63e2201da1
Adds a pluggable sandbox layer to exec_shell, with Alibaba OpenSandbox as the first opt-in backend. No sandbox by default — existing behavior unchanged. New files: crates/tui/src/sandbox/mod.rs — SandboxBackend trait + factory crates/tui/src/sandbox/backend.rs — SandboxOutput, SandboxKind crates/tui/src/sandbox/opensandbox.rs — HTTP adapter for OpenSandbox REST API Config additions (~/.deepseek/config.toml): sandbox_backend = "opensandbox" # or "none" (default) sandbox_url = "http://localhost:8080" sandbox_api_key = "..." # optional Implemented using `deepseek exec --model deepseek-v4-pro`. 🐋