Struct SandboxConfig 

pub struct SandboxConfig { /* private fields */ }

Least-privilege limits for a delegated agent (P2-5 sandbox).

Path checks are prefix-based: a request is allowed when it is the allowed directory itself or lives underneath it. Before the prefix test, a request path containing .. is rejected outright, and both sides are resolved against the filesystem so a symlink inside the root cannot smuggle a path outside it. Network checks allow the host exactly, or any subdomain of an allowed domain.

Implementations

impl SandboxConfig

pub fn new() -> Self

An empty sandbox that denies everything.

pub fn allow_read(self, path: impl Into<PathBuf>) -> Self

Allow reading within path (builder style).

pub fn allow_write(self, path: impl Into<PathBuf>) -> Self

Allow writing within path (builder style).

pub fn allow_domain(self, domain: impl Into<String>) -> Self

Allow network access to domain and its subdomains (builder style).

pub fn with_max_payload(self, bytes: usize) -> Self

Cap the payload size accepted from the agent (builder style).

pub fn accepts_payload(&self, size: usize) -> bool

Whether a payload of size bytes is within the configured limit.

pub fn check(&self, request: &AccessRequest) -> Result<(), SecurityError>

Enforce the sandbox for a single access request.

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> SandboxConfig

Returns the “default value” for a type.