Struct SandboxRestrictions 

pub struct SandboxRestrictions {
    pub max_tokens: usize,
    pub max_files: usize,
    pub max_tool_results: usize,
    pub allowed_tools: Option<HashSet<String>>,
    pub denied_tools: Option<HashSet<String>>,
}

Resource restrictions for a sandbox

Fields

max_tokens: usize

Maximum tokens allowed in the sandbox

max_files: usize

Maximum number of files that can be accessed

max_tool_results: usize

Maximum number of tool results that can be stored

allowed_tools: Option<HashSet<String>>

Set of tools that are explicitly allowed (if Some, only these tools are allowed)

denied_tools: Option<HashSet<String>>

Set of tools that are explicitly denied (checked after allowed_tools)

Implementations

impl SandboxRestrictions

pub fn new(max_tokens: usize, max_files: usize, max_tool_results: usize) -> Self

Create restrictions with custom limits

pub fn with_allowed_tools( self, tools: impl IntoIterator<Item = impl Into<String>>, ) -> Self

Set allowed tools (whitelist)

pub fn with_denied_tools( self, tools: impl IntoIterator<Item = impl Into<String>>, ) -> Self

Set denied tools (blacklist)

pub fn is_tool_allowed(&self, tool_name: &str) -> bool

Check if a tool is allowed based on the restrictions

pub fn check_limits( &self, usage: &ResourceUsage, ) -> Option<ResourceLimitViolation>

Check if resource usage exceeds any limit

Trait Implementations

impl Clone for SandboxRestrictions

fn clone(&self) -> SandboxRestrictions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxRestrictions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxRestrictions

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxRestrictions

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxRestrictions

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.