Struct MontyExecutorBuilder 

pub struct MontyExecutorBuilder { /* private fields */ }

Available on crate features code and embedded-python only.

Configures OS-access grants, host functions, and resource limits for the Monty executors, then produces either product with a terminal build method.

The builder is cheaply cloneable (grants are small, the registry holds Arc<dyn HostFunction>), so one configuration can mint many executors.

Defaults are fully sandboxed: no filesystem mounts, an empty environment, and no clock.

Example

use adk_code::MontyExecutorBuilder;

let one_shot = MontyExecutorBuilder::new().build_one_shot()?;
let repl = MontyExecutorBuilder::new().build_repl()?;

Implementations

impl MontyExecutorBuilder

pub fn new() -> MontyExecutorBuilder

Start with the fully sandboxed defaults: no filesystem mounts, an empty environment map, and no clock.

pub fn allow_path( self, virtual_path: impl Into<String>, host_path: impl Into<PathBuf>, access: PathAccess, ) -> MontyExecutorBuilder

Make a host directory available to scripts at virtual_path.

virtual_path is the absolute path a script uses (e.g. /data); host_path is the real directory it maps to. The mount boundary is enforced by Monty (canonicalization + symlink-escape detection) — a script can never escape it. Call repeatedly to expose several directories.

Virtual paths are validated at build_*(): each must be a normalized absolute path (no trailing slash, no . or .. components) unique across mounts.

pub fn environ<K, V>( self, vars: impl IntoIterator<Item = (K, V)>, ) -> MontyExecutorBuilder

where K: Into<String>, V: Into<String>,

Replace the environment map exposed via os.getenv / os.environ.

Only the entries provided here are visible to scripts; the host process environment is never exposed implicitly.

pub fn environ_var( self, key: impl Into<String>, value: impl Into<String>, ) -> MontyExecutorBuilder

Add or overwrite a single environment variable.

pub fn system_clock(self) -> MontyExecutorBuilder

Grant host-clock access: date.today() and datetime.now() read the real system time. Without this grant they raise a catchable OSError.

pub fn function(self, function: Arc<dyn HostFunction>) -> MontyExecutorBuilder

Register a host function callable from Python by bare name.

Registered names are validated at build_*(): they must be valid Python identifiers, unique, and must not collide with built-ins.

pub fn function_fn<F, Fut>( self, name: impl Into<String>, description: impl Into<String>, func: F, ) -> MontyExecutorBuilder

where F: Fn(Vec<Value>, Map<String, Value>) -> Fut + Send + Sync + 'static, Fut: Future<Output = Result<Value, HostFunctionError>> + Send + 'static,

Register a closure as a host function — the common case.

Example

use adk_code::MontyExecutorBuilder;
use serde_json::json;

let executor = MontyExecutorBuilder::new()
    .function_fn("double", "Double a number.", |args, _kwargs| async move {
        let n = args.first().and_then(|v| v.as_i64()).unwrap_or(0);
        Ok(json!(n * 2))
    })
    .build_one_shot()?;

pub fn max_memory(self, bytes: usize) -> MontyExecutorBuilder

Cap the interpreter’s memory use in bytes (default 256 MiB).

For a REPL executor this bounds the cumulative session heap. Exceeding it raises Python’s MemoryError (the result reports Failed).

pub fn host_function_timeout(self, timeout: Duration) -> MontyExecutorBuilder

Wall-clock bound for a single host-function call (default 30 s), so a hung user function cannot wedge execute(). On expiry the script receives a catchable exception.

pub fn script_name(self, name: impl Into<String>) -> MontyExecutorBuilder

The script name used in tracebacks (default "python_snippet").

pub fn build_one_shot(self) -> Result<MontyOneShotExecutor, MontyBuildError>

Build the one-shot product: a fresh interpreter per execute() call.

Errors

Returns a MontyBuildError when the host-function registry is invalid (invalid identifier, duplicate name, built-in collision, reserved name) or a mount’s virtual path is not a normalized, unique absolute path.

pub fn build_repl(self) -> Result<MontyReplExecutor, MontyBuildError>

Build the REPL product: interpreter state persists across execute() calls.

Errors

Returns a MontyBuildError when the host-function registry is invalid (invalid identifier, duplicate name, built-in collision, reserved name) or a mount’s virtual path is not a normalized, unique absolute path.

Trait Implementations

impl Clone for MontyExecutorBuilder

fn clone(&self) -> MontyExecutorBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MontyExecutorBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for MontyExecutorBuilder

fn default() -> MontyExecutorBuilder

Returns the “default value” for a type.