Enum ExecAccess 

pub enum ExecAccess {
    Mode(ExecMode),
    Allowlist(Vec<String>),
}

Subprocess-execution capability a stdio addon declares.

Modeled as an untagged enum so the manifest can write either a mode string or a binary allowlist:

exec = "none"              # block all child process execution (default)
exec = "full"             # may execute any binary
exec = ["lean-ctx", "git"] # may execute exactly these binaries (by name/path)

exec is a declared, audited and consented capability — it is not OS-enforced (see super::sandbox): path-allowlisting execve is not portable (bwrap/seccomp cannot do it) and breaks interpreted servers, whose own interpreter chain is itself a process-exec. The real data-safety guarantees come from the network/filesystem sandbox, which child processes inherit — so a subprocess an addon spawns still cannot exfiltrate or tamper. Declaring exec keeps the audit honest (an addon that shells out must say so) and is surfaced for consent at install on every platform.

Variants

Mode(ExecMode)

A bare mode: "none" (block all child exec) or "full" (unrestricted).

Allowlist(Vec<String>)

An explicit allowlist of binary names / absolute paths the addon may execve. An empty list is equivalent to ExecMode::None.

Implementations

impl ExecAccess

pub fn allowed(&self) -> bool

Whether the addon is permitted to execute any child process at all. full and a non-empty allowlist are permissive; none / empty list are not.

pub fn is_restricted(&self) -> bool

Whether this is a restricted declaration (none or an allowlist) vs. blanket full. Drives the audit/consent disclosure, not OS enforcement.

pub fn allowlist(&self) -> &[String]

The declared allowlist of binaries, if any (full/none have none).

Trait Implementations

impl Clone for ExecAccess

fn clone(&self) -> ExecAccess

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ExecAccess

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ExecAccess

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ExecAccess

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ExecAccess

impl PartialEq for ExecAccess

fn eq(&self, other: &ExecAccess) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ExecAccess

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ExecAccess