecracker/src/functions/sandbox.rs b/sandbox-firecracker/src/functions/sandbox.rs
new file mode 100644
index 0000000..23d1fd0
--- /dev/null
+++ b/sandbox-firecracker/src/functions/sandbox.rs
@@ -0,0 +1,216 @@
+use iii_sdk::{register_worker, IIIError, InitOptions, TriggerRequest};
+use serde_json::{json, Value};
+use std::future::Future;
+use std::pin::Pin;
+use std::sync::Arc;
+use std::time::{SystemTime, UNIX_EPOCH};
+
+use crate::config::SandboxConfig;
+use crate::kvm::fork::fork_from_template;
+use crate::kvm::template::Template;
+use crate::types::Sandbox;
+use crate::VmRegistry;
+
+fn now_secs() -> u64 {
+    SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_secs()
+}
+
+pub fn build_create_handler(
+    url: String,
+    template: Arc<Template>,
+    config: Arc<SandboxConfig>,
+    registry: VmRegistry,
+) -> impl Fn(Value) -> Pin<Box<dyn Future<Output = Result<Value, IIIError>> + Send>>
+       + Send
+       + Sync
+       + 'static {
+    move |payload: Value| {
+        let url = url.clone();
+        let template = template.clone();
+        let config = config.clone();
+        let registry = registry.clone();
+
+        Box::pin(async move {
+            // NOTE: There is a small race window between the capacity check and the
+            // insert below because fork_from_template runs outside the lock. This is
+            // acceptable for a lightweight worker: the worst case is slightly exceeding
+            // max_sandboxes by the number of concurrent create calls in flight.
+            {
+                let map = registry.read().await;
+                if map.len() >= config.max_sandboxes {
+                    return Err(IIIError::Handler(format!(
+                        "max sandbox limit reached ({})",
+                        config.max_sandboxes
+                    )));
+                }
+            }
+
+            let language = payload
+                .get("language")
+                .and_then(|v| v.as_str())
+                .unwrap_or(&config.default_language)
+                .to_string();
+
+            let timeout = payload
+                .get("timeout")
+                .and_then(|v| v.as_u64())
+                .unwrap_or(config.default_timeout);
+
+            let id = format!("sbx-{}", uuid::Uuid::new_v4());
+            let template_ref = template.clone();
+
+            let vm = tokio::task::spawn_blocking(move || fork_from_template(&template_ref))
+                .await
+                .map_err(|e| IIIError::Handler(format!("spawn_blocking join error: {e}")))?
+                .map_err(|e| IIIError::Handler(format!("fork failed: {e}")))?;
+
+            let fork_time_us = vm.fork_time_us;
+            let created_at = now_secs();
+            let expires_at = created_at + timeout;
+
+            let sandbox = Sandbox {
+                id: id.clone(),
+                language: language.clone(),
+                status: "running".to_string(),
+                created_at,
+                expires_at,
+            };
+
+            {
+                let mut map = registry.write().await;
+                map.insert(id.clone(), Arc::new(tokio::sync::Mutex::new(vm)));
+            }
+
+            let iii = register_worker(&url, InitOptions::default());
+            if let Err(e) = iii
+                .trigger(TriggerRequest {
+                    function_id: "state::set".into(),
+                    payload: json!({
+                        "scope": "sandbox",
+                        "key": id,
+                        "value": serde_json::to_value(&sandbox).unwrap()
+                    }),
+                    action: None,
+                    timeout_ms: None,
+                })
+                .await
+            {
+                let mut map = registry.write().await;
+                map.remove(&id);
+                return Err(IIIError::Handler(format!("state::set failed: {e}")));
+            }
+
+            Ok(json!({
+                "id": sandbox.id,
+                "language": sandbox.language,
+                "status": sandbox.status,
+                "created_at": sandbox.created_at,
+                "expires_at": sandbox.expires_at,
+                "fork_time_us": fork_time_us,
+            }))
+        })
+    }
+}
+
+pub fn build_get_handler(
+    url: String,
+) -> impl Fn(Value) -> Pin<Box<dyn Future<Output = Result<Value, IIIError>> + Send>>
+       + Send
+       + Sync
+       + 'static {
+    move |payload: Value| {
+        let url = url.clone();
+
+        Box::pin(async move {
+            let id = payload
+                .get("id")
+                .and_then(|v| v.as_str())
+                .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?
+                .to_string();
+
+            let iii = register_worker(&url, InitOptions::default());
+            let result = iii
+                .trigger(TriggerRequest {
+                    function_id: "state::get".into(),
+                    payload: json!({ "scope": "sandbox", "key": id }),
+                    action: None,
+                    timeout_ms: None,
+                })
+                .await
+                .map_err(|e| IIIError::Handler(format!("state::get failed: {e}")))?;
+
+            Ok(result)
+        })
+    }
+}
+
+pub fn build_list_handler(
+    url: String,
+) -> impl Fn(Value) -> Pin<Box<dyn Future<Output = Result<Value, IIIError>> + Send>>
+       + Send
+       + Sync
+       + 'static {
+    move |_payload: Value| {
+        let url = url.clone();
+
+        Box::pin(async move {
+            let iii = register_worker(&url, InitOptions::default());
+            let result = iii
+                .trigger(TriggerRequest {
+                    function_id: "state::list".into(),
+                    payload: json!({ "scope": "sandbox" }),
+                    action: None,
+                    timeout_ms: None,
+                })
+                .await
+                .map_err(|e| IIIError::Handler(format!("state::list failed: {e}")))?;
+
+            Ok(json!({ "sandboxes": result }))
+        })
+    }
+}
+
+pub fn build_kill_handler(
+    url: String,
+    registry: VmRegistry,
+) -> impl Fn(Value) -> Pin<Box<dyn Future<Output = Result<Value, IIIError>> + Send>>
+       + Send
+       + Sync
+       + 'static {
+    move |payload: Value| {
+        let url = url.clone();
+        let registry = registry.clone();
+
+        Box::pin(async move {
+            let id = payload
+                .get("id")
+                .and_then(|v| v.as_str())
+                .ok_or_else(|| IIIError::Handler("missing required field: id".to_string()))?
