Struct CodeExecutionConfig 

pub struct CodeExecutionConfig {
    pub enabled: bool,
    pub language_allowlist: Vec<String>,
    pub module_denylist: Vec<String>,
    pub network_access: bool,
    pub max_execution_time_ms: Option<u64>,
    pub max_scan_bytes: usize,
}

Configuration for CodeExecutionGuard.

Fields

enabled: bool

Enable/disable the guard entirely.

language_allowlist: Vec<String>

Allowed interpreter languages. Empty means “any language”.

module_denylist: Vec<String>

Dangerous module names (used as word-boundary literal matches against the code body). Defaults to default_dangerous_modules.

network_access: bool

When false, deny code-execution calls that request network access (either via argument flag or a detectable network import).

max_execution_time_ms: Option<u64>

Maximum execution time in milliseconds. When set, any call with an execution_time_ms / timeout_ms argument above this value is denied. None disables the check.

max_scan_bytes: usize

Maximum bytes of code to scan for module / network detection. Longer code bodies are denied outright (fail-closed) so a padding-based bypass cannot push a forbidden import past the scan boundary.

Trait Implementations

impl Clone for CodeExecutionConfig

fn clone(&self) -> CodeExecutionConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CodeExecutionConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CodeExecutionConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for CodeExecutionConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CodeExecutionConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.