executor

package

Go to main page

Versions in this module

v0

v0.0.7

Oct 27, 2026

Changes in this version

+ const IsolationEvidencePolicyRequired

+ const IsolationEvidencePolicyWarn

+ const LabelHubCATrust

+ const LabelHubCAUses

+ const MaxLabelKeyBytes

+ const MaxLabelValueBytes

+ const MaxLabels

+ const MaxNodeCACerts

+ const NodeCAEnvKey

+ const ProbePointDaily

+ const ProbePointHello

+ const ProbePointManual

+ const ProbePointReconcile

+ const ProbePointRuntimeChange

+ func ApplyIsolationEvidencePolicy(v string)

+ func DispatchRun(ctx context.Context) string

+ func IsolationAdmissionWarning(ex Executor, req Requirements) string

+ func IsolationClaim(runtime string) isolationprobe.Kind

+ func IsolationEvidenceRequired() bool

+ func IsolationRuntimeOf(ex Executor) (string, bool)

+ func NormalizeLabels(labels map[string]string) map[string]string

+ func ReportDenials(executorID, handleID string, b denylog.Batch) bool

+ func SetDenialSink(s DenialSink) (restore func())

+ func SetIsolationEvidenceRequired(v bool) bool

+ func ValidIsolationEvidencePolicy(v string) bool

+ func ValidateLabels(labels map[string]string) error

+ func WithDispatchRun(ctx context.Context, runID string) context.Context

type Constraint

+ const ConstraintIsolationEvidence

+ type DenialSink func(executorID, handleID string, b denylog.Batch)

type FailoverEvent

+ ActedFor string

type FirewallRules

+ DropDenied bool

type GitCA

+ Node bool

+ func (c *GitCA) CertCount() int

+ func (c *GitCA) NodeEnv(path string) []string

+ type IsolationClaimer interface

+ IsolationRuntime func() (runtime string, ok bool)

+ type IsolationEvidenceSource func(executorID, runtime string) (IsolationRecord, bool)

+ func SetIsolationEvidenceSource(fn IsolationEvidenceSource) IsolationEvidenceSource

+ type IsolationProbe struct

+ Engine string

+ Evidence isolationprobe.Evidence

+ Image string

+ Reference isolationprobe.Reference

+ Runtime string

+ func (p IsolationProbe) Verdict() isolationprobe.Verdict

+ type IsolationProber interface

+ ProbeIsolation func(ctx context.Context) (IsolationProbe, error)

+ type IsolationRecord struct

+ AttemptedAt time.Time

+ Claim isolationprobe.Kind

+ Detail string

+ Error string

+ ExecutorID string

+ Point string

+ ProbedAt time.Time

+ Runtime string

+ Verdict isolationprobe.Kind

+ func LookupIsolationEvidence(executorID, runtime string) (IsolationRecord, bool)

+ func (r IsolationRecord) Status() isolationprobe.Status

+ type IsolationStanding struct

+ Claim isolationprobe.Kind

+ HasRuntime bool

+ Record *IsolationRecord

+ Runtime string

+ Status isolationprobe.Status

+ func JudgeIsolation(ex Executor) IsolationStanding

+ func (st IsolationStanding) Summary() string

+ type RunOption func(*runOptions)

+ func WithOutput(fn func(LogLine)) RunOption

v0.0.6

Oct 16, 2026

Changes in this version

+ const ForwardedDevicesEnv

+ const ForwardedL2

+ const ForwardedUSB

+ const MaxForwardedDevices

+ func ForwardedEnvEntry(name, kind, where string) string

+ func ForwardedKinds(devs []ForwardedDevice) []string

+ func HostMismatchReason(grant, originHost, grantHost string) string

+ func ValidateForwardedDevices(devs []ForwardedDevice, disableNetwork bool) error

+ func WithForwardedEnv(env []string, entries []string) []string

+ type ForwardedDevice struct

+ BindingID string

+ ForwarderID string

+ Interface HostInterface

+ Kind string

+ Label string

+ Name string

+ Open func(ctx context.Context) (ForwardedStream, error)

+ func (d ForwardedDevice) Describe() string

+ type ForwardedDeviceTaker interface

+ CanTakeForwardedDevices func(kinds []string) error

+ func AsForwardedDeviceTaker(ex Executor) (ForwardedDeviceTaker, bool)

+ type ForwardedStream struct

+ BusID string

type GitCredential

+ Host string

type Spec

+ ForwardedDevices []ForwardedDevice

type USBDevice

+ func ScanUSB(sysfsRoot, devRoot string) []USBDevice

type Workspace

+ func (w Workspace) ForgeHost() (string, error)

type WorkspaceGrantError

+ GrantHost string

+ Host string

+ func (e *WorkspaceGrantError) HostMismatch() bool

v0.0.5

Oct 12, 2026

Changes in this version

+ const ChannelEdge

+ const ChannelStable

+ const DefaultBranchBundleBytes

+ const DefaultMaxFailoverAttempts

+ const DefaultPinnedWriteBackBytes

+ const DefaultPinnedWriteBackTotalBytes

+ const DiskLimitFromCeiling

+ const DiskLimitFromSpec

+ const EdgeOptIn

+ const EgressGatewayHost

+ const EgressRemedyDevices

+ const EgressRemedyPods

+ const HelperUpgradeCommand

+ const KindVirtual

+ const LabelDiskLimitSource

+ const MaxBranchBundleBytes

+ const MaxBranchBundleShallow

+ const MaxFailoverAttemptsCeiling

+ const MaxFilterDrivers

+ const MaxFirewallCIDRs

+ const MaxFirewallPorts

+ const MaxFirewallResolvers

+ const MaxGitCAPEMBytes

+ const MaxPinnedWriteBackBytes

+ const MaxProjectResultErrBytes

+ const MaxUSBDevices

+ const MetaRunID

+ const MinPinnedWriteBackBytes

+ const MinRemoteUpgradeVersion

+ const PacketFilterGrantProcedure

+ const RollbackOptIn

+ const SandboxGitCADir

+ const SandboxGitCAFile

+ const SandboxGitCAFileName

+ const SelfUpgradeCommand

+ var ErrCredentialRefused = errors.New("executor: workspace credential will not be renewed")

+ var ErrDiskLimit = errors.New("workspace over its disk limit")

+ var ErrFailoverExhausted = errors.New("executor: failover attempts exhausted")

+ var ErrUSBDeviceNotFound = fmt.Errorf("executor: selected USB device is not attached")

