Enum EnvPolicy 

pub enum EnvPolicy {
    InheritExcept {
        deny: Vec<String>,
    },
    ClearExcept {
        allow: Vec<String>,
    },
}

How the child’s environment is derived from ours.

Variants

InheritExcept

Inherit the parent environment, minus deny.

The default for the pre-existing seams. A blanket env_clear would be stricter but would break every deployed --llm-cmd or --embed-cmd that legitimately reads an API key out of the environment — so the non-breaking fix is to remove the variables Areev knows hold secrets. It knows them by name because the operator names them: --passphrase-env VAR and --token-env VAR pass the variable name, not the value.

Fields

deny: Vec<String>

ClearExcept

Clear the environment, passing through only allow (plus the per-call extras, which are always set).

Strictly better, and the default for surfaces introduced in 1.3, which carry no backward-compatibility burden.

Fields

allow: Vec<String>

Implementations

impl EnvPolicy

pub fn minimal_allow() -> Vec<String>

Variables worth keeping under EnvPolicy::ClearExcept for a command to be able to run at all. PATH is load-bearing — without it a bare command name resolves to nothing.

Trait Implementations

impl Clone for EnvPolicy

fn clone(&self) -> EnvPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnvPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EnvPolicy

fn default() -> Self

Returns the “default value” for a type.

impl Eq for EnvPolicy

impl PartialEq for EnvPolicy

fn eq(&self, other: &EnvPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for EnvPolicy