container

type ContainerRuntimeScope struct {
	Args []string
}

type DockerCommandRunner interface {
	CombinedOutput(ctx context.Context, stdin []byte, name string, args ...string) ([]byte, []byte, error)
}

type DockerSandboxRuntime struct {
	Tool        string
	RuntimeName string
	Runner      DockerCommandRunner
}

type ExecDockerCommandRunner struct{}

type ExecRuntimeCommandRunner struct{}

type HTTPManagedRuntimeBundleObjectSource struct {
	Client *http.Client
}

type ManagedRuntimeBundleCatalog struct {
	ReleaseTag       string                                `json:"release_tag,omitempty"`
	SourceBaseURL    string                                `json:"source_base_url,omitempty"`
	GeneratedAt      time.Time                             `json:"generated_at"`
	Bundles          []core.ManagedRuntimeBundleDescriptor `json:"bundles"`
	TrustRoots       []ManagedRuntimeTrustRoot             `json:"trust_roots,omitempty"`
	BlockedVersions  []string                              `json:"blocked_versions,omitempty"`
	RevokedKeyIDs    []string                              `json:"revoked_key_ids,omitempty"`
	MinimumVersion   string                                `json:"minimum_version,omitempty"`
	StableSigningKey string                                `json:"stable_signing_key,omitempty"`
}

type ManagedRuntimeBundleInstaller struct {
	Catalog     ManagedRuntimeBundleCatalog
	InstallRoot string
	Source      ManagedRuntimeBundleObjectSource
	Now         func() time.Time
	HTTPClient  *http.Client
}

type ManagedRuntimeBundleObjectRequest struct {
	BundleID string
	Kind     string
	Name     string
	URL      string
}

type ManagedRuntimeBundleObjectSource interface {
	FetchManagedRuntimeBundleObject(context.Context, ManagedRuntimeBundleObjectRequest) ([]byte, error)
}

type ManagedRuntimeBundleObjectSourceFunc func(context.Context, ManagedRuntimeBundleObjectRequest) ([]byte, error)

type ManagedRuntimeDoctorRequest struct {
	BundleID   string
	TargetOS   string
	TargetArch string
}

type ManagedRuntimeDoctorResult struct {
	Status                  ManagedRuntimeLifecycleStatus `json:"status"`
	BundleID                string                        `json:"bundle_id"`
	Version                 string                        `json:"version,omitempty"`
	Root                    string                        `json:"root,omitempty"`
	CommandPath             string                        `json:"command_path,omitempty"`
	ManifestPath            string                        `json:"manifest_path,omitempty"`
	ArtifactDigest          string                        `json:"artifact_digest,omitempty"`
	SignatureDigest         string                        `json:"signature_digest,omitempty"`
	ScopedStoreEnforced     bool                          `json:"scoped_store_enforced,omitempty"`
	HostGlobalStoreExcluded bool                          `json:"host_global_store_excluded,omitempty"`
	Reason                  string                        `json:"reason,omitempty"`
}

type ManagedRuntimeInstallRequest struct {
	BundleID   string
	TargetOS   string
	TargetArch string
}

type ManagedRuntimeInstallResult struct {
	BundleID                string            `json:"bundle_id"`
	Version                 string            `json:"version"`
	Root                    string            `json:"root"`
	CommandPath             string            `json:"command_path"`
	ManifestPath            string            `json:"manifest_path"`
	ArtifactDigest          string            `json:"artifact_digest"`
	ChecksumDigest          string            `json:"checksum_digest"`
	SignatureDigest         string            `json:"signature_digest"`
	TrustRootDigest         string            `json:"trust_root_digest"`
	ScopedStoreEnforced     bool              `json:"scoped_store_enforced"`
	HostGlobalStoreExcluded bool              `json:"host_global_store_excluded"`
	FileDigests             map[string]string `json:"file_digests"`
	InstalledAt             time.Time         `json:"installed_at"`
}

type ManagedRuntimeInstallation struct {
	Bundle      core.ManagedRuntimeBundleDescriptor
	Root        string
	CommandPath string
}

type ManagedRuntimeLifecycleStatus string

type ManagedRuntimeReinstallResult struct {
	Uninstall ManagedRuntimeUninstallResult `json:"uninstall"`
	Install   ManagedRuntimeInstallResult   `json:"install"`
	Doctor    ManagedRuntimeDoctorResult    `json:"doctor"`
}

type ManagedRuntimeTrustRoot struct {
	KeyID  string `json:"key_id"`
	Name   string `json:"name"`
	URL    string `json:"url,omitempty"`
	Digest string `json:"digest"`
	Issuer string `json:"issuer,omitempty"`
}

type ManagedRuntimeUninstallRequest struct {
	BundleID string
}

type ManagedRuntimeUninstallResult struct {
	BundleID     string `json:"bundle_id"`
	Root         string `json:"root"`
	Removed      bool   `json:"removed"`
	ScopedOnly   bool   `json:"scoped_only"`
	ManifestPath string `json:"manifest_path"`
}

type RuntimeAdapterCatalogDocument struct {
	Version                   string                       `json:"version"`
	ProtocolVersion           string                       `json:"protocol_version"`
	Adapters                  []RuntimeAdapterCatalogEntry `json:"adapters"`
	RuntimeBackends           []RuntimeBackendCatalogEntry `json:"runtime_backends,omitempty"`
	HostOwnedResponsibilities []string                     `json:"host_owned_responsibilities"`
}

