boxwren 0.2.2

Local-first WebAssembly sandbox for untrusted agent code. Deny-by-default limits, capability grants, and a kill switch.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

//! Optional admission hooks. Policy belongs to Keywarden; Boxwren only asks
//! whether a run may start.

use crate::error::Error;
use crate::run::RunRequest;

/// Called before a module is instantiated. Deny to refuse the run.
pub trait Preflight: Send + Sync {
    fn allow(&self, request: &RunRequest) -> Result<(), PolicyDeny>;
}

/// A preflight denial. Surfaces as [`Error::Policy`] before the guest starts.
#[derive(Debug, Clone)]
pub struct PolicyDeny {
    pub message: String,
}

impl PolicyDeny {
    pub fn new(message: impl Into<String>) -> Self {
        Self {
            message: message.into(),
        }
    }
}

impl From<PolicyDeny> for Error {
    fn from(value: PolicyDeny) -> Self {
        Error::Policy(value.message)
    }
}