+                .to_string();
+
+            let removed = {
+                let mut map = registry.write().await;
+                map.remove(&id)
+            };
+
+            if removed.is_none() {
+                return Err(IIIError::Handler(format!("sandbox not found: {id}")));
+            }
+
+            let iii = register_worker(&url, InitOptions::default());
+            iii.trigger(TriggerRequest {
+                function_id: "state::delete".into(),
+                payload: json!({ "scope": "sandbox", "key": id }),
+                action: None,
+                timeout_ms: None,
+            })
+            .await
+            .map_err(|e| IIIError::Handler(format!("state::delete failed: {e}")))?;
+
+            Ok(json!({ "killed": true, "id": id }))
+        })
+    }
+}
diff --git a/sandbox-firecracker/src/kvm/cpu.rs b/sandbox-firecracker/src/kvm/cpu.rs
new file mode 100644
index 0000000..33345a2
--- /dev/null
+++ b/sandbox-firecracker/src/kvm/cpu.rs
@@ -0,0 +1,239 @@
+use anyhow::{Context, Result};
+use kvm_bindings::{kvm_mp_state, KVM_MP_STATE_RUNNABLE};
+use kvm_ioctls::VcpuFd;
+
+use crate::kvm::vmstate::{SavedCpuidEntry, SavedMsr, SavedSregs, SavedXcr};
+use crate::types::VmSnapshot;
+
+pub fn restore_cpu_state(vcpu: &VcpuFd, snapshot: &VmSnapshot) -> Result<()> {
+    restore_cpuid(vcpu, &snapshot.cpuid_entries)?;
+    restore_sregs(vcpu, &snapshot.sregs)?;
+    restore_xcrs(vcpu, &snapshot.xcrs)?;
+    restore_xsave(vcpu, &snapshot.xsave)?;
+    restore_regs(vcpu, &snapshot.regs)?;
+    restore_lapic(vcpu, &snapshot.lapic)?;
+    restore_msrs(vcpu, &snapshot.msrs)?;
+    restore_mp_state(vcpu)?;
+    Ok(())
+}
+
+fn restore_cpuid(vcpu: &VcpuFd, data: &[u8]) -> Result<()> {
+    let entries: Vec<SavedCpuidEntry> =
+        serde_json::from_slice(data).context("failed to deserialize CPUID entries")?;
+
+    let mut kvm_entries = Vec::with_capacity(entries.len());
+    for e in &entries {
+        kvm_entries.push(kvm_bindings::kvm_cpuid_entry2 {
+            function: e.function,
+            index: e.index,
+            flags: e.flags,
+            eax: e.eax,
+            ebx: e.ebx,
+            ecx: e.ecx,
+            edx: e.edx,
+            padding: [0; 3],
+        });
+    }
+
+    let mut cpuid =
+        kvm_bindings::CpuId::new(kvm_entries.len()).context("failed to allocate CpuId")?;
+    let cpuid_slice = cpuid.as_mut_slice();
+    for (dst, src) in cpuid_slice.iter_mut().zip(kvm_entries.iter()) {
+        *dst = *src;
+    }
+
+    vcpu.set_cpuid2(&cpuid).context("set_cpuid2 failed")?;
+    Ok(())
+}
+
+fn restore_sregs(vcpu: &VcpuFd, data: &[u8]) -> Result<()> {
+    let saved: SavedSregs = serde_json::from_slice(data).context("failed to deserialize sregs")?;
+
+    let mut sregs = vcpu.get_sregs().context("get_sregs failed")?;
+
+    apply_segment(&mut sregs.cs, &saved.cs);
+    apply_segment(&mut sregs.ds, &saved.ds);
+    apply_segment(&mut sregs.es, &saved.es);
+    apply_segment(&mut sregs.fs, &saved.fs);
+    apply_segment(&mut sregs.gs, &saved.gs);
+    apply_segment(&mut sregs.ss, &saved.ss);
+    apply_segment(&mut sregs.tr, &saved.tr);
+    apply_segment(&mut sregs.ldt, &saved.ldt);
+    sregs.gdt.base = saved.gdt.base;
+    sregs.gdt.limit = saved.gdt.limit;
+    sregs.idt.base = saved.idt.base;
+    sregs.idt.limit = saved.idt.limit;
+    sregs.cr0 = saved.cr0;
+    sregs.cr2 = saved.cr2;
+    sregs.cr3 = saved.cr3;
+    sregs.cr4 = saved.cr4;
+    sregs.efer = saved.efer;
+    sregs.apic_base = saved.apic_base;
+
+    vcpu.set_sregs(&sregs).context("set_sregs failed")?;
+    Ok(())
+}
+
+fn apply_segment(dst: &mut kvm_bindings::kvm_segment, src: &crate::kvm::vmstate::SavedSegment) {
+    dst.base = src.base;
+    dst.limit = src.limit;
+    dst.selector = src.selector;
+    dst.type_ = src.type_;
+    dst.present = src.present;
+    dst.dpl = src.dpl;
+    dst.db = src.db;
+    dst.s = src.s;
+    dst.l = src.l;
+    dst.g = src.g;
+    dst.avl = src.avl;
+}
+
+fn restore_xcrs(vcpu: &VcpuFd, data: &[u8]) -> Result<()> {
+    let saved: Vec<SavedXcr> =
+        serde_json::from_slice(data).context("failed to deserialize XCRs")?;
+
+    if saved.is_empty() {
+        return Ok(());
+    }
+
+    let mut xcrs = vcpu.get_xcrs().context("get_xcrs failed")?;
+    let max = xcrs.xcrs.len();
+    anyhow::ensure!(
+        saved.len() <= max,
+        "snapshot has {} XCRs but host supports at most {}",
+        saved.len(),
+        max
+    );
+    for (i, s) in saved.iter().enumerate() {
+        xcrs.xcrs[i].xcr = s.xcr;
+        xcrs.xcrs[i].value = s.value;
+    }
+    xcrs.nr_xcrs = saved.len() as u32;
+
+    vcpu.set_xcrs(&xcrs).context("set_xcrs failed")?;
+    Ok(())
+}
+
+fn restore_xsave(vcpu: &VcpuFd, data: &[u8]) -> Result<()> {
+    if data.is_empty() {
+        return Ok(());
+    }
+
+    let mut xsave = vcpu.get_xsave().context("get_xsave failed")?;
+    let xsave_region = &mut xsave.region;
+    let capacity = xsave_region.len() * 4;
+    anyhow::ensure!(
+        data.len() <= capacity,
+        "xsave data ({} bytes) exceeds host capacity ({} bytes)",
+        data.len(),
+        capacity
+    );
+    let copy_len = data.len();
+
+    // SAFETY: We copy raw bytes into the xsave region. copy_len is bounded
+    // by the smaller of data.len() and the xsave region capacity.
