Struct PolicyFilesystemCtxView 

pub struct PolicyFilesystemCtxView<'a> {
    pub ctx: &'a mut WasiFilesystemCtx,
    pub table: &'a mut ResourceTable,
    pub ceiling: &'a Arc<dyn CompiledCeiling>,
    pub fd_paths: &'a mut FdPathMap,
    pub mode: PolicyMode,
    pub prompter: Arc<dyn ConsentPrompter>,
    pub cache: Arc<DecisionCache>,
}

Per-call view bundling all state the policy wrapper needs.

Fields

ctx: &'a mut WasiFilesystemCtx

table: &'a mut ResourceTable

ceiling: &'a Arc<dyn CompiledCeiling>

fd_paths: &'a mut FdPathMap

mode: PolicyMode

Configured mode; drives the p3 preopens kill-switch. p3 path-taking ops can’t be gated (upstream Dir::open_at is pub(crate)), so when mode is anything but Open we return zero preopens from p3 and p3 guests can’t acquire a Descriptor::Dir handle at all.

prompter: Arc<dyn ConsentPrompter>

Interactive-consent prompter, consulted when the ceiling returns Decision::Ask. Shared across the store.

cache: Arc<DecisionCache>

Per-session memory of ask decisions, keyed by (cap-id, path).

Trait Implementations

impl Host for PolicyFilesystemCtxView<'_>

fn get_directories(&mut self) -> Result<Vec<(Resource<Descriptor>, String)>>

Return the set of preopened directories, and their paths.

impl Host for PolicyFilesystemCtxView<'_>

fn convert_error_code(&mut self, err: FsError) -> Result<ErrorCode>

fn filesystem_error_code( &mut self, err: Resource<Error>, ) -> Result<Option<ErrorCode>>

Attempts to extract a filesystem-related error-code from the stream error provided.

impl Host for PolicyFilesystemCtxView<'_>

fn get_directories(&mut self) -> Result<Vec<(Resource<Descriptor>, String)>>

Return the set of preopened directories, and their paths.

impl HostDescriptor for PolicyFilesystemCtxView<'_>

async fn advise( &mut self, fd: Resource<Descriptor>, offset: Filesize, len: Filesize, advice: Advice, ) -> FsResult<()>

Provide file advisory information on a descriptor.

async fn sync_data(&mut self, fd: Resource<Descriptor>) -> FsResult<()>

Synchronize the data of a file to disk.

async fn get_flags( &mut self, fd: Resource<Descriptor>, ) -> FsResult<DescriptorFlags>

Get flags associated with a descriptor.

async fn get_type( &mut self, fd: Resource<Descriptor>, ) -> FsResult<DescriptorType>

Get the dynamic type of a descriptor.

async fn set_size( &mut self, fd: Resource<Descriptor>, size: Filesize, ) -> FsResult<()>

Adjust the size of an open file. If this increases the file’s size, the extra bytes are filled with zeros.

async fn set_times( &mut self, fd: Resource<Descriptor>, atim: NewTimestamp, mtim: NewTimestamp, ) -> FsResult<()>

Adjust the timestamps of an open file or directory.

async fn read( &mut self, fd: Resource<Descriptor>, len: Filesize, offset: Filesize, ) -> FsResult<(Vec<u8>, bool)>

Read from a descriptor, without using and updating the descriptor’s offset.

async fn write( &mut self, fd: Resource<Descriptor>, buf: Vec<u8>, offset: Filesize, ) -> FsResult<Filesize>

Write to a descriptor, without using and updating the descriptor’s offset.

async fn read_directory( &mut self, fd: Resource<Descriptor>, ) -> FsResult<Resource<DirectoryEntryStream>>

Read directory entries from a directory.

async fn sync(&mut self, fd: Resource<Descriptor>) -> FsResult<()>

Synchronize the data and metadata of a file to disk.

async fn create_directory_at( &mut self, fd: Resource<Descriptor>, path: String, ) -> FsResult<()>

Create a directory.

async fn stat(&mut self, fd: Resource<Descriptor>) -> FsResult<DescriptorStat>

Return the attributes of an open file or directory.

async fn stat_at( &mut self, fd: Resource<Descriptor>, path_flags: PathFlags, path: String, ) -> FsResult<DescriptorStat>

Return the attributes of a file or directory.

async fn set_times_at( &mut self, fd: Resource<Descriptor>, path_flags: PathFlags, path: String, atim: NewTimestamp, mtim: NewTimestamp, ) -> FsResult<()>

Adjust the timestamps of a file or directory.

async fn link_at( &mut self, fd: Resource<Descriptor>, old_path_flags: PathFlags, old_path: String, new_descriptor: Resource<Descriptor>, new_path: String, ) -> FsResult<()>

Create a hard link.

async fn open_at( &mut self, fd: Resource<Descriptor>, path_flags: PathFlags, path: String, oflags: OpenFlags, flags: DescriptorFlags, ) -> FsResult<Resource<Descriptor>>

Open a file or directory.

fn drop(&mut self, fd: Resource<Descriptor>) -> Result<()>

async fn readlink_at( &mut self, fd: Resource<Descriptor>, path: String, ) -> FsResult<String>

Read the contents of a symbolic link.

async fn remove_directory_at( &mut self, fd: Resource<Descriptor>, path: String, ) -> FsResult<()>

Remove a directory.

async fn rename_at( &mut self, fd: Resource<Descriptor>, old_path: String, new_fd: Resource<Descriptor>, new_path: String, ) -> FsResult<()>

Rename a filesystem object.

async fn symlink_at( &mut self, fd: Resource<Descriptor>, src_path: String, dest_path: String, ) -> FsResult<()>

Create a symbolic link (also known as a “symlink”).

async fn unlink_file_at( &mut self, fd: Resource<Descriptor>, path: String, ) -> FsResult<()>

Unlink a filesystem object that is not a directory.

fn read_via_stream( &mut self, fd: Resource<Descriptor>, offset: Filesize, ) -> FsResult<Resource<DynInputStream>>

Return a stream for reading from a file, if available.

fn write_via_stream( &mut self, fd: Resource<Descriptor>, offset: Filesize, ) -> FsResult<Resource<DynOutputStream>>

Return a stream for writing to a file, if available.

fn append_via_stream( &mut self, fd: Resource<Descriptor>, ) -> FsResult<Resource<DynOutputStream>>

Return a stream for appending to a file, if available.

async fn is_same_object( &mut self, a: Resource<Descriptor>, b: Resource<Descriptor>, ) -> Result<bool>

Test whether two descriptors refer to the same filesystem object.

async fn metadata_hash( &mut self, fd: Resource<Descriptor>, ) -> FsResult<MetadataHashValue>

Return a hash of the metadata associated with a filesystem object referred to by a descriptor.

async fn metadata_hash_at( &mut self, fd: Resource<Descriptor>, path_flags: PathFlags, path: String, ) -> FsResult<MetadataHashValue>

Return a hash of the metadata associated with a filesystem object referred to by a directory descriptor and a relative path.

impl HostDirectoryEntryStream for PolicyFilesystemCtxView<'_>

async fn read_directory_entry( &mut self, stream: Resource<DirectoryEntryStream>, ) -> FsResult<Option<DirectoryEntry>>

Read a single directory entry from a directory-entry-stream.

fn drop(&mut self, stream: Resource<DirectoryEntryStream>) -> Result<()>