Struct SandboxConfig 

pub struct SandboxConfig {
    pub allowed_read_paths: Vec<PathBuf>,
    pub allowed_write_paths: Vec<PathBuf>,
    pub allowed_commands: HashSet<String>,
    pub allow_network: bool,
    pub allow_env: bool,
    pub timeout_ms: u64,
    pub max_memory: usize,
    pub max_read_size: usize,
    pub permissions: HashSet<Permission>,
}

Configuration for plugin sandboxing.

Fields

allowed_read_paths: Vec<PathBuf>

Paths the plugin is allowed to read from.

allowed_write_paths: Vec<PathBuf>

Paths the plugin is allowed to write to.

allowed_commands: HashSet<String>

Commands the plugin is allowed to execute.

allow_network: bool

Whether network access is allowed.

allow_env: bool

Whether environment access is allowed.

timeout_ms: u64

Maximum execution time in milliseconds.

max_memory: usize

Maximum memory in bytes (0 = unlimited).

max_read_size: usize

Maximum file size that can be read.

permissions: HashSet<Permission>

Granted permissions.

Implementations

impl SandboxConfig

pub fn minimal() -> Self

Create a minimal sandbox with no permissions.

pub fn permissive() -> Self

Create a permissive sandbox for trusted plugins.

WARNING: This preset grants broad filesystem read access and environment variable access. It does NOT grant execute or wildcard command access. Use only with fully audited, first-party plugins. For untrusted plugins use SandboxConfig::default or SandboxConfig::minimal instead.

pub fn allow_read(self, path: impl Into<PathBuf>) -> Self

Add an allowed read path.

pub fn allow_write(self, path: impl Into<PathBuf>) -> Self

Add an allowed write path.

pub fn allow_command(self, cmd: impl Into<String>) -> Self

Allow a specific command.

pub fn allow_network(self) -> Self

Enable network access.

pub fn with_timeout(self, timeout_ms: u64) -> Self

Set timeout.

pub fn with_memory_limit(self, bytes: usize) -> Self

Set memory limit.

pub fn grant(self, permission: Permission) -> Self

Grant a permission.

pub fn has_permission(&self, permission: Permission) -> bool

Check if a permission is granted.

pub fn can_read(&self, path: &Path) -> bool

Check if reading a path is allowed.

Paths are canonicalized before comparison to prevent traversal attacks via symlinks or .. components.

Callers must explicitly list allowed paths: an empty allowed_read_paths list means no paths are allowed (deny-by-default), not unrestricted access.

pub fn can_write(&self, path: &Path) -> bool

Check if writing to a path is allowed.

Paths are canonicalized before comparison to prevent traversal attacks via symlinks or .. components.

Callers must explicitly list allowed paths: an empty allowed_write_paths list means no paths are allowed (deny-by-default), not unrestricted access.

pub fn can_execute(&self, command: &str) -> bool

Check if executing a command is allowed.

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.