+    unsafe {
+        std::ptr::copy_nonoverlapping(
+            data.as_ptr(),
+            xsave_region.as_mut_ptr() as *mut u8,
+            copy_len,
+        );
+    }
+
+    vcpu.set_xsave(&xsave).context("set_xsave failed")?;
+    Ok(())
+}
+
+fn restore_regs(vcpu: &VcpuFd, data: &[u8]) -> Result<()> {
+    let values: Vec<u64> = serde_json::from_slice(data).context("failed to deserialize regs")?;
+    anyhow::ensure!(
+        values.len() >= 17,
+        "snapshot regs has {} values, need at least 17 (rax..rip)",
+        values.len()
+    );
+
+    let mut regs = vcpu.get_regs().context("get_regs failed")?;
+
+    regs.rax = values[0];
+    regs.rbx = values[1];
+    regs.rcx = values[2];
+    regs.rdx = values[3];
+    regs.rsi = values[4];
+    regs.rdi = values[5];
+    regs.rsp = values[6];
+    regs.rbp = values[7];
+    regs.r8 = values[8];
+    regs.r9 = values[9];
+    regs.r10 = values[10];
+    regs.r11 = values[11];
+    regs.r12 = values[12];
+    regs.r13 = values[13];
+    regs.r14 = values[14];
+    regs.r15 = values[15];
+    regs.rip = values[16];
+    if values.len() >= 18 {
+        regs.rflags = values[17];
+    }
+
+    vcpu.set_regs(&regs).context("set_regs failed")?;
+    Ok(())
+}
+
+fn restore_lapic(vcpu: &VcpuFd, data: &[u8]) -> Result<()> {
+    if data.is_empty() {
+        return Ok(());
+    }
+
+    let mut lapic = vcpu.get_lapic().context("get_lapic failed")?;
+    let regs = &mut lapic.regs;
+    anyhow::ensure!(
+        data.len() <= regs.len(),
+        "lapic data ({} bytes) exceeds host register size ({} bytes)",
+        data.len(),
+        regs.len()
+    );
+    let copy_len = data.len();
+    // SAFETY: lapic.regs is [i8] on x86_64 Linux but we write raw bytes.
+    // The KVM API treats this as an opaque byte buffer.
+    unsafe {
+        std::ptr::copy_nonoverlapping(data.as_ptr(), regs.as_mut_ptr() as *mut u8, copy_len);
+    }
+
+    vcpu.set_lapic(&lapic).context("set_lapic failed")?;
+    Ok(())
+}
+
+fn restore_msrs(vcpu: &VcpuFd, data: &[u8]) -> Result<()> {
+    let saved: Vec<SavedMsr> =
+        serde_json::from_slice(data).context("failed to deserialize MSRs")?;
+
+    if saved.is_empty() {
+        return Ok(());
+    }
+
+    let mut msrs = kvm_bindings::Msrs::new(saved.len()).context("failed to allocate Msrs")?;
+    let entries = msrs.as_mut_slice();
+    for (i, s) in saved.iter().enumerate() {
+        if i < entries.len() {
+            entries[i].index = s.index;
+            entries[i].data = s.data;
+        }
+    }
+
+    let written = vcpu.set_msrs(&msrs).context("set_msrs failed")?;
+    anyhow::ensure!(
+        written as usize == saved.len(),
+        "set_msrs wrote {}/{} entries",
+        written,
+        saved.len()
+    );
+    Ok(())
+}
+
+fn restore_mp_state(vcpu: &VcpuFd) -> Result<()> {
+    let mp_state = kvm_mp_state {
+        mp_state: KVM_MP_STATE_RUNNABLE,
+    };
+    vcpu.set_mp_state(mp_state).context("set_mp_state failed")?;
+    Ok(())
+}
diff --git a/sandbox-firecracker/src/kvm/fork.rs b/sandbox-firecracker/src/kvm/fork.rs
new file mode 100644
index 0000000..817906c
--- /dev/null
+++ b/sandbox-firecracker/src/kvm/fork.rs
@@ -0,0 +1,106 @@
+use anyhow::{bail, Context, Result};
+use kvm_ioctls::Kvm;
+use std::time::Instant;
+
+use super::cpu;
+use super::template::Template;
+use crate::types::{Serial, VmInstance};
+
+pub fn fork_from_template(template: &Template) -> Result<VmInstance> {
+    let start = Instant::now();
+
+    let kvm = Kvm::new().context("failed to open /dev/kvm")?;
+    let vm_fd = kvm.create_vm().context("failed to create VM")?;
+
+    vm_fd
+        .create_irq_chip()
+        .context("failed to create IRQ chip")?;
+
+    vm_fd
+        .create_pit2(kvm_bindings::kvm_pit_config {
+            flags: 0,
+            ..Default::default()
+        })
+        .context("failed to create PIT2")?;
+
+    {
+        use kvm_bindings::kvm_irqchip;
+
+        let mut irqchip = kvm_irqchip {
+            chip_id: 2, // IOAPIC
+            ..Default::default()
+        };
+        vm_fd
+            .get_irqchip(&mut irqchip)
+            .context("failed to get IOAPIC state")?;
+        // SAFETY: chip_id == 2 means the union holds an ioapic struct.
