Struct SandboxPolicy 

pub struct SandboxPolicy {
    pub deny_read: Vec<PathBuf>,
    pub deny_write: Vec<PathBuf>,
    pub deny_exec: Vec<PathBuf>,
    pub allow_paths: Vec<PathBuf>,
    pub workspace: PathBuf,
}

Paths that should be denied to the agent.

Fields

deny_read: Vec<PathBuf>

Paths the agent cannot read from

deny_write: Vec<PathBuf>

Paths the agent cannot write to

deny_exec: Vec<PathBuf>

Paths the agent cannot execute from

allow_paths: Vec<PathBuf>

Allowed paths (whitelist mode) — if non-empty, only these are allowed

workspace: PathBuf

Working directory for the agent

Implementations

impl SandboxPolicy

pub fn protect_credentials( credentials_dir: impl Into<PathBuf>, workspace: impl Into<PathBuf>, ) -> Self

Create a policy that protects the credentials directory.

pub fn strict(workspace: impl Into<PathBuf>, allowed: Vec<PathBuf>) -> Self

Create a strict policy that only allows access to specific paths.

pub fn deny_read(self, path: impl Into<PathBuf>) -> Self

Add a path to the deny-read list.

pub fn deny_write(self, path: impl Into<PathBuf>) -> Self

Add a path to the deny-write list.

Trait Implementations

impl Clone for SandboxPolicy

fn clone(&self) -> SandboxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxPolicy

fn default() -> Self

Returns the “default value” for a type.