//! Command runner, sandbox, output capture, and network allowlist.
//!
//! This crate provides the execution engine used by the agent orchestrator
//! for spawning commands inside optional sandbox profiles, capturing and
//! sanitizing output streams, and validating network allowlists.
/// Output capture utilities for spawned commands.
/// Command runner abstractions, policies, and spawn helpers.
/// Sandbox network allowlist parsing and validation.