+        let ioapic = unsafe { &mut irqchip.chip.ioapic };
+        for (i, &entry) in template.snapshot.ioapic_redirtbl.iter().enumerate() {
+            if i < 24 {
+                ioapic.redirtbl[i].bits = entry;
+                if entry != 0 {
+                    tracing::trace!(pin = i, entry, "restoring IOAPIC redirect entry");
+                }
+            }
+        }
+        vm_fd
+            .set_irqchip(&irqchip)
+            .context("failed to set IOAPIC state")?;
+    }
+
+    // SAFETY: We mmap the template memfd with MAP_PRIVATE to get CoW semantics.
+    // Each forked VM gets its own copy-on-write view of the template memory.
+    // MAP_NORESERVE avoids reserving swap for the full mapping upfront.
+    let mem_ptr = unsafe {
+        libc::mmap(
+            std::ptr::null_mut(),
+            template.mem_size,
+            libc::PROT_READ | libc::PROT_WRITE,
+            libc::MAP_PRIVATE | libc::MAP_NORESERVE,
+            template.memfd,
+            0,
+        )
+    };
+
+    if mem_ptr == libc::MAP_FAILED {
+        bail!(
+            "mmap MAP_PRIVATE failed: {}",
+            std::io::Error::last_os_error()
+        );
+    }
+
+    // SAFETY: vm_fd is a valid KVM VM. mem_ptr is a valid mmap region of
+    // template.mem_size bytes obtained above. Setting slot 0 with
+    // guest_phys_addr=0 maps the entire guest physical address space.
+    // KVM_MEM_LOG_DIRTY_PAGES is not set — we do not track dirty pages.
+    let mem_region = kvm_bindings::kvm_userspace_memory_region {
+        slot: 0,
+        flags: 0,
+        guest_phys_addr: 0,
+        memory_size: template.mem_size as u64,
+        userspace_addr: mem_ptr as u64,
+    };
+    unsafe {
+        vm_fd
+            .set_user_memory_region(mem_region)
+            .context("failed to set user memory region")?;
+    }
+
+    let vcpu_fd = vm_fd.create_vcpu(0).context("failed to create vCPU")?;
+
+    cpu::restore_cpu_state(&vcpu_fd, &template.snapshot).context("failed to restore CPU state")?;
+
+    let fork_time_us = start.elapsed().as_micros() as u64;
+
+    tracing::debug!(fork_time_us, "VM forked from template");
+
+    Ok(VmInstance {
+        vm_fd,
+        vcpu_fd,
+        mem_ptr: mem_ptr as *mut u8,
+        mem_size: template.mem_size,
+        serial: Serial::new(),
+        fork_time_us,
+        _kvm: kvm,
+    })
+}
diff --git a/sandbox-firecracker/src/kvm/mod.rs b/sandbox-firecracker/src/kvm/mod.rs
new file mode 100644
index 0000000..c2608db
--- /dev/null
+++ b/sandbox-firecracker/src/kvm/mod.rs
@@ -0,0 +1,5 @@
+pub mod cpu;
+pub mod fork;
+pub mod serial;
+pub mod template;
+pub mod vmstate;
diff --git a/sandbox-firecracker/src/kvm/serial.rs b/sandbox-firecracker/src/kvm/serial.rs
new file mode 100644
index 0000000..bc95e56
--- /dev/null
+++ b/sandbox-firecracker/src/kvm/serial.rs
@@ -0,0 +1,5 @@
+pub const COM1_PORT_RANGE: std::ops::RangeInclusive<u16> = 0x3F8..=0x3FF;
+
+pub fn is_serial_port(port: u16) -> bool {
+    COM1_PORT_RANGE.contains(&port)
+}
diff --git a/sandbox-firecracker/src/kvm/template.rs b/sandbox-firecracker/src/kvm/template.rs
new file mode 100644
index 0000000..9c59a87
--- /dev/null
+++ b/sandbox-firecracker/src/kvm/template.rs
@@ -0,0 +1,104 @@
+use anyhow::{bail, Context, Result};
+
+use crate::types::VmSnapshot;
+
+pub struct Template {
+    pub snapshot: VmSnapshot,
+    pub memfd: i32,
+    pub mem_size: usize,
+}
+
+impl Template {
+    pub fn load(vmstate_path: &str, memfile_path: &str, mem_size_mb: usize) -> Result<Self> {
+        let saved = super::vmstate::load_vmstate(vmstate_path)?;
+        let mem_size = mem_size_mb * 1024 * 1024;
+        let snapshot = saved.to_snapshot(mem_size);
+
+        let mem_data = std::fs::read(memfile_path)
+            .with_context(|| format!("failed to read memory file from {memfile_path}"))?;
+
+        if mem_data.len() > mem_size {
+            bail!(
+                "memory file ({} bytes) exceeds configured mem_size ({} bytes)",
+                mem_data.len(),
+                mem_size
+            );
+        }
+
+        let name = std::ffi::CString::new("iii-template").context("failed to create memfd name")?;
+
+        // SAFETY: memfd_create is a Linux syscall that returns a file descriptor.