+ var HubBuild = version.String

+ func AgentUpgradeAdvice() string

+ func AgentUpgradePath(have, need int) string

+ func BuildFloorPath(floor string) string

+ func ClaimHandle(store HandleStore, rec HandleRecord) bool

+ func DiskCeilingUnenforceable(caps Capabilities, ceiling ResourceCeiling) bool

+ func DiskEnforcementRemedy(ex Executor) string

+ func DiskLimitAdvice(source string) string

+ func DiskLimitSourceOf(spec Spec, resolvedMB int, ceiling ResourceCeiling) string

+ func DiskLimitSourcePhrase(source string) string

+ func EdgeChannelRefusal(subject, target string) string

+ func EdgeProtocolUnknown(subject, target, why string) string

+ func EdgeUpgradeOffer(subject string, dev DeviceBuild, hubProtocol int, edge *EdgeBuild) (target, label, note string)

+ func EgressAdvertised(advertise string, boundPort int) (string, error)

+ func FormatUsedMB(mb int64) string

+ func GitCredentialConfig(w Workspace, c GitCredential) ([][2]string, error)

+ func GitEnv(extra ...[2]string) []string

+ func GuardReleaseOffer(subject string, have int, target, note string) (string, string)

+ func HardenedGitConfig(filterDrivers []string) [][2]string

+ func HubLocalHost(host string) string

+ func MarkDiskLimitFromCeiling(spec *Spec)

+ func NeedsProtocol(subject string, have, need int, purpose, instead string) string

+ func NormalizeGitCAURL(raw string) (string, error)

+ func NormalizeUSBID(s string) (string, error)

+ func ParseFirewallPrefix(s string) (netip.Prefix, error)

+ func ParseGroupID(s string) (int, bool, error)

+ func ParseResolver(s string) (netip.AddrPort, error)

+ func ProtocolDrop(subject string, have int, target string, targetProtocol int) string

+ func ProtocolMismatchAdvice() string

+ func ProtocolShortfall(subject string, have, need int, purpose string) string

+ func RedactAttachOutputFollowing(r io.Reader, current func() *redact.Set) io.Reader

+ func ReleaseRollbackRefusal(subject string, have int, tag string) string

+ func ReleaseSequence(tag string) (seq int, known bool)

+ func ReplaceSecretFile(path string, content []byte, opts ReplaceOptions) error

+ func RequestingExecutor(ctx context.Context, fallback string) string

+ func RollbackRefusal(subject string, have int, target string, targetSeq int) string

+ func RollbackUnprotected(subject, build, channel string, remoteUpgrade bool) (note, remedy string)

+ func SanitizeDiskOutcome(o Outcome, b *DiskLimitBreach) (Outcome, *DiskLimitBreach)

+ func SanitizeUSBString(s string) string

+ func StableChannelHint() string

+ func USBNodePath(bus, dev int) string

+ func UnpublishedTarget(subject, target string, have int) string

+ func UpgradeOffer(subject string, have, hubProtocol int) (target, note string)

+ func ValidateUSBInventory(devs []USBDevice) error

+ func WithGitConfig(env []string, pairs [][2]string) ([]string, error)

+ func WithRequestingExecutor(ctx context.Context, id string) context.Context

+ func WithRunID(meta map[string]string, spec Spec) map[string]string

+ type Abandoner interface

+ Abandon func(ctx context.Context, handleID, reason string) error

+ type BootstrapSource struct

+ Commit string

+ Edge bool

+ EdgeWhyNot string

+ Note string

+ Stopped bool

+ func ChooseBootstrapSource(hubProtocol int, edge *EdgeBuild) BootstrapSource

+ type BranchBundle struct

+ Branch string

+ Bytes int64

+ Head string

+ SHA256 string

+ Shallow []string

+ func (b *BranchBundle) Describe() string

+ func (b *BranchBundle) VerifyFile(path string) error

+ type BranchBundleExplainer interface

+ ExplainBranchBundleRefusal func() string

type Capabilities

+ DiskEnforcement DiskEnforcement

+ SupportsBranchBundle bool

type Constraint

+ const ConstraintDiskLimit

+ type DeviceBuild struct

+ Protocol int

+ Sequence int

+ type DeviceSelector struct

+ Group string

+ Name string

+ Path string

+ Permissions DevicePermissions

+ SkipInterfaceNodes bool

+ USB *USBMatch

+ func (d DeviceSelector) Describe() string

+ func (d DeviceSelector) Normalize() (DeviceSelector, error)

+ type DiskEnforcement string

+ const DiskEnforcementEviction

+ const DiskEnforcementNone

+ const DiskEnforcementSampled

+ func (d DiskEnforcement) Describe() string

+ func (d DiskEnforcement) Enforced() bool

+ type DiskLimitBreach struct

+ LimitMB int

+ MeasuredAt time.Time

+ Path string

+ Source string

+ UsedBytes int64

+ func (b DiskLimitBreach) Describe() string

+ func (b DiskLimitBreach) LimitBytes() int64

+ func (b DiskLimitBreach) Over() bool

+ func (b DiskLimitBreach) Remedy() string

+ func (b DiskLimitBreach) UsedMB() int64

+ type DiskLimitError struct

+ Breach DiskLimitBreach

+ Executor string

+ func (e *DiskLimitError) Error() string

+ func (e *DiskLimitError) Unwrap() error

+ type DiskLimitExplainer interface

+ ExplainDiskLimitRefusal func() string

+ type EdgeBuild struct

+ Protocol int

+ Published bool

+ Sequence int

+ Short string

+ Target string

+ WhyNot string

+ func (b EdgeBuild) Label() string

+ type EgressPosture struct

+ Config *FirewallRules

+ DeviceID string

+ Enforceable bool

+ Own *FirewallRules

+ OwnName string

+ Reason string

+ RemovesNetwork bool

+ func PostureOf(ex Executor) EgressPosture

+ type EgressPostured interface

+ EgressPosture func() EgressPosture

+ type EgressProxyRoute struct

+ Gateway bool

+ Host string

+ Port int

+ func AdvertisedEgressRoute(advertised, bound, who string) (EgressProxyRoute, string)

+ func ContainerEgressRoute(bound *net.TCPAddr) (route EgressProxyRoute, why, remedy string)

+ func (r EgressProxyRoute) Addr() (netip.Addr, bool)

+ func (r EgressProxyRoute) String() string

+ func (r EgressProxyRoute) Validate() error

type FailoverEvent

+ Exhausted bool

+ MaxAttempts int

+ Unreachable time.Time

+ type FileIdentity struct

+ Dev uint64

+ Ino uint64

+ func IdentityOf(path string) (FileIdentity, error)

