Struct SandboxConfig 

pub struct SandboxConfig {
    pub max_memory_mb: u64,
    pub max_cpu_time_secs: u64,
    pub allowed_read_paths: Vec<PathBuf>,
    pub allowed_write_paths: Vec<PathBuf>,
    pub allowed_hosts: Vec<String>,
    pub env_vars: HashMap<String, String>,
}

Sandbox configuration for agent processes

Defines resource limits and access controls for an agent.

Fields

max_memory_mb: u64

Maximum memory usage in MB

max_cpu_time_secs: u64

Maximum CPU time in seconds

allowed_read_paths: Vec<PathBuf>

Allowed file system paths (read-only)

allowed_write_paths: Vec<PathBuf>

Allowed file system paths (read-write)

allowed_hosts: Vec<String>

Allowed network hosts

env_vars: HashMap<String, String>

Environment variables to pass through

Implementations

impl SandboxConfig

pub fn new() -> SandboxConfig

Create a new sandbox config with default values

pub fn with_memory_limit(self, mb: u64) -> SandboxConfig

Set memory limit in MB

pub fn with_cpu_limit(self, secs: u64) -> SandboxConfig

Set CPU time limit in seconds

pub fn with_read_path(self, path: PathBuf) -> SandboxConfig

Add a read-only path

pub fn with_write_path(self, path: PathBuf) -> SandboxConfig

Add a read-write path

pub fn with_allowed_host(self, host: String) -> SandboxConfig

Add an allowed network host

pub fn with_env(self, key: String, value: String) -> SandboxConfig

Set an environment variable

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> SandboxConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<SandboxConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.