Struct SandboxConfig 

pub struct SandboxConfig {
    pub resource_limits: ResourceLimits,
    pub capabilities: Vec<Capability>,
    pub allow_host_calls: bool,
}

Configuration for a WASM sandbox execution environment.

Use the builder methods to customise limits and capabilities:

use rustant_tools::sandbox::config::{SandboxConfig, Capability};
use std::time::Duration;

let config = SandboxConfig::new()
    .with_memory_limit(32 * 1024 * 1024)
    .with_fuel_limit(2_000_000)
    .with_timeout(Duration::from_secs(60))
    .with_capability(Capability::Stdout)
    .allow_host_calls();

Fields

resource_limits: ResourceLimits

Resource limits governing memory, fuel, and wall-clock time.

capabilities: Vec<Capability>

Capabilities granted to the sandboxed module.

allow_host_calls: bool

Whether the module may invoke host functions.

Implementations

impl SandboxConfig

pub fn new() -> Self

Create a new SandboxConfig with default values.

pub fn with_memory_limit(self, bytes: usize) -> Self

Set the maximum linear memory in bytes.

pub fn with_fuel_limit(self, fuel: u64) -> Self

Set the instruction fuel budget.

pub fn with_timeout(self, duration: Duration) -> Self

Set the wall-clock execution timeout.

pub fn with_capability(self, cap: Capability) -> Self

Add a single capability.

pub fn with_capabilities( self, caps: impl IntoIterator<Item = Capability>, ) -> Self

Add multiple capabilities at once.

pub fn allow_host_calls(self) -> Self

Enable host function calls from within the sandbox.

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> SandboxConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SandboxConfig

fn eq(&self, other: &SandboxConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SandboxConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for SandboxConfig

impl StructuralPartialEq for SandboxConfig