api

Mar 28, 2026

Changes in this version

+ const GeneratedSecretPlaceholderPrefix

+ func ParseSecretPlaceholder(s string) (string, string, error)

+ func ValidateSecretPlaceholders(secrets map[string]Secret) error

Mar 23, 2026

Changes in this version

type Config

+ Kernel *KernelConfig

+ type KernelConfig struct

+ Ref string

Mar 1, 2026

Changes in this version

+ func IsValidCPUCount(cpus float64) bool

+ func VCPUCount(cpus float64) (int, bool)

Feb 26, 2026

Changes in this version

type Config

+ LaunchEntrypoint bool

Feb 25, 2026

Changes in this version

type Config

+ func (c *Config) HasVFSMounts() bool

+ func (c *Config) ValidateVFS() error

+ type NetworkBodyTransform struct

+ Find string

+ Replace string

type NetworkConfig

+ Intercept bool

+ Interception *NetworkInterceptionConfig

+ NoNetwork bool

+ func (n *NetworkConfig) Validate() error

+ type NetworkHookCallbackRequest struct

+ CallbackID string

+ Host string

+ IsSSE bool

+ Method string

+ Path string

+ Phase string

+ Query map[string]string

+ RequestHeaders map[string][]string

+ ResponseHeaders map[string][]string

+ StatusCode int

+ type NetworkHookCallbackResponse struct

+ Action string

+ Error string

+ Request *NetworkHookRequestMutation

+ Response *NetworkHookResponseMutation

+ type NetworkHookRequestMutation struct

+ Headers map[string][]string

+ Path string

+ Query map[string]string

+ type NetworkHookResponseMutation struct

+ BodyReplacements []NetworkBodyTransform

+ Headers map[string][]string

+ SetBodyBase64 *string

+ type NetworkHookRule struct

+ Action string

+ BodyReplacements []NetworkBodyTransform

+ CallbackID string

+ DeleteHeaders []string

+ DeleteQuery []string

+ DeleteResponseHeaders []string

+ Hosts []string

+ Methods []string

+ Name string

+ Path string

+ Phase string

+ RewritePath string

+ SetHeaders map[string]string

+ SetQuery map[string]string

+ SetResponseHeaders map[string]string

+ TimeoutMS int

+ type NetworkInterceptionConfig struct

+ CallbackSocket string

+ Rules []NetworkHookRule

Feb 20, 2026

Changes in this version

+ const MountOptionReadonly

+ const MountOptionReadonlyShort

+ const MountTypeHostFS

+ const MountTypeMemory

+ const MountTypeOverlay

+ type VolumeMountSpec struct

+ GuestPath string

+ HostPath string

+ Readonly bool

+ Type string

+ func ParseVolumeMountSpec(vol string, workspace string) (VolumeMountSpec, error)

Feb 18, 2026

Changes in this version

+ const DefaultNetworkMTU

+ var ErrAddHostHost = errors.New("invalid add-host hostname")

+ var ErrAddHostIP = errors.New("invalid add-host ip")

+ var ErrAddHostSpecFormat = errors.New("invalid add-host format")

+ var ErrPortForwardPort = errors.New("invalid port")

+ var ErrPortForwardSpecFormat = errors.New("invalid port-forward spec format")

+ func ValidateAddHost(mapping HostIPMapping) error

type Config

+ ID string

+ func (c *Config) GetHostname() string

+ func (c *Config) GetID() string

+ type HostIPMapping struct

+ Host string

+ IP string

+ func ParseAddHost(spec string) (HostIPMapping, error)

+ func ParseAddHosts(specs []string) ([]HostIPMapping, error)

type NetworkConfig

+ AddHosts []HostIPMapping

+ Hostname string

+ MTU int

+ func (n *NetworkConfig) GetMTU() int

+ type PortForward struct

+ LocalPort int

+ RemotePort int

+ func ParsePortForward(spec string) (PortForward, error)

+ func ParsePortForwards(specs []string) ([]PortForward, error)

+ type PortForwardBinding struct

+ Address string

+ LocalPort int

+ RemotePort int

Feb 14, 2026

Changes in this version

+ var ErrEnvFileLine = errors.New("parse env file line")

+ var ErrEnvNameEmpty = errors.New("environment variable name cannot be empty")

+ var ErrEnvNameInvalid = errors.New("environment variable name is invalid")

+ var ErrEnvVarNotSet = errors.New("environment variable is not set")

+ var ErrGuestPathNotAbs = errors.New("guest path must be absolute")

+ var ErrGuestPathOutside = errors.New("guest path must be within workspace")

+ var ErrHostPathNotExist = errors.New("host path does not exist")

+ var ErrInvalidVolumeFormat = errors.New("expected format host:guest or host:guest:ro")

+ var ErrReadEnvFile = errors.New("read env file")

+ var ErrResolvePath = errors.New("failed to resolve path")

+ var ErrUnknownMountOption = errors.New("unknown option")

+ func ParseEnvFile(path string) (map[string]string, error)

+ func ParseEnvVar(spec string) (string, string, error)

+ func ParseEnvs(envSpecs []string, envFiles []string) (map[string]string, error)

+ func ValidateGuestPathWithinWorkspace(guestPath string, workspace string) error

