runtime

type AttachSession struct {
	Tty    bool
	Stdin  io.WriteCloser // nil if the container is not interactive
	Stdout io.ReadCloser
	Stderr io.ReadCloser // nil in TTY mode (output is combined)
	// contains filtered or unexported fields
}

type CPUStats struct {
	Usage    uint64
	Throttle uint64
	System   uint64
}

type Config struct {
	ID                string
	Rootfs            string
	Args              []string
	Env               []string
	Cwd               string
	User              string
	Tty               bool
	Interactive       bool
	Privileged        bool
	ReadOnly          bool
	NetworkMode       common.NetworkMode
	Hostname          string
	Labels            map[string]string
	Annotations       map[string]string
	Mounts            []common.Mount
	Ports             []common.Port
	DNS               []string
	DNSSearch         []string
	DNSOptions        []string
	ExtraHosts        []string
	CapAdd            []string
	CapDrop           []string
	SecurityOpt       []string
	Sysctls           map[string]string
	Resources         *Resources
	StopSignal        string
	StopTimeout       int
	Init              bool
	RestartPolicy     common.RestartPolicy
	RestartMaxRetries int
	HealthCheck       *HealthCheckConfig
	Runtime           string
	LogDriver         common.LogDriver
	ImageRef          string
	ImageDigest       string
	ImageLayers       []string // paths to image layer tarballs
	ImageConfig       *ImageOCIConfig
	RootfsReady       string // path to extracted rootfs
	Platform          string // "linux/arm64", "linux/amd64", "wasi/wasm", etc.
}

type ContainerJSON struct {
	ID            string
	Pid           int
	Status        string
	Config        *Config
	RootfsPath    string
	LogPath       string
	Mode          ExecutionMode
	RestartCount  int
	CreatedAt     time.Time
	StartedAt     time.Time
	FinishedAt    time.Time
	ExitCode      int
	GuestArch     string // For cross-arch modes
	IsolationType string // "hardware", "user-space", "none"
}

type ContainerRunner interface {
	// Name returns the execution mode this runner implements.
	Name() ExecutionMode

	// Detect returns true if this runner can work on the current host.
	// Called once at startup to build the registry.
	Detect() bool

	// Capabilities returns what this runner supports.
	Capabilities() RunnerCapabilities

	// Create prepares the container filesystem, config, OCI spec.
	// Returns the container ID. Does NOT start the process.
	Create(ctx context.Context, cfg *Config) (string, error)

	// Start launches the container process. Returns the PID (or 0 for WASM).
	Start(ctx context.Context, id string) (int, error)

	// Stop sends a signal to the container. timeout=0 → SIGKILL.
	Stop(ctx context.Context, id string, timeout time.Duration) error

	// Exec runs a new process inside a running container.
	Exec(ctx context.Context, id string, cfg *ExecConfig) (int, error)

	// Kill sends an arbitrary signal to the container.
	Kill(ctx context.Context, id string, sig syscall.Signal) error

	// Pause suspends the container (cgroup freezer, SIGSTOP, or VM suspend).
	Pause(ctx context.Context, id string) error

	// Resume resumes a paused container.
	Resume(ctx context.Context, id string) error

	// Wait blocks until the container exits and returns the exit code.
	Wait(ctx context.Context, id string) (int, error)

	// Stats returns resource usage (CPU, memory, I/O).
	Stats(ctx context.Context, id string) (*ContainerStats, error)

	// Inspect returns full container metadata.
	Inspect(ctx context.Context, id string) (*ContainerJSON, error)

	// Cleanup removes all resources (rootfs, state, tmp files).
	Cleanup(ctx context.Context, id string) error
}

type ContainerState struct {
	ID           string                `json:"id"`
	Pid          int                   `json:"pid"`
	Status       common.ContainerState `json:"status"`
	Created      time.Time             `json:"created"`
	Started      time.Time             `json:"started,omitempty"`
	Finished     time.Time             `json:"finished,omitempty"`
	ExitCode     int                   `json:"exitCode,omitempty"`
	Bundle       string                `json:"bundle"`
	Config       *Config               `json:"config,omitempty"`
	PidPath      string                `json:"pidPath,omitempty"`
	LogPath      string                `json:"logPath,omitempty"`
	Mode         ExecutionMode         `json:"mode"`
	RestartCount int                   `json:"restartCount,omitempty"`
	HealthStatus *common.HealthStatus  `json:"healthStatus,omitempty"`
	ExitChan     chan struct{}         `json:"-"`
	Cmd          *exec.Cmd             `json:"-"`
	// contains filtered or unexported fields
}