+ type FileOwner struct

+ GID int

+ UID int

+ type FirewallRules struct

+ AllowCIDRs []string

+ AllowPorts []int

+ AllowPublicInternet bool

+ DenyCIDRs []string

+ Resolvers []string

+ func (r FirewallRules) CheckMetadata() error

+ func (r FirewallRules) Describe() string

+ func (r FirewallRules) HasDestination() bool

+ func (r FirewallRules) MetadataFindings() []cloudmeta.Finding

+ func (r FirewallRules) MetadataNotes() []string

+ func (r FirewallRules) Normalize() (FirewallRules, error)

+ func (r FirewallRules) Validate() error

+ type ForeignHandleLister interface

+ ListForeignHandles func(executorID string) ([]HandleRecord, error)

+ type GitCA struct

+ PEM []byte

+ URLs []string

+ func (c *GitCA) Clone() *GitCA

+ func (c *GitCA) ConfigPairs(path string) [][2]string

+ func (c *GitCA) Covers(rawURL string) bool

+ func (c *GitCA) Validate() error

type GitCredential

+ SessionID string

+ TokenExpiresAt time.Time

+ type HandleClaimer interface

+ ClaimHandle func(rec HandleRecord) (bool, error)

type HandleRecord

+ func TrackedElsewhere(store HandleStore, executorID string) []HandleRecord

+ type HandleRedactor interface

+ AddHandleRedactions func(handleID string, values ...string) bool

+ type HeldWorkspaceCredential struct

+ GrantID string

+ LeaseID string

+ SessionID string

type HostDevice

+ func USBHostDevices(sel DeviceSelector, d USBDevice) []HostDevice

+ type Outcome string

+ const OutcomeDiskLimit

+ type ReplaceOptions struct

+ Dir *FileIdentity

+ Mode fs.FileMode

+ Owner *FileOwner

type Requirements

+ RequireBranchBundle bool

+ RequireDiskLimit bool

+ type ResultReleaser interface

+ ReleaseResults func(handleID string)

type RevocationLog

+ func (rl *RevocationLog) Widen(leaseID, grantID, why string)

type RevokeOutcome

+ Widened string

type RevokeReport

+ Eventual bool

+ type RunReaper interface

+ ReapRun func(ctx context.Context, runID string) (reaped []string, err error)

type SandboxSettings

+ func (s SandboxSettings) RunsProjectImages() bool

+ type SecretRefreshReport struct

+ Error string

+ Eventual bool

+ FilesRewritten int

+ Handles []string

+ Known bool

+ LeaseID string

+ Unsupported bool

+ func (r SecretRefreshReport) Delivered() bool

+ type SecretRefreshRequest struct

+ Files []SecretFile

+ LeaseID string

+ Reason string

+ func (r SecretRefreshRequest) Validate() error

+ func (r SecretRefreshRequest) Values() []string

+ type SecretRefresher interface

+ RefreshSecretFiles func(ctx context.Context, req SecretRefreshRequest) SecretRefreshReport

+ func AsSecretRefresher(ex Executor) (SecretRefresher, bool)

type Session

+ RunningTasks []int

type Spec

+ BranchBundleFile string

+ EgressBound *FirewallRules

+ EgressProxy *EgressProxyRoute

+ EgressRules *FirewallRules

+ GitCA *GitCA

+ func (s Spec) NeedsGitCA(workspaceRepo string) bool

+ func (s Spec) WriteBackBase() string

type Status

+ DiskLimit *DiskLimitBreach

+ Outcome Outcome

type SupervisorOption

+ func WithCandidateFilter(fn func(Executor) bool) SupervisorOption

+ func WithFailoverLimit(fn func() int) SupervisorOption

+ func WithProbeFilter(fn func(Executor) bool) SupervisorOption

+ type USBDevice struct

+ Bus int

+ Class string

+ Dev int

+ GID *int

+ Group string

+ Manufacturer string

+ Mode string

+ Node string

+ Nodes []USBNode

+ Port string

+ Product string

+ ProductID string

+ Serial string

+ Speed string

+ UID *int

+ VendorID string

+ func ResolveUSB(inventory []USBDevice, m USBMatch) (USBDevice, error)

+ func (d USBDevice) IsHub() bool

+ func (d USBDevice) Label() string

+ func (d USBDevice) Validate() error

+ type USBMatch struct

+ Port string

+ ProductID string

+ Serial string

+ VendorID string

+ func (m USBMatch) Matches(d USBDevice) bool

+ func (m USBMatch) Normalize() (USBMatch, error)

+ func (m USBMatch) String() string

+ type USBNode struct

+ Path string

+ Subsystem string

+ type VirtualSpec struct

+ Devices []DeviceSelector

+ Firewall *FirewallRules

+ Sandbox SandboxSettings

+ func (v VirtualSpec) CheckMetadata() error

+ func (v VirtualSpec) Describe() string

+ func (v VirtualSpec) FilteredEgress() bool

+ func (v VirtualSpec) NetworkEgress() bool

+ func (v VirtualSpec) Normalize() (VirtualSpec, error)

+ func (v VirtualSpec) Validate() error

type Workspace

+ Branch *BranchBundle

+ Upstream string

+ func (w Workspace) NeedsNetwork() bool

+ func (w Workspace) UpstreamRepo() string

+ type WorkspaceCredentialHolder interface

+ HeldWorkspaceCredential func(handleID string) (HeldWorkspaceCredential, bool)

type WorkspaceKind

+ const WorkspaceBundle

+ type WriteBackScanner struct

+ func (s *WriteBackScanner) Buffered() int

+ func (s *WriteBackScanner) Observe(text string)

+ func (s *WriteBackScanner) Snapshot() *WriteBackResult

v0.0.4

Sep 27, 2026

v0.0.3

Sep 27, 2026

Changes in this version

+ const CeilingSourceExecutor

+ const HarnessProgram

+ const LabelRunID

+ const MaxInterfaces

+ const MaxProjectResultBytes

+ const MaxProjectSeedBytes

+ const MaxRuntimeNameLen

+ const SandboxNetworkBridge

+ const SandboxNetworkNone

+ var ErrProjectResultUnavailable = errors.New("executor: no project result was received")

+ func ContainerEngines() []string

+ func DeviceArgv(spec *Spec, ex Executor)

+ func InterfaceNames(ifaces []HostInterface) []string

+ func PolicyProjectPath(projectPath string) string

+ func SandboxNetworks() []string

+ func SetExecutorCeilingLookup(fn func(executorID string) (ResourceCeiling, bool))

+ func SetPolicyProjectMapper(fn func(projectPath string) string)

