- src/sandbox.rs : profile_of + enforce (basename/stem allowlist, cwd starts_with périmètre, proxy env si network:false), EventKind::Sandbox - enforcement au run et au start (start_one, --parallel, restart) ; AgentDef.sandbox + doc config.yaml - 6 tests : défaut non sandboxé, refus + journalisation, stem .exe, périmètre cwd, env réseau, bypass --no-sandbox
32 lines
953 B
Groff
32 lines
953 B
Groff
.ie \n(.g .ds Aq \(aq
|
|
.el .ds Aq '
|
|
.TH am-run 1 "run "
|
|
.SH NAME
|
|
run \- Run the agent command directly with the given arguments (no process management)
|
|
.SH SYNOPSIS
|
|
\fBrun\fR [\fB\-\-model\fR] [\fB\-\-provider\fR] [\fB\-\-no\-sandbox\fR] [\fB\-\-container\fR] [\fB\-h\fR|\fB\-\-help\fR] <\fIAGENT\fR> [\fIARGS...\fR]
|
|
.SH DESCRIPTION
|
|
Run the agent command directly with the given arguments (no process management)
|
|
.SH OPTIONS
|
|
.TP
|
|
\fB\-\-model\fR \fI<MODEL>\fR
|
|
Local model to use for this run (validated against the local runtimes)
|
|
.TP
|
|
\fB\-\-provider\fR \fI<PROVIDER>\fR
|
|
Provider to use for this run (issue #92): registry lookup, base_url + keyring token + model
|
|
.TP
|
|
\fB\-\-no\-sandbox\fR
|
|
Skip the agent\*(Aqs sandbox profile (issue #79)
|
|
.TP
|
|
\fB\-\-container\fR
|
|
Run the agent inside a container (issue #58)
|
|
.TP
|
|
\fB\-h\fR, \fB\-\-help\fR
|
|
Print help
|
|
.TP
|
|
<\fIAGENT\fR>
|
|
Agent name or alias
|
|
.TP
|
|
[\fIARGS...\fR]
|
|
Arguments passed through to the agent command
|