feat: add Python 3.13.12 runtime support

Co-Authored-By: Claude <noreply@anthropic.com>

Author: koki-develop

CLAUDE.md

@@ -4,7 +4,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Project Overview
 
-A code execution sandbox service that runs arbitrary code inside Linux namespace jails (nsjail). Supports Node.js, Ruby, Go, and Bash runtimes. Exposes an HTTP API to receive code, execute it in an isolated environment, and return the output.
+A code execution sandbox service that runs arbitrary code inside Linux namespace jails (nsjail). Supports Node.js, Ruby, Go, Python, and Bash runtimes. Exposes an HTTP API to receive code, execute it in an isolated environment, and return the output.
 
 ## Development Setup
 
@@ -87,7 +87,7 @@ Comprehensive nsjail reference documentation lives in `.context/docs/nsjail/`. C
 
 ### POST /v1/run
 
-Request (`runtime` is required, must be `"node"`, `"ruby"`, `"go"`, or `"bash"`):
+Request (`runtime` is required, must be `"node"`, `"ruby"`, `"go"`, `"python"`, or `"bash"`):
 ```json
 {"runtime": "node", "files": [{"name": "index.js", "content": "<base64-encoded source>"}]}
 ```
@@ -99,4 +99,4 @@ Response:
 
 Possible `status` values: `"OK"`, `"SIGNAL"`, `"TIMEOUT"`, `"OUTPUT_LIMIT_EXCEEDED"`.
 
-`compile`: Compilation step result (same schema as `run`). `null` for non-compiled runtimes (node, ruby, bash). When compilation fails, `run` is `null`.
+`compile`: Compilation step result (same schema as `run`). `null` for non-compiled runtimes (node, ruby, python, bash). When compilation fails, `run` is `null`.

Dockerfile

@@ -4,7 +4,7 @@ ARG TARGETARCH
 
 RUN ARCH=$([ "$TARGETARCH" = "arm64" ] && echo "arm64" || echo "x64") && \
     wget -qO /usr/local/bin/mise \
-      "https://github.com/jdx/mise/releases/download/v2026.2.23/mise-v2026.2.23-linux-${ARCH}-musl" && \
+      "https://github.com/jdx/mise/releases/download/v2026.2.23/mise-v2026.2.23-linux-${ARCH}" && \
     chmod +x /usr/local/bin/mise
 
 # ---
@@ -21,12 +21,15 @@ COPY --from=mise /usr/local/bin/mise /usr/local/bin/mise
 
 ENV MISE_DATA_DIR="/mise"
 
+# Node.js
 ENV PATH="/mise/installs/node/24.14.0/bin:$PATH"
 RUN mise use -g node@24.14.0
 
+# Ruby
 ENV PATH="/mise/installs/ruby/3.4.8/bin:$PATH"
 RUN mise settings ruby.compile=false && mise use -g ruby@3.4.8
 
+# Go
 ENV PATH="/mise/installs/go/1.26.0/bin:$PATH"
 RUN mise use -g go@1.26.0
 RUN CGO_ENABLED=0 GOCACHE=/mise/go-cache go build std
@@ -36,6 +39,11 @@ RUN cd /tmp/preinstall && \
     GOMODCACHE=/mise/go-modcache go mod download && \
     rm -rf /tmp/preinstall
 
+# Python
+ENV PATH="/mise/installs/python/3.13.12/bin:$PATH"
+RUN mise use -g python@3.13.12
+
+# Install tools for sandbox
 RUN apt-get update && \
     apt-get install -y --no-install-recommends \
       curl wget mawk && \

README.md

@@ -37,6 +37,7 @@ Codize Sandbox is a code execution engine that runs arbitrary code safely inside
 | Node.js | `node` |
 | Ruby | `ruby` |
 | Go | `go` |
+| Python | `python` |
 | Bash | `bash` |
 
 ## Usage
@@ -115,7 +116,7 @@ Request:
 }
 ```
 
-- `runtime` (required): one of `"node"`, `"ruby"`, `"go"`, `"bash"`
+- `runtime` (required): one of `"node"`, `"ruby"`, `"go"`, `"python"`, `"bash"`
 - `files` (required): array of source files. `content` is Base64-encoded. The first file in the array is used as the entrypoint
 
 Response:
@@ -134,7 +135,7 @@ Response:
 }
 ```
 
-- `compile`: compilation result (same schema as `run`). `null` for interpreted runtimes (node, ruby, bash). When compilation fails, `run` is `null`
+- `compile`: compilation result (same schema as `run`). `null` for interpreted runtimes (node, ruby, python, bash). When compilation fails, `run` is `null`
 - `run`: execution result. `null` when compilation fails
   - `stdout` / `stderr` / `output`: Base64-encoded output. `output` is the interleaved combination of stdout and stderr
   - `exit_code`: process exit code

e2e/tests/api/validation.yml

@@ -39,12 +39,12 @@ tests:
   - name: "unknown runtime"
     requests:
       - input:
-          runtime: python
+          runtime: java
           files:
-            - name: main.py
+            - name: Main.java
               type: plain
               content: |
-                print("hello")
+                class Main { public static void main(String[] args) {} }
         output:
           status: 400
           body:
@@ -53,7 +53,7 @@ tests:
               message: "request validation failed"
               errors:
                 - path: ["runtime"]
-                  message: 'must be one of "bash", "go", "node", "ruby"'
+                  message: 'must be one of "bash", "go", "node", "python", "ruby"'
 
   - name: "missing files"
     requests: