Enum Runner 

pub enum Runner {
    Sandboxed(Sandboxed),
    Plain,
}

A sandboxed or a plain runner.

Variants

Sandboxed(Sandboxed)

Confined.

Plain

Not confined.

Implementations

impl Runner

pub fn carve( self, read_only: &[PathBuf], hidden: &[PathBuf], ) -> (Self, Option<String>)

In place: read_only and hidden carved out of the profile, and what the person must know when this machine cannot. A plain runner confines nothing, so there is nothing to carve.

impl Runner

pub fn is_sandboxed(&self) -> bool

Whether commands are confined (the network rule then matters).

pub fn confines(&self) -> Option<&'static str>

The mechanism that confines a command to the worktree — writes there, no network beyond loopback, no signal to other processes, .git carved out in place — when this runner does: a call it confines needs nobody’s approval ([approvals] contained).

pub fn with_trust_handoff_writable(self) -> Self

The same runner, with git hooks, git config and agent configuration (the trust-handoff names) writable in its trees: for the tools that create a project (git init, a format’s init), never for the model’s commands.

pub fn with_writable(self, dir: &Path) -> Self

The same runner, dir writable too.

pub fn allows_network(&self, argv: &[String]) -> bool

Whether argv gets the network by [sandbox] network_allow (or a prefix): never for a plain runner, which asks nobody.

pub fn run_with(&self, inv: &Invocation, network: bool) -> Outcome

Runs inv; network (a person’s approval) widens the network.

pub fn scratch(&self) -> Option<PathBuf>

Where commands may write scratch files: the sandbox’s private temporary directory (created), or None unsandboxed.

pub fn wrap(&self, argv: &[String]) -> Result<Wrapped, String>

argv as it will be started (for long-running servers started elsewhere), and the environment to start it with (Profile::private_env); none when nothing confines it.

pub fn fetching(self) -> Self

The same runner for what fills the shared caches (speccoder’s prepare): they are writable to it.

Trait Implementations

impl Clone for Runner

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl CommandRunner for Runner

fn run(&self, inv: &Invocation) -> Outcome

Runs inv to completion or deadline.

impl Debug for Runner

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.