Quickstart

Add the dependency

[dependencies]
agent-supervisor = "0.1.2"

Build an execution request

The caller chooses the executable, arguments, environment, filesystem policy, network mode, resource limits, and enforcement requirement. The sandbox does not infer missing authority.

use agent_supervisor::{
    execute, EnforcementRequirement, EnvironmentPolicy, ExecutionRequest,
    NetworkMode, ResourceLimits, SandboxPolicy,
};
use std::path::PathBuf;

let request = ExecutionRequest {
    executable: PathBuf::from("/usr/bin/printf"),
    args: vec!["hello\\n".into()],
    working_directory: None,
    policy: SandboxPolicy {
        environment: EnvironmentPolicy::default(),
        filesystem: None,
        network: NetworkMode::Host,
        limits: ResourceLimits::default(),
        enforcement: EnforcementRequirement::BestEffort,
    },
};

let output = execute(&request, b"").await?;
assert!(output.success);

For a new integration, inspect platform_capabilities() before requiring optional behavior such as native filesystem isolation, process adoption, PTY, or kernel resource limits.

Run the tests

cargo fmt --all -- --check
cargo test --all-targets -- --test-threads=1
cargo clippy --all-targets -- -D warnings

Platform-specific filesystem and network tests must execute on their native operating system. Cross-compilation checks the API bindings but does not replace native integration testing.