type ContainerStats struct {
	CPU     CPUStats
	Memory  MemoryStats
	Network NetworkStats
	PIDs    int
}

type ContainerStatsData struct {
	ID            string
	CPUUsageNS    uint64
	CPUUserNS     uint64
	CPUKernelNS   uint64
	MemoryBytes   uint64
	MemoryLimit   uint64
	PidsCurrent   uint64
	PidsLimit     uint64
	BlockIORB     uint64
	BlockIOWB     uint64
	BlockIORIOs   uint64
	BlockIOWIOs   uint64
	CPUSomePSI    float64
	MemorySomePSI float64
	IOSomePSI     float64
	Timestamp     int64
}

type ExecConfig struct {
	ID           string
	ContainerID  string
	Args         []string
	Env          []string
	WorkingDir   string
	User         string
	Tty          bool
	AttachStdin  bool
	AttachStdout bool
	AttachStderr bool
	Privileged   bool
}

type ExecResult struct {
	Stdin  io.WriteCloser
	Stdout io.ReadCloser
	Stderr io.ReadCloser
	Wait   func() error // blocks until process exits and returns exit error
	Pid    int
}

type ExecutionMode int

type ExecutionModeInfo struct {
	Mode        ExecutionMode
	Name        string
	Level       int
	Isolation   string
	Platforms   []string
	Description string
}

type HealthCheckConfig struct {
	Test          []string
	Interval      time.Duration
	Timeout       time.Duration
	Retries       int
	StartPeriod   time.Duration
	StartInterval time.Duration
}

type HealthChecker struct {
	// contains filtered or unexported fields
}

type ImageOCIConfig struct {
	Entrypoint  []string
	Cmd         []string
	Env         []string
	WorkingDir  string
	User        string
	Volumes     map[string]struct{}
	Labels      map[string]string
	StopSignal  string
	Shell       []string
	HealthCheck *HealthCheckConfig
}

type LinuxResources struct {
	// CPU
	CPUShares  uint64 // -> cpu.weight (1-10000, 0 = unset)
	CPUQuota   int64  // microseconds per period (0 = unset)
	CPUPeriod  uint64 // microseconds (default 100000)
	NanoCPUs   int64  // 1e9 = 1 CPU
	CpusetCpus string
	CpusetMems string

	// Memory (bytes)
	Memory           int64
	MemorySwap       int64
	MemorySwappiness *uint64

	// PIDs
	PidsLimit int64

	// Block I/O
	BlkioWeight uint16

	// OOM
	OomKillDisable bool
}

type MemoryStats struct {
	Usage    uint64
	MaxUsage uint64
	Limit    uint64
	Cache    uint64
}

type NetworkStats struct {
	RxBytes   uint64
	TxBytes   uint64
	RxPackets uint64
	TxPackets uint64
}

type PidfdMonitor struct {
	// contains filtered or unexported fields
}

type PidfdProcessGroup struct {
	// contains filtered or unexported fields
}

type Registry struct {
	// contains filtered or unexported fields
}

type Resources struct {
	CPUShares      int64
	Memory         int64
	MemorySwap     int64
	NanoCpus       int64
	CPUPeriod      int64
	CPUQuota       int64
	CpusetCpus     string
	CpusetMems     string
	PidsLimit      int64
	BlkioWeight    uint16
	OomKillDisable bool
	ShmSize        int64
}

type RunnerCapabilities struct {
	Arch          []string // Architectures this runner can execute on
	RootRequired  bool     // Needs root/sudo to function
	KVMRequired   bool     // Needs /dev/kvm
	CrossArch     bool     // Can run foreign-arch binaries
	WASM          bool     // Is a WASM runtime
	HWIsolation   bool     // Hardware-enforced isolation
	PauseSupport  bool     // Supports pause/resume
	ExecSupport   bool     // Supports exec into running container
	StatsSupport  bool     // Supports resource stats
	DinDCapable   bool     // Can run Docker inside the container
	MaxContainers int      // 0 = unlimited
	GuestArch     []string // For cross-arch: which guest archs are supported
}

type RunnerInfo struct {
	Mode         ExecutionMode
	Name         string
	Capabilities RunnerCapabilities
	Available    bool
}

type Runtime struct {
	// contains filtered or unexported fields
}

type RuntimeOption func(*Runtime)