+        // MFD_CLOEXEC ensures the fd is closed on exec.
+        let memfd = unsafe { libc::memfd_create(name.as_ptr(), libc::MFD_CLOEXEC) };
+        if memfd < 0 {
+            bail!("memfd_create failed: {}", std::io::Error::last_os_error());
+        }
+
+        // SAFETY: memfd is a valid fd from memfd_create above.
+        let ret = unsafe { libc::ftruncate(memfd, mem_size as libc::off_t) };
+        if ret < 0 {
+            unsafe { libc::close(memfd) };
+            bail!("ftruncate failed: {}", std::io::Error::last_os_error());
+        }
+
+        // SAFETY: We mmap the memfd as MAP_SHARED to write the template memory.
+        // The fd is valid and the size was set by ftruncate above.
+        let ptr = unsafe {
+            libc::mmap(
+                std::ptr::null_mut(),
+                mem_size,
+                libc::PROT_READ | libc::PROT_WRITE,
+                libc::MAP_SHARED,
+                memfd,
+                0,
+            )
+        };
+
+        if ptr == libc::MAP_FAILED {
+            unsafe { libc::close(memfd) };
+            bail!(
+                "mmap MAP_SHARED failed: {}",
+                std::io::Error::last_os_error()
+            );
+        }
+
+        // SAFETY: ptr is a valid mmap region of mem_size bytes. mem_data.len() <= mem_size
+        // was checked above. We copy the template memory into the shared mapping.
+        unsafe {
+            std::ptr::copy_nonoverlapping(mem_data.as_ptr(), ptr as *mut u8, mem_data.len());
+            libc::munmap(ptr, mem_size);
+        }
+
+        tracing::info!(
+            memfd,
+            mem_size_mb,
+            mem_file_bytes = mem_data.len(),
+            "template loaded"
+        );
+
+        Ok(Template {
+            snapshot,
+            memfd,
+            mem_size,
+        })
+    }
+}
+
+impl Drop for Template {
+    fn drop(&mut self) {
+        if self.memfd >= 0 {
+            // SAFETY: memfd was created by memfd_create in Template::load.
+            // We close it exactly once in Drop.
+            unsafe {
+                libc::close(self.memfd);
+            }
+            self.memfd = -1;
+        }
+    }
+}
+
+// SAFETY: Template's memfd is an integer file descriptor. The mmap was
+// already unmapped after copying data. Only the fd remains, which is
+// safe to share across threads behind Arc.
+unsafe impl Send for Template {}
+unsafe impl Sync for Template {}
diff --git a/sandbox-firecracker/src/kvm/vmstate.rs b/sandbox-firecracker/src/kvm/vmstate.rs
new file mode 100644
index 0000000..2398ddc
--- /dev/null
+++ b/sandbox-firecracker/src/kvm/vmstate.rs
@@ -0,0 +1,193 @@
+use anyhow::{Context, Result};
+use serde::{Deserialize, Serialize};
+
+use crate::types::VmSnapshot;
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SavedVmState {
+    pub regs: Vec<u64>,
+    pub sregs: SavedSregs,
+    pub msrs: Vec<SavedMsr>,
+    pub lapic: Vec<u8>,
+    pub ioapic_redirtbl: Vec<u64>,
+    pub xcrs: Vec<SavedXcr>,
+    pub xsave: Vec<u8>,
+    pub cpuid: Vec<SavedCpuidEntry>,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SavedSregs {
+    pub cs: SavedSegment,
+    pub ds: SavedSegment,
+    pub es: SavedSegment,
+    pub fs: SavedSegment,
+    pub gs: SavedSegment,
+    pub ss: SavedSegment,
+    pub tr: SavedSegment,
+    pub ldt: SavedSegment,
+    pub gdt: SavedDtable,
+    pub idt: SavedDtable,
+    pub cr0: u64,
+    pub cr2: u64,
+    pub cr3: u64,
+    pub cr4: u64,
+    pub efer: u64,
+    pub apic_base: u64,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SavedSegment {
+    pub base: u64,
+    pub limit: u32,
+    pub selector: u16,
+    pub type_: u8,
+    pub present: u8,
+    pub dpl: u8,
+    pub db: u8,
+    pub s: u8,
+    pub l: u8,
+    pub g: u8,
+    pub avl: u8,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SavedDtable {
+    pub base: u64,
+    pub limit: u16,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SavedMsr {
+    pub index: u32,
+    pub data: u64,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SavedXcr {
+    pub xcr: u32,
+    pub value: u64,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct SavedCpuidEntry {
+    pub function: u32,
+    pub index: u32,
+    pub flags: u32,
+    pub eax: u32,
+    pub ebx: u32,
+    pub ecx: u32,
+    pub edx: u32,
+}
+
+pub fn load_vmstate(path: &str) -> Result<SavedVmState> {
+    let contents = std::fs::read_to_string(path)
+        .with_context(|| format!("failed to read vmstate from {path}"))?;
+    let state: SavedVmState = serde_json::from_str(&contents)
+        .with_context(|| format!("failed to parse vmstate JSON from {path}"))?;
+    Ok(state)
+}
+
+impl SavedVmState {
+    pub fn to_snapshot(&self, mem_size: usize) -> VmSnapshot {
+        let regs = serde_json::to_vec(&self.regs).unwrap_or_default();
+        let sregs = serde_json::to_vec(&self.sregs).unwrap_or_default();
+        let msrs = serde_json::to_vec(&self.msrs).unwrap_or_default();
+        let xcrs = serde_json::to_vec(&self.xcrs).unwrap_or_default();
