Versions in this module Expand all Collapse all v1 v1.0.3 Oct 15, 2026 v1.0.2 Oct 14, 2026 v1.0.1 Oct 14, 2026 v1.0.0 Oct 14, 2026 Changes in this version + const AgentClaude + const AgentCodex + const AgentOpenCode + const AgentPi + const ContainerEngine + const DaggerInstallScript + const DefaultRestrictedMaxTurns + const DefaultRestrictedTimeout + const DefaultTimeout + const EnvDaggerRunnerHost + const EnvOpenCodeConfig + const EnvOpenCodeConfigContent + const EnvOpenCodePermission + const EnvPiMCPConfigMode + const InterruptedFile + const OpenCodeConfigFile + const OutcomeFile + const PiMCPAdapter + const PiMCPConfigFile + const ReadServerName + const ResultFile + const SandboxCLI + const SandboxClaude + const SandboxContainer + const SandboxNone + const SandboxSbx + const SubtypeCostCap + const ToolsAll + const TranscriptFile + const WorkFile + var AgentCredentials = credentialsByAgent() + var Agents = procs.AgentExecutables + var Backends = []Backend + var ErrNoGrants = errors.New("request has no grants") + var ErrNotGranted = errors.New("not granted") + var ErrPolicyChanged = errors.New("turn differs from the session's policy") + var ErrReleased = errors.New("session was released") + var ErrUnsupported = errors.New("grant cannot be enforced") + var Placements = []Placement + var Sandboxes = []string + var SbxTemplates = map[string]string + var VCSExecutables = []string + func CheckDaggerEngine(engine string) error + func CheckDaggerVersion(version string) error + func CountTurns(path string) int + func MCPEntries(servers map[string]MCPEntry) map[string]MCPEntry + func MarkInterrupted(sessionDir, note string) error + func RateLimitedText(msg string) bool + func ReadWork(dir string) (work.Ref, error) + func ValidateOutcome(role, status string, valid []string) error + func WriteMCPConfig(path string, entries map[string]MCPEntry) error + func WriteOutcome(dir string, o Outcome) error + func WriteWork(dir string, ref work.Ref) error + type Access string + const ReadOnly + const ReadWrite + type Backend struct + ArgvMarker bool + Credentials []string + Name string + ProviderEnv []string + Restricted *RestrictedCapabilities + WritableTools map[Placement]ToolSupport + type Bind struct + Access Access + Destination string + Source string + type Boundary interface + Verify func(req Request) (*Turn, error) + type Confinement struct + Denied []string + Mounts []Mount + Sandbox string + System []Mount + type Confiner interface + Check func(c Confinement) error + Start func(cmd *exec.Cmd, c Confinement) error + type ContainerBoundary struct + Environ func() []string + Home string + Masks []Bind + MountDirs []string + SessionsDir string + SkillMountDirs []string + func (b ContainerBoundary) Verify(req Request) (*Turn, error) + type Dagger struct + Engine string + Version string + type Enforcer interface + Prepare func(ctx context.Context, grants Grants) (Session, error) + func NewContainer(r Runner, image string) Enforcer + func NewHostClaude(r Runner) Enforcer + func NewHostNone(r Runner) Enforcer + func NewSbx(r Runner, agent, template string) Enforcer + type Grants struct + DaggerEngine string + Env []string + HostServers []HostServer + Mounts []Mount + Tools []string + VCS bool + Within string + type HostBoundary struct + AddDirs []string + Confiner Confiner + Environ func() []string + SessionsDir string + SkillDirs []string + StripPrefix string + SystemPaths []Mount + func (h HostBoundary) Verify(req Request) (*Turn, error) + type HostMCP struct + Entry MCPEntry + Env map[string]string + ListenArgs []string + ListeningPrefix string + Name string + Path string + TokenEnv string + type HostServer struct + Name string + Port int + type Interrupted struct + Dir string + Killed bool + Name string + Note string + Role string + Transcript string + Turns int + func CheckInterrupted(role, dir string, alive func(int) bool) (*Interrupted, bool) + type MCPEntry struct + Args []string + BearerTokenEnv string + Command string + Env map[string]string + EnvVars []string + Headers