Merge pull request #123 from dzerik/feat/popen-python

feat(python): streaming-stdio popen — Sandbox.popen + Process (RFC #67)

Author: congwang-mk

python/src/sandlock/__init__.py

@@ -14,7 +14,9 @@
 )
 from .inputs import inputs
 from .handler import Handler, NotifAction, HandlerCtx, ExceptionPolicy
-from .sandbox import Sandbox, BranchAction, parse_ports, Change, DryRunResult
+from .sandbox import (
+    Sandbox, BranchAction, parse_ports, Change, DryRunResult, StdioMode, Process,
+)
 from ._profile import load_profile, list_profiles
 from .exceptions import (
     SandlockError,
@@ -49,6 +51,8 @@
     "parse_ports",
     "Change",
     "DryRunResult",
+    "StdioMode",
+    "Process",
     "Protection",
     # Handler ABI
     "Handler",

python/src/sandlock/_sdk.py

@@ -317,6 +317,22 @@ def confine(policy: "PolicyDataclass") -> None:
 _lib.sandlock_handle_port_mappings.restype = ctypes.c_char_p
 _lib.sandlock_handle_port_mappings.argtypes = [_c_handle_p]
 
+# Streaming-stdio popen (RFC #67): create+start a live handle with per-stream
+# StdioMode; each piped stream's owned fd is returned through its out pointer.
+_lib.sandlock_popen.restype = _c_handle_p
+_lib.sandlock_popen.argtypes = [
+    _c_policy_p,
+    ctypes.c_char_p,
+    ctypes.POINTER(ctypes.c_char_p),
+    ctypes.c_uint,
+    ctypes.c_uint32,  # stdin_mode
+    ctypes.c_uint32,  # stdout_mode
+    ctypes.c_uint32,  # stderr_mode
+    ctypes.POINTER(ctypes.c_int),  # out_stdin_fd
+    ctypes.POINTER(ctypes.c_int),  # out_stdout_fd
+    ctypes.POINTER(ctypes.c_int),  # out_stderr_fd
+]
+
 # Result
 _lib.sandlock_result_exit_code.restype = ctypes.c_int
 _lib.sandlock_result_exit_code.argtypes = [_c_result_p]