Struct SpawnEntitlement 

pub struct SpawnEntitlement {
    pub mode: SpawnMode,
    pub allowed: Vec<String>,
    pub allowed_dirs: Vec<String>,
}

Fields

mode: SpawnMode

allowed: Vec<String>

allowed_dirs: Vec<String>

Directories whose entire subtree may be exec’d — the “build lane”.

allowed cannot express a toolchain that compiles its own executables: a Rust build execs target/debug/build/<crate>-<hash>/ build-script-build, proc-macro shims, and freshly linked test binaries, all at paths that do not exist until the build creates them and change on every dependency bump. Without this an agent granted cargo could compile nothing and could never verify its own work.

Grant narrowly — a build-output directory, not a source tree or a home directory. Everything under it becomes exec’able, so the tree should be one the agent already has write access to and nothing else depends on. Filesystem and network entitlements still bound what the executed code can reach.

Trait Implementations

impl Clone for SpawnEntitlement

fn clone(&self) -> SpawnEntitlement

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SpawnEntitlement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SpawnEntitlement

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SpawnEntitlement

fn eq(&self, other: &SpawnEntitlement) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SpawnEntitlement

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SpawnEntitlement