Add wasm packages for .net sdk (#68)

* Add wasm packages for .net sdk

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

* Respond to feedback

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

---------

Signed-off-by: James Sturtevant <jsturtevant@gmail.com>

Author: jsturtevant

RELEASE.md

@@ -24,6 +24,10 @@ All other workspace member crates inherit the version automatically.
 
 - `src/wasm_sandbox/guests/javascript/package.json`
 
+### .NET (Directory.Build.props)
+
+- `src/sdk/dotnet/Directory.Build.props`
+
 ## 2. Verify the Build
 
 ```sh

src/sdk/dotnet/Justfile

@@ -19,7 +19,7 @@ devnull := if os() == "windows" { "$null" } else { "/dev/null" }
 #### BUILD ####
 
 # Build everything (Rust FFI + .NET solution)
-build target=default-target: (build-rust target) (build-dotnet target)
+build target=default-target: (build-rust target) (build-dotnet target) (build-guests target)
 
 # Build only the Rust FFI crate
 build-rust target=default-target:
@@ -29,6 +29,11 @@ build-rust target=default-target:
 build-dotnet target=default-target:
     dotnet build {{repo-root}}/src/sdk/dotnet/core/HyperlightSandbox.sln --configuration {{ if target == "release" { "Release" } else { "Debug" } }}
 
+# Build guest modules that are embedded into guest NuGet packages
+build-guests target=default-target:
+    cd {{repo-root}} && just -f src/wasm_sandbox/Justfile guest-build {{target}}
+    cd {{repo-root}} && just -f src/wasm_sandbox/Justfile js-guest-build
+
 #### FORMAT ####
 
 # Apply all formatting (Rust + .NET)
@@ -82,8 +87,8 @@ test-dotnet target=default-target: (build target)
 
 #### EXAMPLES ####
 
-# Run the core examples (requires guest module: just wasm guest-build)
-examples:
+# Run the core examples
+examples target=default-target: (build-guests target)
     dotnet run --project {{repo-root}}/src/sdk/dotnet/core/Examples/BasicExample/BasicExample.csproj
     dotnet run --project {{repo-root}}/src/sdk/dotnet/core/Examples/ToolRegistrationExample/ToolRegistrationExample.csproj
     dotnet run --project {{repo-root}}/src/sdk/dotnet/core/Examples/SnapshotExample/SnapshotExample.csproj
@@ -99,11 +104,13 @@ copilot-sdk-example:
 #### DIST / PUBLISH ####
 
 # Build NuGet packages
-dist target="release": (build target)
+dist target="release": (build-guests target) (build target)
     {{mkdirp}} {{repo-root}}/dist/dotnetsdk
     dotnet pack {{repo-root}}/src/sdk/dotnet/core/PInvoke/HyperlightSandbox.PInvoke.csproj --configuration {{ if target == "release" { "Release" } else { "Debug" } }} --no-build --output {{repo-root}}/dist/dotnetsdk
     dotnet pack {{repo-root}}/src/sdk/dotnet/core/Api/HyperlightSandbox.Api.csproj --configuration {{ if target == "release" { "Release" } else { "Debug" } }} --no-build --output {{repo-root}}/dist/dotnetsdk
     dotnet pack {{repo-root}}/src/sdk/dotnet/core/Extensions.AI/HyperlightSandbox.Extensions.AI.csproj --configuration {{ if target == "release" { "Release" } else { "Debug" } }} --no-build --output {{repo-root}}/dist/dotnetsdk
+    dotnet pack {{repo-root}}/src/sdk/dotnet/core/Guest.Python/HyperlightSandbox.Guest.Python.csproj --configuration {{ if target == "release" { "Release" } else { "Debug" } }} --no-build --output {{repo-root}}/dist/dotnetsdk
+    dotnet pack {{repo-root}}/src/sdk/dotnet/core/Guest.JavaScript/HyperlightSandbox.Guest.JavaScript.csproj --configuration {{ if target == "release" { "Release" } else { "Debug" } }} --no-build --output {{repo-root}}/dist/dotnetsdk
     @echo "✅ NuGet packages created in dist/dotnetsdk/"
 
 # Publish NuGet packages to nuget.org (requires NUGET_API_KEY env var)
@@ -157,4 +164,8 @@ clean:
     -{{rmrf}} {{repo-root}}/src/sdk/dotnet/core/Api/obj
     -{{rmrf}} {{repo-root}}/src/sdk/dotnet/core/Extensions.AI/bin
     -{{rmrf}} {{repo-root}}/src/sdk/dotnet/core/Extensions.AI/obj
+    -{{rmrf}} {{repo-root}}/src/sdk/dotnet/core/Guest.Python/bin
+    -{{rmrf}} {{repo-root}}/src/sdk/dotnet/core/Guest.Python/obj
+    -{{rmrf}} {{repo-root}}/src/sdk/dotnet/core/Guest.JavaScript/bin
+    -{{rmrf}} {{repo-root}}/src/sdk/dotnet/core/Guest.JavaScript/obj
     -{{rmrf}} {{repo-root}}/dist/dotnetsdk

src/sdk/dotnet/README.md

@@ -18,18 +18,18 @@ A .NET 8.0 SDK for running code in secure, sandboxed environments using [hyperli
 
