Canonical tool execution and sandbox engine for the Agent OS.

Praxis implements the Tool trait from aios-protocol and provides a secure, sandboxed environment for executing filesystem operations, shell commands, memory persistence, MCP bridge connections, and skill discovery within agent sessions.

aios-protocol (Tool trait, ToolDefinition, ToolCall, ToolResult, ToolError)
  |
  +-- praxis-core        Sandbox policy, workspace enforcement, command runner
  |
  +-- praxis-tools       ReadFile, WriteFile, ListDir, Glob, Grep, EditFile, Bash, Memory
  |
  +-- praxis-skills      SKILL.md parser, SkillRegistry, system prompt catalog
  |
  +-- praxis-mcp         MCP server connection + McpTool bridge (via rmcp)

• Hashline editing -- content-addressed (Blake3) line editing prevents blind edits on stale content.
• Workspace boundary enforcement -- all filesystem operations canonicalize paths and block symlink traversal attacks.
• Sandbox policy -- shell commands are constrained by timeout, output size limits, env filtering, and cwd validation.
• Skill discovery -- parses SKILL.md frontmatter to build a skill registry and system prompt catalog.
• MCP bridge -- connects to MCP servers over stdio and bridges their tools to the canonical Tool trait.

cargo test --workspace          # Run all 49 tests
cargo clippy --workspace -- -D warnings   # Lint
cargo fmt                       # Format

• Rust 2024 edition (MSRV 1.85)
• Depends only on aios-protocol from the Agent OS stack

Full documentation: docs.broomva.tech/docs/life/praxis

MIT