Module sandbox 

Sandbox integration for bash tool execution.

When a BashSandbox is provided via [ToolContext::with_sandbox], the bash built-in tool routes commands through that sandbox instead of std::process::Command. The workspace directory is mounted read-write at /workspace inside the sandbox.

The concrete sandbox implementation is supplied by the host application (e.g., SafeClaw can provide an A3S Box–backed implementation after the user installs a3s-box). This crate defines only the trait contract.

Structs

SandboxConfig

Configuration for routing bash tool execution through a sandbox.

SandboxOutput

Output from running a command inside a sandbox.

Traits

BashSandbox

Abstraction over sandbox bash execution used by the bash built-in tool.