Enum CodexSandboxPermissions 

pub enum CodexSandboxPermissions {
    UseDefault,
    RequireEscalated,
    WithAdditionalPermissions,
    BypassSandbox,
}

Fine-grained permissions for sandbox operations.

These permissions allow individual tool calls to request specific capabilities beyond the base sandbox policy.

Variants

UseDefault

Use the default sandbox permissions from the policy.

RequireEscalated

Request escalated permissions (requires approval).

WithAdditionalPermissions

Request additional per-command sandbox permissions.

BypassSandbox

Bypass the sandbox entirely (requires explicit approval).

Implementations

impl SandboxPermissions

pub const MISSING_ADDITIONAL_PERMISSIONS_MESSAGE: &'static str = "missing `additional_permissions`; provide `fs_read` and/or `fs_write` when using `with_additional_permissions`"

Canonical error when with_additional_permissions carries no paths.

pub const MISSING_ESCALATION_JUSTIFICATION_MESSAGE: &'static str = "missing `justification`; provide a short approval question when using `sandbox_permissions=require_escalated`"

Canonical error when escalated/bypass requests lack justification.

pub const ADDITIONAL_PERMISSIONS_MODE_MESSAGE: &'static str = "`additional_permissions` requires `sandbox_permissions` set to `with_additional_permissions`"

Canonical error when additional_permissions is paired with the wrong mode.

pub fn normalized_for( self, additional_permissions: Option<&AdditionalPermissions>, ) -> SandboxPermissions

Normalize an implicit additional-permission request to its explicit sandboxed wire mode. Escalated and bypass modes are left unchanged so their conflict checks remain fail-closed at the execution boundary.

pub fn resolve_request( self, additional_permissions: Option<AdditionalPermissions>, justification: Option<&str>, ) -> Result<ValidatedSandboxRequest, Error>

Resolve and validate a raw sandbox request into a proven request.

Modular proof: the permission impl itself establishes that the supertrait-like obligations hold (mode/additional combination is legal, escalated modes carry justification), so callers can trust the returned ValidatedSandboxRequest instead of re-checking the combination at every use site (external proof).

Empty additional_permissions is treated as absent, use_default plus non-empty additional normalizes to with_additional_permissions, and escalated/bypass modes combined with additional permissions fail closed rather than silently downgrading.

pub fn requires_escalated_permissions(&self) -> bool

Check if this permission requests full unsandboxed execution.

pub fn uses_additional_permissions(&self) -> bool

Check if this permission requests additional sandboxed permissions.

Trait Implementations

impl Clone for SandboxPermissions

fn clone(&self) -> SandboxPermissions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxPermissions

impl Debug for SandboxPermissions

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SandboxPermissions

fn default() -> SandboxPermissions

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxPermissions

fn deserialize<__D>( __deserializer: __D, ) -> Result<SandboxPermissions, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SandboxPermissions

impl PartialEq for SandboxPermissions

fn eq(&self, other: &SandboxPermissions) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxPermissions

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxPermissions