Add wasmsh in-process sandbox with shell and Python support

[johannhartmann]

Checked other resources

• This is a feature request, not a bug report.
• I searched existing issues and didn't find this feature.
• I checked the docs and README for existing functionality.
• This request applies to this repo (deepagents) and not an external package.

Area (Required)

• deepagents (SDK)
• cli

Feature description

Add wasmsh sandbox support — a Bash-compatible shell (88 utilities) and Python 3.13 with pip, running entirely in-process via WebAssembly. No containers, no cloud services, no API keys required. Prefers Deno for OS-level permission isolation (--allow-read, --allow-net), falls back to Node.js.

Backed by wasmsh and Pyodide.

Proposed solution (optional)

Implementation is ready at PR #2473. Follows the langchain-daytona structure. 30 unit tests, 57 integration tests passing under both Deno and Node.js.

Additional context (optional)

A corresponding TypeScript implementation for deepagentsjs is at langchain-ai/deepagentsjs#427

[eyurtsev]

Have you looked at alternative solutions? There are a number of local sandbox runtimes available right now.

Could we generalize our local shell solution with some parameterization to allow a developer to launch it within their desired runtime?