Struct DaemonScriptHost 

pub struct DaemonScriptHost { /* private fields */ }

The daemon’s script host: enforces permissions + workdir confinement, then delegates the actual work to a ScriptIo.

Implementations

impl DaemonScriptHost

pub fn with_io( allow: ScriptAllow, workdir: PathBuf, io: Arc<dyn ScriptIo>, ) -> Self

Build a host with an explicit I/O backend (used by tests). Defaults to no sandbox and the built-in shell tool’s 60-second timeout; override with with_shell.

pub fn with_local_network(self, allow: bool) -> Self

Permit fetches to loopback / private / link-local addresses, from [security] allow_local_network. Consuming builder used at spawn.

pub fn with_env_allowlist(self, names: Vec<String>) -> Self

Permit scripts to read these credential-shaped environment variables, from [security] allow_env_vars. Consuming builder used at spawn.

pub fn new(allow: ScriptAllow, workdir: PathBuf) -> Self

Build a host wired to the real network/process/filesystem/env backend.

pub fn with_shell( self, sandbox: Option<Arc<SandboxManager>>, shell_timeout: Duration, shell_env: ShellEnvPolicy, ) -> Self

Route shell() through sandbox (the agent’s per-stage isolation) and cap each call at shell_timeout. Consuming builder used at spawn.

Trait Implementations

impl ScriptHost for DaemonScriptHost

fn http_get( &self, url: &str, headers: BTreeMap<String, String>, ) -> Result<String, String>

HTTP GET url with the given request headers, returning the response body.

fn http_post( &self, url: &str, body: &str, headers: BTreeMap<String, String>, ) -> Result<String, String>

HTTP POST body to url with the given headers, returning the response body.

fn shell(&self, command: &str) -> Result<String, String>

Run a shell command, returning its combined output.

fn read_file(&self, path: &str) -> Result<String, String>

Read a file (confined to the agent workdir by the implementor).

fn write_file(&self, path: &str, content: &str) -> Result<String, String>

Write content to a file (confined to the agent workdir by the implementor), returning a short confirmation.

fn env_var(&self, name: &str) -> Result<String, String>

Read an environment variable.