boxwren 0.2.2

Local-first WebAssembly sandbox for untrusted agent code. Deny-by-default limits, capability grants, and a kill switch.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

//! Warm-engine timing. Cold process and container numbers are measured outside
//! this process and written up in docs/BENCHMARKS.md.

use std::time::Instant;

use boxwren::{Engine, Entry, Grants, Limits, RunRequest};

const WAT: &str = r#"
(module
  (func (export "run") (result i32)
    i32.const 2
    i32.const 2
    i32.add))
"#;

fn main() {
    let created = Instant::now();
    let engine = Engine::new().expect("engine");
    println!("engine_new_us {}", created.elapsed().as_micros());
    let request = || RunRequest {
        wasm: WAT.as_bytes().to_vec(),
        entry: Entry::Export("run".into()),
        limits: Limits::default(),
        grants: Grants::default(),
        args: Vec::new(),
    };
    for _ in 0..20 {
        let report = engine.execute(request()).expect("warmup");
        assert!(report.success());
    }
    let rounds: u32 = 200;
    let started = Instant::now();
    for _ in 0..rounds {
        let report = engine.execute(request()).expect("run");
        assert!(report.success());
    }
    let elapsed = started.elapsed();
    println!(
        "warm_engine_reuse_ns {} total_us {}",
        elapsed.as_nanos() / u128::from(rounds),
        elapsed.as_micros()
    );
}