Struct Sandbox 

pub struct Sandbox { /* private fields */ }

Approval-owning boundary around one execution backend.

Implementations

impl Sandbox

pub fn new(backend: Arc<dyn SandboxBackend>, policy: ApprovalPolicy) -> Self

Creates a sandbox with its initial approval policy.

pub fn approval_reviewer(self, reviewer: ApprovalReviewerConfig) -> Self

Configures the isolated model reviewer used by automatic approval.

pub fn read<'a>(&'a self, path: &'a str) -> BoxFuture<'a, Result<String>>

Reads a UTF-8 file.

pub fn read_bytes<'a>( &'a self, path: &'a str, max_bytes: usize, ) -> BoxFuture<'a, Result<Vec<u8>>>

Reads one bounded binary file.

pub fn write<'a>( &'a self, path: &'a str, content: &'a str, permissions: &'a ToolPermissions, ) -> BoxFuture<'a, Result<()>>

Writes a UTF-8 file when this call has mutation authority.

pub fn execute<'a>( &'a self, command: &'a str, permissions: &'a ToolPermissions, ) -> BoxFuture<'a, Result<CommandOutput>>

Runs a command when this call has mutation authority.

Trait Implementations

impl Middleware for Sandbox

fn name(&self) -> &'static str

Stable ID used to reject duplicate registrations.

fn frontend(&self) -> FrontendContribution

Declares commands and status data that any frontend may render.

fn prompt_section( &self, _runtime: &RuntimeContext, ) -> Result<Option<PromptSection>>

Contributes one immutable system-prompt section while the agent is created.

fn render(&self, event: &EventMsg, _session_id: &str) -> Option<FrontendBlock>

Renders an event owned by this capability for the destination session.

fn session_start<'a>( &'a self, context: &'a mut SessionStartContext<'_>, ) -> BoxFuture<'a, Result<()>>

Starts or re-enters a session lifecycle.

fn session_end<'a>( &'a self, runtime: &'a RuntimeContext, ) -> BoxFuture<'a, Result<()>>

Releases session-local state when the agent runtime stops.

fn register( &self, _catalog: &mut Catalog, _runtime: &RuntimeContext, ) -> Result<()>

Adds tools to the catalog while the agent is created.

fn command<'a>( &'a self, context: MiddlewareCommandContext<'a>, ) -> BoxFuture<'a, Result<MiddlewareCommandOutput>>

Handles a command declared by this middleware’s frontend contribution.

fn user_prompt_submit<'a>( &'a self, _context: &'a mut UserPromptSubmitContext<'_>, ) -> BoxFuture<'a, Result<()>>

Intercepts a user prompt before it enters durable context.

fn active_operations(&self) -> &'static [&'static str]

Declares active-turn operations owned by this middleware.

fn active_submission( &self, _context: &mut ActiveSubmissionContext<'_>, ) -> Result<ActiveSubmissionResult>

Handles one declared active-turn operation.

fn active_command<'a>( &'a self, _context: &'a mut ActiveCommandContext<'_>, ) -> BoxFuture<'a, Result<Option<ActiveSubmissionResult>>>

Handles a capability command while a turn is active.

fn pre_model<'a>( &'a self, _context: &'a mut ModelContext<'_>, ) -> BoxFuture<'a, Result<()>>

Mutates durable context before the next model request is assembled.

fn model_request<'a>( &'a self, _context: &'a mut ModelRequestContext<'_>, ) -> BoxFuture<'a, Result<()>>

Applies request-only context after every durable transform has completed.

fn pre_tool_use<'a>( &'a self, _context: &'a mut PreToolUseContext<'_>, ) -> BoxFuture<'a, Result<()>>

Intercepts one normalized tool call before authorization and persistence.

fn permission_request<'a>( &'a self, _context: &'a mut PermissionRequestContext<'_>, ) -> BoxFuture<'a, Result<()>>

Decides whether an approval request should be deferred, allowed, or denied.

fn post_tool_use<'a>( &'a self, _context: &'a mut PostToolUseContext<'_>, ) -> BoxFuture<'a, Result<()>>

Transforms model-visible feedback after a tool has executed.

fn pre_compact<'a>( &'a self, _context: &'a mut CompactContext<'_>, ) -> BoxFuture<'a, Result<()>>

Intercepts context immediately before compaction and may stop the active turn.

fn post_compact<'a>( &'a self, _context: &'a mut CompactContext<'_>, ) -> BoxFuture<'a, Result<()>>

Intercepts the committed compacted context and may stop the active turn.

fn stop<'a>( &'a self, _context: &'a mut StopContext<'_>, ) -> BoxFuture<'a, Result<()>>

Decides whether a naturally stopped model should continue once more.

fn turn_end<'a>( &'a self, _context: &'a mut TurnEndContext<'_>, ) -> BoxFuture<'a, Result<()>>

Observes terminal bookkeeping for a completed or aborted turn.