Tencent/WeKnora · error

sandbox is disabled

Error message

sandbox is disabled

What it means

Sentinel returned by the sandbox manager when code execution is requested but sandboxes are disabled — either the sandbox handle is nil or the sandbox's Type() is SandboxTypeDisabled. It is a feature-flag-style guard meaning execution cannot and will not run in this deployment.

Source

Thrown at internal/sandbox/sandbox.go:100

	DefaultCubeSandboxDomain = "cube.app"
	// DefaultCubeSandboxTTL is the Cube-side sandbox lifetime hint (in seconds)
	// requested at creation; the sandbox is torn down by CubeMaster if the
	// client goes silent for longer than this value.
	DefaultCubeSandboxTTL = 30 * time.Minute
	// DefaultCubeHTTPTimeout bounds a single HTTP call to the CubeAPI
	// (excluding user script execution which has its own per-call timeout).
	DefaultCubeHTTPTimeout = 30 * time.Second

	// DefaultE2BSandboxTTL matches the E2B SDK's built-in default so an
	// unset E2BSandboxTTL still yields a valid sandbox lifetime.
	DefaultE2BSandboxTTL = 5 * time.Minute
	// DefaultE2BHTTPTimeout bounds a single HTTP call to the E2B API.
	DefaultE2BHTTPTimeout = 30 * time.Second
)

// Common errors
var (
	ErrSandboxDisabled   = errors.New("sandbox is disabled")
	ErrTimeout           = errors.New("execution timed out")
	ErrScriptNotFound    = errors.New("script not found")
	ErrInvalidScript     = errors.New("invalid script")
	ErrExecutionFailed   = errors.New("script execution failed")
	ErrSecurityViolation = errors.New("security validation failed")
	ErrDangerousCommand  = errors.New("script contains dangerous command")
	ErrArgInjection      = errors.New("argument injection detected")
	ErrStdinInjection    = errors.New("stdin injection detected")
)

// Sandbox defines the interface for isolated script execution
type Sandbox interface {
	// Execute runs a script in an isolated environment
	Execute(ctx context.Context, config *ExecuteConfig) (*ExecuteResult, error)

	// Cleanup releases sandbox resources
	Cleanup(ctx context.Context) error

View on GitHub (pinned to 988cbb0330)

Solutions

1. Enable sandboxing in configuration (choose a provider like E2B or Cube) and supply its credentials
2. Skip code-execution features gracefully when the error is returned (errors.Is check)
3. Communicate to users that code execution is unavailable in this deployment

When it happens

Trigger: Thrown at internal/sandbox/sandbox.go:100 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of Tencent/WeKnora@988cbb0330 (2026-09-02). Data as JSON: /api/errors/9bab9a6aa33b574d. Report an issue: GitHub.