+ func ValidContainerEngine(name string) bool

+ func ValidateHostInterface(i HostInterface) error

+ func ValidateInterfaces(ifaces []HostInterface) error

+ func ValidateNetworkName(name string) error

+ func ValidateProjectSeed(seed []byte) error

+ func ValidateRuntimeName(name string) error

type Capabilities

+ ReturnsProjectState bool

+ SupportsInterfaces bool

+ SupportsProjectSeed bool

type Constraint

+ const ConstraintInterfaces

type GitCredential

+ Branches []string

+ type HostInterface struct

+ Address string

+ Gateway string

+ LeaseID string

+ MTU int

+ Name string

+ Source string

+ Target string

+ func (i HostInterface) EffectiveTarget() string

+ type ProjectResult struct

+ Data []byte

+ Err string

+ Redact func(string) string

+ type ProjectResultFetcher interface

+ ProjectResult func(handleID string) (ProjectResult, error)

type Requirements

+ RequireInterfaces bool

+ RequireProjectSeed bool

type ResourceCeiling

+ func ExecutorResourceCeiling(executorID string) (ResourceCeiling, bool)

+ type SandboxMode string

+ const SandboxModeContainer

+ const SandboxModeDefault

+ const SandboxModeHost

+ func SandboxModes() []SandboxMode

+ func (m SandboxMode) Isolates() bool

+ func (m SandboxMode) Valid() bool

+ type SandboxSettings struct

+ Engine string

+ Image string

+ Mode SandboxMode

+ Network string

+ Runtime string

+ func (s SandboxSettings) Describe() string

+ func (s SandboxSettings) IsKernelIsolated() bool

+ func (s SandboxSettings) IsVirtualized() bool

+ func (s SandboxSettings) IsZero() bool

+ func (s SandboxSettings) Normalize() SandboxSettings

+ func (s SandboxSettings) Validate() error

type Spec

+ Harness string

+ Interfaces []HostInterface

+ ProjectSeed []byte

type WorkspaceKind

+ const WorkspaceExecutor

+ func (k WorkspaceKind) KeepsWorkDir() bool

v0.0.2

Sep 17, 2026

Changes in this version

+ const AgentUpgradeProcedure

+ const CeilingSourceFleet

+ const CeilingSourceProject

+ const DefaultMaxAttachSessionsPerExecutor

+ const MaxDevices

+ var DefaultAttachCommand = []string

+ var ErrAttachBusy = errors.New("executor: attach: too many concurrent sessions on this executor")

+ var ErrAttachClosed = errors.New("executor: attach session closed")

+ var ErrAttachHandleUnknown = errors.New("executor: attach: unknown handle")

+ var ErrAttachNoSandbox = errors.New("executor: attach refused: workload runs on the host, not in a sandbox")

+ var ErrAttachReadOnly = errors.New("executor: attach session is read-only")

+ var ErrAttachUnsupported = errors.New("executor: attach not supported by this executor")

+ func AgentBuild(ex Executor) (build string, reports bool)

+ func ApplyMinAgentBuild(v string)

+ func ApplyResourceCeiling(c ResourceCeiling)

+ func AttachSupported(ex Executor) bool

+ func BlockedByBuildFloor(ex Executor) (bool, string)

+ func BoundCPUs(effective float64, capMillis int) float64

+ func BoundLimit(effective, cap int) int

+ func CeilingUnenforceable(ex Executor, clamps []Clamp) bool

+ func ClampWarnings(clamps []Clamp) []string

+ func DeviceNames(devices []HostDevice) []string

+ func FormatCPUMillis(millis int) string

+ func FormatMB(mb int) string

+ func IsKernelIsolatedRuntime(name string) bool

+ func IsUserspaceKernelRuntime(name string) bool

+ func MinAgentBuild() string

+ func RedactAttachOutput(r io.Reader, set *redact.Set) io.Reader

+ func ResetResourceCeiling()

+ func SetMinAgentBuild(v string) string

+ func SetProjectCeilingLookup(fn func(projectPath string) (ResourceCeiling, bool))

+ func ValidateDevices(devices []HostDevice) error

+ func ValidateHostDevice(d HostDevice) error

+ type AttachConn interface

+ Resize func(rows, cols uint16) error

+ func NewAttachConn(out io.Reader, in io.WriteCloser, resize func(rows, cols uint16) error, ...) AttachConn

+ type AttachLimiter struct

+ func NewAttachLimiter(max int) *AttachLimiter

+ func (l *AttachLimiter) Acquire(info AttachSessionInfo) (string, func(), error)

+ func (l *AttachLimiter) Count(executorID string) int

+ func (l *AttachLimiter) Live() []AttachSessionInfo

+ func (l *AttachLimiter) Max() int

+ type AttachRequest struct

+ Cols uint16

+ Command []string

+ Env []string

+ HandleID string

+ Rows uint16

+ Stdin bool

+ TTY bool

+ func (r AttachRequest) Argv() []string

+ func (r AttachRequest) CommandLine() string

+ type AttachSessionInfo struct

+ Actor string

+ Command string

+ ExecutorID string

+ HandleID string

+ SessionID string

+ Writable bool

+ type Attacher interface

+ Attach func(ctx context.Context, req AttachRequest) (AttachConn, error)

+ func AsAttacher(ex Executor) (Attacher, bool)

+ func AttachTarget(ex Executor) (Attacher, error)

+ type BuildReporter interface

+ AgentVersion func() string

type Capabilities

+ KernelIsolated bool

+ SupportsDevices bool

+ SupportsEgressScope bool

+ type Clamp struct

+ Effective int

+ Requested int

+ Resource string

+ Source string

+ func BoundSpec(spec *Spec, projectPath string) []Clamp

+ func (c Clamp) String() string

type Constraint

+ const ConstraintAgentBuild

+ const ConstraintDevices

+ const ConstraintEgressScope

+ const ConstraintKernelIsolation

+ type DevicePermissions string

+ const DeviceRead

+ const DeviceReadWrite

+ const DeviceReadWriteMknod

+ func (p DevicePermissions) Valid() bool

+ type EgressScope string

+ const EgressScopeNone

+ const EgressScopePublic

+ const EgressScopeUnset

+ func EgressScopes() []EgressScope

+ func ParseEgressScope(raw string) (EgressScope, error)

