Add experimental capnweb RPC transport

AGENTS.md

@@ -218,6 +218,21 @@ Turbo handles task orchestration (`turbo.json`) with dependency-aware builds.
 - Use the newly defined type everywhere appropriate for consistency
 - This ensures type safety and catches errors at compile time rather than runtime
 
+### Style Guide
+
+**Uppercase acronyms in identifiers.** When an acronym appears in a camelCase or
+PascalCase identifier, keep it fully uppercase:
+
+| ✅ Do             | ❌ Don't          |
+| ----------------- | ----------------- |
+| `SandboxRPCAPI`   | `SandboxRpcApi`   |
+| `containerURL`    | `containerUrl`    |
+| `parseHTTPHeader` | `parseHttpHeader` |
+| `getAPIKey`       | `getApiKey`       |
+
+This applies to all acronyms: API, URL, HTTP, RPC, SSE, SSH, DNS, ID, etc.
+Exception: library-provided names (e.g. capnweb's `RpcTarget`) keep their original casing.
+
 ### Git Commits
 
 See the **git-commit** skill (`.opencode/skill/git-commit/SKILL.md`) for detailed commit message guidelines.

packages/sandbox-container/package.json

@@ -14,7 +14,8 @@
   "dependencies": {
     "@repo/shared": "*",
     "acorn": "^8.14.0",
-    "async-mutex": "^0.5.0"
+    "async-mutex": "^0.5.0",
+    "capnweb": "https://pkg.pr.new/cloudflare/capnweb@159"
   },
   "devDependencies": {
     "@repo/typescript-config": "*",

packages/sandbox-container/src/core/container.ts

@@ -41,6 +41,7 @@ export interface Dependencies {
   // Infrastructure
   logger: Logger;
   security: SecurityService;
+  sessionManager: SessionManager;
 
   // Handlers
   backupHandler: BackupHandler;
@@ -166,6 +167,7 @@ export class Container {
       // Infrastructure
       logger,
       security,
+      sessionManager,
 
       // Handlers
       backupHandler,