Method reload_from_proto_with_pid

crates/openshell-supervisor-network/src/opa.rs:410–428

Reload policy from a proto with symlink resolution. When `entrypoint_pid` is non-zero, binary paths that are symlinks inside the container filesystem are resolved and added as additional match entries. See [`from_proto_with_pid`] for details.

(
        &self,
        proto: &ProtoSandboxPolicy,
        entrypoint_pid: u32,
    )

    /// inside the container filesystem are resolved and added as additional
    /// match entries. See [`from_proto_with_pid`] for details.
    pub fn reload_from_proto_with_pid(
        &self,
        proto: &ProtoSandboxPolicy,
        entrypoint_pid: u32,
    ) -> Result<()> {
        // Build a complete new engine through the same validated pipeline.
        let new = Self::from_proto_with_pid(proto, entrypoint_pid)?;
        let new_engine = new
            .engine
            .into_inner()
            .map_err(|_| miette::miette!("lock poisoned on new engine"))?;
        let mut engine = self
            .engine
            .lock()
            .map_err(|_| miette::miette!("OPA engine lock poisoned"))?;
        *engine = new_engine;
        self.generation.fetch_add(1, Ordering::AcqRel);
        Ok(())
    }

    /// Current policy generation. Successful reloads increment this value.
    pub fn current_generation(&self) -> u64 {