Enum ShellEngine 

pub enum ShellEngine {
    SafeSubset,
    Host,
    Brush,
}

Which shell engine interprets run_command — the ADR 0005 D2 seam. This is the engine axis (what parses/runs the command line); the L3 backend axis (Landlock/Seatbelt/AppContainer, the kernel fence) is auto-selected per-OS and is not chosen here. “Landlock vs brush” is really “the host engine (guarantee rests entirely on the kernel fence) vs the brush engine (L2 interceptor confines in-process, with the fence as an added backstop).”

Variants

SafeSubset

bridle’s argv + safe-subset parser: refuses $(...)/backticks/dynamic constructs by design and spawns argv directly. Portable default.

Host

The sandboxed-host engine (ADR 0019): real /bin/sh -c with the whole process tree in the L3 jail. Full grammar; the guarantee rests entirely on the kernel fence. Refuses a restricted exec/net grant. Needs a host /bin/sh. --full-access auto-selects this.

Brush

The carried brush engine (bash-in-Rust + the L2 CommandInterceptor): full grammar, in-process, cross-platform, and the only engine that also confines a restricted exec/net grant. Requires the brush build (agent-bridle#20 / Track 2); until that ships, selecting brush falls back to host with a warning.

Implementations

impl ShellEngine

pub fn as_str(&self) -> &'static str

The canonical config/flag token (kebab-case).

Trait Implementations

impl Clone for ShellEngine

fn clone(&self) -> ShellEngine

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ShellEngine

impl Debug for ShellEngine

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ShellEngine

fn default() -> ShellEngine

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ShellEngine

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for ShellEngine

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ShellEngine

impl FromStr for ShellEngine

fn from_str(s: &str) -> Result<Self, Self::Err>

Parse a shell-engine token. Accepts the canonical names plus intuitive aliases (subset/safe, sandbox-host/landlock, brush-ocap), so a user thinking in “landlock vs brush-ocap” terms still resolves correctly.

type Err = String

The associated error which can be returned from parsing.

impl PartialEq for ShellEngine

fn eq(&self, other: &ShellEngine) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ShellEngine

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ShellEngine