sandbox

type Filesystem struct {
	FullDiskReadAccess bool     `toml:"fullDiskReadAccess"`
	NoCache            bool     `toml:"noCache"`
	ROPaths            []string `toml:"roPaths"`
	RWPaths            []string `toml:"rwPaths"`
}

type Network struct {
	Deny bool `toml:"deny"`
}

type Policy struct {
	Filesystem Filesystem `toml:"fs"`
	Network    Network    `toml:"net"`
}

type Registry struct {
	// contains filtered or unexported fields
}

type Sandbox interface {
	Exec(ctx context.Context, cmd []string, policy Policy, logger *slog.Logger) error
}