Struct SandboxedWorker 

pub struct SandboxedWorker { /* private fields */ }

Builder for a fixed Agent Bridle worker born under the ordinary confinement funnel. Unlike ConfinedCommand, the executable is mechanism configuration chosen by the trusted embedder and the entrypoint arguments are fixed by TrustedWorkerKind; model-authored arguments never reach the spawn boundary.

Implementations

impl SandboxedWorker

pub fn brush() -> SandboxedWorker

Configure the carried Brush worker at this process’s fixed executable.

The executable is intentionally not caller-selectable: trusted-worker admission bypasses the model-facing exec check, so accepting an arbitrary path here would turn the worker API into a generic confused deputy.

pub fn sandbox_policy(self, policy: Arc<SandboxPolicy>) -> SandboxedWorker

Set the sandbox mechanism policy used by the shared spawn funnel.

pub fn spawn( self, cx: &ToolContext, nonce: &str, cwd: &Path, ) -> Result<SandboxedWorkerChild, ToolError>

Spawn the fixed worker with empty ambient environment, piped output, and a private authenticated-control transport in place of ordinary stdin.

nonce binds the worker request carried over stdin to this launch. The worker is a fresh process-group leader on Unix so its supervisor can terminate the complete process tree on timeout. Other targets retain their native child-process behavior. The process-wide unbridled state is derived inside core; a caller cannot opt a single worker out of confinement.

Trait Implementations

impl Clone for SandboxedWorker

fn clone(&self) -> SandboxedWorker

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxedWorker

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.