+        let cpuid_entries = serde_json::to_vec(&self.cpuid).unwrap_or_default();
+
+        VmSnapshot {
+            regs,
+            sregs,
+            msrs,
+            lapic: self.lapic.clone(),
+            ioapic_redirtbl: self.ioapic_redirtbl.clone(),
+            xcrs,
+            xsave: self.xsave.clone(),
+            cpuid_entries,
+            mem_size,
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn make_test_state() -> SavedVmState {
+        SavedVmState {
+            regs: vec![0; 23],
+            sregs: SavedSregs {
+                cs: make_segment(),
+                ds: make_segment(),
+                es: make_segment(),
+                fs: make_segment(),
+                gs: make_segment(),
+                ss: make_segment(),
+                tr: make_segment(),
+                ldt: make_segment(),
+                gdt: SavedDtable { base: 0, limit: 0 },
+                idt: SavedDtable { base: 0, limit: 0 },
+                cr0: 0x80050033,
+                cr2: 0,
+                cr3: 0x1000,
+                cr4: 0x3420,
+                efer: 0xD01,
+                apic_base: 0xFEE00900,
+            },
+            msrs: vec![SavedMsr {
+                index: 0x174,
+                data: 0,
+            }],
+            lapic: vec![0; 1024],
+            ioapic_redirtbl: vec![0; 24],
+            xcrs: vec![SavedXcr { xcr: 0, value: 7 }],
+            xsave: vec![0; 4096],
+            cpuid: vec![SavedCpuidEntry {
+                function: 0,
+                index: 0,
+                flags: 0,
+                eax: 0x16,
+                ebx: 0,
+                ecx: 0,
+                edx: 0,
+            }],
+        }
+    }
+
+    fn make_segment() -> SavedSegment {
+        SavedSegment {
+            base: 0,
+            limit: 0xFFFFFFFF,
+            selector: 0x10,
+            type_: 11,
+            present: 1,
+            dpl: 0,
+            db: 0,
+            s: 1,
+            l: 1,
+            g: 1,
+            avl: 0,
+        }
+    }
+
+    #[test]
+    fn test_to_snapshot() {
+        let state = make_test_state();
+        let snapshot = state.to_snapshot(256 * 1024 * 1024);
+        assert_eq!(snapshot.mem_size, 256 * 1024 * 1024);
+        assert!(!snapshot.regs.is_empty());
+        assert!(!snapshot.sregs.is_empty());
+        assert_eq!(snapshot.lapic.len(), 1024);
+        assert_eq!(snapshot.ioapic_redirtbl.len(), 24);
+    }
+
+    #[test]
+    fn test_saved_vmstate_roundtrip() {
+        let state = make_test_state();
+        let json = serde_json::to_string(&state).unwrap();
+        let parsed: SavedVmState = serde_json::from_str(&json).unwrap();
+        assert_eq!(parsed.regs.len(), state.regs.len());
+        assert_eq!(parsed.sregs.cr0, state.sregs.cr0);
+        assert_eq!(parsed.msrs.len(), state.msrs.len());
+    }
+}
diff --git a/sandbox-firecracker/src/main.rs b/sandbox-firecracker/src/main.rs
new file mode 100644
index 0000000..a2b0336
--- /dev/null
+++ b/sandbox-firecracker/src/main.rs
@@ -0,0 +1,109 @@
+use anyhow::Result;
+use clap::Parser;
+use iii_sdk::{register_worker, InitOptions, OtelConfig};
+use std::collections::HashMap;
+use std::sync::Arc;
+use tokio::sync::{Mutex, RwLock};
+
+mod config;
+mod exec;
+mod functions;
+mod kvm;
+mod manifest;
+mod types;
+
+use types::VmInstance;
+
+pub type VmRegistry = Arc<RwLock<HashMap<String, Arc<Mutex<VmInstance>>>>>;
+
+#[derive(Parser, Debug)]
+#[command(
+    name = "sandbox-firecracker",
+    about = "III engine KVM CoW fork sandbox"
+)]
+struct Cli {
+    #[arg(long, default_value = "./config.yaml")]
+    config: String,
+
+    #[arg(long, default_value = "ws://127.0.0.1:49134")]
+    url: String,
+
+    #[arg(long)]
+    manifest: bool,
+}
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    tracing_subscriber::fmt()
+        .with_env_filter(
+            tracing_subscriber::EnvFilter::try_from_default_env()
+                .unwrap_or_else(|_| tracing_subscriber::EnvFilter::new("info")),
+        )
+        .init();
+
+    let cli = Cli::parse();
+
+    if cli.manifest {
+        let manifest = manifest::build_manifest();
+        println!("{}", serde_json::to_string_pretty(&manifest).unwrap());
+        return Ok(());
+    }
+
+    let sandbox_config = match config::load_config(&cli.config) {
+        Ok(c) => {
+            tracing::info!(
+                mem_size_mb = c.mem_size_mb,
+                max_sandboxes = c.max_sandboxes,
+                default_timeout = c.default_timeout,
+                "loaded config from {}",
+                cli.config
+            );
+            c
+        }
+        Err(e) => {
+            tracing::warn!(error = %e, path = %cli.config, "failed to load config, using defaults");
+            config::SandboxConfig::default()
+        }
+    };
+
+    let template = kvm::template::Template::load(
+        &sandbox_config.vmstate_path,
+        &sandbox_config.memfile_path,
+        sandbox_config.mem_size_mb,
+    )?;
+
+    let template = Arc::new(template);
