landstrip 0.18.0

Sandbox for coding agents with parametrized state
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

// SPDX-License-Identifier: LGPL-2.1-or-later
// Copyright (c) 2026 Jarkko Sakkinen

//! Windows sandbox implementations.

use crate::cli::WindowsCommand;

mod appcontainer;
mod restricted_user;

use crate::engine::policy::AccessPolicy;
use crate::outcome::WindowsStatusReport;
use anyhow::Result;
use std::ffi::{OsStr, OsString};

pub(crate) fn execute(policy: &AccessPolicy, tool: &OsStr, args: &[OsString]) -> Result<i32> {
    if restricted_user::is_installed()? {
        restricted_user::execute(policy, tool, args)
    } else {
        appcontainer::execute(policy, tool, args)
    }
}

pub(crate) fn validate(policy: &AccessPolicy) -> Result<()> {
    policy.validate()?;
    if restricted_user::is_installed()? {
        restricted_user::active_implementation()?;
        restricted_user::validate(policy)?;
    }
    Ok(())
}

pub(crate) fn manage(command: &WindowsCommand) -> Result<WindowsStatusReport> {
    restricted_user::manage(command)
}

pub(crate) fn run_worker(request: &std::path::Path) -> Result<i32> {
    restricted_user::run_worker(request)
}

pub(crate) fn status() -> Result<WindowsStatusReport> {
    restricted_user::status()
}