adk-sandbox 1.0.0

Isolated code execution runtime for ADK agents
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93

//! # adk-sandbox
//!
//! Isolated code execution runtime for ADK agents.
//!
//! This crate provides the [`SandboxBackend`] trait and two implementations:
//!
//! - **`ProcessBackend`** (default feature `process`): Executes code in child
//!   processes via `tokio::process::Command`. Enforces timeout and environment
//!   isolation but not memory or network isolation.
//!
//! - **`WasmBackend`** (feature `wasm`): Executes WebAssembly modules in-process
//!   via `wasmtime`. Enforces timeout, memory limits, and full sandboxing (no
//!   filesystem or network access).
//!
//! ## Quick Start
//!
//! ```rust,ignore
//! use adk_sandbox::{ProcessBackend, ExecRequest, Language};
//! use std::time::Duration;
//! use std::collections::HashMap;
//!
//! let backend = ProcessBackend::default();
//! let request = ExecRequest {
//!     language: Language::Python,
//!     code: "print('hello')".to_string(),
//!     stdin: None,
//!     timeout: Duration::from_secs(30),
//!     memory_limit_mb: None,
//!     env: HashMap::new(),
//! };
//! let result = backend.execute(request).await?;
//! println!("stdout: {}", result.stdout);
//! ```
//!
//! ## Feature Flags
//!
//! | Feature   | Description                          | Default |
//! |-----------|--------------------------------------|---------|
//! | `process` | Subprocess execution via tokio       | ✅      |
//! | `wasm`    | In-process WASM execution via wasmtime | ❌    |

pub mod backend;
pub mod error;
pub mod sandbox;
pub mod tool;
pub mod types;

// Feature-gated modules
#[cfg(feature = "process")]
pub mod process;

#[cfg(feature = "wasm")]
pub mod wasm;

#[cfg(feature = "workspace")]
pub mod workspace;

// Public re-exports
pub use backend::{BackendCapabilities, EnforcedLimits, SandboxBackend};
pub use error::SandboxError;
pub use sandbox::{
    AccessMode, AllowedPath, NetworkRule, SandboxEnforcer, SandboxPolicy, SandboxPolicyBuilder,
    WrappedCommand, get_enforcer,
};
pub use tool::SandboxTool;
pub use types::{ExecRequest, ExecResult, Language};

#[cfg(feature = "process")]
pub use process::{ProcessBackend, ProcessConfig};

#[cfg(feature = "wasm")]
pub use wasm::WasmBackend;

// Workspace lifecycle re-exports
#[cfg(feature = "workspace")]
pub use workspace::{
    Capability, DirEntry, EntryType, ExecOutput, LocalUnixClient, LocalUnixSession, Manifest,
    ManifestEntry, SandboxClient, SandboxConfig, SandboxConfigSpec, SandboxSession, SessionHandle,
    SnapshotId,
};

#[cfg(feature = "workspace-docker")]
pub use workspace::{DockerClient, DockerSession};

// Platform-specific enforcer re-exports for sandbox-native convenience
#[cfg(all(feature = "sandbox-native", target_os = "macos"))]
pub use sandbox::macos::MacOsEnforcer;

#[cfg(all(feature = "sandbox-native", target_os = "linux"))]
pub use sandbox::linux::LinuxEnforcer;

#[cfg(all(feature = "sandbox-native", target_os = "windows"))]
pub use sandbox::windows::WindowsEnforcer;