Module sandbox 

Sandbox integration for bash tool execution.

Local A3S Code sessions install a BashSandbox automatically, and the bash built-in tool routes commands through it instead of std::process::Command. The A3S native backend keeps the canonical host workspace path while enforcing the platform isolation boundary around the child process.

native::NativeBashSandbox is the A3S-owned fail-closed implementation used by default throughout A3S Code. Hosts can still supply another implementation through the trait contract when they own an equivalent isolation boundary. Non-local workspace backends retain their explicit command-runner contract.

Re-exports

pub use process_host::ProcessHostBashSandbox;

Modules

native

A3S native sandbox adapter.

process_host

Process-host Bash sandbox for environments that already provide an outer isolation boundary (Harbor task containers, CI job VMs).

Structs

SandboxCommandRequest

Complete request passed to sandbox implementations that support the execution controls used by the built-in bash tool.

SandboxExecutionOutput

Output from the extended sandbox execution contract.

SandboxOutput

Output from running a command inside a sandbox.

Constants

PROTECTED_WORKSPACE_DIRECTORIES

Workspace-relative directories that can alter the agent, repository, or surrounding tool control plane.

PROTECTED_WORKSPACE_FILES

Workspace-relative files that can alter command discovery or repository behavior without living in a protected directory.

Traits

BashSandbox

Abstraction over sandbox bash execution used by the bash built-in tool.

Functions

is_protected_workspace_path

Return whether a normalized workspace-relative path targets protected control metadata.