Struct SandboxConfig 

#[non_exhaustive]
pub struct SandboxConfig {
    pub enabled: bool,
    pub isolation: IsolationLevel,
    pub filesystem: Option<FilesystemConfig>,
    pub network: Option<NetworkConfig>,
    pub env: EnvConfig,
    pub security: SecurityProfile,
    pub resources: Option<ResourceLimits>,
    pub process_tracking: ProcessTracking,
    pub allowed_commands: Option<Vec<String>>,
    pub denied_commands: Vec<String>,
}

Agent-level sandbox configuration.

Use SandboxConfig::coding_agent for a sensible default suitable for coding agents: full environment inherited, writes restricted to the working directory, network off, cgroup tracking enabled.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

enabled: bool

Enable sandboxing. When false, all other fields are ignored and processes run with no restrictions.

isolation: IsolationLevel

Isolation mechanism to use. When isolation != None and enabled = true, terminal commands are auto-approved.

filesystem: Option<FilesystemConfig>

Filesystem access rules.

network: Option<NetworkConfig>

Network access rules.

env: EnvConfig

Environment variable inheritance.

security: SecurityProfile

Process-level security context (seccomp, capabilities, NNP).

resources: Option<ResourceLimits>

cgroup / container resource limits.

process_tracking: ProcessTracking

Process tracking and associated LLM tools.

allowed_commands: Option<Vec<String>>

Command allowlist. None = all commands permitted.

denied_commands: Vec<String>

Command blocklist (evaluated after allowed_commands).

Implementations

impl SandboxConfig

pub fn coding_agent() -> Self

Preset for coding agents.

• Full host filesystem readable; writes restricted to working directory
• Network disabled by default
• Full parent environment inherited (PATH, HOME, dotfiles, etc.)
• cgroup v2 tracking on Linux (auto-approved terminal commands)
• Baseline security (NNP + RuntimeDefault seccomp)
• Process tracking enabled (list_processes, kill_process, process_stats available as LLM tools)

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.