PolicyQuery

import { PolicyQuery } from "destack:runtime";

Runtime policy query.

export struct PolicyQuery {
    subject: SubjectSelector;
    action: "host.accessibility.action" | "host.accessibility.notification" | "host.accessibility.text" | "host.accessibility.tree" | "host.audio.backend" | "host.audio.clock" | "host.audio.device" | "host.audio.device.watch" | "host.audio.event" | "host.audio.read" | "host.audio.stream" | "host.audio.write" | "host.compute.buffer.allocate" | "host.compute.buffer.copy" | "host.compute.buffer.read" | "host.compute.buffer.write" | "host.compute.device.read" | "host.compute.event.read" | "host.compute.event.record" | "host.compute.event.synchronize" | "host.compute.kernel.argument" | "host.compute.kernel.dispatch" | "host.compute.kernel.read" | "host.compute.mesh.create" | "host.compute.mesh.read" | "host.compute.program.compile" | "host.compute.program.read" | "host.compute.stream.create" | "host.compute.stream.read" | "host.compute.stream.synchronize" | "host.console.write" | "host.crypto.capability.read" | "host.crypto.certificate.read" | "host.crypto.certificate.write" | "host.crypto.cipher" | "host.crypto.digest" | "host.crypto.kdf" | "host.crypto.key.agree" | "host.crypto.key.decrypt" | "host.crypto.key.delete" | "host.crypto.key.encrypt" | "host.crypto.key.export" | "host.crypto.key.generate" | "host.crypto.key.import" | "host.crypto.key.sign" | "host.crypto.key.unwrap" | "host.crypto.key.verify" | "host.crypto.key.wrap" | "host.crypto.mac" | "host.crypto.store.read" | "host.crypto.store.write" | "host.device.bluetooth.connect" | "host.device.bluetooth.gatt" | "host.device.bluetooth.list" | "host.device.bluetooth.scan" | "host.device.camera.capture" | "host.device.camera.configure" | "host.device.camera.list" | "host.device.camera.open" | "host.device.hid.feature" | "host.device.hid.list" | "host.device.hid.open" | "host.device.hid.read" | "host.device.hid.write" | "host.device.midi.list" | "host.device.midi.observe" | "host.device.midi.open" | "host.device.midi.read" | "host.device.midi.virtual" | "host.device.midi.write" | "host.device.serial.configure" | "host.device.serial.list" | "host.device.serial.observe" | "host.device.serial.open" | "host.device.serial.read" | "host.device.serial.write" | "host.device.usb.configure" | "host.device.usb.list" | "host.device.usb.open" | "host.device.usb.transfer" | "host.display.backend" | "host.display.drag" | "host.display.event" | "host.display.frame" | "host.display.monitor" | "host.display.monitor.mode" | "host.display.window" | "host.fs.link" | "host.fs.lock" | "host.fs.metadata" | "host.fs.mode" | "host.fs.mount.list" | "host.fs.node" | "host.fs.open" | "host.fs.owner" | "host.fs.read" | "host.fs.sync" | "host.fs.temp" | "host.fs.watch" | "host.fs.write" | "host.fs.xattr" | "host.gpu.adapter" | "host.gpu.bind" | "host.gpu.command" | "host.gpu.debug" | "host.gpu.device" | "host.gpu.pipeline" | "host.gpu.present" | "host.gpu.queue" | "host.gpu.resource" | "host.gpu.sync" | "host.input.clipboard.read" | "host.input.clipboard.write" | "host.input.device" | "host.input.event" | "host.input.gamepad" | "host.input.grab" | "host.input.haptics" | "host.input.keyboard" | "host.input.pointer" | "host.input.sensor" | "host.input.text" | "host.input.touch" | "host.io.completion" | "host.io.control" | "host.io.poll" | "host.io.uring" | "host.ipc.eventCounter" | "host.ipc.futex" | "host.ipc.handle.pass" | "host.ipc.memory" | "host.ipc.message" | "host.ipc.pipe" | "host.ipc.semaphore" | "host.ipc.unix" | "host.memory.advise" | "host.memory.discard" | "host.memory.execute" | "host.memory.layout.read" | "host.memory.lock" | "host.memory.map" | "host.memory.virtual" | "host.net.accept" | "host.net.close" | "host.net.connect" | "host.net.connectivity.read" | "host.net.connectivity.watch" | "host.net.dns" | "host.net.interface" | "host.net.listen" | "host.net.multicast" | "host.net.open" | "host.net.option" | "host.net.raw" | "host.net.read" | "host.net.route.read" | "host.net.route.write" | "host.net.status" | "host.net.write" | "host.os.capacity.read" | "host.os.identity.read" | "host.os.power.read" | "host.os.pressure.read" | "host.process.affinity" | "host.process.arguments" | "host.process.cgroup.read" | "host.process.cgroup.write" | "host.process.environment.read" | "host.process.environment.write" | "host.process.exec" | "host.process.exit" | "host.process.handle" | "host.process.identity.read" | "host.process.identity.write" | "host.process.job" | "host.process.limit.read" | "host.process.limit.write" | "host.process.namespace" | "host.process.priority" | "host.process.session" | "host.process.signal.receive" | "host.process.signal.send" | "host.process.spawn" | "host.process.stdio" | "host.process.umask" | "host.process.wait" | "host.process.workdir.read" | "host.process.workdir.write" | "host.random.bytes" | "host.time.clock.read" | "host.time.timer" | "host.tls.certificate.read" | "host.tls.connection" | "host.tls.context" | "host.tls.exporter" | "host.tls.handshake" | "host.tls.hostname.verify" | "host.tls.identity.use" | "host.tls.identity.write" | "host.tls.policy" | "host.tls.resumption" | "host.tls.trust.write" | "host.tty.close" | "host.tty.mode" | "host.tty.open" | "host.tty.pty" | "host.tty.pty.read" | "host.tty.pty.write" | "host.tty.read" | "host.tty.size" | "host.tty.status" | "host.tty.termios" | "host.tty.write" | "runtime.branch.control" | "runtime.branch.read" | "runtime.checkpoint.create" | "runtime.checkpoint.read" | "runtime.control" | "runtime.debug.control" | "runtime.debug.read" | "runtime.entity.read" | "runtime.entity.write" | "runtime.executor.control" | "runtime.executor.read" | "runtime.policy.read" | "runtime.policy.test" | "runtime.policy.write" | "runtime.random.control" | "runtime.random.read" | "runtime.resource.close" | "runtime.resource.read" | "runtime.resource.transfer" | "runtime.resource.write" | "runtime.revision.control" | "runtime.revision.read" | "runtime.runtime.control" | "runtime.runtime.create" | "runtime.runtime.read" | "runtime.snapshot.create" | "runtime.snapshot.read" | "runtime.snapshot.restore" | "runtime.telemetry.control" | "runtime.telemetry.export" | "runtime.telemetry.read" | "runtime.telemetry.write" | "runtime.topology.edge.kind.define" | "runtime.topology.edge.kind.undefine" | "runtime.topology.edge.read" | "runtime.topology.edge.remove" | "runtime.topology.edge.upsert" | "runtime.topology.entity.kind.define" | "runtime.topology.entity.kind.undefine" | "runtime.topology.entity.read" | "runtime.topology.entity.remove" | "runtime.topology.entity.upsert" | "runtime.trace.control" | "runtime.trace.read" | "runtime.worker.control" | "runtime.worker.create" | "runtime.worker.read" | "runtime.world.control" | "runtime.world.create" | "runtime.world.read" | ActionSelector;
    target: TargetSelector;
}
language/library/src/runtime/policy.ds:126:133

