Struct PreopenReport 

pub struct PreopenReport {
    pub artifact: String,
    pub role: String,
    pub scope: Option<String>,
    pub surface: PreopenSurface,
    pub runtime_dir_reach: Option<RuntimeDirReach>,
    pub extra_roots: Vec<ExtraRootReport>,
}

One artifact’s resolved WASI preopen as it appears in a ScopeReport — and therefore in mur run --explain-scope, in mur doctor, and in trace.jsonl’s session_start.effective_grants.

Per-artifact, like StateStoreReport beside it, and reported for the same reason: the capsule-wide ScopeReport::filesystem_scope is joined into no guest preopen root, so an operator reading that field alone learns nothing about what any tool, driver or hook can actually see.

Fields

artifact: String

The artifact whose entry in the capsule operator’s own manifest this describes.

role: String

murmur_artifact::ArtifactRuntime::as_str verbatim, so the report and the manifest name a role with one vocabulary.

scope: Option<String>

The entry’s declared capabilities.filesystem.scope, verbatim. None = undeclared, which is what Self::surface has already resolved against the role’s own baseline.

surface: PreopenSurface

What the guest is preopened into once the role’s baseline and Self::scope are both applied.

runtime_dir_reach: Option<RuntimeDirReach>

How the artifact reaches the session’s runtime directory, read-only: at murmur-runtime/ for a runtime: tool with no capabilities.filesystem.scope. None — serialized null — for every other entry, which has no reach.

extra_roots: Vec<ExtraRootReport>

The host folders the guest is also preopened into, under murmur-host (crate::guest_roots), in preopen order. Filled for exactly the entries that reach the runtime directory, from the session’s unconfined stance or host_paths. Always serialized: [] for every other entry.

Implementations

impl PreopenReport

pub fn render(&self) -> String

The single line this preopen renders as, shared by ScopeReport::render and by mur doctor so the two cannot word the same grant differently.

Trait Implementations

impl Clone for PreopenReport

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PreopenReport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PreopenReport

impl PartialEq for PreopenReport

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for PreopenReport

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PreopenReport