sandbox_runtime/
lib.rs

1//! Sandbox Runtime - OS-level sandboxing for enforcing filesystem and network restrictions.
2//!
3//! This library provides sandboxing capabilities for arbitrary processes without containerization:
4//! - macOS: Uses Seatbelt/sandbox-exec
5//! - Linux: Uses bubblewrap + seccomp
6
7pub mod cli;
8pub mod config;
9pub mod error;
10pub mod manager;
11pub mod proxy;
12pub mod sandbox;
13pub mod utils;
14pub mod violation;
15
16pub use config::{
17    FilesystemConfig, MitmProxyConfig, NetworkConfig, RipgrepConfig, SandboxRuntimeConfig,
18    SeccompConfig,
19};
20pub use error::{ConfigError, Result, SandboxError};
21pub use manager::SandboxManager;
22pub use violation::{SandboxViolationEvent, SandboxViolationStore};
23
24/// Re-export commonly used items.
25pub mod prelude {
26    pub use crate::config::SandboxRuntimeConfig;
27    pub use crate::error::{Result, SandboxError};
28    pub use crate::manager::SandboxManager;
29    pub use crate::violation::{SandboxViolationEvent, SandboxViolationStore};
30}