Struct EnvOnlyEnforcer 

pub struct EnvOnlyEnforcer;

Enforcer that only sets proxy env and runs the child (no runner, no isolation). Used when force_traffic_through_proxy is false, or when we’re already inside the runner (Docker/Firecracker).

Trait Implementations

impl Enforce for EnvOnlyEnforcer

fn maybe_spawn_runner( &self, _cmd: &str, _secret_mappings: &[SecretMapping], _string_mappings: &[StringMapping], _allow_private_connect: bool, _upstream_ca: &Option<PathBuf>, _connection_policies: &[ConnectionPolicy], ) -> Result<Option<ExitStatus>, Box<dyn Error + Send + Sync>>

If this platform enforces by spawning a runner process (e.g. Linux network namespace), spawn it and return Ok(Some(status)). Otherwise return Ok(None) and the caller will run proxy+child in-process.

fn run_child( &self, cmd: &str, proxy_url: &str, env_vars_with_masked: &[(String, String)], ssl_cert_file: &Path, _force: bool, ) -> Result<ExitStatus, Box<dyn Error + Send + Sync>>

Run the child process with proxy env vars. When force is true, wrap with platform sandbox (e.g. sandbox-exec on macOS). Otherwise run normally (e.g. duct).