Module shell_session 

Session-scoped shell identity. Cwd and env do not cross sessions.

Detach, poll, and kill stay permission-checked by the caller. Persisted transcripts never copy secret-shaped env values. A timeout or cancel kills the process group.

Structs

AdmittedCommand

Enums

CommandAdmission

Functions

admit

Apply a command to the session. A denial does not change cwd or start a job.

bind_session

bind_session_rooted

Bind a session whose cd cannot leave root. Isolation uses this so a conversation shell cannot walk back onto the source tree.

cwd

detach

drop_session

kill

kill_session

Kill every detached job in the session. Used when the run is cancelled so a timeout-independent cancel still reaps the process group.

poll

run_bounded

Run a command with a timeout and kill the process group if it expires.

set_env

transcript_env

Model-visible env overlay. Secret-shaped keys are omitted, not redacted in place.