 ```bash
 # Prerequisites
-just wasm guest-build          # Build the Python guest module
 just dotnet build              # Build the .NET SDK + Rust FFI
 ```
 
 ### Basic Usage
 
 ```csharp
 using HyperlightSandbox.Api;
+using HyperlightSandbox.Guest.Python;
 
 // Create a sandbox with the Python guest
 using var sandbox = new SandboxBuilder()
-    .WithModulePath("path/to/python-sandbox.aot")
+    .WithPythonModule()
     .Build();
 
 // Execute code
@@ -50,7 +50,7 @@ Register .NET functions that guest code can call:
 
 ```csharp
 using var sandbox = new SandboxBuilder()
-    .WithModulePath("python-sandbox.aot")
+    .WithPythonModule()
     .Build();
 
 // Typed tool — auto-serializes args and result
@@ -87,13 +87,24 @@ using var sandbox = new SandboxBuilder()
 var result = sandbox.Run("console.log('Hello from JS!');");
 ```
 
+To run JavaScript through the Wasm guest module package instead, reference
+`Hyperlight.HyperlightSandbox.Guest.JavaScript` and call:
+
+```csharp
+using HyperlightSandbox.Guest.JavaScript;
+
+using var sandbox = new SandboxBuilder()
+    .WithJavaScriptModule()
+    .Build();
+```
+
 ### Snapshot/Restore
 
 Checkpoint sandbox state for fast resets between executions:
 
 ```csharp
 using var sandbox = new SandboxBuilder()
-    .WithModulePath("python-sandbox.aot")
+    .WithPythonModule()
     .Build();
 
 // Cold start (~2.5s)
@@ -114,7 +125,7 @@ sandbox.Run("print(x)");  // NameError: x is not defined
 
