kern

type BoxOptions struct {
	Name            string
	Image           string
	Command         []string
	Entrypoint      []string
	Env             []string
	Binds           []string
	Memory          string
	CPUs            string
	Network         string
	Workdir         string
	SecurityProfile string
	RequireLimits   bool
}

type Client struct {
	// contains filtered or unexported fields
}

type CommandRunner func(ctx context.Context, name string, args ...string) *exec.Cmd

type Config struct {
	// Binary is the kern executable path; empty uses "kern" on PATH.
	Binary string
	// SecurityProfile sets --security-profile on boxes (e.g. "untrusted").
	SecurityProfile string
	// RequireLimits maps to --require-limits when true.
	RequireLimits bool
	// BindAllowed mirrors executor.mounts.bind.allowed for user bind mounts.
	BindAllowed bool
}

type Option func(*Runtime)

type Runtime struct {
	// contains filtered or unexported fields
}