Struct LocalProcess 

pub struct LocalProcess {
    pub program: String,
    pub allow_args: Vec<String>,
    pub env: BTreeMap<String, String>,
    pub max_output: usize,
    pub timeout_ms: u64,
    pub calls: u64,
}

A sandboxed local process tool.

The allowlist is the program plus its permitted argument prefixes. The child gets a scrubbed environment (only what the caller allows), no shell, and a byte-bounded stdout. Anything else is rpc/tool-policy.

Fields

program: String

Absolute program path or allowlisted name.

allow_args: Vec<String>

Arguments the caller may pass (each must be an exact match or a prefix when it ends with *).

env: BTreeMap<String, String>

Environment variables the child inherits.

max_output: usize

Maximum output bytes.

timeout_ms: u64

Maximum wall-clock time one invocation may take before the child is killed. Bounded on purpose: a tool that never returns must not hold the caller forever (H2.44).

calls: u64

Calls served.

Implementations

impl LocalProcess

pub fn new(program: impl Into<String>, allow_args: &[&str]) -> Self

Build a tool for program with an argument allowlist.

pub fn with_timeout(self, timeout_ms: u64) -> Self

Set the per-invocation wall-clock ceiling.

pub fn policy(&self) -> ToolPolicy

Policy for a capability: process execution must be granted explicitly.

Trait Implementations

impl Debug for LocalProcess

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Provider for LocalProcess

fn name(&self) -> &'static str

Stable adapter name.

fn methods(&self) -> Vec<String>

Methods this provider answers (introspection).

fn mutating(&self, _method: &str) -> bool

Whether method mutates provider state (refused on read-only caps).

fn invoke(&mut self, _object: u64, call: &Call) -> Result<Response>

Invoke a method on object.

fn has_method(&self, method: &str) -> bool

Whether this provider answers method.

fn on_drop(&mut self, _object: u64, _cap: CapId)

Called when the last capability referencing object is dropped.

fn take_drop_notifications(&mut self) -> Vec<(u64, CapId)>

Drain provider-side drop notifications recorded by Provider::on_drop.