wrapCommand abstract method

String wrapCommand(
  1. String command, {
  2. required String profilePath,
  3. Map<String, String> env = const {},
})

Wraps command so it runs inside the OS sandbox. profilePath names the content-verified profile file staged by the shell (<home>/.fah/cube-profiles/); implementations that confine by other means may ignore it. env carries the caller's per-exec environment (ShellExecOptions.env): kernel wrapping must thread it into the clean child environment or session vars and secrets are silently dropped — entries override the backend's cube-bound vars. Implementations that change nothing may ignore it too.

Implementation

String wrapCommand(
  String command, {
  required String profilePath,
  Map<String, String> env = const {},
});