Enum SandboxEnvPolicy 

pub enum SandboxEnvPolicy {
    Inherit,
    Filtered,
    None,
}

capabilities.permissions.sandbox.env_policy (§3.1): child-process environment sanitization for the spawned bash/shell subprocess. Inherit (the default) is today’s behavior — the parent’s environment (plus core.shell_env_snapshot, if configured) passes through unchanged. Filtered strips a sensitive-variable denylist (tokens, keys, cloud credentials). None keeps only PATH and a couple of universally-needed variables (HOME, TERM, LANG) — nearest to a bare-metal shell with nothing extra.

Variants

Inherit

Full environment passthrough — today’s behavior (byte-identical).

Filtered

Strip a sensitive-variable denylist; everything else passes through.

None

Bare minimum: PATH/HOME/TERM/LANG only.

Implementations

impl SandboxEnvPolicy

pub fn rank(self) -> u8

Strictness rank — LOWER is stricter (None exposes the least, Inherit the most), same convention as SandboxEscalation::rank.

pub fn parse(s: &str) -> Option<SandboxEnvPolicy>

Parse the config string ("inherit" | "filtered" | "none").

Trait Implementations

impl Clone for SandboxEnvPolicy

fn clone(&self) -> SandboxEnvPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxEnvPolicy

impl Debug for SandboxEnvPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SandboxEnvPolicy

fn default() -> SandboxEnvPolicy

Returns the “default value” for a type.

impl Eq for SandboxEnvPolicy

impl PartialEq for SandboxEnvPolicy

fn eq(&self, other: &SandboxEnvPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SandboxEnvPolicy