Struct SandboxConfig 

pub struct SandboxConfig {
    pub enabled: bool,
    pub strategy: String,
    pub allowed_write_paths: Vec<String>,
    pub forbidden_paths: Vec<String>,
    pub allow_network: bool,
}

Process-level sandbox configuration.

When enabled is true, subprocess-spawning tools (currently the Bash tool) wrap their child process with an OS-level isolation mechanism: sandbox-exec on macOS, future strategies on Linux/Windows. Defaults ship the sandbox disabled while Linux and Windows strategies land, so that opt-in users on macOS can exercise the integration without asymmetric platform security.

Fields

enabled: bool

Whether process-level sandboxing is enabled for subprocess tools.

strategy: String

Strategy selector: "auto", "seatbelt", or "none".

"auto" picks the best available strategy for the host OS and falls back to "none" with a warning when no strategy is available.

allowed_write_paths: Vec<String>

Absolute or ~-prefixed paths that the sandbox may write to in addition to the project directory. Relative paths are resolved against the project directory.

forbidden_paths: Vec<String>

Paths the sandbox must never read. Overrides the default broad-read allow rule so credentials stay masked.

allow_network: bool

Whether subprocesses in the sandbox can open network sockets.

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxConfig

where SandboxConfig: Default,

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.