Struct Sandbox 

pub struct Sandbox { /* private fields */ }

The sandbox: compiled schemas + policy chain + budget spec.

Implementations

impl Sandbox

pub fn new( config: SandboxConfig, policies: Vec<Box<dyn PolicyEngine>>, ) -> Result<Self, String>

Build a sandbox, compiling every tool schema up front (a schema that fails to compile is a configuration error surfaced at boot, not a silently-skipped validation at request time).

pub fn check( &self, store: &dyn StateStore, session: &str, raw: &[u8], ) -> ToolVerdict

Evaluate a raw MCP payload for session.

pub fn check_with_principal( &self, store: &dyn StateStore, session: &str, principal: Option<(&str, &BudgetSpec)>, raw: &[u8], ) -> ToolVerdict

Same as Self::check but layers a principal-scoped budget check on top of the session-scoped one. When principal is Some(spec), the tool call is refused unless BOTH ledgers admit the spend; the principal ledger persists across every session belonging to the same identity, which is what makes header-rotation attacks (resetting the session bucket by minting a new session id) visible.

The two ledgers commit independently: if the principal check passes and the session check fails, the principal debit is refunded on the same dimensions before returning. Both budgets must use identical BudgetSpec shapes so the refund is exact.

pub fn sanitize(&self, operation: &str, payload: &Value) -> Result<(), String>

Evaluate an arbitrary operation payload against the configured native and WASM policy chain. Used for chat sanitization before compression.