sandbox

type Config struct {
	Mounts       []Mount
	Deny         []string      // paths to mask (e.g. ~/.ssh) — deny read+write
	DenyWrite    []string      // paths to deny writes only (e.g. ./egg.yaml) — read allowed
	NetworkNeed  NetworkNeed   // granular network access required by the agent
	Domains      []string      // domain allowlist for proxy filtering
	ProxyPort    int           // local domain-filtering proxy port (0 = no proxy)
	CPULimit     time.Duration // RLIMIT_CPU (0 = backend default)
	MemLimit     uint64        // RLIMIT_AS in bytes (0 = backend default)
	MaxFDs       uint32        // RLIMIT_NOFILE (0 = backend default)
	PidLimit     uint32        // cgroup pids.max (0 = no limit)
	SessionID    string        // unique ID for cgroup naming
	UserHome     string        // per-user home override (empty = os.UserHomeDir)
	Trace        bool          // wrap command with strace (Linux only)
	AllowSockets []string      // Unix socket paths to allow outbound connections (macOS Seatbelt)
}

type DomainProxy struct {
	// contains filtered or unexported fields
}

type EnforcementError struct {
	Gaps     []string
	Platform string
}

type Level int

type Mount struct {
	Source   string
	Target   string
	ReadOnly bool
	UseRegex bool // macOS: emit regex rule instead of subpath (covers adjacent files like ~/.claude.json)
}

type NetworkNeed int

type Sandbox interface {
	Exec(ctx context.Context, name string, args []string) (*exec.Cmd, error)
	PostStart(pid int) error // apply rlimits etc. after process starts
	Destroy() error
	DiagLog() string  // path to sandbox diagnostic log, or ""
	TraceLog() string // path to strace output log, or ""
}