sandbox

type Config struct {
	Mode              string `json:"mode"`
	FailIfUnavailable *bool  `json:"failIfUnavailable"`
	// Env marks the deployment environment: "prod"/"production" upgrades
	// mode=auto to fail-closed bwrap, so a misconfig cannot silently run
	// unsandboxed in production. Explicit config, no implicit env detection.
	Env string `json:"env"`
	// RoBinds are extra read-only binds (public read-only paths shared by all
	// tenants; source and target are the same path). Host absolute paths or
	// workspace refs (e.g. "global:share_dir", resolved per call per tenant).
	RoBinds []string `json:"roBinds"`
	// RwBinds are extra read-write binds (public writable paths shared by all
	// tenants; beware concurrent write conflicts). Host absolute paths or
	// workspace refs (missing dirs are created).
	RwBinds []string `json:"rwBinds"`
	// HidePaths are masked: directories become invisible and read-only,
	// files are masked empty. Host absolute paths or workspace refs. Applied
	// after all binds, so they can mask sensitive subpaths of system binds or
	// the global root. Resolution fails closed (a failed mask means a leak).
	HidePaths []string `json:"hidePaths"`
	// SecretFiles are sensitive files under the global root masked empty
	// (relative to the global root), default ["secrets.enc.json"].
	// Applied after the global ro-bind and ro/rwBinds.
	SecretFiles []string `json:"secretFiles"`
	// HomeRef selects the in-sandbox HOME. Default "." (the writable tenant
	// root, i.e. workspace "."). Values: a workspace ref ("global:dir",
	// "local:path"), a host absolute path, or the literal "host" (pass the
	// host user's home through, ro-bound — intended for single-tenant trusted
	// setups). The resolved home must live inside the view (tenant root,
	// global root or a configured bind); otherwise rendering fails closed
	// instead of pointing HOME at an unmounted void.
	HomeRef string `json:"homeRef"`
	// Maps bind a host source onto a different in-sandbox destination, e.g.
	// share the host's ~/.ssh or ~/.gitconfig into the tenant HOME. Applied
	// after ro/rwBinds and before secretFiles/hidePaths (masks always win).
	Maps []MapConfig `json:"maps"`
	// SystemBinds overrides the default minimal system read-only bind list;
	// empty uses the built-in default (/usr /bin /lib /lib64 /opt plus
	// DNS/cert files under /etc).
	SystemBinds []string `json:"systemBinds"`
	// TmpBase is the base dir on a host tmpfs (default /dev/shm/shellbwrap):
	// each tenant gets a subdir bound rw as in-sandbox /tmp. /dev/shm has its
	// own size cap (usually half of RAM), preventing tmpfs writes from eating
	// node memory. The explicit value "tmpfs" falls back to bwrap's own
	// --tmpfs /tmp (no size limit, not recommended). Must be exclusive per
	// runner instance on a shared host: startup removes leftover contents.
	TmpBase string `json:"tmpBase"`
}

type Deps struct {
	Workspace workspace.Service `json:"workspace"`
}

type MapConfig struct {
	// Src is the host source: an absolute path or a workspace ref
	// ("global:...", "local:..."), resolved per call per tenant.
	Src string `json:"src"`
	// Dst is the in-sandbox destination: an absolute path, or a relative path
	// resolved against the rendered HOME (e.g. ".ssh" → $HOME/.ssh), so the
	// mapping follows homeRef. A relative dst must not escape HOME ("..").
	Dst string `json:"dst"`
	// Mode is "ro" (default) or "rw". rw hands the host source's writable
	// surface to the tenant — a deliberate choice (e.g. never rw-map .ssh).
	Mode string `json:"mode"`
}

type Sandbox struct {
	// contains filtered or unexported fields
}