runtime

type Backing interface {
	Up(ctx context.Context) ([]wire.Remote, error)
	// Down tears the backing services down. Best-effort; the shared
	// orchestrator calls it before destroying the compute.
	Down(ctx context.Context)
}

type Compute interface {
	// Prepare creates the isolated compute (network/namespace/VM). Idempotent.
	Prepare(ctx context.Context) error
	// RunSupervisor delivers the mdev supervisor into the toolchain and starts it with
	// args (which begin "supervisor …"; the compute prepends the binary path).
	// Returns a Handle over the supervisor's lifetime.
	RunSupervisor(ctx context.Context, args []string) (Handle, error)
	// Destroy tears the whole sandbox down. Best-effort.
	Destroy(ctx context.Context)
}

type Daemon struct {
	Token     string
	AdminAddr string // the daemon's admin listen address, e.g. ":14434"
	Image     string // multi-arch mdev image supervisors are seeded from
}

type Dialback struct {
	URL   string
	Token string
}

type Handle interface {
	Done() <-chan struct{}
}

type Runner interface {
	// Up provisions the sandbox, brings up its backing services + workloads,
	// and starts `mdev supervisor` inside the toolchain compute (the supervisor then
	// dials the daemon and registers). Returns once provisioned; the Handle
	// observes the supervisor's lifetime.
	Up(ctx context.Context) (Handle, error)
	// Down removes everything Up created. Best-effort and idempotent.
	Down(ctx context.Context)
}

type Spec struct {
	Name          string          // sandbox identity (tunnel registration key)
	WorkspaceRoot string          // host path to the worktree; the file-sync source root
	Image         string          // toolchain image for the main + process workloads
	Processes     []wire.Workload // run: workloads, handed to the supervisor
	Dialback      Dialback        // how the in-sandbox supervisor connects home
}