Struct SandboxConfig 

pub struct SandboxConfig {
    pub io_permissions: IOPermissions,
    pub filesystem_policy: SandboxPolicy,
    pub filesystem_restriction: Option<PathRestriction>,
    pub module_policy: SandboxPolicy,
    pub module_restriction: Option<PathRestriction>,
    pub enable_metrics: bool,
    pub max_module_cache_size: usize,
    pub module_cache_ttl_secs: u64,
    pub execution_limits: ExecutionLimits,
}

统一的沙箱配置

Fields

io_permissions: IOPermissions

IO 权限（保留向后兼容）

filesystem_policy: SandboxPolicy

文件系统沙箱策略

filesystem_restriction: Option<PathRestriction>

文件系统路径限制

module_policy: SandboxPolicy

模块系统沙箱策略

module_restriction: Option<PathRestriction>

模块路径限制

enable_metrics: bool

是否启用可观测性指标收集

max_module_cache_size: usize

最大模块缓存数量（0 = 不限制）

module_cache_ttl_secs: u64

模块缓存 TTL（秒，0 = 永不过期）

execution_limits: ExecutionLimits

执行限制配置

Implementations

impl SandboxConfig

pub fn dsl_safe() -> Self

创建 DSL 安全默认配置（禁用所有 IO，严格执行限制）

pub fn cli_full_access() -> Self

创建 CLI 完全访问配置

pub fn sandboxed(root_dir: PathBuf) -> Self

创建受限沙箱配置（仅允许 root_dir 内访问）

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.