Struct SandboxConfig 

pub struct SandboxConfig {
    pub enabled: bool,
    pub profile: SandboxProfile,
    pub allow_read: Vec<PathBuf>,
    pub allow_write: Vec<PathBuf>,
    pub strict: bool,
    pub backend: String,
}

OS-level subprocess sandbox configuration ([tools.sandbox] TOML section).

When enabled = true, all shell commands are wrapped in an OS-native sandbox:

• macOS: sandbox-exec (Seatbelt) with a generated TinyScheme profile.
• Linux (requires sandbox cargo feature): bwrap + Landlock + seccomp BPF.

This sandbox applies only to subprocess executors (shell). In-process executors (WebScrapeExecutor, FileExecutor) are not covered — see NFR-SB-1.

Examples

[tools.sandbox]
enabled = true
profile = "workspace"
allow_read  = ["$HOME/.cache/zeph"]
allow_write = ["./.local"]
strict = true
backend = "auto"

Fields

enabled: bool

Enable OS-level sandbox. Default: false.

On Linux requires the sandbox cargo feature. When true but the feature is absent, startup emits WARN and degrades to noop (fail-open). Use strict = true to make the feature absence an error instead.

profile: SandboxProfile

Enforcement profile controlling the baseline restrictions.

allow_read: Vec<PathBuf>

Additional paths granted read access. Resolved to absolute paths at startup.

allow_write: Vec<PathBuf>

Additional paths granted write access. Resolved to absolute paths at startup.

strict: bool

When true, sandbox initialization failure aborts startup (fail-closed). Default: true.

backend: String

OS backend hint: "auto" / "seatbelt" / "landlock-bwrap" / "noop".

"auto" selects the best available backend for the current platform.

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.