Struct RuntimeConfig 

pub struct RuntimeConfig { /* private fields */ }

Immutable runtime configuration shared by Rust and PyO3 callers.

Implementations

impl RuntimeConfig

pub fn new(workspace_root: impl Into<PathBuf>) -> Self

Construct a balanced runtime rooted at workspace_root.

Durable internal artifacts default to .vsh-runtime/data below the workspace; that namespace is excluded from snapshots and denied to Monty.

Examples found in repository

examples/native_benchmark.rs (line 356)

fn open_runtime(root: &Path, worker: &Path) -> Result<Runtime, Box<dyn Error>> {
    Ok(Runtime::open(
        RuntimeConfig::new(root).with_worker_path(worker),
    )?)
}

examples/staged_release.rs (line 36)

fn main() -> Result<(), Box<dyn Error>> {
    let workspace = Workspace::new()?;
    fs::create_dir(workspace.0.join("templates"))?;
    fs::write(
        workspace.0.join("templates/service.toml"),
        b"channel = \"dev\"\n",
    )?;
    let runtime = Runtime::open(RuntimeConfig::new(&workspace.0))?;
    let code = include_str!("staged_release.monty");
    let preview = runtime.preview(RunRequest::new(code).with_detail(ReceiptDetail::Full))?;
    assert!(matches!(
        preview.decision,
        RuntimeDecision::PendingApproval(_)
    ));
    assert_eq!(preview.changed_paths, 3);
    assert!(!workspace.0.join("release").exists());
    assert_eq!(
        preview
            .changes
            .iter()
            .map(|entry| entry.path.as_str())
            .collect::<Vec<_>>(),
        ["release", "release/README.txt", "release/app.toml"]
    );
    let now = u64::try_from(SystemTime::now().duration_since(UNIX_EPOCH)?.as_millis())?;
    // A rename is a semantic risk even if it only rearranges generated files.
    // Production code must authenticate a reviewer before this trusted call.
    runtime.approve(
        preview.transaction,
        PrincipalId::digest_label("fixture-reviewer"),
        now,
        now + 30_000,
    )?;
    let committed = runtime.commit(preview.transaction, now)?;
    assert_eq!(committed.transaction, preview.transaction);
    assert!(committed.commit.is_some());
    assert_eq!(
        fs::read_to_string(workspace.0.join("release/app.toml"))?,
        "channel = \"stable\"\n"
    );
    assert_eq!(
        fs::read_to_string(workspace.0.join("release/README.txt"))?,
        "channel=stable\n"
    );
    assert!(!workspace.0.join("release/service.toml").exists());
    println!(
        "Committed {} reviewed paths: {}",
        committed.changed_paths, committed.transaction
    );
    Ok(())
}

pub fn with_data_directory(self, data_directory: impl Into<PathBuf>) -> Self

Place immutable blobs in an explicit trusted data directory.

pub fn with_worker_path(self, worker_path: impl Into<PathBuf>) -> Self

Select the exact supervised Monty worker executable used for hostile code.

Examples found in repository

examples/native_benchmark.rs (line 356)

fn open_runtime(root: &Path, worker: &Path) -> Result<Runtime, Box<dyn Error>> {
    Ok(Runtime::open(
        RuntimeConfig::new(root).with_worker_path(worker),
    )?)
}

pub const fn with_max_idle_workers(self, max_idle_workers: usize) -> Self

Bound clean workers retained for low-latency reuse. Zero disables pooling.

pub const fn with_result_compatibility( self, result_compatibility: ResultCompatibility, ) -> Self

Require every result to be faithfully representable by one host surface.

pub fn with_in_process_execution(self) -> Self

Disable crash isolation for trusted embedding and deterministic test harnesses.

This mode must never execute hostile or unreviewed code. Production Rust and Python callers use the supervised worker by default.

pub fn with_virtual_root(self, virtual_root: VirtualRoot) -> Self

Replace the synthetic absolute namespace exposed to Monty.

pub fn with_policy(self, policy: TransactionPolicy) -> Self

Replace deterministic transaction and pre-call policy.

pub fn with_policy_profile(self, profile: PolicyProfile) -> Self

Select a built-in deterministic policy profile.

pub const fn with_snapshot_limits(self, limits: SnapshotLimits) -> Self

Replace eager snapshot traversal bounds.

pub const fn with_commit_config(self, config: CommitConfig) -> Self

Replace trusted commit and recovery bounds.

pub const fn with_store_config(self, config: FileStoreConfig) -> Self

Replace durable transaction-log bounds.

pub const fn with_artifact_limits(self, limits: ArtifactLimits) -> Self

Replace durable pending-artifact allocation and cardinality bounds.

pub const fn with_commit_hook(self, hook: HookConfig) -> Self

Require the native two-phase hook protocol for matching commit candidates.

pub fn workspace_root(&self) -> &Path

Return the host workspace authority root.

pub fn data_directory(&self) -> &Path

Return the trusted immutable-artifact directory.

pub fn worker_path(&self) -> Option<&Path>

Return the supervised worker path, or None for explicit trusted in-process mode.

pub const fn policy(&self) -> &TransactionPolicy

Return deterministic transaction policy.

pub const fn commit_hook(&self) -> Option<HookConfig>

Return the commit-hook configuration, when direct commits are guarded.

Trait Implementations

impl Clone for RuntimeConfig

fn clone(&self) -> RuntimeConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RuntimeConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.