Struct SandboxPolicy 

pub struct SandboxPolicy {
    pub env_passthrough: bool,
    pub allow_network: bool,
    pub allow_fs_write: bool,
}

The resolved, enforceable sandbox for a plugin subprocess. The derived Default is least privilege (all false): scrubbed env, nothing declared.

Fields

env_passthrough: bool

When false (default) the child runs with a scrubbed env (allowlist only).

allow_network: bool

Declared network intent (surfaced, not OS-enforced).

allow_fs_write: bool

Declared out-of-dir write intent (surfaced, not OS-enforced).

Implementations

impl SandboxPolicy

pub fn strict() -> Self

The strictest policy: scrubbed env, no declared capabilities.

pub fn permissive() -> Self

A policy mirroring legacy behavior (full host env). Used only where the caller is not a plugin (e.g. direct internal subprocess helpers/tests).

pub fn from_permissions(perms: &[Permission]) -> Self

pub fn declared_permissions(&self) -> Vec<&'static str>

The declared permissions, as stable strings (for capabilities/audit).

pub fn apply(&self, cmd: &mut Command, plugin_dir: &Path)

Apply the enforced controls to a Command before spawn: env scrub (unless env_passthrough) and cwd jail to plugin_dir (when it exists). The timeout is enforced separately by the executor’s wait loop.

Trait Implementations

impl Clone for SandboxPolicy

fn clone(&self) -> SandboxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxPolicy

impl Debug for SandboxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxPolicy

fn default() -> SandboxPolicy

Returns the “default value” for a type.

impl Eq for SandboxPolicy

impl PartialEq for SandboxPolicy

fn eq(&self, other: &SandboxPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SandboxPolicy