Enum SandboxPolicy 

pub enum SandboxPolicy {
    ReadOnly,
    WorkspaceWrite,
    DangerFullAccess,
}

Filesystem confinement applied to write-capable tools — the analog of Codex’s read-only / workspace-write / danger-full-access sandbox modes.

Enforced at the tool layer for file operations (write_file, edit_file, apply_patch). Note: this confines the file tools; it does not OS-sandbox arbitrary subprocesses (bash/shell) — true process isolation needs platform primitives (seatbelt/landlock) and is a separate concern. Use shell_sandbox_unenforceable as the runtime check for whether that gap applies to the current platform and enabled tools.

Variants

ReadOnly

No file writes are permitted by the file tools.

WorkspaceWrite

Writes are permitted only inside the working directory.

DangerFullAccess

No confinement (default — preserves prior behavior).

Trait Implementations

impl Clone for SandboxPolicy

fn clone(&self) -> SandboxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxPolicy

impl Debug for SandboxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SandboxPolicy

fn default() -> SandboxPolicy

Returns the “default value” for a type.

impl Eq for SandboxPolicy

impl PartialEq for SandboxPolicy

fn eq(&self, other: &SandboxPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SandboxPolicy