Enum RunAs 

pub enum RunAs {
    System,
    User,
    SystemGui,
}

Token + session combination the agent uses to spawn a job’s child process. Two orthogonal axes — whose privileges and which session — collapse into three meaningful combinations:

variant	session	privileges	GUI
System (default)	Session 0 (services)	LocalSystem	❌
User	active console session	logged-in user (UAC-filtered when admin)	✅
SystemGui	active console session	LocalSystem	✅

SystemGui is the “PsExec -i -s” pattern: the agent duplicates its own SYSTEM token and rewrites TokenSessionId to the user’s console session, then launches with that hybrid token — useful when an installer needs admin power and needs the user to see its UI.

On macOS, LocalSystem is root and the console session is the GUI bootstrap of the user who owns /dev/console, joined via launchctl asuser; User runs as that user with a fresh environment. On both OSes User / SystemGui fail — the script does not run — when nobody is logged in. Linux agents skip User / SystemGui jobs.

Variants

System

LocalSystem privileges in Session 0. No GUI. Historical default — every pre-v0.21 job ran this way.

User

The currently-logged-in console user’s identity, in their session. Can write HKCU / %APPDATA% (macOS: ~/Library, the login Keychain) / show GUI to the user. Privileges are whatever the user has (Windows admin users get the UAC-filtered limited token, not the elevated one).

SystemGui

LocalSystem (macOS: root) privileges in the user’s session — admin power with GUI visibility. Niche but real (force-restart dialogs, admin installers with progress UI).

Trait Implementations

impl Clone for RunAs

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for RunAs

impl Debug for RunAs

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RunAs

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for RunAs

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for RunAs

impl JsonSchema for RunAs

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for RunAs

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for RunAs

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for RunAs