Struct SandboxManager 

pub struct SandboxManager { /* private fields */ }

Owns an agent’s sandboxes for its whole lifetime. Created at spawn, updated per stage via Self::set_stage, torn down at reap via Self::destroy_all.

Implementations

impl SandboxManager

pub fn build( run_id: &str, by_index: Vec<ToolSandboxConfig>, workdir: &str, entry_index: usize, ) -> Result<Option<Self>, String>

Build the manager for an agent whose stages resolve (in order) to by_index, bind-mounting workdir. entry_index selects the initial stage’s config. Returns Ok(None) when nothing is sandboxed (the common case - the caller then attaches no executor and shell runs on the host). Returns Err when a required runtime is unavailable and that config’s on_unavailable is Error.

pub fn set_stage(&self, index: usize)

Point the shell tool at the sandbox for stage index (called by the tool service’s sync_stage on every stage change).

pub fn destroy_all(&self)

Force-remove every container this manager started (best-effort). Called once, at reap, before the agent entity is despawned.

Trait Implementations

impl Debug for SandboxManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ShellExecutor for SandboxManager

fn build_command( &self, shell: &str, flag: &str, command: &str, workdir: &Path, ) -> TokioCommand

Build the process that runs command via shell flag for workdir.