Changeset 0.37.16 (#228)

server/sandbox/sandbox.go

@@ -24,6 +24,7 @@ import (
 
 	"go.starlark.net/starlark"
 	"go.starlark.net/starlarkstruct"
+	starlarkjson "go.starlark.net/lib/json"
 )
 
 // ─── Configuration ───────────────────────────
@@ -93,10 +94,12 @@ func (s *Sandbox) Exec(ctx context.Context, filename, source string, modules map
 	var output strings.Builder
 	var outputMu sync.Mutex
 
-	predeclared := make(starlark.StringDict, len(modules))
+	predeclared := make(starlark.StringDict, len(modules)+1)
 	for k, v := range modules {
 		predeclared[k] = v
 	}
+	// json.encode / json.decode — universal, no permissions required (pure computation)
+	predeclared["json"] = starlarkjson.Module
 
 	thread := &starlark.Thread{
 		Name: s.config.Name,