+ func (s EgressScope) Describe() string

+ func (s EgressScope) NeedsFilter() bool

+ func (s EgressScope) RemovesNetwork() bool

+ func (s EgressScope) Valid() bool

+ type EgressScopeExplainer interface

+ ExplainEgressScopeRefusal func() string

+ type HostDevice struct

+ KubernetesResource string

+ LeaseID string

+ Name string

+ Permissions DevicePermissions

+ Source string

+ Target string

+ func (d HostDevice) EffectivePermissions() DevicePermissions

+ func (d HostDevice) EffectiveTarget() string

type Requirements

+ RequireDevices bool

+ RequireEgressScope bool

+ RequireKernelIsolation bool

+ type ResourceCeiling struct

+ CPUMillis int

+ DiskMB int

+ MemoryMB int

+ PIDs int

+ func CeilingFor(projectPath string) ResourceCeiling

+ func FleetResourceCeiling() ResourceCeiling

+ func ProjectResourceCeiling(projectPath string) (ResourceCeiling, bool)

+ func (c ResourceCeiling) Describe() string

+ func (c ResourceCeiling) IsZero() bool

+ func (c ResourceCeiling) Tighten(other ResourceCeiling) ResourceCeiling

+ func (c ResourceCeiling) Validate() error

type Spec

+ Devices []HostDevice

+ EgressScope EgressScope

+ func (s Spec) Redactor() *redact.Set

+ func (s Spec) SecretValues() []string

v0.0.1

Sep 13, 2026

Changes in this version

+ const DefaultWriteBackBundleBytes

+ const KindContainer

+ const KindKubernetes

+ const KindLocalProcess

+ const KindRemoteAgent

+ const MaxHostMounts

+ const MaxRetainedRevocations

+ const MaxSecretFileBytes

+ const MaxSpecMounts

+ const MaxWorkspaceDepth

+ const MaxWorkspaceGrantLen

+ const MaxWorkspaceRefLen

+ const MaxWorkspaceRepoLen

+ const MaxWriteBackBranchLen

+ const MaxWriteBackBundleBytes

+ const MaxWriteBackCommits

+ const MaxWriteBackFiles

+ const MaxWriteBackMessageLen

+ const MaxWriteBackPathLen

+ const MaxWriteBackSentinelBytes

+ const ModeAbsent

+ const ModeExec

+ const ModeFile

+ const ModeSubmodule

+ const ModeSymlink

+ const ModeTree

+ const WriteBackBranchPrefix

+ const WriteBackSentinel

+ var AllWriteBackReasons = []WriteBackReason

+ var DefaultRegistry = NewRegistry()

+ var ErrAlreadyRegistered = errors.New("executor: executor already registered")

+ var ErrBindingsUnresolved = errors.New("executor cannot account for a running workload's secret leases")

+ var ErrDrainTimeout = errors.New("executor: drain timed out with sessions still in flight")

+ var ErrExecutorNotFound = errors.New("executor: executor not registered")

+ var ErrHandleNotFound = errors.New("executor: handle not found")

+ var ErrHostExecutionDenied = errors.New("executor: host execution denied by policy")

+ var ErrInvalidSignal = errors.New("executor: invalid signal")

+ var ErrInvalidSpec = errors.New("executor: invalid spec")

+ var ErrNoDefault = errors.New("executor: no default executor configured")

+ var ErrNoPlacement = errors.New("executor: no executor satisfies placement requirements")

+ var ErrRevocationUnsupported = errors.New("executor cannot revoke secret leases")

+ var ErrSessionClaimLost = errors.New("executor: session claim lost to another requeue")

+ var ErrUnsupported = errors.New("executor: operation not supported by this executor")

+ var ErrWorkspaceGrantMissing = errors.New("executor: no secret grant can authenticate this workspace")

+ var ErrWorkspaceUnavailable = errors.New("executor: workspace could not be provisioned")

+ var ErrWriteBackRejected = errors.New("executor: write-back rejected by the hub's content policy")

+ var ErrWriteBackUnavailable = errors.New("executor: work product could not be written back")

+ func ApplyHostExecutionPolicy(allowed bool)

+ func AuditWorkspace(ev WorkspaceEvent)

+ func Bind(projectPath, executorID string) error

+ func CheckSandboxSupport(ex Executor, req Requirements, projectPath string) error

+ func Cordon(h Health, reason string, at time.Time) (Health, *Transition)

+ func DescribeBindings(bindings []SecretBinding) string

+ func DeviceWorkDir(workDir string) string

+ func Drain(h Health, reason string, at time.Time) (Health, *Transition)

+ func Ensure(ex Executor) error

+ func EnvKeys(bindings []SecretBinding) []string

+ func ForgetHandle(store HandleStore, handleID string)

+ func GitBaseEnv() []string

+ func GitCredentialEnv(w Workspace, c GitCredential) ([]string, error)

+ func HostExecutionAllowed() bool

+ func InspectWriteBack(branch, commitSHA string, entries []BundleEntry) error

+ func IsVirtualizedRuntime(name string) bool

+ func IsolatedIDs() []string

+ func IsolatesFromHost(ex Executor) bool

+ func MarshalWriteBackSentinel(r WriteBackResult) (string, error)

+ func ObserveProbe(h Health, probeErr error, at time.Time, policy HealthPolicy) (Health, *Transition)

+ func RecordHandle(store HandleStore, rec HandleRecord)

+ func RedactSecrets(s string, secrets []string) string

+ func Register(ex Executor) error

+ func RequireRevocable(ex Executor, spec Spec) error

+ func SecretFileDirs(files []SecretFile) []string

+ func SetAllowHostExecution(allowed bool) bool

+ func SetBindingLookup(fn func(projectPath string) (string, bool))

+ func SetWorkspaceAuditor(f func(WorkspaceEvent))

+ func ShortSHA(sha string) string

+ func SortedHandles(m map[string][]SecretBinding) []string

+ func SupportsRevocation(ex Executor) bool

+ func Uncordon(h Health, at time.Time, policy HealthPolicy) (Health, *Transition)

+ func ValidateBundleEntry(e BundleEntry) error

+ func ValidateCommitSHA(s string) error

+ func ValidateHostMounts(mounts []HostMount) error

+ func ValidateSecretFiles(files []SecretFile) error

+ func ValidateSpecMounts(mounts []SpecMount) error

+ func ValidateWriteBackBranch(branch string) error

+ func ValidateWriteBackPath(p string) error

+ type BundleEntry struct

+ LinkTarget string

+ Mode string

+ Path string

+ type Candidate struct

+ ContainerRuntimes []string

+ Executor Executor

+ Harnesses []string

+ Health Health

+ InFlight int

+ InFlightKnown bool

+ Labels map[string]string

+ MemoryMB int

+ func Select(candidates []Candidate, req Requirements) (Candidate, error)

