Struct CapabilityPolicy 

pub struct CapabilityPolicy {
    pub network_allow: Vec<String>,
    pub filesystem_scope: Option<String>,
    pub shell_allow: Vec<String>,
    pub spawn_allow: Vec<String>,
    pub shell_strip_env: Vec<String>,
    pub shell_baseline_env: Vec<String>,
    pub env_allow: Vec<String>,
    pub limits: ExecutionLimits,
}

Fields

network_allow: Vec<String>

filesystem_scope: Option<String>

shell_allow: Vec<String>

spawn_allow: Vec<String>

shell_strip_env: Vec<String>

shell_baseline_env: Vec<String>

env_allow: Vec<String>

Host env var names a WASM guest may observe, from capabilities.env.allow. Empty by default: a guest sees only the runtime’s own MURMUR_* injection unless the manifest names a variable here. shell_strip_env and the credential patterns still apply on top, so a credential-shaped name declared here is stripped anyway.

limits: ExecutionLimits

Execution limits applied to every guest store in the session. Always fully resolved — capability_policy_from_runtime_manifest substitutes a default for each field capabilities.limits omits, so there is no “unset” state here and a silent manifest yields ExecutionLimits::default rather than no limits.

Trait Implementations

impl Clone for CapabilityPolicy

fn clone(&self) -> CapabilityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilityPolicy

fn default() -> CapabilityPolicy

Returns the “default value” for a type.

impl Eq for CapabilityPolicy

impl PartialEq for CapabilityPolicy

fn eq(&self, other: &CapabilityPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CapabilityPolicy