type RuntimeAdapterCatalogEntry struct {
	AdapterID           string                      `json:"adapter_id"`
	Operation           string                      `json:"operation"`
	Kinds               []core.RuntimeAdapterKind   `json:"kinds"`
	WorkloadKinds       []core.WorkloadKind         `json:"workload_kinds"`
	RuntimeProfiles     []core.RuntimeProfile       `json:"runtime_profiles"`
	WorkspacePolicy     core.RuntimeWorkspacePolicy `json:"workspace_policy"`
	ConformanceProfiles []string                    `json:"conformance_profiles"`
}

type RuntimeBackendCatalogEntry struct {
	BackendID           string                      `json:"backend_id"`
	Families            []core.RuntimeBackendFamily `json:"families"`
	Tools               []core.ContainerRuntimeTool `json:"tools"`
	SupportedTargets    []core.ManagedRuntimeTarget `json:"supported_targets,omitempty"`
	IsolationModes      []core.RuntimeIsolationMode `json:"isolation_modes"`
	InstallBurdens      []core.RuntimeInstallBurden `json:"install_burdens"`
	RuntimeProfiles     []core.RuntimeProfile       `json:"runtime_profiles"`
	ExecutorProviders   []string                    `json:"executor_providers"`
	ConformanceProfiles []string                    `json:"conformance_profiles"`
}

type RuntimeBackendProbe struct {
	Options RuntimeBackendProbeOptions
	Runner  RuntimeCommandRunner
}

type RuntimeBackendProbeOptions struct {
	BackendID            string
	Family               core.RuntimeBackendFamily
	Tool                 core.ContainerRuntimeTool
	Command              string
	VersionArgs          []string
	ConformanceImage     string
	ConformanceCommand   []string
	ConformanceWorkspace string
	RuntimeScopeArgs     []string
	IsolationMode        core.RuntimeIsolationMode
	InstallBurden        core.RuntimeInstallBurden
	RuntimeProfiles      []core.RuntimeProfile
	ConformanceProfiles  []string
	ManagedBundle        *core.ManagedRuntimeBundleDescriptor
	GeneratedAt          time.Time
}

type RuntimeCommandResult struct {
	Stdout []byte
	Stderr []byte
}

type RuntimeCommandRunner interface {
	LookPath(name string) (string, error)
	Run(ctx context.Context, name string, args ...string) (RuntimeCommandResult, error)
}

type SandboxMount struct {
	HostPath       string
	ContainerPath  string
	ReadOnly       bool
	RequiredPrefix string
}

type SandboxRunRequest struct {
	Image                      string
	Command                    []string
	CommandOverridesEntrypoint bool
	RuntimeScope               ContainerRuntimeScope
	Stdin                      []byte
	Workspace                  string
	WorkingDir                 string
	Env                        map[string]string
	Network                    string
	RuntimeName                string
	RunAsRoot                  bool
	WritableRootFS             bool
	AddCapabilities            []string
	ExtraTmpfs                 []string
	DataMounts                 []SandboxMount
	Timeout                    time.Duration
	Limits                     core.ResourceLimits
}

type SandboxRunResult struct {
	ExitCode      int
	Stdout        []byte
	Stderr        []byte
	ArtifactHash  string
	ResourceUsage core.ResourceUsage
}

type SandboxRuntime interface {
	Available(context.Context) error
	Run(context.Context, SandboxRunRequest) (SandboxRunResult, error)
}

type SandboxRuntimeCommandAdapter struct {
	Runtime SandboxRuntime
}

type SandboxRuntimeContainerBuildAdapter struct {
	Runtime SandboxRuntime
}

type SandboxedCommandInvocationOptions struct {
	TaskID          string
	LeaseID         string
	Image           string
	Workspace       string
	Network         string
	Timeout         time.Duration
	TimeoutLimitHit string
	Workload        core.CommandWorkload
	ResolvedEnv     map[string]string
	Limits          core.ResourceLimits
}

type SandboxedCommandRuntime interface {
	RunSandboxedCommand(context.Context, SandboxedCommandRuntimeInvocation) (core.RuntimeExecutionResult, error)
}

type SandboxedCommandRuntimeInvocation struct {
	Request         core.RuntimeExecutionRequest
	Image           string
	Workspace       string
	Network         string
	Timeout         time.Duration
	TimeoutLimitHit string
}

type SandboxedContainerBuildInvocationOptions struct {
	TaskID          string
	LeaseID         string
	Image           string
	Workspace       string
	Network         string
	Timeout         time.Duration
	TimeoutLimitHit string
	Workload        core.ContainerBuildWorkload
	ResolvedEnv     map[string]string
	Limits          core.ResourceLimits
}

type SandboxedContainerBuildRuntime interface {
	BuildSandboxedContainer(context.Context, SandboxedContainerBuildRuntimeInvocation) (core.RuntimeExecutionResult, error)
}

type SandboxedContainerBuildRuntimeInvocation struct {
	Request         core.RuntimeExecutionRequest
	Image           string
	Workspace       string
	Network         string
	Timeout         time.Duration
	TimeoutLimitHit string
}