 ```csharp
 using var sandbox = new SandboxBuilder()
-    .WithModulePath("python-sandbox.aot")
+    .WithPythonModule()
     .WithInputDir("/path/to/input")    // Read-only /input in guest
     .WithTempOutput()                   // Writable /output in guest
     .Build();
@@ -149,11 +160,12 @@ Use with GitHub Copilot SDK or Microsoft Agent Framework:
 ```csharp
 using HyperlightSandbox.Api;
 using HyperlightSandbox.Extensions.AI;
+using HyperlightSandbox.Guest.Python;
 
 // Create a code execution tool with snapshot/restore for clean state
 using var codeTool = new CodeExecutionTool(
     new SandboxBuilder()
-        .WithModulePath("python-sandbox.aot")
+        .WithPythonModule()
         .WithTempOutput());
 
 codeTool.RegisterTool<MathArgs, double>("compute",
@@ -229,6 +241,8 @@ just dotnet copilot-sdk-example       # Run Copilot SDK example
 | `Hyperlight.HyperlightSandbox.PInvoke` | P/Invoke bindings + native library |
 | `Hyperlight.HyperlightSandbox.Api` | High-level API (Sandbox, tools, snapshots) |
 | `Hyperlight.HyperlightSandbox.Extensions.AI` | AI agent integration (CodeExecutionTool, AIFunction) |
+| `Hyperlight.HyperlightSandbox.Guest.Python` | Bundled Python Wasm/AOT guest module + `WithPythonModule()` |
+| `Hyperlight.HyperlightSandbox.Guest.JavaScript` | Bundled JavaScript Wasm/AOT guest module + `WithJavaScriptModule()` |
 
 ## API Reference
 
@@ -237,6 +251,8 @@ just dotnet copilot-sdk-example       # Run Copilot SDK example
 | Method | Description |
 |--------|-------------|
 | `WithModulePath(string)` | Path to `.wasm`/`.aot` guest (required for Wasm) |
+| `WithPythonModule()` | Use the bundled Python guest from `Hyperlight.HyperlightSandbox.Guest.Python` |
+| `WithJavaScriptModule()` | Use the bundled JavaScript guest from `Hyperlight.HyperlightSandbox.Guest.JavaScript` |
 | `WithBackend(SandboxBackend)` | `Wasm` (default) or `JavaScript` |
 | `WithHeapSize(string\|ulong)` | Guest heap size (e.g. `"50Mi"`, default: platform-dependent) |
 | `WithStackSize(string\|ulong)` | Guest stack size (e.g. `"35Mi"`, default: platform-dependent) |
@@ -299,7 +315,7 @@ sandbox.Run("...");
 - .NET 8.0 SDK or later
 - Rust 1.89+ (for building the FFI crate)
 - Linux (Windows support coming via hyperlight)
-- `just wasm guest-build` for Wasm backend examples
+- `just dotnet dist` builds the Python and JavaScript guest modules before packing their NuGet packages
 
 ## Contributing
 

src/sdk/dotnet/core/Examples/BasicExample/BasicExample.csproj

@@ -7,6 +7,6 @@
   </PropertyGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\Api\HyperlightSandbox.Api.csproj" />
-    <ProjectReference Include="..\Common\Common.csproj" />
+    <ProjectReference Include="..\..\Guest.Python\HyperlightSandbox.Guest.Python.csproj" />
   </ItemGroup>
 </Project>

src/sdk/dotnet/core/Examples/BasicExample/Program.cs

@@ -3,19 +3,15 @@
 // Mirrors: src/wasm_sandbox/examples/python_basics.rs
 //
 // Prerequisites:
-//   just wasm guest-build    # builds python-sandbox.aot
-//   just dotnet build        # builds the .NET SDK + FFI
+//   just dotnet build        # builds the .NET SDK + bundled guest package
 
 using HyperlightSandbox.Api;
-using HyperlightSandbox.Examples.Common;
-
-var guestPath = ExampleHelper.RequirePythonGuest();
+using HyperlightSandbox.Guest.Python;
 
 Console.WriteLine("=== Hyperlight Sandbox .NET — Basic Example ===\n");
-Console.WriteLine($"Guest module: {guestPath}\n");
 
 using var sandbox = new SandboxBuilder()
-    .WithModulePath(guestPath)
+    .WithPythonModule()
     .Build();
 
 // --- Test 1: Basic code execution ---

src/sdk/dotnet/core/Examples/FilesystemExample/FilesystemExample.csproj

@@ -7,6 +7,6 @@
   </PropertyGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\Api\HyperlightSandbox.Api.csproj" />
-    <ProjectReference Include="..\Common\Common.csproj" />
+    <ProjectReference Include="..\..\Guest.Python\HyperlightSandbox.Guest.Python.csproj" />
   </ItemGroup>
 </Project>

src/sdk/dotnet/core/Examples/FilesystemExample/Program.cs

@@ -3,16 +3,14 @@
 // Mirrors: src/wasm_sandbox/examples/python_filesystem_demo.rs
 
 using HyperlightSandbox.Api;
-using HyperlightSandbox.Examples.Common;
-
-var guestPath = ExampleHelper.RequirePythonGuest();
+using HyperlightSandbox.Guest.Python;
 
 Console.WriteLine("=== Hyperlight Sandbox .NET — Filesystem Example ===\n");
 
 // --- Test 1: Temp output ---
 Console.WriteLine("═══ Test 1: Temp output directory ═══");
 using (var sandbox = new SandboxBuilder()
-    .WithModulePath(guestPath)
+    .WithPythonModule()
     .WithTempOutput()
     .Build())
 {
@@ -38,7 +36,7 @@ with open("/output/hello.txt", "w") as f:
 try
 {
     using var sandbox = new SandboxBuilder()
-        .WithModulePath(guestPath)
+        .WithPythonModule()
         .WithInputDir(inputDir)
         .WithTempOutput()
         .Build();

src/sdk/dotnet/core/Examples/NetworkExample/NetworkExample.csproj

@@ -7,6 +7,6 @@
   </PropertyGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\Api\HyperlightSandbox.Api.csproj" />
-    <ProjectReference Include="..\Common\Common.csproj" />
+    <ProjectReference Include="..\..\Guest.Python\HyperlightSandbox.Guest.Python.csproj" />
   </ItemGroup>
 </Project>

src/sdk/dotnet/core/Examples/NetworkExample/Program.cs

@@ -3,16 +3,14 @@
 // Mirrors: src/wasm_sandbox/examples/python_network_demo.rs
 
 using HyperlightSandbox.Api;
-using HyperlightSandbox.Examples.Common;
-
-var guestPath = ExampleHelper.RequirePythonGuest();
+using HyperlightSandbox.Guest.Python;
 
 Console.WriteLine("=== Hyperlight Sandbox .NET — Network Example ===\n");
 
 // --- Test 1: Allow a domain with all methods ---
 Console.WriteLine("═══ Test 1: HTTP GET with allowlisted domain ═══");
 using (var sandbox = new SandboxBuilder()
-    .WithModulePath(guestPath)
+    .WithPythonModule()
     .Build())
 {
     sandbox.AllowDomain("https://httpbin.org");
@@ -30,7 +28,7 @@
 // --- Test 2: Method-filtered access ---
 Console.WriteLine("\n═══ Test 2: Method-filtered access (GET only) ═══");
 using (var sandbox = new SandboxBuilder()
-    .WithModulePath(guestPath)
+    .WithPythonModule()
     .Build())
 {
     // Only allow GET requests to httpbin.org.

src/sdk/dotnet/core/Examples/SnapshotExample/Program.cs

@@ -6,14 +6,12 @@
 
 using System.Diagnostics;
 using HyperlightSandbox.Api;
-using HyperlightSandbox.Examples.Common;
-
-var guestPath = ExampleHelper.RequirePythonGuest();
+using HyperlightSandbox.Guest.Python;
 
 Console.WriteLine("=== Hyperlight Sandbox .NET — Snapshot Example ===\n");
 
 using var sandbox = new SandboxBuilder()
-    .WithModulePath(guestPath)
+    .WithPythonModule()
     .WithTempOutput()
     .Build();