Struct TemplatePolicy 

pub struct TemplatePolicy {
    pub roots: Vec<PathBuf>,
    pub command_bytes: NonZeroU64,
    pub records: NonZeroUsize,
    pub arguments: NonZeroUsize,
    pub environment_names: NonZeroUsize,
    pub text_bytes: NonZeroUsize,
    pub stop_timeout_ms: NonZeroU64,
}

Required roots and positive bounds for live executable records.

Fields

roots: Vec<PathBuf>

Commands run as the exchange’s user; only operator-approved directories may supply them. Canonical paths prevent symlinks escaping these roots.

command_bytes: NonZeroU64

Bounds command bytes read and hashed at proposal, execution and start.

records: NonZeroUsize

Bounds live and retired template records; no historical record is evicted.

arguments: NonZeroUsize

Bounds argument count before constructing a process invocation.

environment_names: NonZeroUsize

Bounds environment-name count; values are never accepted from a request.

text_bytes: NonZeroUsize

Bounds each argument, environment name, path and template name.

stop_timeout_ms: NonZeroU64

Bounds a requested termination deadline so approval cannot stall shutdown.

Implementations

impl TemplatePolicy

pub fn digest( &self, name: &str, command: &Path, ) -> Result<(PathBuf, String), SiteError>

Reads one regular executable under a canonical root with a bounded hash.

Errors

A named path, root, regular-file, execute-bit or byte-bound refusal.

pub fn validate(&self, proposal: &TemplateProposal) -> Result<(), SiteError>

Validates the whole invocation before any draft is held.

Errors

Invalid names, counts, arguments, environment names or stop deadline.

Trait Implementations

impl Clone for TemplatePolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TemplatePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for TemplatePolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for TemplatePolicy

impl PartialEq for TemplatePolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TemplatePolicy