Struct SandboxPolicy 

pub struct SandboxPolicy {
    pub network: NetworkPolicy,
    pub filesystem: FilesystemPolicy,
    pub environment: EnvironmentPolicy,
    pub timeout: Duration,
    pub max_stdout_bytes: usize,
    pub max_stderr_bytes: usize,
    pub working_directory: Option<PathBuf>,
}

Available on crate feature code only.

Sandbox policy describing the requested execution constraints.

Backends compare this policy against their BackendCapabilities and reject execution if they cannot enforce a requested control.

Example

use adk_code::SandboxPolicy;

let policy = SandboxPolicy::strict_rust();
assert_eq!(policy.max_stdout_bytes, 1_048_576);

Fields

network: NetworkPolicy

Network access policy.

filesystem: FilesystemPolicy

Filesystem access policy.

environment: EnvironmentPolicy

Environment variable access policy.

timeout: Duration

Maximum execution duration.

max_stdout_bytes: usize

Maximum bytes captured from stdout before truncation.

max_stderr_bytes: usize

Maximum bytes captured from stderr before truncation.

working_directory: Option<PathBuf>

Working directory for execution, if any.

Implementations

impl SandboxPolicy

pub fn strict_rust() -> SandboxPolicy

Strict policy for Rust sandbox execution.

• No network access
• No filesystem access
• No environment variables
• 30-second timeout
• 1 MB stdout/stderr limits

pub fn host_local() -> SandboxPolicy

Host-local policy for backends that run on the host without isolation.

Unlike strict_rust, this policy uses NetworkPolicy::Enabled and FilesystemPolicy::None so that host-local backends (which cannot enforce network or filesystem restrictions) pass policy validation. The trade-off is that the executed code has the same network and filesystem access as the host process.

• Network access: allowed (host-local cannot restrict)
• Filesystem access: none requested
• Environment variables: none exposed
• 30-second timeout
• 1 MB stdout/stderr limits

pub fn strict_js() -> SandboxPolicy

Strict policy for embedded JavaScript execution.

Same defaults as Rust but with a shorter 5-second timeout, appropriate for lightweight transforms and scripting.

Trait Implementations

impl Clone for SandboxPolicy

fn clone(&self) -> SandboxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SandboxPolicy

fn default() -> SandboxPolicy

Sensible defaults: no network, no filesystem, no env vars, 30s timeout, 1 MB limits.