tenant.openagents/omega

1[package]
2name = "sandbox"
3version = "0.1.0"
4edition.workspace = true
5publish.workspace = true
6license = "GPL-3.0-or-later"
7
8[lints]
9workspace = true
10
11[lib]
12path = "src/sandbox.rs"
13
14[features]
15# Builds `bwrap_test_helper`, the behavior helper driven by the NixOS sandbox
16# VM tests in `nix/tests/sandboxing`. Off by default so normal builds don't
17# produce the test binary. Pulls in serde only when enabled (the helper parses
18# its check list as JSON), and enables the matching `http_proxy` escape hatch so
19# the in-process proxy can reach the VM's private-network echo servers.
20nixos-test = [
21    "dep:serde",
22    "dep:serde_json",
23    "http_proxy/nixos-integration-tests",
24]
25
26# Builds `wsl_sandbox_test_helper`, the Windows analog of `bwrap_test_helper`.
27# It drives the real WSL/Bubblewrap sandbox end-to-end (see
28# `script/test-wsl-sandbox.ps1` / `cargo xtask wsl-sandbox-tests`). Off by
29# default so normal builds and the workspace test run don't produce it.
30wsl-test = []
31
32# Behavior test helper for the Linux Bubblewrap sandbox. Only built when the
33# `nixos-test` feature is enabled (and only meaningful on Linux).
34[[bin]]
35name = "bwrap_test_helper"
36path = "src/bwrap_test_helper.rs"
37required-features = ["nixos-test"]
38
39# Behavior test helper for the Windows WSL/Bubblewrap sandbox. Only built when
40# the `wsl-test` feature is enabled (and only meaningful on Windows).
41[[bin]]
42name = "wsl_sandbox_test_helper"
43path = "src/wsl_sandbox_test_helper.rs"
44required-features = ["wsl-test"]
45
46[dependencies]
47anyhow.workspace = true
48futures.workspace = true
49http_proxy.workspace = true
50log.workspace = true
51# Used only by the `nixos-test` helper binary to parse its check list; gated
52# behind the `nixos-test` feature so normal builds don't pull it in.
53serde = { workspace = true, optional = true }
54serde_json = { workspace = true, optional = true }
55
56[target.'cfg(target_os = "linux")'.dependencies]
57libc.workspace = true
58# Safe wrappers for the SCM_RIGHTS fd-passing and `fstat` the bind validator
59# needs, so that code doesn't hand-roll `msghdr`/`CMSG_*`/`mem::zeroed` unsafe.
60nix = { workspace = true, features = ["fs", "socket", "uio"] }
61# Builds the in-sandbox seccomp-BPF filter that blocks the untrusted command from
62# creating `AF_UNIX` (and other non-IP) sockets, `io_uring`, `ptrace`, etc. — the
63# syscall-level half of preventing session-IPC-socket sandbox escapes.
64seccompiler.workspace = true
65
66[target.'cfg(target_os = "linux")'.dev-dependencies]
67tempfile.workspace = true
68
69[target.'cfg(target_os = "macos")'.dependencies]
70tempfile.workspace = true
71
72[target.'cfg(target_os = "windows")'.dependencies]
73smol.workspace = true
74