Graphorin API reference v0.1.0
Graphorin API reference / @graphorin/security / / SandboxCapabilities
Interface: SandboxCapabilities
Defined in: packages/security/src/sandbox/sandbox.ts:43
Capability self-description. Each adapter advertises whether it supports network blocking, filesystem blocking, and process-level memory limits so the dispatcher can fall back gracefully when a deployment requests a feature an adapter cannot satisfy.
Stable
Properties
| Property | Modifier | Type | Description | Defined in |
|---|---|---|---|---|
canBlockFilesystem | readonly | boolean | Adapter can block filesystem access. | packages/security/src/sandbox/sandbox.ts:47 |
canBlockNetwork | readonly | boolean | Adapter can block outgoing network calls. | packages/security/src/sandbox/sandbox.ts:45 |
canEnforceMemoryLimit | readonly | boolean | Adapter can enforce a memory limit (MB) on the executed code. | packages/security/src/sandbox/sandbox.ts:51 |
canEnforceTimeout | readonly | boolean | Adapter can enforce a hard wall-clock timeout via signal/terminate. | packages/security/src/sandbox/sandbox.ts:49 |