Struct SandboxPolicy 

pub struct SandboxPolicy {
    pub project_dir: PathBuf,
    pub allowed_write_paths: Vec<PathBuf>,
    pub forbidden_paths: Vec<PathBuf>,
    pub allow_network: bool,
}

A concrete sandbox policy with paths resolved to absolute form.

Fields

project_dir: PathBuf

Project root — always writable inside the sandbox.

allowed_write_paths: Vec<PathBuf>

Additional writable paths (e.g. /tmp, ~/.cache/agent-code).

forbidden_paths: Vec<PathBuf>

Paths that must never be readable (e.g. ~/.ssh, ~/.aws).

allow_network: bool

Whether network access is permitted inside the sandbox.

Implementations

impl SandboxPolicy

pub fn from_config(config: &SandboxConfig, project_dir: &Path) -> Self

Build a policy from a SandboxConfig and a project directory.

Path entries have ~ expanded via $HOME and are left as-is if absolute. Relative paths are joined onto project_dir.

Trait Implementations

impl Clone for SandboxPolicy

fn clone(&self) -> SandboxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.