Struct ConfinedCommand 

pub struct ConfinedCommand { /* private fields */ }

Builder for a subprocess confined by a ToolContext.

Like std::process::Command, but: the environment starts empty (only vars added with ConfinedCommand::env reach the child), and ConfinedCommand::spawn admission-checks exec, applies the OS sandbox, and fails closed when a restricted axis cannot meet its required enforcement floor.

Implementations

impl ConfinedCommand

pub fn new(program: impl Into<String>) -> ConfinedCommand

Start building a confined spawn of program (no inherited environment).

pub fn sandbox_policy(self, policy: Arc<SandboxPolicy>) -> ConfinedCommand

Set the sandbox mechanism policy (read/exec allow-lists, ABI floors) the OS backend will enforce. The default is today’s built-in allow-lists.

pub fn arg(self, arg: impl AsRef<OsStr>) -> ConfinedCommand

Append a single argument.

pub fn args<I, S>(self, args: I) -> ConfinedCommand

where I: IntoIterator<Item = S>, S: AsRef<OsStr>,

Append several arguments.

pub fn env( self, key: impl AsRef<OsStr>, val: impl AsRef<OsStr>, ) -> ConfinedCommand

Grant one environment variable to the child. This is the only way an env var reaches the child — there is no ambient inheritance.

pub fn current_dir(self, dir: impl AsRef<Path>) -> ConfinedCommand

Set the child’s working directory.

pub fn stdin(self, cfg: Stdio) -> ConfinedCommand

Configure the child’s stdin (e.g. Stdio::piped for an MCP server).

pub fn stdout(self, cfg: Stdio) -> ConfinedCommand

Configure the child’s stdout.

pub fn stderr(self, cfg: Stdio) -> ConfinedCommand

Configure the child’s stderr.

pub fn new_process_group(self) -> ConfinedCommand

Start the child as leader of a fresh process group.

This is used by trusted worker supervisors that must terminate the worker and every descendant together. It is currently effective on Unix; other platforms retain their native child-process behavior.

pub fn spawn(self, cx: &ToolContext) -> Result<ConfinedChild, ToolError>

Admission-check, confine, and spawn the child.

Order: (1) cx.check_exec(program) — deny before doing anything; (2) derive the backend’s per-axis enforcement and refuse if a restricted axis cannot meet its floor; (3) apply the selected thread- or wrapper-based sandbox, then spawn inside that boundary.

Trait Implementations

impl Debug for ConfinedCommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.