+ func (c Candidate) ID() string

+ type Capabilities struct

+ Arch string

+ FilteredEgress bool

+ Isolation Isolation

+ MaxConcurrent int

+ NetworkEgress bool

+ Platform string

+ SecretFilesFromHostPath bool

+ SharesHostFilesystem bool

+ SupportsHostMounts bool

+ SupportsImageOverride bool

+ SupportsResourceLimits bool

+ SupportsSandboxBuild bool

+ SupportsSandboxMounts bool

+ SupportsSecretFiles bool

+ SupportsSignal bool

+ SupportsStream bool

+ SupportsWorkspaceProvisioning bool

+ SupportsWriteBack bool

+ Virtualized bool

+ type Clock interface

+ After func(d time.Duration) <-chan time.Time

+ Now func() time.Time

+ var SystemClock Clock = realClock{}

+ type Constraint string

+ const ConstraintArch

+ const ConstraintCapacity

+ const ConstraintContainerRuntime

+ const ConstraintExecutorID

+ const ConstraintHarness

+ const ConstraintHealth

+ const ConstraintHostMounts

+ const ConstraintHostPolicy

+ const ConstraintImageOverride

+ const ConstraintIsolation

+ const ConstraintLabels

+ const ConstraintMemory

+ const ConstraintNetworkEgress

+ const ConstraintNoCandidates

+ const ConstraintPlatform

+ const ConstraintResourceLimits

+ const ConstraintRevocation

+ const ConstraintSandboxBuild

+ const ConstraintSandboxMounts

+ const ConstraintSecretFiles

+ const ConstraintSignal

+ const ConstraintStream

+ const ConstraintVirtualization

+ const ConstraintWorkspace

+ const ConstraintWriteBack

+ type EventSink interface

+ ExecutorFailover func(ev FailoverEvent)

+ ExecutorTransition func(t Transition)

+ type Executor interface

+ Capabilities func() Capabilities

+ HealthCheck func(ctx context.Context) error

+ ID func() string

+ Kind func() string

+ Signal func(ctx context.Context, handleID string, sig Signal) error

+ Start func(ctx context.Context, spec Spec) (Handle, error)

+ Status func(ctx context.Context, handleID string) (Status, error)

+ Stream func(ctx context.Context, handleID string) (<-chan LogLine, error)

+ func Get(id string) (Executor, error)

+ func List() []Executor

+ func Resolve(projectPath string) (Executor, error)

+ func ResolveBinding(projectPath string) (Executor, error)

+ type FailoverEvent struct

+ At time.Time

+ Err error

+ From string

+ Reason string

+ Session Session

+ To string

+ type FailoverHandler func(ctx context.Context, ev FailoverEvent) error

+ type GitCredential struct

+ ExpiresAt time.Time

+ GrantID string

+ LeaseID string

+ Password string

+ SecretName string

+ Username string

+ func (c GitCredential) AuthorizationHeader() string

+ func (c GitCredential) Empty() bool

+ func (c GitCredential) Secrets() []string

+ type GitStep struct

+ Argv []string

+ Authenticated bool

+ Name string

+ type Handle struct

+ ExecutorID string

+ ID string

+ Image string

+ PID int

+ StartedAt time.Time

+ type HandleRecord struct

+ Deadline time.Time

+ Driver string

+ ExecutorID string

+ ExternalID string

+ HandleID string

+ Image string

+ Meta map[string]string

+ PID int

+ ProjectPath string

+ Secrets []SecretBinding

+ SecretsRecorded bool

+ StartedAt time.Time

+ TaskID int

+ func LoadHandles(store HandleStore, executorID string) []HandleRecord

+ func (r HandleRecord) Validate() error

+ type HandleStore interface

+ DeleteHandle func(handleID string) error

+ ListHandles func(executorID string) ([]HandleRecord, error)

+ PutHandle func(rec HandleRecord) error

+ type Health struct

+ ConsecutiveFailures int

+ ExecutorID string

+ LastProbe time.Time

+ LastSeen time.Time

+ Reason string

+ State NodeState

+ StateChangedAt time.Time

+ func (h Health) Normalize() Health

+ func (h Health) Stale(ref time.Time, ttl time.Duration) bool

+ type HealthPolicy struct

+ DegradeAfter int

+ UnreachableAfter int

+ func DefaultHealthPolicy() HealthPolicy

+ type HealthStore interface

+ ListHealth func() ([]Health, error)

+ LoadHealth func(executorID string) (Health, error)

+ SaveHealth func(h Health) error

+ type HostExecutionDeniedError struct

+ Alternatives []string

+ ExecutorID string

+ ProjectPath string

+ func (e *HostExecutionDeniedError) Error() string

+ func (e *HostExecutionDeniedError) Remediation() string

+ func (e *HostExecutionDeniedError) Unwrap() error

+ type HostMount struct

+ Name string

+ ReadOnly bool

+ Source string

+ Target string

+ func (m HostMount) Validate() error

+ type Isolation string

+ const IsolationContainer

+ const IsolationNone

+ const IsolationRemote

+ const IsolationVM

+ type LeaseIndex struct

+ func NewLeaseIndex() *LeaseIndex

+ func (li *LeaseIndex) Adopt(rec HandleRecord)

+ func (li *LeaseIndex) Bind(handleID string, bindings []SecretBinding)

+ func (li *LeaseIndex) Handles(req RevokeRequest) map[string][]SecretBinding

+ func (li *LeaseIndex) Holds(leaseID string) bool

+ func (li *LeaseIndex) Leases() []string

+ func (li *LeaseIndex) MarkUnresolved(handleID, reason string)

+ func (li *LeaseIndex) Release(handleID string)

+ func (li *LeaseIndex) Unresolved() map[string]string

+ func (li *LeaseIndex) UnresolvedError() error

+ type Lister interface

+ HandleStatuses func(ctx context.Context) ([]Status, error)

+ type LogLine struct

+ HandleID string

+ Seq uint64

+ Stream StreamName

+ Text string

+ Time time.Time

+ type MemoryHandleStore struct

+ func NewMemoryHandleStore() *MemoryHandleStore

+ func (m *MemoryHandleStore) DeleteHandle(handleID string) error

+ func (m *MemoryHandleStore) Len() int

+ func (m *MemoryHandleStore) ListHandles(executorID string) ([]HandleRecord, error)

