engineutil

type BlobOp struct {
	*OpDAG
	*pb.SourceOp
}

type Client struct {
	*Opts
	// contains filtered or unexported fields
}

type ContainerExport struct {
	Ref         bkcache.ImmutableRef
	Config      dockerspec.DockerOCIImageConfig
	Annotations []containerutil.ContainerAnnotation
}

type ContainerImageBlob struct {
	// contains filtered or unexported fields
}

type DiffOp struct {
	*OpDAG
	*pb.DiffOp
}

type ExecOp struct {
	*OpDAG
	*pb.ExecOp
}

type ExecutionMetadata struct {
	// Internal execution initiated by dagger and not the user.
	// Used when executing the module runtime itself.
	Internal bool

	// UseRecipeIDsByDefault configures nested clients started by this exec to
	// resolve id() as recipe-form IDs unless explicitly requested otherwise.
	UseRecipeIDsByDefault bool

	CallDigest digest.Digest

	// hostname -> list of aliases
	HostAliases map[string][]string
	// search domains to install prior to the session's domain
	ExtraSearchDomains []string

	RedirectStdinPath  string
	RedirectStdoutPath string
	RedirectStderrPath string

	SecretEnvNames  []string
	SecretFilePaths []string

	SystemEnvNames []string

	EnabledGPUs []string

	// If true, skip injecting dagger-init into the container.
	NoInit bool

	// ProfArgs is the fully-resolved user command (entrypoint + args), captured
	// in core at exec-run time BEFORE any engine shim (the QEMU emulator, the
	// executor's /.init) wraps it, so wall-clock profiling can headline the user's
	// real program (e.g. "go build") instead of a shim. It is read at the executor
	// emit site (executor_spec.go) by both the native recorder and the OTel source.
	//
	// json:"-" is load-bearing: ExecutionMetadata is JSON-serialized into exec
	// cache keys (dagql.SerializedString/DigestedSerializedString), and ProfArgs
	// must never perturb a cache key. It is excluded structurally here; it is also
	// set only at run time (after every execMD digest is computed), and the
	// core->executor hand-off is an in-process pointer (never re-serialized), so
	// excluding it from JSON cannot drop it before the emit.
	ProfArgs []string `json:"-"`

	// UserFacingSpanCtx is the last user-facing (non-profiling) span of the API
	// call this exec runs under, captured in core at exec-setup time (see
	// dagql.UserFacingSpanContext). The executor injects IT as the container's
	// traceparent — not its own current span: the exec runs on a detached
	// execution context (shared/deduped, possibly lazily resumed) whose current
	// span is a profiling span (the call_exec twin / a resume span) and which
	// does not carry the caller's context mark, so only core still knows the
	// user-facing span. Everything the container emits (nested SDK client
	// spans, user process logs, returned Error origin extensions) parents to
	// the injected id, and telemetry parented to an unrendered passthrough span
	// vanishes from the row that should show it.
	//
	// json:"-" is load-bearing for the same reason as ProfArgs above: this
	// run-time-only value must never perturb an exec cache key, and the
	// core->executor hand-off is an in-process pointer, so excluding it from
	// JSON cannot drop it before use.
	UserFacingSpanCtx trace.SpanContext `json:"-"`

	// HostAliasFQDNs maps a HostAliases key (a bound service's advertised
	// hostname) to the fully qualified name the running service actually
	// registered in DNS under. A service with a custom hostname is namespaced
	// into the domain of whichever module started it (core.Service.startContainer),
	// and that FQDN is the only name the dnsname CNI plugin registers. The
	// consuming exec only searches its own module domain plus the session
	// domain, so re-deriving the name from the bare hostname fails outright
	// whenever the service was first started by a different module. Recording
	// the FQDN keeps an explicit WithServiceBinding working across that
	// boundary without installing the producer's domain as a search domain,
	// which would expose every other service scoped to it.
	//
	// Only entries for names in the engine's DNS domain are set; tunnel
	// services report a host-side dial address instead and must keep resolving
	// through the search-domain sweep in setupNetwork.
	//
	// json:"-" is load-bearing for the same reason as ProfArgs above: this
	// run-time-only value must never perturb an exec cache key, and the
	// core->executor hand-off is an in-process pointer, so excluding it from
	// JSON cannot drop it before use.
	HostAliasFQDNs map[string]string `json:"-"`
}