map[string]string + Type string + URL string + type Mount struct + Access Access + Path string + func DefaultSystemPaths() []Mount + type Outcome struct + Note string + Status string + Work work.Ref + func ReadOutcome(dir string) (o Outcome, ok bool, err error) + func Report(dir, role string, valid []string, o Outcome) (Outcome, error) + type Placement struct + Confine bool + Sandbox string + func PlacementOf(p Profile) Placement + func (p Placement) String() string + type Policy struct + Agent string + Binds []Bind + DaggerEngine string + Denied []string + DeniedExecutables []string + Env []string + HostServers []HostServer + Image string + MCPServers []string + Mounts []Mount + Sandbox string + System []Mount + Tools []string + VCS bool + func NewPolicy(sandbox string, g Grants) (Policy, error) + func (p Policy) Allows(tool string) bool + func (p Policy) Reads(path string) bool + func (p Policy) Runs(path string) bool + func (p Policy) Writes(path string) bool + type Profile struct + Agent string + AllowedTools []string + Confine bool + ContainerUseEnvironment string + Dagger *Dagger + DisallowedTools []string + Effort string + Env map[string]string + Fallback *Profile + MCP map[string]MCPEntry + MaxTurns int + Model string + Name string + PiPackages []string + Sandbox string + SandboxDomains []string + SandboxImage string + Shell string + Skills []string + Timeout time.Duration + VCSAccess bool + func (p Profile) Validate() error + type RateLimit struct + ResetsAt time.Time + Status string + Type string + type Request struct + ContainerEnv map[string]string + CostCapUSD float64 + Env map[string]string + Grants *Grants + HostMCP *HostMCP + Name string + Profile Profile + Prompt string + ResumeID string + SessionDir string + SystemPrompt string + VCSContainerEnv map[string]string + VCSContainerPath []string + VCSEnv map[string]string + ValidOutcomes []string + Workspace vcs.Workspace + func Admit(p Policy, g Grants, req Request) (Request, error) + type RestrictedCapabilities struct + FollowUp bool + ReadServer bool + Supported bool + type RestrictedResult struct + Model string + type Result struct + Agent string + ClaudeID string + CostCapped bool + CostKnown bool + CostUSD float64 + Diagnostics []string + Duration time.Duration + ErrorSubtype string + ExitCode int + HasOutcome bool + IsError bool + Name string + NumTurns int + Outcome Outcome + RateLimit *RateLimit + ResultText string + Role string + SessionDir string + Signal int + StartedAt time.Time + TimedOut bool + Transcript string + func (r *Result) SessionLimited() (time.Time, bool) + type Runner struct + AddDirs []string + ClaudeBin string + CodexBin string + Confiner Confiner + ContainerHome string + ContainerLabel string + ContainerListen string + ContainerUseRepository string + DockerBin string + EnvironmentPrefix string + Logger *slog.Logger + MountDirs []string + NamePrefix string + OpenCodeBin string + PiBin string + SbxBin string + SessionsDir string + SkillMountDirs []string + Skills SkillPreparer + Stream io.Writer + SystemPaths []Mount + func (r *Runner) NewSessionDir(name string) (string, error) + func (r *Runner) Run(ctx context.Context, req Request) (*Result, error) + func (r *Runner) RunRestricted(ctx context.Context, req Request) (*RestrictedResult, error) + func (r *Runner) Verify(req Request) (*Turn, error) + type SandboxBoundary struct + MountDirs []string + SessionsDir string + SkillMountDirs []string + func (b SandboxBoundary) Verify(req Request) (*Turn, error) + type Session interface + Policy func() Policy + Release func(ctx context.Context) error + Run func(ctx context.Context, req Request) (*Result, error) + type SkillPreparer interface + Prepare func(context.Context, []string) ([]string, error) + type ToolSupport struct + Remedy string + Supported bool + type Turn struct + Binds []Bind + Confinement *Confinement + DaggerEngine string + DeniedExecutables []string + Env []string + HostServers []HostServer + Mounts []Mount + Tools []string + VCS bool + WriteDirs []string
Go to main page