Struct SandboxExecutor 

pub struct SandboxExecutor { /* private fields */ }

The sandbox executor. Creates fresh V8 isolates for each execution.

This is Send + Sync safe — all V8 operations are dispatched to a dedicated thread internally. A concurrency semaphore limits the number of simultaneous V8 isolates.

Implementations

impl SandboxExecutor

pub fn new(config: SandboxConfig) -> Self

Create a new sandbox executor with the given configuration.

pub fn with_audit_logger( config: SandboxConfig, logger: Arc<dyn AuditLogger>, ) -> Self

Create a new sandbox executor with an audit logger.

pub fn with_pool(self, pool: Arc<WorkerPool>) -> Self

Attach a worker pool for reusing child processes.

When a pool is set and the execution mode is ChildProcess, workers are acquired from the pool instead of spawning fresh processes.

pub async fn execute_search( &self, code: &str, manifest: &Value, ) -> Result<Value, SandboxError>

Execute a search() call — runs code against the capability manifest.

The manifest is injected as globalThis.manifest in the sandbox. The LLM’s code is an async arrow function that queries it. Search always runs in-process (read-only, no credential exposure risk).

pub async fn execute_code( &self, code: &str, dispatcher: Arc<dyn ToolDispatcher>, resource_dispatcher: Option<Arc<dyn ResourceDispatcher>>, stash_dispatcher: Option<Arc<dyn StashDispatcher>>, ) -> Result<Value, SandboxError>

Execute an execute() call — runs code against the tool API.

Tool calls go through forge.callTool(server, tool, args) which dispatches to the Rust-side ToolDispatcher via op_forge_call_tool. Resource reads go through forge.readResource(server, uri) which dispatches to the Rust-side ResourceDispatcher via op_forge_read_resource.

In ChildProcess mode, spawns an isolated worker process. In InProcess mode (default), runs V8 on a dedicated thread in the current process.

pub async fn execute_code_with_options( &self, code: &str, dispatcher: Arc<dyn ToolDispatcher>, resource_dispatcher: Option<Arc<dyn ResourceDispatcher>>, stash_dispatcher: Option<Arc<dyn StashDispatcher>>, known_servers: Option<HashSet<String>>, known_tools: Option<Vec<(String, String)>>, ) -> Result<Value, SandboxError>

Execute code with additional options (known servers for SR-R6 validation, known tools for structured error fuzzy matching).