MCP tools are renamed, a breaking change

Every tool now carries its product's name, as the CLI does: runtime_exec is runtime_sandbox_exec, runtime_files_read is runtime_sandbox_files_read, runtime_sandboxes_create is runtime_sandbox_create, and images, volumes and snapshots are runtime_image_*, runtime_volume_* and runtime_snapshot_*. Every sandbox tool names its sandbox id. The old names are gone: a call to one fails and its error names the new one. Restart your agent, or run /mcp in Claude Code, so it lists the tools again, and change any permission rule or prompt that names an old tool. The whole table is in MCP.