Phase G2-1~G2-6: Code Execution Worker - Docker sandbox deployment, backend API (code_exec_admin.py), frontend CodeExecTab, security hardening (read-only FS, non-root, capability dropping, RLIMIT_AS)

frontend/src/api/index.ts

@@ -650,6 +650,19 @@ export const adminAPI = {
   seedMcpTools: () =>
     post<any>('/admin/mcp-market/seed'),
 
+  // Code Execution Sandbox (Phase G2)
+  getCodeExecStats: () => get<any>('/admin/code-exec/stats'),
+  getCodeExecRuntimes: () => get<any>('/admin/code-exec/runtimes'),
+  executeCode: (data: { language: string; code: string; stdin?: string; timeout?: number }) =>
+    post<any>('/admin/code-exec/execute', data),
+  getCodeExecTasks: (params?: any) => {
+    const sp = new URLSearchParams();
+    if (params) Object.entries(params).forEach(([k, v]) => { if (v) sp.set(k, String(v)); });
+    return get<any>(`/admin/code-exec/tasks${sp.toString() ? '?' + sp.toString() : ''}`);
+  },
+  getCodeExecTask: (id: string) => get<any>(`/admin/code-exec/tasks/${id}`),
+  deleteCodeExecTask: (id: string) => del<any>(`/admin/code-exec/tasks/${id}`),
+
 };
 // ===== AI自进化API =====
 export const evolutionAPI = {