Struct RunSandboxOptions 

pub struct RunSandboxOptions {
    pub enabled: bool,
    pub workspace_root: Option<PathBuf>,
    pub write_roots: Vec<PathBuf>,
    pub read_only_roots: Vec<PathBuf>,
    pub allow_process_network: bool,
}

Fields

enabled: bool

Install the default harn run sandbox for this invocation.

workspace_root: Option<PathBuf>

Override the workspace root used by the default sandbox. This is intended for host-generated scripts whose source file lives outside the workspace they operate on.

write_roots: Vec<PathBuf>

Extra writable filesystem roots mounted into the direct-run sandbox. These extend the write jail without disabling path enforcement or egress policy.

read_only_roots: Vec<PathBuf>

Extra read-only filesystem roots. path resolving under one of these entries is scoped for reads, but writes still fail.

allow_process_network: bool

Raise the direct-run side-effect ceiling to permit network-capable subprocesses without disabling filesystem or process confinement.

Implementations

impl RunSandboxOptions

pub fn sandboxed(allow_process_network: bool) -> Self

Construct the default sandbox with an explicit subprocess-network choice.

pub fn with_process_network(self, enabled: bool) -> Self

Permit addressable sockets in commands spawned by this run while the rest of the direct-run sandbox remains active.

pub fn disabled() -> Self

Disable the default direct-run sandbox and egress guard.

pub fn with_workspace_root(self, workspace_root: impl Into<PathBuf>) -> Self

Constrain the default sandbox to an explicit workspace root.

pub fn with_write_roots<I>(self, write_roots: I) -> Self

where I: IntoIterator<Item = PathBuf>,

Add writable roots to the default sandbox policy.

pub fn with_read_only_roots<I>(self, read_only_roots: I) -> Self

where I: IntoIterator<Item = PathBuf>,

Add read-only roots to the default sandbox policy.

Trait Implementations

impl Clone for RunSandboxOptions

fn clone(&self) -> RunSandboxOptions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RunSandboxOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RunSandboxOptions

fn default() -> Self

Returns the “default value” for a type.

impl Eq for RunSandboxOptions

impl PartialEq for RunSandboxOptions

fn eq(&self, other: &RunSandboxOptions) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for RunSandboxOptions