+ func (m *MemoryHandleStore) PutHandle(rec HandleRecord) error

+ type NodeState string

+ const NodeCordoned

+ const NodeDegraded

+ const NodeDraining

+ const NodeReady

+ const NodeUnreachable

+ func (s NodeState) AdminHeld() bool

+ func (s NodeState) Schedulable() bool

+ func (s NodeState) Valid() bool

+ type PlacementError struct

+ Considered int

+ Constraint Constraint

+ Rejections []Rejection

+ func (e *PlacementError) Error() string

+ func (e *PlacementError) Unwrap() error

+ type Registry struct

+ func NewRegistry() *Registry

+ func (r *Registry) Bind(projectPath, executorID string) error

+ func (r *Registry) Binding(projectPath string) (string, bool)

+ func (r *Registry) Default() (Executor, error)

+ func (r *Registry) DefaultID() string

+ func (r *Registry) Ensure(ex Executor) error

+ func (r *Registry) Get(id string) (Executor, error)

+ func (r *Registry) IsolatedIDs() []string

+ func (r *Registry) List() []Executor

+ func (r *Registry) Register(ex Executor) error

+ func (r *Registry) Resolve(projectPath string) (Executor, error)

+ func (r *Registry) SetBindingLookup(fn func(projectPath string) (string, bool))

+ func (r *Registry) SetDefault(id string) error

+ func (r *Registry) Unbind(projectPath string)

+ func (r *Registry) Unregister(id string)

+ type Rejection struct

+ Constraint Constraint

+ Detail string

+ ExecutorID string

+ type Requirements struct

+ AllowedIsolations []Isolation

+ Arch string

+ ExecutorID string

+ ForbidDegraded bool

+ Harnesses []string

+ IgnoreCapacity bool

+ Labels map[string]string

+ MinMemoryMB int

+ Platform string

+ RequireContainerRuntime bool

+ RequireHostFilesystemWorkspace bool

+ RequireHostMounts bool

+ RequireImageOverride bool

+ RequireIsolation bool

+ RequireNetworkEgress bool

+ RequireResourceLimits bool

+ RequireRevocation bool

+ RequireSandboxBuild bool

+ RequireSandboxMounts bool

+ RequireSecretFiles bool

+ RequireSignal bool

+ RequireStream bool

+ RequireVirtualization bool

+ RequireWorkspaceProvisioning bool

+ RequireWriteBack bool

+ type ResourceLimits struct

+ CPUMillis int

+ DiskMB int

+ MemoryMB int

+ PIDs int

+ func (rl ResourceLimits) IsZero() bool

+ func (rl ResourceLimits) Validate() error

+ type RevocationDeniedError struct

+ Bindings []SecretBinding

+ Detail string

+ ExecutorID string

+ Kind string

+ func (e *RevocationDeniedError) Error() string

+ func (e *RevocationDeniedError) Unwrap() error

+ type RevocationLog struct

+ func NewRevocationLog() *RevocationLog

+ func (rl *RevocationLog) Fail(leaseID, grantID string, state RevokeState, err error)

+ func (rl *RevocationLog) Pending() []RevokeOutcome

+ func (rl *RevocationLog) Record(res RevokeOutcome) RevokeOutcome

+ func (rl *RevocationLog) Settle(leaseID, grantID string, ack RevokeReport, at time.Time)

+ func (rl *RevocationLog) Snapshot() []RevokeOutcome

+ type RevokeAction string

+ const RevokeKill

+ const RevokeScrub

+ func (a RevokeAction) Valid() bool

+ type RevokeOutcome struct

+ Ack *RevokeReport

+ AckedAt time.Time

+ Action RevokeAction

+ Error string

+ ExecutorID string

+ GrantID string

+ LeaseID string

+ Reason string

+ SentAt time.Time

+ State RevokeState

+ func (r RevokeOutcome) Pending() bool

+ type RevokeReport struct

+ Action RevokeAction

+ EgressDropped bool

+ EnvScrubbed []string

+ Error string

+ FilesRemoved int

+ GrantID string

+ Killed []string

+ Known bool

+ LeaseID string

+ type RevokeRequest struct

+ Action RevokeAction

+ GrantID string

+ LeaseID string

+ Reason string

+ func (r RevokeRequest) Effective() RevokeAction

+ func (r RevokeRequest) Matches(b SecretBinding) bool

+ type RevokeState string

+ const RevokeStateFailed

+ const RevokeStatePending

+ const RevokeStateRevoked

+ const RevokeStateUnreachable

+ func (s RevokeState) Terminal() bool

+ type Revoker interface

+ HoldsLease func(leaseID string) bool

+ Leases func() []string

+ Revocations func() []RevokeOutcome

+ RevokeLease func(ctx context.Context, req RevokeRequest) RevokeOutcome

+ SupportsRevocation func() bool

+ func AsRevoker(ex Executor) (Revoker, bool)

+ type RunResult struct

+ Bundle []byte

+ Dropped bool

+ Handle Handle

+ Output []byte

+ Status Status

+ WriteBack *WriteBackResult

+ func Run(ctx context.Context, ex Executor, spec Spec) (RunResult, error)

+ type SecretBinding struct

+ Dir string

+ Egress bool

+ EnvKeys []string

+ ExpiresAt time.Time

+ Files []string

+ GrantID string

+ Kind string

+ LeaseID string

+ SecretName string

+ func (b SecretBinding) Revocable() bool

+ type SecretFile struct

+ Content []byte

+ Dir string

+ GrantID string

+ LeaseID string

+ Mode fs.FileMode

+ Name string

+ func (f SecretFile) FileMode() fs.FileMode

+ func (f SecretFile) GoString() string

+ func (f SecretFile) Path() string

+ func (f SecretFile) String() string

+ func (f SecretFile) Validate() error

+ type Session struct

+ Attempt int

+ ClaimToken string

+ ExecutorID string

+ HandleID string

+ ID string

+ ProjectPath string

+ Spec Spec

+ StartedAt time.Time

+ TaskID int

+ type SessionStore interface

+ ClaimRequeue func(sessionID, claimToken string, at time.Time) (Session, error)

+ CountRunning func(executorID string) (int, error)

+ RunningSessions func(executorID string) ([]Session, error)

+ type Signal string

+ const SignalInterrupt

+ const SignalKill

+ const SignalTerminate

+ func (sig Signal) Valid() bool

+ type Spec struct

+ Argv []string

+ DisableNetwork bool

+ Env []string

+ HostMounts []HostMount

+ Image string

+ Labels map[string]string

+ Mounts []SpecMount

+ ResourceLimits ResourceLimits

+ SandboxHash string

+ SecretFiles []SecretFile

+ Secrets []SecretBinding

+ SetupCommands []string

+ TimeoutMinutes int

+ WorkDir string

+ Workspace Workspace

+ WriteBack WriteBack

+ func (s *Spec) RelocateSecrets(from, to string)

