Struct SandboxConfig 

pub struct SandboxConfig {
    pub max_execution_time: Duration,
    pub max_memory_mb: u64,
    pub max_cpu_percent: u64,
    pub allowed_commands: HashSet<String>,
    pub blocked_commands: HashSet<String>,
    pub allow_network: bool,
    pub max_processes: u32,
    pub strict_mode: bool,
}

Configuration for sandbox execution.

Note: this sandbox provides command-level validation (whitelist, blocklist, dangerous-pattern regexes) and environment-variable filtering. It does NOT provide filesystem isolation — the command runs in the caller’s working directory as a plain subprocess, so absolute paths and .. sequences can reach anything the host user can reach. If filesystem isolation is needed, use the Docker or Podman runtime.

Fields

max_execution_time: Duration

Maximum execution time for commands

max_memory_mb: u64

Maximum memory usage in MB

max_cpu_percent: u64

Maximum CPU usage percentage

allowed_commands: HashSet<String>

Allowed commands (whitelist)

blocked_commands: HashSet<String>

Blocked commands (blacklist)

allow_network: bool

Whether to enable network access

max_processes: u32

Maximum number of processes

strict_mode: bool

Whether to enable strict mode (more restrictive)

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.