+    let config = Arc::new(sandbox_config);
+    let registry: VmRegistry = Arc::new(RwLock::new(HashMap::new()));
+
+    tracing::info!(url = %cli.url, "connecting to III engine");
+
+    let iii = register_worker(
+        &cli.url,
+        InitOptions {
+            otel: Some(OtelConfig::default()),
+            ..Default::default()
+        },
+    );
+
+    functions::register_all(
+        &iii,
+        &cli.url,
+        template.clone(),
+        config.clone(),
+        registry.clone(),
+    );
+
+    tracing::info!("all functions registered, waiting for invocations");
+
+    tokio::signal::ctrl_c().await?;
+
+    tracing::info!("shutting down, cleaning up VMs");
+    {
+        let mut map = registry.write().await;
+        map.clear();
+    }
+    iii.shutdown_async().await;
+
+    Ok(())
+}
diff --git a/sandbox-firecracker/src/manifest.rs b/sandbox-firecracker/src/manifest.rs
new file mode 100644
index 0000000..c1f70bc
--- /dev/null
+++ b/sandbox-firecracker/src/manifest.rs
@@ -0,0 +1,70 @@
+use serde::Serialize;
+
+#[derive(Serialize)]
+pub struct ModuleManifest {
+    pub name: String,
+    pub version: String,
+    pub description: String,
+    pub default_config: serde_json::Value,
+    pub supported_targets: Vec<String>,
+}
+
+pub fn build_manifest() -> ModuleManifest {
+    ModuleManifest {
+        name: env!("CARGO_PKG_NAME").to_string(),
+        version: env!("CARGO_PKG_VERSION").to_string(),
+        description: "III engine KVM CoW fork sandbox for sub-millisecond VM spawning".to_string(),
+        default_config: serde_json::json!({
+            "class": "workers::sandbox_firecracker::SandboxFirecrackerWorker",
+            "config": {
+                "vmstate_path": "./template/vmstate",
+                "memfile_path": "./template/mem",
+                "mem_size_mb": 256,
+                "default_timeout": 30,
+                "max_sandboxes": 1000,
+                "max_cmd_timeout": 60,
+                "max_output_bytes": 1048576,
+                "default_language": "python"
+            }
+        }),
+        supported_targets: vec![env!("TARGET").to_string()],
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_manifest_json_output() {
+        let manifest = build_manifest();
+        let json = serde_json::to_string_pretty(&manifest).unwrap();
+        let parsed: serde_json::Value = serde_json::from_str(&json).unwrap();
+        assert!(parsed.is_object(), "Manifest must be valid JSON object");
+        assert_eq!(parsed["name"], "sandbox-firecracker");
+        assert_eq!(
+            parsed["default_config"]["class"],
+            "workers::sandbox_firecracker::SandboxFirecrackerWorker"
+        );
+    }
+
+    #[test]
+    fn test_manifest_has_required_fields() {
+        let manifest = build_manifest();
+        let json = serde_json::to_string_pretty(&manifest).unwrap();
+        let parsed: serde_json::Value = serde_json::from_str(&json).unwrap();
+        assert!(parsed["default_config"]["class"].is_string());
+        assert_eq!(
+            parsed["default_config"]["config"]["vmstate_path"],
+            "./template/vmstate"
+        );
+        assert_eq!(parsed["default_config"]["config"]["mem_size_mb"], 256);
+        assert_eq!(parsed["default_config"]["config"]["default_timeout"], 30);
+        assert_eq!(parsed["default_config"]["config"]["max_sandboxes"], 1000);
+        assert_eq!(
+            parsed["default_config"]["config"]["default_language"],
+            "python"
+        );
+        assert!(!manifest.supported_targets.is_empty());
+    }
+}
diff --git a/sandbox-firecracker/src/types.rs b/sandbox-firecracker/src/types.rs
new file mode 100644
index 0000000..2049bc2
--- /dev/null
+++ b/sandbox-firecracker/src/types.rs
@@ -0,0 +1,219 @@
+use serde::{Deserialize, Serialize};
+use std::collections::VecDeque;
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct Sandbox {
+    pub id: String,
+    pub language: String,
+    pub status: String,
+    pub created_at: u64,
+    pub expires_at: u64,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct ExecResult {
+    pub exit_code: i32,
+    pub stdout: String,
+    pub stderr: String,
+    pub duration_us: u64,
+}
+
+#[derive(Serialize, Deserialize, Debug, Clone)]
+pub struct VmSnapshot {
+    pub regs: Vec<u8>,
+    pub sregs: Vec<u8>,
+    pub msrs: Vec<u8>,
+    pub lapic: Vec<u8>,
+    pub ioapic_redirtbl: Vec<u64>,
+    pub xcrs: Vec<u8>,
+    pub xsave: Vec<u8>,
+    pub cpuid_entries: Vec<u8>,
+    pub mem_size: usize,
+}
+
+pub struct VmInstance {
+    pub vm_fd: kvm_ioctls::VmFd,
+    pub vcpu_fd: kvm_ioctls::VcpuFd,
+    pub mem_ptr: *mut u8,
+    pub mem_size: usize,
+    pub serial: Serial,
+    pub fork_time_us: u64,
+    pub _kvm: kvm_ioctls::Kvm,
+}
+
+// SAFETY: VmInstance is always accessed behind Arc<Mutex<VmInstance>>,
+// which ensures exclusive access to the mutable memory mapping and KVM
+// file descriptors. The raw pointer `mem_ptr` points to a per-VM mmap
+// region that is not shared with other VmInstances.
