Struct LaunchSpec 

pub struct LaunchSpec { /* private fields */ }

Everything needed to start a child process.

Secret values are held as SecretString right up to the moment they are handed to the process API, so no intermediate copy is formattable and the derived Debug prints the redaction rather than the value.

Implementations

impl LaunchSpec

pub fn new(argv: Vec<OsString>) -> Result<Self, LaunchError>

Builds a spec from a captured argv.

Errors

Returns LaunchError::NoProgram if argv is empty.

pub fn with_secrets( self, guard: EnvGuard, secrets: impl IntoIterator<Item = (String, SecretString)>, ) -> Result<Self, LaunchError>

Adds secrets to the child’s environment, applying the guard first.

Every name is validated with prick_core::keyname::validate and then checked against guard. The whole launch fails on the first refusal rather than dropping the offending variable: a child started with a silently missing variable is a debugging problem, and a child started with a silently present one is a breach.

Errors

Returns LaunchError::InvalidKey for a name that is not usable as an environment variable, and LaunchError::Guard for one the dynamic loader or a language runtime interprets.

pub fn program(&self) -> &OsStr

The program to run, as the user wrote it.

pub fn args(&self) -> &[OsString]

The program’s arguments, excluding the program itself.

pub fn env_names(&self) -> impl Iterator<Item = &str>

The names of the variables that will be added to the environment.

Names are plaintext by design and safe to show; values are not exposed.

Trait Implementations

impl Debug for LaunchSpec

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.