oci

type ArtifactStore interface {
	Put(context.Context, string, string, io.Reader) (store.ArtifactReference, error)
	Open(context.Context, string, store.ArtifactReference) (io.ReadCloser, error)
}

type DirectRunscOption func(*directExecutor)

type Execution interface {
	// ID is the provider-side sandbox identifier (for example the containerd
	// container ID), used by Destroy.
	ID() string
	// Wait blocks until the workload terminates or ctx is cancelled. On
	// cancellation the provider must request termination of the workload.
	Wait(ctx context.Context) (RunResult, error)
}

type ExecutionSpec struct {
	TenantID         string
	AttemptID        string
	AgentVersionRef  string
	WorkloadSpecJSON []byte
	ImageRef         string
	// Command overrides the image Entrypoint/Cmd as an argv array. Empty uses
	// the immutable image configuration.
	Command           []string
	WorkspaceBytes    int64
	CPUQuotaMillis    int64
	MemoryLimitMiB    int64
	RuntimeClass      string
	RuntimePoolID     string
	RuntimeInstanceID string
	// OutputSpooler persists bounded workload stdout/stderr to the artifact
	// store; nil keeps the pre-hardening bounded-discard behavior.
	OutputSpooler OutputSpooler
}

type Executor interface {
	Prepare(ctx context.Context, spec ExecutionSpec) (Execution, error)
	Destroy(ctx context.Context, execution Execution) error
}

type OutputSpooler interface {
	Spool(context.Context, string, string, string, io.Reader) (store.ArtifactReference, error)
}

type RunResult struct {
	ExitCode    int
	UsageMillis int64
	// FailureCode is an optional machine-readable classification. When empty,
	// the worker derives one from ExitCode.
	FailureCode string
	// Stdout is the spooled stdout/stderr artifact, when the execution
	// declared an OutputSpooler and produced output.
	Stdout *store.ArtifactReference
	// StdoutTruncated reports that output exceeded the spool cap.
	StdoutTruncated bool
}

type RunscOption func(*ctrExecutor)

type Worker struct {
	// contains filtered or unexported fields
}