Struct OsAccessBuilder 

pub struct OsAccessBuilder { /* private fields */ }

Available on crate feature codeact-monty only.

Builder for OsAccess.

Implementations

impl OsAccessBuilder

pub fn new() -> OsAccessBuilder

A builder seeded with the fully sandboxed defaults: no mounts, an empty environment, the host clock enabled.

pub fn allow_path( self, virtual_path: impl Into<String>, host_path: impl Into<PathBuf>, access: PathAccess, ) -> OsAccessBuilder

Make a host directory available to scripts at virtual_path.

virtual_path is the absolute path a script uses (e.g. /data); host_path is the real directory it maps to. The mount boundary is enforced by Monty — a script can never escape it. Call this repeatedly to expose several directories.

Example

use adk_codeact_monty::{OsAccess, PathAccess};

let access = OsAccess::builder()
    .allow_path("/data", "/srv/agent/data", PathAccess::ReadOnly)
    .allow_path("/out", "/srv/agent/out", PathAccess::ReadWrite)
    .build();

pub fn environ<K, V>( self, vars: impl IntoIterator<Item = (K, V)>, ) -> OsAccessBuilder

where K: Into<String>, V: Into<String>,

Replace the environment map exposed via os.getenv / os.environ.

Only the entries provided here are visible to scripts; the host process environment is never exposed implicitly.

pub fn environ_var( self, key: impl Into<String>, value: impl Into<String>, ) -> OsAccessBuilder

Add or overwrite a single environment variable.

pub fn system_clock(self, enabled: bool) -> OsAccessBuilder

Enable or disable host-clock access (date.today() / datetime.now()).

Enabled by default. Disable it for fully deterministic runs.

pub fn build(self) -> OsAccess

Finish building the policy.

Trait Implementations

impl Clone for OsAccessBuilder

fn clone(&self) -> OsAccessBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OsAccessBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for OsAccessBuilder

fn default() -> OsAccessBuilder

Returns the “default value” for a type.