Struct SandboxConfig 

pub struct SandboxConfig {
    pub enabled: bool,
    pub provider: String,
    pub allow_read: Vec<String>,
    pub allow_write: Vec<String>,
    pub allow_network: Vec<String>,
}

Agent sandboxing configuration (v0.14.0).

Controls whether agents run in a sandboxed process environment that limits filesystem access, network reach, and syscall surface.

[sandbox]
enabled = true
provider = "native"   # "native" (OS sandbox-exec/landlock) | "openshell" | "oci"

# Paths the agent is allowed to read (in addition to its working dir)
allow_read = ["/usr/lib", "/etc/ssl"]

# Paths the agent is allowed to write (staging workspace is always included)
allow_write = []

# Hostnames/CIDR ranges the agent may connect to. Empty = block all network.
allow_network = ["api.anthropic.com", "api.github.com"]

Fields

enabled: bool

Whether sandboxing is enabled. Default: false (safe default — no breakage on upgrade).

provider: String

Sandbox provider. Default: “native” (macOS sandbox-exec or Linux landlock/seccomp).

allow_read: Vec<String>

Additional paths the agent may read (beyond its working dir and /usr, /lib, /etc/ssl).

allow_write: Vec<String>

Additional writable paths (the staging workspace root is always writable).

allow_network: Vec<String>

Network destinations the agent is allowed to reach. Empty = block all outbound. Entries may be hostnames, IPs, or CIDR blocks (e.g., “api.anthropic.com”, “10.0.0.0/8”).

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.