Struct Sandbox 

pub struct Sandbox { /* private fields */ }

Sandbox for running a subprocess with masked secrets and an HTTP proxy that rewrites tokens.

HTTP requests are forwarded with token replacement. HTTPS (CONNECT) is always handled by MITM: the proxy decrypts, rewrites tokens, and re-encrypts to upstream. The subprocess must trust our CA (we set SSL_CERT_FILE). For self-signed or custom upstream servers, set upstream_ca on SandboxConfig.

Implementations

impl Sandbox

pub fn new(config: SandboxConfig) -> Self

Create a sandbox from the given config.

pub async fn run( &self, program: &str, args: &[String], ) -> Result<ExitStatus, Box<dyn Error + Send + Sync>>

Run a command in the sandbox: start an HTTP proxy that rewrites masked tokens and string tokens to real values, set subprocess env with masked tokens (if any) and HTTP_PROXY/HTTPS_PROXY, then wait for the process to exit.

Trait Implementations

impl Clone for Sandbox

fn clone(&self) -> Sandbox

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Sandbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.