Struct Command 

pub struct Command {
    pub program: PathBuf,
    pub args: Vec<String>,
    pub env: Vec<(String, SecretValue)>,
    pub inherit_stdio: bool,
}

A fully-resolved command ready to launch: the program, its arguments, and the environment to inject into the child.

Fields

program: PathBuf

The program to execute (the resolved argv[0]).

args: Vec<String>

The arguments after the program.

env: Vec<(String, SecretValue)>

Variables to inject into the child’s environment. Values stay protected until the runner exposes them at spawn time (I7 — never to disk).

inherit_stdio: bool

Inherit the parent’s stdin/stdout/stderr directly instead of capturing the child’s output (KOV-65). Set for long-running interactive processes and stdio servers (e.g. an MCP server over JSON-RPC on stdin/stdout): without inherited stdin the child sees EOF and a stdio server’s handshake closes immediately. The trade-off is that an inherited stream cannot be captured, so output masking (§5.1) does not apply in this mode — the child streams straight through, exec-style. The secret is still injected via the environment only (never argv/disk — I6/I7), and the high/prod gates (I3/I15) still run before the spawn.