Struct SubprocessSandbox 

pub struct SubprocessSandbox { /* private fields */ }

Process-wide subprocess sandbox registry.

Implementations

impl SubprocessSandbox

pub fn detect() -> Self

Resolve the runner from the environment / PATH.

pub fn with_runner(runner: Option<RunnerInfo>) -> Self

Build with an explicit runner resolution (tests, deterministic deployments).

pub const fn is_active(&self) -> bool

Whether a runner is attached.

pub const fn runner(&self) -> Option<&RunnerInfo>

The resolved runner, if any.

pub fn declared(effects: &EffectRow) -> bool

Whether the tool contractually routes its spawns through the policy.

pub fn policy_for(&self, effects: &EffectRow) -> SpawnPolicy

Per-dispatch policy for the given effect row (net grant derived from Resource::Network). Inert when no runner is attached.

pub fn note_confined(&self)

Count a declared dispatch that carried an active runner.

pub fn note_degraded(&self, tool: &str)

Count + warn (once per tool) a declared dispatch with no runner.

pub fn note_unconfined_spawn(&self, tool: &str)

Count + warn (once per tool) a spawn-declared tool that has not adopted the Sandbox::Subprocess contract.

pub fn drain_events(&self) -> Vec<SandboxEvent>

Drain pending drift incidents (exactly-once per incident) for the Yama v0 bridge. Returns an empty vec when nothing is pending.

pub fn status(&self) -> Value

Read-only status for /status, wm doctor, and tests.