Enum BackendCapability 

pub enum BackendCapability {
    CommandExecution,
    WorkingDirectory,
    StdioInherit,
    StdioNull,
    StdioPipe,
    TimeoutBackendDefault,
    TimeoutLimit,
    TimeoutDisabled,
    FilesystemRestricted,
    FilesystemUnrestricted,
    FilesystemExternal,
    FilesystemScopes,
    FilesystemExecutableMapping,
    FilesystemAbsoluteScopes,
    FilesystemWorkspaceScopes,
    FilesystemRootScopes,
    FilesystemMinimalScopes,
    FilesystemTmpdirScopes,
    FilesystemConventionalTemporaryScopes,
    FilesystemGlobs,
    FilesystemGlobScanDepth,
    FilesystemReadOnlySubpaths,
    FilesystemMissingPathBehavior,
    FilesystemProtectedPaths,
    NetworkDisabled,
    NetworkEnabled,
    NetworkExternal,
    NetworkDomainRules,
    NetworkLocalAddressRestrictions,
    NetworkResolvedTargets,
    NetworkLocalIpcIsolation,
    NetworkLocalIpcRules,
    NetworkLocalIpcDenyRules,
    NetworkWindowsNamedPipeRules,
    EnvironmentAll,
    EnvironmentCore,
    EnvironmentNone,
    EnvironmentFilters,
    EnvironmentOverrides,
}

One capability that a native backend may advertise.

A capability means that the backend can enforce the corresponding effective request safely. It is not a hint that the backend can parse the value. Backends must not advertise a capability whose enforcement would be best-effort or silently incomplete. Ord is used only for deterministic capability-set iteration and diagnostics; it is not an enforcement precedence.

Variants

CommandExecution

Execute a validated command request.

WorkingDirectory

Resolve and enforce the effective working directory, including the runtime directory inherited when the command has no explicit cwd.

StdioInherit

Inherit a standard stream from the launcher.

StdioNull

Connect a standard stream to the platform null device.

StdioPipe

Create a pipe for a standard stream.

TimeoutBackendDefault

Apply the backend’s default timeout policy.

TimeoutLimit

Apply an explicit timeout duration.

TimeoutDisabled

Run without an automatic timeout.

FilesystemRestricted

Enforce a restricted filesystem policy.

FilesystemUnrestricted

Run without a local filesystem boundary.

FilesystemExternal

Delegate filesystem enforcement to an external owner.

FilesystemScopes

Enforce concrete and symbolic filesystem scopes, including workspace roots required by workspace-relative selectors and globs.

FilesystemExecutableMapping

Map executable files from explicitly validated runtime roots.

FilesystemAbsoluteScopes

Enforce native absolute filesystem scopes and absolute globs.

FilesystemWorkspaceScopes

Resolve filesystem scopes and globs against runtime workspace roots.

FilesystemRootScopes

Resolve filesystem scopes against caller-supplied system roots.

FilesystemMinimalScopes

Resolve filesystem scopes against the platform-minimal paths.

FilesystemTmpdirScopes

Resolve filesystem scopes against the platform temporary directory.

FilesystemConventionalTemporaryScopes

Resolve filesystem scopes against the platform’s conventional temporary path supplied by the runtime context.

FilesystemGlobs

Enforce filesystem deny globs.

FilesystemGlobScanDepth

Expand filesystem globs with the requested scan-depth semantics.

FilesystemReadOnlySubpaths

Enforce read-only subpaths below writable scopes.

FilesystemMissingPathBehavior

Enforce the error-or-skip behavior for missing concrete filesystem scopes.

FilesystemProtectedPaths

Enforce protected relative paths such as the default .git path.

NetworkDisabled

Disable outbound networking.

NetworkEnabled

Enforce local outbound networking.

NetworkExternal

Delegate network enforcement to an external owner.

NetworkDomainRules

Enforce domain rules and domain defaults.

NetworkLocalAddressRestrictions

Enforce the policy for non-public and special-purpose addresses.

NetworkResolvedTargets

Resolve once and authorize the exact address used for a connection.

NetworkLocalIpcIsolation

Prevent pathname local-IPC endpoint access while retaining process-local IPC.

NetworkLocalIpcRules

Enforce per-path local-IPC endpoint allow rules.

NetworkLocalIpcDenyRules

Enforce explicit pathname local-IPC deny rules when the default is otherwise allow-all.

NetworkWindowsNamedPipeRules

Enforce typed Windows named-pipe local-IPC endpoints.

EnvironmentAll

Start from all inherited environment variables.

EnvironmentCore

Start from a backend-selected core environment.

EnvironmentNone

Start from an empty environment.

EnvironmentFilters

Apply environment include and exclude filters.

EnvironmentOverrides

Apply environment set and remove overrides.

Trait Implementations

impl Clone for BackendCapability

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for BackendCapability

impl Debug for BackendCapability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for BackendCapability

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for BackendCapability

impl FromIterator<BackendCapability> for BackendCapabilities

fn from_iter<T: IntoIterator<Item = BackendCapability>>(iter: T) -> Self

Creates a value from an iterator.

impl Hash for BackendCapability

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for BackendCapability

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for BackendCapability

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for BackendCapability

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for BackendCapability