Struct RuntimePolicy 

pub struct RuntimePolicy {
    pub allowed_paths: Vec<PathBuf>,
    pub read_only_paths: Vec<PathBuf>,
    pub allowed_hosts: Vec<String>,
    pub memory_limit: Option<usize>,
    pub time_limit: Option<Duration>,
    pub output_limit: Option<usize>,
}

Runtime-scoped policy governing what a Shape program may access.

Threaded through the VM execution context as Option<Arc<RuntimePolicy>>. None means unrestricted (default for trusted programs).

Fields

allowed_paths: Vec<PathBuf>

Filesystem paths the program may access (glob patterns supported). Empty means all paths are allowed unless the program lacks FsRead/FsWrite.

read_only_paths: Vec<PathBuf>

Paths that may only be read, never written.

allowed_hosts: Vec<String>

Network hosts the program may connect to (supports *.example.com). Empty means all hosts are allowed unless the program lacks NetConnect.

memory_limit: Option<usize>

Maximum heap memory in bytes. None = unlimited.

time_limit: Option<Duration>

Maximum wall-clock execution time. None = unlimited.

output_limit: Option<usize>

Maximum output bytes (stdout + sink). None = unlimited.

Implementations

impl RuntimePolicy

pub fn unrestricted() -> Self

Unrestricted policy (equivalent to not having a policy at all).

pub fn is_path_readable(&self, path: &Path) -> bool

Check whether path is allowed for reading.

Returns true when:

• allowed_paths is empty (no path restrictions), or
• path matches at least one entry in allowed_paths or read_only_paths.

pub fn is_path_writable(&self, path: &Path) -> bool

Check whether path is allowed for writing.

Returns true when:

• allowed_paths is empty and read_only_paths is empty, or
• path matches at least one entry in allowed_paths and does NOT match any entry in read_only_paths.

pub fn is_host_allowed(&self, host: &str) -> bool

Check whether a network host is allowed.

Returns true when allowed_hosts is empty or host matches at least one pattern.

Trait Implementations

impl Clone for RuntimePolicy

fn clone(&self) -> RuntimePolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimePolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.