Struct SessionEnvironment 

pub struct SessionEnvironment { /* private fields */ }

A launched session’s resolved environment.

Not Serialize (its grants may hold snapshotted values); serialize SessionEnvironment::receipts instead.

Implementations

impl SessionEnvironment

pub fn inherited() -> Self

Capture the default policy at a session launch boundary.

pub fn launch( kind: EnvironmentPolicyKind, specs: Vec<GrantSpec>, env_lookup: &dyn Fn(&str) -> Option<String>, ) -> Result<Self, EnvironmentPolicyError>

Launch an environment from the config’s declared grant specs, resolving each against the launcher environment.

An isolated policy rejects any grant at launch — isolation is an enforced structural property, not an assertion made after the fact. A granted policy resolves and carries the declared grant set.

pub fn launch_from_snapshot( kind: EnvironmentPolicyKind, specs: Vec<GrantSpec>, launcher_snapshot: BTreeMap<String, String>, env_lookup: &dyn Fn(&str) -> Option<String>, ) -> Result<Self, EnvironmentPolicyError>

Resolve a session from one authoritative launcher snapshot.

env_lookup exists for embedders that supply a typed environment source. Production callers normally pass a lookup over the same snapshot, while tests can provide a small deterministic map.

pub fn isolated() -> Self

An isolated environment with no grants.

pub fn kind(&self) -> EnvironmentPolicyKind

pub fn is_isolated(&self) -> bool

pub fn allows_implicit_discovery(&self) -> bool

Whether provider SDKs may use platform-managed ambient discovery such as AWS shared config, metadata services, or application-default credentials.

pub fn narrow( &self, requested: EnvironmentPolicyKind, specs: Vec<GrantSpec>, ) -> Result<Self, EnvironmentPolicyError>

Derive a child session without allowing it to gain environment authority that its parent did not have.

pub fn grants(&self) -> &[SessionGrant]

The resolved grants. Empty for an isolated policy, always.

pub fn receipts(&self) -> Vec<GrantReceipt>

The non-secret receipts recorded on the session run-record. Empty for an isolated policy, which makes grants: [] a checked property.

pub fn env_exposure( &self, resolve_secret: &dyn Fn(&str, &str) -> Option<String>, ) -> Result<Vec<(String, String)>, EnvironmentPolicyError>

Materialize the process environment overlay for process.exec: the (VAR, value) pairs for every grant that opted into expose_as_env. Empty for an isolated policy.

Callers receive uniform pairs and never see the source kind; SessionGrant::exposure owns that branch.

Exposure is session-wide: harness.env, providers, and every spawned command consult the same target mapping.

pub fn env_exposure_for( &self, var: &str, resolve_secret: &dyn Fn(&str, &str) -> Option<String>, ) -> Result<Option<String>, EnvironmentPolicyError>

The value this environment exposes under a single environment variable, or None if no grant targets it.

The narrow counterpart of env_exposure, for a consumer resolving one variable — harn’s own provider-credential lookup. It resolves only the grant that targets var, which matters for a secret_store grant: probing an unrelated variable must not reach the secret store, and one unresolvable grant must not mask an unrelated credential. Launch validation guarantees at most one matching grant.

Trait Implementations

impl Clone for SessionEnvironment

fn clone(&self) -> SessionEnvironment

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionEnvironment

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SessionEnvironment

impl PartialEq for SessionEnvironment

fn eq(&self, other: &SessionEnvironment) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SessionEnvironment