+ func (s Spec) NeedsSecretFiles() bool

+ func (s Spec) RevocableSecrets() []SecretBinding

+ func (s Spec) SandboxRequirements() Requirements

+ func (s Spec) Timeout() time.Duration

+ func (s Spec) Validate() error

+ type SpecMount struct

+ ReadOnly bool

+ Source string

+ Target string

+ func (m SpecMount) Validate() error

+ type State string

+ const StateExited

+ const StateFailed

+ const StateKilled

+ const StatePending

+ const StateRunning

+ const StateUnknown

+ func (s State) Terminal() bool

+ type Status struct

+ Error string

+ ExecutorID string

+ ExitCode int

+ FinishedAt time.Time

+ HandleID string

+ PID int

+ StartedAt time.Time

+ State State

+ WriteBack *WriteBackResult

+ func LiveHandles(ctx context.Context, ex Executor) ([]Status, bool)

+ type StreamName string

+ const StreamCombined

+ const StreamStderr

+ const StreamStdout

+ type Supervisor struct

+ func NewSupervisor(reg *Registry, cfg SupervisorConfig, opts ...SupervisorOption) *Supervisor

+ func (sv *Supervisor) Cordon(executorID, reason string) (Health, error)

+ func (sv *Supervisor) Drain(executorID, reason string) (Health, error)

+ func (sv *Supervisor) Health(executorID string) Health

+ func (sv *Supervisor) ProbeOnce(ctx context.Context) []Transition

+ func (sv *Supervisor) Start(ctx context.Context) (stop func())

+ func (sv *Supervisor) Uncordon(executorID string) (Health, error)

+ func (sv *Supervisor) WaitForDrain(ctx context.Context, executorID string, timeout, poll time.Duration) (int, error)

+ type SupervisorConfig struct

+ BackoffBase time.Duration

+ BackoffMax time.Duration

+ Interval time.Duration

+ JitterFraction float64

+ MaxConcurrentProbes int

+ Policy HealthPolicy

+ ProbeTimeout time.Duration

+ Rand func() float64

+ func DefaultSupervisorConfig() SupervisorConfig

+ type SupervisorOption func(*Supervisor)

+ func WithCandidateSource(fn func() []Candidate) SupervisorOption

+ func WithClock(c Clock) SupervisorOption

+ func WithEventSink(s EventSink) SupervisorOption

+ func WithFailoverHandler(h FailoverHandler) SupervisorOption

+ func WithHealthStore(s HealthStore) SupervisorOption

+ func WithSessionStore(s SessionStore) SupervisorOption

+ type Transition struct

+ At time.Time

+ ExecutorID string

+ From NodeState

+ Reason string

+ To NodeState

+ func (t Transition) String() string

+ type Workspace struct

+ CredentialGrant string

+ Depth int

+ Kind WorkspaceKind

+ Ref string

+ Repo string

+ SizeLimitMB int

+ func (w Workspace) BaseURL() string

+ func (w Workspace) Describe() string

+ func (w Workspace) GitPlan(dir string) ([]GitStep, error)

+ func (w Workspace) Host() string

+ func (w Workspace) IsZero() bool

+ func (w Workspace) NeedsProvisioning() bool

+ func (w Workspace) RepoPath() (string, bool)

+ func (w Workspace) RequiresCredential() bool

+ func (w Workspace) Validate() error

+ type WorkspaceAccess struct

+ Credential GitCredential

+ Repo string

+ func (a WorkspaceAccess) Apply(w Workspace) Workspace

+ type WorkspaceCredentialSource interface

+ ForWorkspace func(ctx context.Context, projectID string, w Workspace) (WorkspaceAccess, func(), error)

+ type WorkspaceEvent struct

+ DurationMS int64

+ Err string

+ ExecutorID string

+ ExecutorKind string

+ GrantID string

+ HandleID string

+ LeaseID string

+ Phase WorkspaceEventPhase

+ ProjectPath string

+ Workspace Workspace

+ type WorkspaceEventPhase string

+ const WorkspaceProvisionEnd

+ const WorkspaceProvisionStart

+ type WorkspaceGrantError struct

+ ExecutorID string

+ Grant string

+ ProjectPath string

+ Reason string

+ Repo string

+ RepoPath string

+ func (e *WorkspaceGrantError) Error() string

+ func (e *WorkspaceGrantError) Remediation() string

+ func (e *WorkspaceGrantError) Unwrap() error

+ type WorkspaceKind string

+ const WorkspaceBind

+ const WorkspaceGit

+ const WorkspaceNone

+ const WorkspaceUnspecified

+ func (k WorkspaceKind) Valid() bool

+ type WriteBack struct

+ Branch string

+ MaxBundleBytes int64

+ Message string

+ Mode WriteBackMode

+ func (w WriteBack) BundleCap() int64

+ func (w WriteBack) Describe() string

+ func (w WriteBack) Enabled() bool

+ func (w WriteBack) IsZero() bool

+ func (w WriteBack) Validate() error

+ type WriteBackFetcher interface

+ WriteBackBundle func(handleID string) ([]byte, error)

+ type WriteBackMode string

+ const WriteBackBundle

+ const WriteBackNone

+ const WriteBackPush

+ func (m WriteBackMode) Valid() bool

+ type WriteBackReason string

+ const WriteBackReasonBadBranch

+ const WriteBackReasonBadCommit

+ const WriteBackReasonEmptyRange

+ const WriteBackReasonFsck

+ const WriteBackReasonMode

+ const WriteBackReasonNotDescendant

+ const WriteBackReasonPath

+ const WriteBackReasonRefMoved

+ const WriteBackReasonTooManyCommits

+ const WriteBackReasonUnknownBase

+ const WriteBackReasonUnspecified

+ func WriteBackReasonOf(err error) (WriteBackReason, bool)

+ type WriteBackRejection struct

+ Branch string

+ Code WriteBackReason

+ CommitSHA string

+ Mode string

+ Path string

+ Reason string

+ Target string

+ func (e *WriteBackRejection) Error() string

+ func (e *WriteBackRejection) ReasonCode() WriteBackReason

+ func (e *WriteBackRejection) Unwrap() error

+ type WriteBackResult struct

+ BaseSHA string

+ Branch string

+ BundleBytes int64

+ BundleSHA256 string

+ CommitSHA string

+ Commits int

+ Err string

+ FilesChanged int

+ Mode WriteBackMode

+ Pushed bool

+ SkipReason string

+ Skipped bool

+ func ScanWriteBackSentinel(output string) (WriteBackResult, bool)

+ func (r *WriteBackResult) Delivered() bool

+ func (r *WriteBackResult) Describe() string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL