Struct SessionProfile 

pub struct SessionProfile { /* private fields */ }

A launched session’s resolved credential profile.

Not Serialize (its grants may hold snapshotted values); serialize SessionProfile::receipts instead.

Implementations

impl SessionProfile

pub fn launch( kind: SessionProfileKind, specs: Vec<GrantSpec>, env_lookup: &dyn Fn(&str) -> Option<String>, ) -> Result<Self, GrantError>

Launch a profile from the config’s declared grant specs, resolving each against the launcher environment.

A hermetic profile rejects any grant at launch — hermeticity is an enforced structural property, not an assertion made after the fact. A lane profile resolves and carries the declared grant set.

pub fn hermetic() -> Self

A hermetic profile with no grants — the runtime definition of hermetic.

pub fn kind(&self) -> SessionProfileKind

pub fn is_hermetic(&self) -> bool

pub fn grants(&self) -> &[SessionGrant]

The resolved grants. Empty for a hermetic profile, always.

pub fn receipts(&self) -> Vec<GrantReceipt>

The non-secret receipts recorded on the session run-record. Empty for a hermetic profile, which makes grants: [] a checked property.

pub fn env_exposure( &self, resolve_secret: &dyn Fn(&str, &str) -> Option<String>, ) -> Result<Vec<(String, String)>, GrantError>

Materialize the process environment overlay for process.exec: the (VAR, value) pairs for every grant that opted into expose_as_env. Empty for a hermetic profile.

This is the single place the source kind is branched on — an EnvSnapshot is already a value; a secret_store pointer is resolved now through the embedder’s resolve_secret closure (backed by the secret_store facade). Callers receive uniform pairs and never see the source kind.

Least privilege

v1 exposes to the session’s process.exec env. The intended tightening is a per-tool binding — the granted var visible only inside the exec whose tool declared it, not session-wide ambient. That is a follow-up; the ambient scope here is documented, not locked into the contract.

Trait Implementations

impl Clone for SessionProfile

fn clone(&self) -> SessionProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SessionProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SessionProfile

impl PartialEq for SessionProfile

fn eq(&self, other: &SessionProfile) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SessionProfile