Struct CanonSubcommand 

pub struct CanonSubcommand {
    pub argv: Vec<String>,
    pub opaque: bool,
    pub write_redirect_targets: Vec<String>,
    pub read_redirect_targets: Vec<String>,
}

One extracted sub-command: its canonicalized argv, and whether it is “opaque” — a wrapper whose real effect can’t be statically resolved, so crate::permissions::rules::evaluate_command must never let it resolve to Allow purely by absence of a matching rule.

Fields

argv: Vec<String>

The wrapper-stripped, normalized argument vector — argv[0] is the effective command name, e.g. ["rm", "-rf", "/"] for sudo rm -rf /.

opaque: bool

A dynamically-named command ($(...)/backtick used AS the command name itself, e.g. `echo rm` -rf /) or a documented always-ask exec wrapper (watch, find -exec, bare xargs, eval/sh -c family, …), or an argument this canonicalizer could not safely normalize (F3). Forces a minimum Ask decision — see crate::permissions::rules.

write_redirect_targets: Vec<String>

F4 (Fable-5 adversarial review): every path this sub-command WRITES to via a shell output redirect directly attached to it (>, >>, &>, >|, &>>) — see walk_collect_commands’s redirect handling. crate::permissions::rules::evaluate_command checks each of these against the write(...) protected-path rules exactly like a write_file call would, so echo evil > .env can’t silently bypass protected_paths just because it went through bash.

read_redirect_targets: Vec<String>

The input-redirect (<) counterpart of Self::write_redirect_targets, checked against read(...) rules.

Implementations

impl CanonSubcommand

pub fn canonical_text(&self) -> String

The canonical, space-joined command text a rule’s command-glob matches against (e.g. "rm -rf /"). Tokens are joined with a single ASCII space regardless of the source’s original whitespace/quoting — this IS the normalization risk-1’s mitigation calls for (“normalize quoting/whitespace”).

Trait Implementations

impl Clone for CanonSubcommand

fn clone(&self) -> CanonSubcommand

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CanonSubcommand

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CanonSubcommand

fn default() -> CanonSubcommand

Returns the “default value” for a type.

impl Eq for CanonSubcommand

impl PartialEq for CanonSubcommand

fn eq(&self, other: &CanonSubcommand) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for CanonSubcommand