<!-- Extension API v0 — pre-1.0. Interfaces may change without notice until P2 seals the custom-code format. First-party extensions track HEAD. -->

# `workspaces.exec`

Run one command in the workspace's hosted sandbox (the pinned CLI is preinstalled; cwd defaults to /workspace/store). Output capped at 256 KB.

- **method + path**: `POST /v1/workspaces/{ws}/exec`
- **TR label**: Sandbox komutu çalıştırıldı
- **auth**: authenticated · scope gates: any of `admin`, `sandbox:use` — “Sandbox kullanımı için sandbox:use yetkisi gerekli”
- **agentPolicy**: `workspace` — writes confined to the caller's own draft workspace or staging — every token kind executes it directly.
- **effects**: `provider`, `db`
- **idempotency**: server — the platform derives the key
- **wraps**: — (no command inside)

Machine-readable body schema: [/schemas/routes/workspaces.exec.json](/schemas/routes/workspaces.exec.json).

## Body

```json
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "cmd": {
      "type": "string",
      "minLength": 1,
      "maxLength": 4096
    },
    "cwd": {
      "type": "string",
      "maxLength": 512
    },
    "timeoutMs": {
      "type": "integer",
      "minimum": 1000,
      "maximum": 600000
    }
  },
  "required": [
    "cmd"
  ],
  "additionalProperties": false
}
```