Struct DisclaimedCommand 

pub struct DisclaimedCommand { /* private fields */ }

Build a child command with its own macOS responsible-process identity.

trampoline is the caller’s binary, whose main must call super::trampoline_main first. Validate it once with probe at startup. No plain-exec fallback is ever used on macOS. Elsewhere this is a plain program command and trampoline is ignored.

Implementations

impl DisclaimedCommand

pub fn new(trampoline: impl Into<PathBuf>, program: impl Into<OsString>) -> Self

pub fn arg(&mut self, arg: impl AsRef<OsStr>) -> &mut Self

pub fn args<I, S>(&mut self, args: I) -> &mut Self

where I: IntoIterator<Item = S>, S: AsRef<OsStr>,

pub fn env( &mut self, key: impl AsRef<OsStr>, value: impl AsRef<OsStr>, ) -> &mut Self

pub fn env_clear(&mut self) -> &mut Self

pub fn env_remove(&mut self, key: impl AsRef<OsStr>) -> &mut Self

pub fn current_dir(&mut self, dir: impl AsRef<Path>) -> &mut Self

pub fn stdin(&mut self, stdio: impl Into<Stdio>) -> &mut Self

pub fn stdout(&mut self, stdio: impl Into<Stdio>) -> &mut Self

pub fn stderr(&mut self, stdio: impl Into<Stdio>) -> &mut Self

pub fn into_command(self) -> Result<(Command, ExecConfirmation)>

Produce a command and its single-use exec confirmation.

After spawning, drop the command before confirming: it owns the parent’s acknowledgement writer. Dropping confirmation before spawn is safe, but loses the ability to detect a refusal. Do not alter the command’s trampoline arguments. A spawn error is an ordinary IO error; a later confirmation error requires the caller to kill and reap the child.