process

type Manager interface {
	Start(id, command string, args, env []string, opts StartOptions) (Process, error)
	// StartContainer creates/starts the container without exec-ing into it.
	// Used by the chat flow where the sidecar handles exec via the SDK.
	StartContainer(id string, opts StartOptions) error
	Get(id string) (Process, bool)
	Stop(id string) error
	Pause(id string) error
	Resume(id, sandboxName, command string, args []string) (Process, error)
	Close() error
}

type Process interface {
	Read(buf []byte) (int, error)
	Write(data []byte) (int, error)
	Resize(rows, cols uint16) error
	Done() <-chan struct{}
}

type StartOptions struct {
	Namespace        string // K8s namespace to create sandbox in
	WorkspaceDiskPVC string // pre-existing PVC name for workspace drive mount
	OpencodePassword string // per-sandbox password for opencode server auth
	ProxyToken       string // per-sandbox token for Anthropic API proxy auth
	SandboxType      string // "opencode" or "openclaw"
	TelegramBotToken string // openclaw only: Telegram bot token
	GatewayToken     string // openclaw only: gateway auth token
	CPULimit         string // optional K8s resource string override (e.g. "2", "500m")
	MemoryLimit      string // optional K8s resource string override (e.g. "2Gi", "512Mi")
}