type FileOp struct {
	*OpDAG
	*pb.FileOp
}

type GitCheckoutPack struct {
	HeadSHA      string
	HeadRef      string
	ObjectFormat string
	StateDigest  string
	BundlePath   string
}

type GitOp struct {
	*OpDAG
	*pb.SourceOp
}

type GitUncommittedPack struct {
	HeadSHA            string
	NestedRepositories []string
	PatchPath          string
}

type GlobalNamespaceWorkerPool struct {
	// contains filtered or unexported fields
}

type HTTPOp struct {
	*OpDAG
	*pb.SourceOp
}

type ImageOp struct {
	*OpDAG
	*pb.SourceOp
}

type ImageReader struct {
	Tarball io.ReadCloser

	ContentStore content.Store
	ImagesStore  images.Store
	LeaseManager leases.Manager
}

type ImageWriter struct {
	Tarball io.WriteCloser

	ContentStore content.Store
	ImagesStore  images.Store
	LeaseManager leases.Manager
}

type LocalOp struct {
	*OpDAG
	*pb.SourceOp
}

type MergeOp struct {
	*OpDAG
	*pb.MergeOp
}

type NamespaceJob struct {
	Container  string                 // Container whose namespaces to enter
	Namespaces []specs.LinuxNamespace // Namespaces to enter (e.g., network, mount, etc.)
	Fn         func() error           // Function to execute
	ResultCh   chan error             // Channel to send result back
}

type Namespaced interface {
	NamespaceID() string
	Release(context.Context) error
}

type OCIOp struct {
	*OpDAG
	*pb.SourceOp
}

type OpDAG struct {
	*pb.Op                  // the root of the DAG
	OpDigest *digest.Digest // the digest of this root, common across all outputIndexes for this root
	Metadata *pb.OpMetadata // metadata for the root
	Inputs   []*OpDAG       // the inputs to the root
	// contains filtered or unexported fields
}

type Opts struct {
	ID               string
	Labels           map[string]string
	Platforms        []ocispecs.Platform
	NetworkProviders map[pb.NetMode]network.Provider
	Snapshotter      bkcache.Snapshotter
	ContentStore     *containerdsnapshot.Store
	Applier          diff.Applier
	Differ           diff.Comparer
	IdentityMapping  *idtools.IdentityMapping

	ExecutorRoot    string
	TelemetryPubSub http.Handler
	SessionHandler  sessionHandler

	Runc                *runc.Runc
	DefaultCgroupParent string
	ProcessMode         oci.ProcessMode
	DNSConfig           *oci.DNSConfig
	ApparmorProfile     string
	SELinux             bool
	Entitlements        entitlements.Set

	HostMntNS  *os.File
	CleanMntNS *os.File

	Dialer               *net.Dialer
	GetClientCaller      func(context.Context, string) (SessionCaller, error)
	GetHostServiceCaller func(context.Context, string) (SessionCaller, error)
	GetMainClientCaller  func(context.Context) (SessionCaller, error)
	GetRegistryResolver  func(context.Context) (*serverresolver.Resolver, error)

	Interactive        bool
	InteractiveCommand []string
	// contains filtered or unexported fields
}

type PreparedContainerImage struct {
	// contains filtered or unexported fields
}

type SessionCaller interface {
	Conn() *grpc.ClientConn
	Supports(method string) bool
}

type TerminalClient struct {
	Stdin    io.ReadCloser
	Stdout   io.WriteCloser
	Stderr   io.WriteCloser
	ResizeCh chan bkgw.WinSize
	ErrCh    chan error
	Close    func(exitCode int) error
}

type Trie struct {
	// contains filtered or unexported fields
}

type TrieIter struct {
	*Trie
	// contains filtered or unexported fields
}