Struct ToolScopeSandboxAspect 

pub struct ToolScopeSandboxAspect { /* private fields */ }

Sandbox aspect that enforces a per-session tool allowlist.

Implementations

impl ToolScopeSandboxAspect

pub fn new() -> Self

Create an empty sandbox. Sessions must call allow before any guarded join points fire for them.

pub fn allow<I, S>(&self, session: impl Into<SessionId>, tools: I)

where I: IntoIterator<Item = S>, S: Into<String>,

Declare the full allowlist for a session, replacing any prior set.

pub fn bind(&self, call: ToolCall) -> u64

Bind a tool call to the next guarded invocation. The host wraps each dispatch with bind … proceed … release. The returned key is opaque; pass it to release.

pub fn release(&self, key: u64)

Clear a previously bound tool call. Idempotent.

pub fn is_allowed(&self, session: &str, tool: &str) -> bool

Inspect whether a (session, tool) pair would be admitted.

Trait Implementations

impl Aspect for ToolScopeSandboxAspect

fn before(&self, ctx: &JoinPoint)

Advice executed before the target function runs.

fn around( &self, pjp: ProceedingJoinPoint<'_>, ) -> Result<Box<dyn Any>, AspectError>

Advice that wraps the entire target function execution.

fn after(&self, _ctx: &JoinPoint, _result: &(dyn Any + 'static))

Advice executed after the target function completes successfully.

fn after_error(&self, _ctx: &JoinPoint, _error: &AspectError)

Advice executed when the target function encounters an error.

impl Clone for ToolScopeSandboxAspect

fn clone(&self) -> ToolScopeSandboxAspect

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for ToolScopeSandboxAspect

fn default() -> ToolScopeSandboxAspect

Returns the “default value” for a type.