Expand description
Hand-built sandbox bounds for the tree-walking evaluator.
This interpreter is native Rust, not Wasm: there is no fuel meter, no linear-memory ceiling, and no engine-level deadline to fall back on. Every bound a script can exhaust is owned here and enforced from the evaluator.
Structs§
- Budget
- Mutable per-execution counters for one script run.
- Limits
- Configurable execution bounds.
- Output
Buffer - Bounded combined stdout/stderr accumulator.
Enums§
- Limit
Exceeded - A limit a running script exhausted.
Constants§
- DEFAULT_
ALLOW_ CLOCK - Whether a script may read the host wall clock by default. It may not.
- DEFAULT_
MAX_ CAPABILITY_ CALLS - Default number of capability invocations one script may drive.
- DEFAULT_
MAX_ OUTPUT_ BYTES - Default accumulated output ceiling in bytes.
- DEFAULT_
MAX_ OUTPUT_ LINES - Default accumulated output ceiling in lines.
- DEFAULT_
MAX_ RECURSION_ DEPTH - Default shell-function call-stack depth.
- DEFAULT_
MAX_ STEPS - Default statement/loop/call budget for one script.
- DEFAULT_
MAX_ VALUE_ BYTES - Default ceiling on the value bytes one script may materialize.
- DEFAULT_
TIMEOUT - Default wall-clock deadline for one script.