container

type Runtime interface {
	// Pull downloads the container image for the given distribution tag.
	Pull(distro string) error

	// Run executes the given command inside the distro container, mounting
	// workDir as /project inside the container.
	// args are passed directly to the container ENTRYPOINT.
	Run(distro, workDir string, args []string) error

	// RunShell executes a shell command string inside the distro container,
	// overriding the ENTRYPOINT with /bin/sh -c. Use this to chain multiple
	// yap sub-commands in a single container invocation.
	RunShell(distro, workDir, shellCmd string) error

	// RunShellCapture is like RunShell but tees stdout+stderr into out
	// (typically a bounded buffer owned by the caller — e.g. an MCP build
	// session log). Pass nil to fall back to the default sink.
	//
	// env is forwarded to the container as additional environment variables
	// without appearing in the shell argv — use it for secrets like signing
	// passphrases that would otherwise leak via `ps`. A nil/empty map is
	// equivalent to passing no extra vars.
	//
	// ctx is honoured by the CLI backend (podman/docker) so cancelling the
	// context terminates the container. The rootless backend forwards it on
	// a best-effort basis only — rootlesskit's parent loop has no clean
	// cancel hook, so cancellation may be observed only after the next
	// process boundary.
	RunShellCapture(ctx context.Context, distro, workDir, shellCmd string,
		env map[string]string, out io.Writer) error

	// Type returns the runtime identifier.
	Type() RuntimeType
}

type RuntimeType = runtimetype.RuntimeType