Skip to main content

SandboxStrategy

agent_code_lib::sandbox

Trait SandboxStrategy 

Source 
pub trait SandboxStrategy: Send + Sync {
    // Required methods
    fn name(&self) -> &'static str;
    fn wrap_command(&self, cmd: Command, policy: &SandboxPolicy) -> Command;
}
Expand description

Strategy trait for wrapping a subprocess command with OS-level isolation.

Required Methods§

Source

fn name(&self) -> &'static str

Short name for diagnostics and logging (e.g. "seatbelt", "noop").

Source

fn wrap_command(&self, cmd: Command, policy: &SandboxPolicy) -> Command

Wrap cmd so the spawned child runs inside the sandbox.

Implementations may build a new Command that invokes a helper (e.g. sandbox-exec) with the original program as its child. The returned command must preserve the original working directory and environment but does not need to re-apply stdio — the caller re-applies piped stdio via SandboxExecutor::wrap.

Implementors§