Struct ProcessHostBashSandbox 

pub struct ProcessHostBashSandbox { /* private fields */ }

Run Bash on the host process with process-group and output bounds.

Use only when an outer container / VM already isolates the workspace from the developer machine. This is the Harbor Terminal-Bench boundary.

Implementations

impl ProcessHostBashSandbox

pub fn new(workspace: impl Into<PathBuf>, deadline: Option<Instant>) -> Self

Create a process-host sandbox rooted at workspace.

deadline, when set, caps every command against a shared run budget (Terminal-Bench outer timeout).

pub fn workspace(&self) -> &Path

Trait Implementations

impl BashSandbox for ProcessHostBashSandbox

fn exec_command<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, command: &'life1 str, guest_workspace: &'life2 str, ) -> Pin<Box<dyn Future<Output = Result<SandboxOutput>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Execute a shell command inside the sandbox.

fn exec<'life0, 'async_trait>( &'life0 self, request: SandboxCommandRequest, ) -> Pin<Box<dyn Future<Output = Result<SandboxExecutionOutput>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Execute a command with the complete host tool contract.

fn shutdown<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = ()> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Shut down the sandbox (best-effort, infallible from caller’s perspective).

fn policy_digest(&self) -> Option<String>

Snapshot of the active policy digest for grant lineage, when the backend supports host-approved grants.

fn apply_network_grant( &self, _grant: NetworkGrant, _expected_base_digest: &str, ) -> Result<String>

Apply a host-approved network grant: the only sanctioned broadening path. expected_base_digest pins the approval to the exact policy the user confirmed against. The default refuses: custom backends opt in explicitly.

impl Debug for ProcessHostBashSandbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.