Members

subject: SubjectSelector

Subject selector.

action: "host.accessibility.action" | "host.accessibility.notification" | "host.accessibility.text" | "host.accessibility.tree" | "host.audio.backend" | "host.audio.clock" | "host.audio.device" | "host.audio.device.watch" | "host.audio.event" | "host.audio.read" | "host.audio.stream" | "host.audio.write" | "host.compute.buffer.allocate" | "host.compute.buffer.copy" | "host.compute.buffer.read" | "host.compute.buffer.write" | "host.compute.device.read" | "host.compute.event.read" | "host.compute.event.record" | "host.compute.event.synchronize" | "host.compute.kernel.argument" | "host.compute.kernel.dispatch" | "host.compute.kernel.read" | "host.compute.mesh.create" | "host.compute.mesh.read" | "host.compute.program.compile" | "host.compute.program.read" | "host.compute.stream.create" | "host.compute.stream.read" | "host.compute.stream.synchronize" | "host.console.write" | "host.crypto.capability.read" | "host.crypto.certificate.read" | "host.crypto.certificate.write" | "host.crypto.cipher" | "host.crypto.digest" | "host.crypto.kdf" | "host.crypto.key.agree" | "host.crypto.key.decrypt" | "host.crypto.key.delete" | "host.crypto.key.encrypt" | "host.crypto.key.export" | "host.crypto.key.generate" | "host.crypto.key.import" | "host.crypto.key.sign" | "host.crypto.key.unwrap" | "host.crypto.key.verify" | "host.crypto.key.wrap" | "host.crypto.mac" | "host.crypto.store.read" | "host.crypto.store.write" | "host.device.bluetooth.connect" | "host.device.bluetooth.gatt" | "host.device.bluetooth.list" | "host.device.bluetooth.scan" | "host.device.camera.capture" | "host.device.camera.configure" | "host.device.camera.list" | "host.device.camera.open" | "host.device.hid.feature" | "host.device.hid.list" | "host.device.hid.open" | "host.device.hid.read" | "host.device.hid.write" | "host.device.midi.list" | "host.device.midi.observe" | "host.device.midi.open" | "host.device.midi.read" | "host.device.midi.virtual" | "host.device.midi.write" | "host.device.serial.configure" | "host.device.serial.list" | "host.device.serial.observe" | "host.device.serial.open" | "host.device.serial.read" | "host.device.serial.write" | "host.device.usb.configure" | "host.device.usb.list" | "host.device.usb.open" | "host.device.usb.transfer" | "host.display.backend" | "host.display.drag" | "host.display.event" | "host.display.frame" | "host.display.monitor" | "host.display.monitor.mode" | "host.display.window" | "host.fs.link" | "host.fs.lock" | "host.fs.metadata" | "host.fs.mode" | "host.fs.mount.list" | "host.fs.node" | "host.fs.open" | "host.fs.owner" | "host.fs.read" | "host.fs.sync" | "host.fs.temp" | "host.fs.watch" | "host.fs.write" | "host.fs.xattr" | "host.gpu.adapter" | "host.gpu.bind" | "host.gpu.command" | "host.gpu.debug" | "host.gpu.device" | "host.gpu.pipeline" | "host.gpu.present" | "host.gpu.queue" | "host.gpu.resource" | "host.gpu.sync" | "host.input.clipboard.read" | "host.input.clipboard.write" | "host.input.device" | "host.input.event" | "host.input.gamepad" | "host.input.grab" | "host.input.haptics" | "host.input.keyboard" | "host.input.pointer" | "host.input.sensor" | "host.input.text" | "host.input.touch" | "host.io.completion" | "host.io.control" | "host.io.poll" | "host.io.uring" | "host.ipc.eventCounter" | "host.ipc.futex" | "host.ipc.handle.pass" | "host.ipc.memory" | "host.ipc.message" | "host.ipc.pipe" | "host.ipc.semaphore" | "host.ipc.unix" | "host.memory.advise" | "host.memory.discard" | "host.memory.execute" | "host.memory.layout.read" | "host.memory.lock" | "host.memory.map" | "host.memory.virtual" | "host.net.accept" | "host.net.close" | "host.net.connect" | "host.net.connectivity.read" | "host.net.connectivity.watch" | "host.net.dns" | "host.net.interface" | "host.net.listen" | "host.net.multicast" | "host.net.open" | "host.net.option" | "host.net.raw" | "host.net.read" | "host.net.route.read" | "host.net.route.write" | "host.net.status" | "host.net.write" | "host.os.capacity.read" | "host.os.identity.read" | "host.os.power.read" | "host.os.pressure.read" | "host.process.affinity" | "host.process.arguments" | "host.process.cgroup.read" | "host.process.cgroup.write" | "host.process.environment.read" | "host.process.environment.write" | "host.process.exec" | "host.process.exit" | "host.process.handle" | "host.process.identity.read" | "host.process.identity.write" | "host.process.job" | "host.process.limit.read" | "host.process.limit.write" | "host.process.namespace" | "host.process.priority" | "host.process.session" | "host.process.signal.receive" | "host.process.signal.send" | "host.process.spawn" | "host.process.stdio" | "host.process.umask" | "host.process.wait" | "host.process.workdir.read" | "host.process.workdir.write" | "host.random.bytes" | "host.time.clock.read" | "host.time.timer" | "host.tls.certificate.read" | "host.tls.connection" | "host.tls.context" | "host.tls.exporter" | "host.tls.handshake" | "host.tls.hostname.verify" | "host.tls.identity.use" | "host.tls.identity.write" | "host.tls.policy" | "host.tls.resumption" | "host.tls.trust.write" | "host.tty.close" | "host.tty.mode" | "host.tty.open" | "host.tty.pty" | "host.tty.pty.read" | "host.tty.pty.write" | "host.tty.read" | "host.tty.size" | "host.tty.status" | "host.tty.termios" | "host.tty.write" | "runtime.branch.control" | "runtime.branch.read" | "runtime.checkpoint.create" | "runtime.checkpoint.read" | "runtime.control" | "runtime.debug.control" | "runtime.debug.read" | "runtime.entity.read" | "runtime.entity.write" | "runtime.executor.control" | "runtime.executor.read" | "runtime.policy.read" | "runtime.policy.test" | "runtime.policy.write" | "runtime.random.control" | "runtime.random.read" | "runtime.resource.close" | "runtime.resource.read" | "runtime.resource.transfer" | "runtime.resource.write" | "runtime.revision.control" | "runtime.revision.read" | "runtime.runtime.control" | "runtime.runtime.create" | "runtime.runtime.read" | "runtime.snapshot.create" | "runtime.snapshot.read" | "runtime.snapshot.restore" | "runtime.telemetry.control" | "runtime.telemetry.export" | "runtime.telemetry.read" | "runtime.telemetry.write" | "runtime.topology.edge.kind.define" | "runtime.topology.edge.kind.undefine" | "runtime.topology.edge.read" | "runtime.topology.edge.remove" | "runtime.topology.edge.upsert" | "runtime.topology.entity.kind.define" | "runtime.topology.entity.kind.undefine" | "runtime.topology.entity.read" | "runtime.topology.entity.remove" | "runtime.topology.entity.upsert" | "runtime.trace.control" | "runtime.trace.read" | "runtime.worker.control" | "runtime.worker.create" | "runtime.worker.read" | "runtime.world.control" | "runtime.world.create" | "runtime.world.read" | ActionSelector

Runtime or host action selector.

target: TargetSelector

Target selector.