+unsafe impl Send for VmInstance {}
+
+// SAFETY: All access to VmInstance goes through Arc<Mutex<VmInstance>>.
+// The Mutex guarantees that only one thread touches the KVM fds and
+// memory mapping at a time.
+unsafe impl Sync for VmInstance {}
+
+impl Drop for VmInstance {
+    fn drop(&mut self) {
+        if !self.mem_ptr.is_null() {
+            // SAFETY: mem_ptr was allocated via mmap with mem_size length
+            // in fork::fork_from_template. We only unmap once (in Drop).
+            unsafe {
+                libc::munmap(self.mem_ptr as *mut libc::c_void, self.mem_size);
+            }
+            self.mem_ptr = std::ptr::null_mut();
+        }
+    }
+}
+
+const MAX_SERIAL_BUFFER: usize = 2 * 1024 * 1024; // 2 MB
+
+pub struct Serial {
+    input: VecDeque<u8>,
+    output: Vec<u8>,
+}
+
+impl Serial {
+    pub fn new() -> Self {
+        Serial {
+            input: VecDeque::new(),
+            output: Vec::new(),
+        }
+    }
+
+    pub fn queue_input(&mut self, data: &[u8]) {
+        self.input.extend(data);
+    }
+
+    pub fn handle_io_out(&mut self, port: u16, data: &[u8]) {
+        if port == 0x3F8 {
+            if let Some(&byte) = data.first() {
+                if self.output.len() < MAX_SERIAL_BUFFER {
+                    self.output.push(byte);
+                }
+            }
+        }
+    }
+
+    pub fn handle_io_in(&mut self, port: u16) -> u8 {
+        match port {
+            0x3F8 => self.input.pop_front().unwrap_or(0),
+            0x3FD => {
+                let mut lsr: u8 = 0x60;
+                if !self.input.is_empty() {
+                    lsr |= 0x01;
+                }
+                lsr
+            }
+            _ => 0,
+        }
+    }
+
+    pub fn output_contains(&self, marker: &str) -> bool {
+        let out = String::from_utf8_lossy(&self.output);
+        out.contains(marker)
+    }
+
+    pub fn take_output(&mut self) -> String {
+        let out = String::from_utf8_lossy(&self.output).to_string();
+        self.output.clear();
+        out
+    }
+
+    pub fn clear_output(&mut self) {
+        self.output.clear();
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_serial_io() {
+        let mut serial = Serial::new();
+
+        serial.queue_input(b"hello");
+        assert_eq!(serial.handle_io_in(0x3F8), b'h');
+        assert_eq!(serial.handle_io_in(0x3F8), b'e');
+
+        let lsr = serial.handle_io_in(0x3FD);
+        assert_ne!(lsr & 0x01, 0, "data ready bit should be set");
+
+        serial.handle_io_out(0x3F8, b"A");
+        serial.handle_io_out(0x3F8, b"B");
+        assert!(serial.output_contains("AB"));
+        let out = serial.take_output();
+        assert_eq!(out, "AB");
+        assert!(!serial.output_contains("AB"));
+    }
+
+    #[test]
+    fn test_serial_lsr_empty() {
+        let mut serial = Serial::new();
+        let lsr = serial.handle_io_in(0x3FD);
+        assert_eq!(lsr & 0x01, 0, "data ready bit should be clear");
+        assert_ne!(lsr & 0x60, 0, "transmitter empty bits should be set");
+    }
+
+    #[test]
+    fn test_serial_unknown_port() {
+        let mut serial = Serial::new();
+        assert_eq!(serial.handle_io_in(0x400), 0);
+        serial.handle_io_out(0x400, b"X");
+        assert!(serial.take_output().is_empty());
+    }
+
+    #[test]
+    fn test_serial_empty_data_out() {
+        let mut serial = Serial::new();
+        serial.handle_io_out(0x3F8, &[]);
+        assert!(serial.take_output().is_empty());
+    }
+
+    #[test]
+    fn test_serial_buffer_bounded() {
+        let mut serial = Serial::new();
+        for _ in 0..MAX_SERIAL_BUFFER + 100 {
+            serial.handle_io_out(0x3F8, b"A");
+        }
+        assert_eq!(serial.output.len(), MAX_SERIAL_BUFFER);
+    }
+
+    #[test]
+    fn test_serial_clear_output() {
+        let mut serial = Serial::new();
+        serial.handle_io_out(0x3F8, b"X");
+        serial.clear_output();
+        assert!(serial.take_output().is_empty());
+    }
+
+    #[test]
+    fn test_sandbox_serialization() {
+        let sandbox = Sandbox {
+            id: "sbx-001".to_string(),
+            language: "python".to_string(),
+            status: "running".to_string(),
+            created_at: 1700000000,
+            expires_at: 1700003600,
+        };
+        let json = serde_json::to_string(&sandbox).unwrap();
+        let parsed: Sandbox = serde_json::from_str(&json).unwrap();
+        assert_eq!(parsed.id, "sbx-001");
+        assert_eq!(parsed.language, "python");
+    }
+
+    #[test]
+    fn test_exec_result_serialization() {
+        let result = ExecResult {
+            exit_code: 0,
+            stdout: "hello world\n".to_string(),
+            stderr: String::new(),
+            duration_us: 1234,
+        };
+        let json = serde_json::to_string(&result).unwrap();
+        let parsed: ExecResult = serde_json::from_str(&json).unwrap();
+        assert_eq!(parsed.exit_code, 0);
+        assert_eq!(parsed.stdout, "hello world\n");
+        assert_eq!(parsed.duration_us, 1234);
+    }
+}