Module sandbox 

Sandbox integration for bash tool execution.

Local A3S Code sessions install a BashSandbox automatically, and the bash built-in tool routes commands through it instead of std::process::Command. The A3S native backend keeps the canonical host workspace path while enforcing the platform isolation boundary around the child process.

native::NativeBashSandbox is the A3S-owned fail-closed implementation used by default throughout A3S Code. Hosts can still supply another implementation through the trait contract when they own an equivalent isolation boundary. Non-local workspace backends retain their explicit command-runner contract.

Modules

native

A3S native sandbox adapter.

Structs

SandboxCommandRequest

Complete request passed to sandbox implementations that support the execution controls used by the built-in bash tool.

SandboxExecutionOutput

Output from the extended sandbox execution contract.

SandboxOutput

Output from running a command inside a sandbox.

Constants

PROTECTED_WORKSPACE_DIRECTORIES

Workspace-relative directories that can alter the agent, repository, or surrounding tool control plane.

PROTECTED_WORKSPACE_FILES

Workspace-relative files that can alter command discovery or repository behavior without living in a protected directory.

Traits

BashSandbox

Abstraction over sandbox bash execution used by the bash built-in tool.

Functions

is_protected_workspace_path

Return whether a normalized workspace-relative path targets protected control metadata.