Struct SafetyConfig 

pub struct SafetyConfig {
    pub paths: PathAllowlist,
    pub hosts: HostAllowlist,
    pub env_vars: Option<HashSet<String>>,
    pub allow_process: bool,
    pub allowed_commands: Option<HashSet<String>>,
    pub default_timeout: Duration,
    pub max_timeout: Duration,
}

Safety configuration for stdlib operations.

Fields

paths: PathAllowlist

Path allowlist.

hosts: HostAllowlist

Host allowlist.

env_vars: Option<HashSet<String>>

Allowed environment variable names (None = all denied).

allow_process: bool

Whether process execution is allowed.

allowed_commands: Option<HashSet<String>>

Allowed process commands (None = all allowed if allow_process is true).

default_timeout: Duration

Default timeout for operations.

max_timeout: Duration

Maximum timeout allowed.

Implementations

impl SafetyConfig

pub fn new() -> Self

Create a new safety configuration.

pub fn permissive() -> Self

Create a permissive configuration (for trusted code only).

pub fn strict() -> Self

Create a strict configuration.

pub fn with_paths(self, paths: PathAllowlist) -> Self

Set path allowlist.

pub fn with_hosts(self, hosts: HostAllowlist) -> Self

Set host allowlist.

pub fn with_env_vars<I, S>(self, vars: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Allow specific environment variables.

pub fn allow_all_env(self) -> Self

Allow all environment variables.

pub fn with_allow_process(self, allow: bool) -> Self

Allow process execution.

pub fn with_allowed_commands<I, S>(self, commands: I) -> Self

where I: IntoIterator<Item = S>, S: Into<String>,

Set allowed commands.

pub fn with_default_timeout(self, timeout: Duration) -> Self

Set default timeout.

pub fn with_max_timeout(self, timeout: Duration) -> Self

Set maximum timeout.

pub fn can_access_env(&self, name: &str) -> bool

Check if an environment variable is accessible.

pub fn check_env(&self, name: &str) -> Result<()>

Check environment variable access, returning error if denied.

pub fn can_execute(&self, command: &str) -> bool

Check if a command is allowed.

pub fn check_execute(&self, command: &str) -> Result<()>

Check command execution, returning error if denied.

pub fn clamp_timeout(&self, timeout: Duration) -> Duration

Clamp a timeout to the maximum allowed.

Trait Implementations

impl Clone for SafetyConfig

fn clone(&self) -> SafetyConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SafetyConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SafetyConfig

fn default() -> Self

Returns the “default value” for a type.