runtime

type Config struct {
	Scope     core.ScopeChecker
	Approval  core.Approver
	Evidence  core.EvidenceSink
	HTTP      core.HTTPDoer
	Fetcher   core.Fetcher
	Limiter   core.Limiter
	Audit     core.AuditSink
	Settings  core.Settings
	Sealer    core.Sealer
	Logger    core.Logger
	Clock     core.Clock
	IDs       core.IDGenerator
	Processes core.ProcessRunner
	Artifacts core.ArtifactStore
	Binaries  core.BinaryManager

	Fingerprints    core.FingerprintProvider
	Templates       core.TemplateCatalog
	TemplateEngines map[string]core.TemplateEngine
	Sessions        core.SessionManager

	// Intel is the host-owned vulnerability-intel store; Completer is the
	// host-provided model port. Both are optional and only required by the
	// kits that declare them.
	Intel     core.IntelStore
	Completer core.Completer
	// ExtraIntel are host-implemented advisory sources polled alongside the
	// intel kit's own. Optional; see core.IntelSource.
	ExtraIntel []core.IntelSource

	// RequireApprovalAt defaults to high.
	RequireApprovalAt core.Risk
	// IdempotencyWindow bounds how long a result keyed by idempotency_key is
	// reused. Defaults to 5 minutes; <=0 disables caching.
	IdempotencyWindow time.Duration
	// JobWindow bounds how long a finished async job stays pollable through
	// job_status. Defaults to 15 minutes.
	JobWindow time.Duration
	// JobTimeout bounds one async job's total runtime. Defaults to 0 (no extra
	// bound beyond whatever the tool applies).
	JobTimeout time.Duration
}

type Runtime struct {
	// contains filtered or unexported fields
}