Expand description
Native command lifetime support for a binary-owned task cleanup endpoint.
This is cleanup, not command admission: callers must validate the original command and select its sandbox launcher before applying this helper.
Structs§
- Owned
Command - Exact argv for the shipped native helper. Original argv is never interpreted
as shell syntax;
arg0is restored when replacing the helper with the target.
Constants§
- HELPER_
MODE - Private native entry point shared with the binary-owned task launcher.
- OWNER_
DIRECTORY_ PREFIX - Prefix of the private directory that contains the task owner endpoint.
- OWNER_
SOCKET_ ENV - Private task endpoint inherited by VT Code’s managed command launchers.
- OWNER_
SOCKET_ FILE - Basename of the task owner endpoint inside its private directory.
Functions§
- is_
owned_ endpoint - Whether
socketbelongs to a live task owner created by this user. - maybe_
run_ owned_ command - Dispatch before agent environment hardening, worker threads, tracing, or the async runtime. A successful helper replaces itself with the admitted program and does not return. A missing/closed endpoint fails before the target can execute.