sandbox

type Config struct {
	// Runtime selects the sandbox backend (docker or kern). Empty defaults to docker.
	Runtime string
	// SecurityProfile sets kern --security-profile when Runtime is kern.
	SecurityProfile string
	// Image is the container image used for Exec.
	Image string
	// Network is the Docker network mode.
	Network string
	// Memory limits container memory (e.g. "512m").
	Memory string
	// Workspace is the host workspace path. By default it is bind-mounted at the same path
	// inside the container; when WorkspaceInject is set (Docker only), it is copied to /workspace.
	Workspace string
	// WorkspaceInject copies the host Workspace into /workspace via the Docker API instead of
	// bind-mounting. Ignored when Runtime is kern (bind mount remains).
	WorkspaceInject bool
	// ServerURL is the Flowbot API URL injected for the flowbot CLI inside the container.
	ServerURL string
	// AccessToken is the Hub access token injected for the flowbot CLI inside the container.
	AccessToken string
}

type DockerRunner struct{}

type Env struct {
	// contains filtered or unexported fields
}

type KernRunner struct {
	Client          *kern.Client
	SecurityProfile string
}

type RunOptions struct {
	Image       string
	Network     string
	Memory      string
	Workspace   string
	WorkDir     string
	Command     string
	Argv        []string
	ServerURL   string
	AccessToken string
	// Env is appended to the container environment (KEY=VALUE).
	Env []string
	// Stdin is process input; non-empty values are written to .flowbot-stdin under the host workdir.
	Stdin []byte
	// WorkspaceInject copies opts.Workspace into /workspace instead of bind-mounting (Docker only).
	WorkspaceInject bool
	// CLIConfigDir is a host directory bind-mounted read-only at containerCLIConfigPath (kern only).
	// When empty and AccessToken is set, KernRunner materializes a temporary directory.
	CLIConfigDir string
	// CLIBinary is a host path to a linux/amd64 flowbot CLI file (sibling of the server binary).
	// DockerRunner copies it into the container via the Engine API; KernRunner stages a bind dir.
	CLIBinary string
	// CLIBinaryDir is a host directory bind-mounted read-only at containerCLIDirPath (kern only).
	// When empty, KernRunner materializes a real CLI or stub directory.
	CLIBinaryDir string
}

type Runner interface {
	Run(ctx context.Context, opts RunOptions) (env.Capture, error)
}