executable

type Executable struct {
	// Path is the path to the executable.
	Path string

	// TimeoutInMilliseconds is the maximum time the process can run.
	TimeoutInMilliseconds int

	// MemoryLimitInBytes sets the maximum memory the process can use (Linux only).
	// If exceeded, the process will be killed and an error will be returned.
	// Defaults to 2GB. Set to 0 to disable memory limiting.
	MemoryLimitInBytes int64

	// ShouldUsePty controls whether the executable's standard streams should be set to PTY instead of pipes.
	ShouldUsePty bool

	// WorkingDir can be set before calling Start or Run to customize the working directory of the executable.
	WorkingDir string

	// Process is the os.Process object for the executable.
	// TODO: See if this actually needs to be exported?
	Process *os.Process
	// contains filtered or unexported fields
}

type ExecutableResult struct {
	Stdout   []byte
	Stderr   []byte
	ExitCode int
	Meta     SandboxMeta // structured metadata; zero value when Sandbox == nil
}

type SandboxConfig struct {

	// MaxMemoryBytes limits virtual address space via RLIMIT_AS (set to 3× this value).
	// 0 = unlimited. Recommended for tinyshop: 100MB.
	MaxMemoryBytes int64

	// MaxCPUTime limits cumulative CPU time via RLIMIT_CPU (not wall clock).
	// 0 = unlimited. Recommended for tinyshop: 3s.
	MaxCPUTime time.Duration

	// MaxProcesses limits child process count via RLIMIT_NPROC (includes threads).
	// 0 = unlimited. Recommended for tinyshop: 5 (allows Python internal threads).
	MaxProcesses int

	// MaxFileSize limits single file write size via RLIMIT_FSIZE.
	// 0 = unlimited. Recommended for tinyshop: 10MB.
	MaxFileSize int64

	// MaxOpenFiles limits simultaneously open file descriptors via RLIMIT_NOFILE.
	// 0 = unlimited. Recommended for tinyshop: 32.
	MaxOpenFiles int

	// EnvWhitelist restricts child process environment to only these variables.
	// nil = use v1 blacklist behavior (filter BYTEFORGE_SECRET* only).
	// Recommended for tinyshop: ["LANG", "LC_ALL", "PYTHONIOENCODING", "PATH"]
	EnvWhitelist []string

	// UseTempWorkDir creates a temporary directory, copies WorkingDir content into it,
	// and uses it as the child's cwd. Cleaned up after evaluation.
	UseTempWorkDir bool

	// SeccompProfile selects a preset syscall filter policy.
	SeccompProfile SeccompProfile

	// NoNewPrivs calls prctl(PR_SET_NO_NEW_PRIVS, 1) to prevent setuid privilege escalation.
	// Forced to true when SeccompProfile != SeccompOff.
	NoNewPrivs bool
}

type SandboxMeta struct {
	// Trigger identifies what caused process termination.
	Trigger SandboxTrigger

	// CPUTime is the cumulative CPU time used.
	CPUTime time.Duration

	// WallTime is the wall-clock elapsed time.
	WallTime time.Duration

	// MaxRSSKB is the peak physical memory in KB (from /proc polling max).
	MaxRSSKB int64

	// Message is a human-friendly description for the student.
	Message string
}

type SandboxTrigger int

type SeccompProfile int