+ func ValidateVFSMountsWithinWorkspace(mounts map[string]MountConfig, workspace string) error

type FileEvent

+ GID int

+ Mode uint32

+ UID int

type VFSConfig

+ Interception *VFSInterceptionConfig

+ type VFSHookRule struct

+ Action string

+ Name string

+ Ops []string

+ Path string

+ Phase string

+ TimeoutMS int

+ type VFSInterceptionConfig struct

+ EmitEvents bool

+ Rules []VFSHookRule

Feb 9, 2026

Changes in this version

type Config

+ ImageCfg *ImageConfig

type ExecOptions

+ User string

+ type ImageConfig struct

+ Cmd []string

+ Entrypoint []string

+ Env map[string]string

+ User string

+ WorkingDir string

+ func (ic *ImageConfig) ComposeCommand(userArgs []string) []string

Feb 9, 2026

Changes in this version

+ const DefaultGracefulShutdownPeriod

Feb 8, 2026

Changes in this version

+ var DefaultDNSServers = []string

type NetworkConfig

+ DNSServers []string

+ func (n *NetworkConfig) GetDNSServers() []string

Feb 8, 2026

Changes in this version

+ func ValidateGuestMount(path string) error

type Config

+ ExtraDisks []DiskMount

+ type DiskMount struct

+ GuestMount string

+ HostPath string

+ ReadOnly bool

Feb 7, 2026

Changes in this version

type Config

+ Privileged bool

Feb 7, 2026

Changes in this version

+ const DefaultCPUs

+ const DefaultDiskSizeMB

+ const DefaultMemoryMB

+ const DefaultTimeoutSeconds

+ func ShellQuoteArgs(args []string) string

type Secret

+ func ParseSecret(s string) (string, Secret, error)

Feb 7, 2026

Changes in this version

+ const DefaultWorkspace

+ var ErrBlocked = errors.New("request blocked by policy")

+ var ErrHostNotAllowed = errors.New("host not in allowlist")

+ var ErrInvalidConfig = errors.New("invalid configuration")

+ var ErrSecretLeak = errors.New("secret placeholder sent to unauthorized host")

+ var ErrTimeout = errors.New("operation timed out")

+ var ErrVMNotFound = errors.New("VM not found")

+ var ErrVMNotRunning = errors.New("VM is not running")

+ func ParseVolumeMount(vol string, workspace string) (hostPath, guestPath string, readonly bool, err error)

+ type Config struct

+ Env map[string]string

+ Image string

+ Network *NetworkConfig

+ Resources *Resources

+ VFS *VFSConfig

+ func DefaultConfig() *Config

+ func ParseConfig(data []byte) (*Config, error)

+ func (c *Config) GetWorkspace() string

+ func (c *Config) Merge(other *Config) *Config

+ type DirectMount struct

+ HostPath string

+ Readonly bool

+ type Event struct

+ Exec *ExecEvent

+ File *FileEvent

+ Network *NetworkEvent

+ Timestamp int64

+ Type string

+ type ExecEvent struct

+ Command string

+ ExitCode int

+ type ExecOptions struct

+ Env map[string]string

+ Stderr io.Writer

+ Stdin io.Reader

+ Stdout io.Writer

+ WorkingDir string

+ type ExecResult struct

+ Duration time.Duration

+ DurationMS int64

+ ExitCode int

+ Stderr []byte

+ Stdout []byte

+ type FileEvent struct

+ Op string

+ Path string

+ Size int64

+ type FileInfo struct

+ IsDir bool

+ ModTime time.Time

+ Mode uint32

+ Name string

+ Size int64

+ type HTTPHooks struct

+ OnRequest func(req *http.Request) (*http.Request, error)

+ OnResponse func(resp *http.Response, req *http.Request) (*http.Response, error)

+ type MountConfig struct

+ HostPath string

+ Lower *MountConfig

+ Readonly bool

+ Type string

+ Upper *MountConfig

+ type NetworkConfig struct

+ AllowedHosts []string

+ BlockPrivateIPs bool

+ PolicyScript string

+ Secrets map[string]Secret

+ type NetworkEvent struct

+ BlockReason string

+ Blocked bool

+ DurationMS int64

+ Host string

+ Method string

+ RequestBytes int64

+ ResponseBytes int64

+ StatusCode int

+ URL string

+ type Resources struct

+ CPUs int

+ DiskSizeMB int

+ MemoryMB int

+ Timeout time.Duration

+ TimeoutSeconds int

+ type Secret struct

+ Hosts []string

+ Placeholder string

+ Value string

+ type VFSConfig struct

+ DirectMounts map[string]DirectMount

+ Mounts map[string]MountConfig

+ Workspace string

+ func (v *VFSConfig) GetWorkspace() string

+ type VFSHooks struct

+ AfterRead func(path string, n int)

+ AfterWrite func(path string, n int)

+ BeforeClose func(path string)

+ BeforeOpen func(path string, flags int) error

+ type VM interface

+ Close func() error

+ Config func() *Config

+ Events func() <-chan Event

+ Exec func(ctx context.Context, command string, opts *ExecOptions) (*ExecResult, error)

+ ID func() string

+ ListFiles func(ctx context.Context, path string) ([]FileInfo, error)

+ ReadFile func(ctx context.Context, path string) ([]byte, error)

+ Start func(ctx context.Context) error

+ Stop func(ctx context.Context) error

+ WriteFile func(ctx context.Context, path string, content []byte, mode uint32) error