Struct GitSandbox 

pub struct GitSandbox { /* private fields */ }

One Git client’s filesystem boundary.

Cheap to clone — it is a canonical PathBuf and a flag — which matters because every git2 call runs on spawn_blocking and needs an owned copy.

Implementations

impl GitSandbox

pub fn new( configured_root: Option<&str>, allow_remote_writes: bool, ) -> Result<Self>

Build the boundary from the client’s startup parameters.

Creates the root if it does not exist — canonicalize needs a real directory, and a client whose workspace has to be pre-made by hand would fail on first use for a reason nobody would guess.

pub fn root(&self) -> &Path

The canonical root. Every accepted path is under this.

pub fn remote_writes_allowed(&self) -> bool

Whether operations that publish outside the sandbox were opted into.

pub fn require_remote_writes(&self, verb: &str) -> Result<()>

Refuse a verb that reaches outside the sandbox unless it was opted into.

Confinement bounds what can be read and written on this disk; it says nothing about what gets pushed to a remote. git_push and the remote half of git_delete_branch both send to a URL that lives in the cloned repository’s own config, using whatever credentials the client was given — so they can publish to, or delete a branch on, a real forge, and no allow-list of local paths can prevent that. Those two are gated.

Verbs whose damage is inside the sandbox are deliberately not gated: git_checkout and a force local branch delete destroy history in a scratch clone, which is what a scratch clone is for. Gating them would train the operator to turn the flag on for routine work, which is how an opt-in stops meaning anything.

pub fn resolve(&self, raw: &str, context: &str) -> Result<PathBuf>

Resolve a model-supplied path and refuse it if it escapes the root.

The path need not exist — this is what a clone destination goes through. context names the thing being resolved ("git_clone path", "local_path") and appears in the error, because “path refused” without saying which path is unactionable when three of them are in play.

Trait Implementations

impl Clone for GitSandbox

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GitSandbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.