src/lib/plugins/sandbox.ts

/**
 * Plugin sandbox — configurable isolation levels.
 *
 * @module plugins/sandbox
 */

export enum SandboxLevel {
  /** Run in-process (no isolation, fastest) */
  IN_PROCESS = 0,
  /** Run in child process with full environment */
  CHILD_FULL_ENV = 1,
  /** Run in child process with filtered environment */
  CHILD_FILTERED_ENV = 2,
  /** Run in child process with isolated environment (no env vars) */
  CHILD_ISOLATED = 3,
}

export function getSandboxLabel(level: SandboxLevel): string {
  switch (level) {
    case SandboxLevel.IN_PROCESS:
      return "In-Process";
    case SandboxLevel.CHILD_FULL_ENV:
      return "Child (Full Env)";
    case SandboxLevel.CHILD_FILTERED_ENV:
      return "Child (Filtered Env)";
    case SandboxLevel.CHILD_ISOLATED:
      return "Child (Isolated)";
  }
}