Add Smol Machines sandbox provider

[BinSquare]

Add a Smol Machines provider with local and Cloud microVM support, native checkpoint access, documented capability limits, five passing live local VM checks, and a live Cloud command and file round-trip.

---

[vercel]

@BinSquare is attempting to deploy a commit to the OpenCore Team on Vercel.

A member of the Team first needs to authorize it.

[devin-ai-integration]

Devin Review found 4 potential issues.

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The PR appears safe to merge; no new blocking issue was found.

Summary

Adds Smol Machines as a sandbox provider for local and Cloud microVMs.

• Smol Machines now runs through the shared sandbox API.
• Local and Cloud Smol VMs expose different process and port controls.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  App["createSandbox()"] --> Provider["smol()"]
  Provider --> Local["Local microVM"]
  Provider --> Cloud["Cloud microVM"]
  Local --> Shared["Files and commands"]
  Cloud --> Shared
  Local --> Processes["Streamed processes and cancellation"]
  Local --> Raw["raw: native Machine"]
  Cloud --> Raw
  Raw --> Checkpoints["Checkpoints and branching"]

Loading

_{Reviews (9) · Last reviewed commit: "Reject Cloud file paths that would alias..." · Reviewed by Greptile}

[BinSquare]

Validation on the current branch: 12 repeatable Smol provider tests passed; package typecheck, lint, and build passed; five live local KVM checks passed (including checkpoint restore and published ports); and the new opt-in live Smol Cloud test passed for commands, byte-exact files, listing, and cleanup. All four earlier process/capability review threads have fixes and are resolved. The remaining Vercel status requests authorization from an OpenCore team member to deploy this fork PR.