List of all items

Structs

• audit_log::InMemorySink
• audit_log::JsonlFileSink
• audit_log::MultiSink
• audit_log::NullSink
• audit_log::ToolAuditEntry
• audit_log::ToolAuditLogger
• command_safety::audit::AuditEntry
• command_safety::audit::SafetyAuditLogger
• command_safety::cache::CacheStats
• command_safety::cache::CachedDecision
• command_safety::cache::SafetyDecisionCache
• command_safety::command_db::CommandDatabase
• command_safety::safe_command_registry::CommandRule
• command_safety::safe_command_registry::SafeCommandRegistry
• command_safety::unified::EvaluationResult
• command_safety::unified::PolicyAwareEvaluator
• command_safety::unified::UnifiedCommandEvaluator
• exec_policy::ExecPolicyAmendment
• exec_policy::ExecPolicyConfig
• exec_policy::ExecPolicyManager
• exec_policy::Policy
• exec_policy::PolicyEvaluation
• exec_policy::PolicyFile
• exec_policy::PolicyParser
• exec_policy::PolicyRule
• exec_policy::PrefixRule
• exec_policy::RejectConfig
• mcp_sandbox::McpSandboxOverrides
• mcp_sandbox::McpSandboxWrapper
• sandboxing::AdditionalPermissions
• sandboxing::CommandSpec
• sandboxing::ExecEnv
• sandboxing::NetworkAllowlistEntry
• sandboxing::ResourceLimits
• sandboxing::SandboxDebugResult
• sandboxing::SandboxManager
• sandboxing::SeccompProfile
• sandboxing::SensitivePath
• sandboxing::WritableRoot

Enums

• audit_log::ToolAuditStatus
• command_safety::safe_command_registry::SafetyDecision
• command_safety::unified::EvaluationReason
• exec_policy::AskForApproval
• exec_policy::Decision
• exec_policy::ExecApprovalRequirement
• exec_policy::RuleMatch
• sandboxing::DebugSubcommand
• sandboxing::ExecExpiration
• sandboxing::SandboxPermissions
• sandboxing::SandboxPolicy
• sandboxing::SandboxTransformError
• sandboxing::SandboxType

Traits

• audit_log::ToolAuditSink

Functions

• command_safety::dangerous_commands::command_might_be_dangerous
• command_safety::shell_parser::contains_dynamic_find_syntax
• command_safety::shell_parser::contains_dynamic_shell_syntax
• command_safety::shell_parser::parse_bash_lc_commands
• command_safety::shell_parser::parse_shell_commands
• command_safety::shell_parser::parse_shell_commands_tree_sitter
• command_safety::shell_parser::prewarm_bash_parser
• command_safety::shell_string_might_be_dangerous
• command_safety::validate_command_safety
• exec_policy::command_validation::sanitize_working_dir
• exec_policy::command_validation::validate_command
• exec_policy::default_exec_approval_requirement
• mcp_sandbox::wrap_stdio_command
• sandboxing::build_sanitized_env
• sandboxing::debug_sandbox
• sandboxing::default_sensitive_paths
• sandboxing::filter_sensitive_env
• sandboxing::sandbox_capabilities_summary
• sandboxing::setup_parent_death_signal
• sandboxing::should_filter_env_var
• sandboxing::test_network_blocked
• sandboxing::test_path_writable

Type Aliases

• exec_policy::SharedExecPolicyManager

Constants

• sandboxing::BLOCKED_SYSCALLS
• sandboxing::DEFAULT_SENSITIVE_PATHS
• sandboxing::FILTERED_ENV_VARS
• sandboxing::FILTERED_SYSCALLS
• sandboxing::PRESERVED_ENV_VARS
• sandboxing::VTCODE_SANDBOX_ACTIVE
• sandboxing::VTCODE_SANDBOX_NETWORK_DISABLED
• sandboxing::VTCODE_SANDBOX_TYPE
• sandboxing::VTCODE_SANDBOX_WRITABLE_ROOTS