Struct FarmOutConfig 

pub struct FarmOutConfig {
    pub verify_command: Option<Vec<String>>,
    pub union_verify_command: Option<Vec<String>>,
    pub allowed_tools: Option<Vec<String>>,
    pub mcp_endpoint: Option<String>,
    pub mcp_config_dir: Option<PathBuf>,
    pub recover_via_single_session: bool,
    pub worktree_base: Option<PathBuf>,
    pub no_verify_waiver: Option<NoVerifyWaiver>,
}

Tuning for a farm-out run.

Fields

verify_command: Option<Vec<String>>

Per-worktree gate command — a regression check (“does this one subtask’s change compile / not break existing tests?”). A subtask legitimately implements only PART of the goal, so a goal-level test that needs every subtask must NOT run here (it would reject each subtask).

union_verify_command: Option<Vec<String>>

Integrated-union gate command — the goal check (“does the merged result actually achieve the goal?”). Falls back to verify_command when None, so callers that want one command for both can leave it unset.

allowed_tools: Option<Vec<String>>

Tool allowlist passed to each agent invocation.

mcp_endpoint: Option<String>

MCP governance endpoint passed to each agent invocation.

mcp_config_dir: Option<PathBuf>

Directory each agent invocation writes its MCP config file into, copied onto every WorktreeAgentRequest this run builds. None — the default — leaves the agent on $TMPDIR, which is what every caller that owns no checked directory keeps doing. A caller that has one (the coder session’s state directory) passes it and takes the adapter off an environment variable nobody validated (car#1494 / car#1534).

recover_via_single_session: bool

When the decomposed parallel path fails to integrate, recover by re-running the whole goal as one session (see run_foreman). Off by default because it spends a full extra (serial) session on top of the failed parallel spend — delivery-first callers (e.g. the daemon’s foreman.run) opt in; cost-sensitive callers leave it off and inspect the delivered() flag / retained integration evidence instead.

worktree_base: Option<PathBuf>

Base directory under which per-subtask git worktrees are created. When None, defaults to an out-of-repo location derived from repo_root (see [default_worktree_base]) so a worktree — and especially one leaked by a crash mid-run — never appears as an untracked entry inside the caller’s checkout (which would make every later git status read dirty). Set this to pin worktrees to a specific scratch area, e.g. a daemon state dir.

no_verify_waiver: Option<NoVerifyWaiver>

Explicit waiver letting the gate accept a change with no configured build/test command. Without it, a missing verify command yields MergeVerdict::Inconclusive (fail-closed), never Accepted — so a decomposed run over a project with no reliably-detectable build command can never deliver. Supply this when containment + apply-conflict + duplicate-declaration checks are the intended soundness boundary and a build leg genuinely can’t be determined. Threaded into every gate (per-subtask, union, regional).

Trait Implementations

impl Clone for FarmOutConfig

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FarmOutConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for FarmOutConfig

fn default() -> Self

Returns the “default value” for a type.