Function fetch_policy

crates/openshell-core/src/grpc_client.rs:566–574

Fetch sandbox policy from `OpenShell` server via gRPC. Returns `Ok(Some(policy))` when the server has a policy configured, or `Ok(None)` when the sandbox was created without a policy (the sandbox should discover one from disk or use the restrictive default).

(endpoint: &str, sandbox_id: &str)

/// or `Ok(None)` when the sandbox was created without a policy (the sandbox
/// should discover one from disk or use the restrictive default).
pub async fn fetch_policy(endpoint: &str, sandbox_id: &str) -> Result<Option<ProtoSandboxPolicy>> {
    debug!(endpoint = %endpoint, sandbox_id = %sandbox_id, "Connecting to OpenShell server");

    let mut client = connect(endpoint).await?;

    debug!("Connected, fetching sandbox policy");

    fetch_policy_with_client(&mut client, sandbox_id).await
}

/// Fetch sandbox policy using an existing client connection.
async fn fetch_policy_with_client(