appspec

type Options struct {
	// AppID is the app the sandbox belongs to; it becomes the log entity.
	AppID entity.Id
	// AppName is the app's metadata name, used for MIREN_APP. Callers resolve
	// it -- fetching it here is what made the original impossible to reuse.
	AppName string

	Version *core_v1alpha.AppVersion
	Config  *core_v1alpha.ConfigSpec

	// Service names the entry in Config.Services to draw ports, env, disks,
	// and the command from. Empty means none of that applies, which is the
	// case for a task run.
	Service string

	// Task names the entry in Config.Tasks to draw env from. A run has no
	// service, so without this the env a task declares is stored at build time
	// and read back nowhere -- which silently drops the credentials a task was
	// declared to carry.
	Task string

	Image string

	// Command overrides the service's command. The config entrypoint is still
	// prepended, so callers pass the command as written in app.toml.
	Command string

	// SkipPorts suppresses port configuration entirely.
	//
	// Runs must set this, and not only to avoid a stray listener: the sandbox
	// controller waits for declared ports to bind and kills the sandbox when
	// they don't. A migration would be executed and then reported as a failed
	// startup. Suppressing ports also drops PORT, which follows from there
	// being no port rather than needing its own switch.
	SkipPorts bool

	// SkipDisks suppresses disk volumes and mounts.
	//
	// Runs set this. Miren disks are single-writer, enforced by requiring the
	// attaching service to be fixed at one instance; a run alongside the
	// service that holds the lease would either block or race it. RFD-97 cut
	// per-task disks for exactly that reason.
	SkipDisks bool

	// Stdin makes the container attachable: containerd wires up a stdin FIFO
	// when the task is created and cannot add one afterwards.
	Stdin bool
	// Tty allocates a pty, which also merges stderr into stdout.
	Tty bool

	// LogAttrs replaces the default log labels. Whatever is set here lands
	// verbatim on the container's log entries, which is how a run's output
	// becomes findable without any change to the log pipeline.
	LogAttrs types.Labels

	// RestartPolicy set to never stops the sandbox controller rebooting the
	// container if it vanishes. Runs must set it: rebooting re-executes the
	// command.
	RestartPolicy compute_v1alpha.SandboxSpecRestartPolicy

	// ExtraEnv is appended after config env but before the system-managed
	// variables, so it cannot shadow PORT or ADMIN_TOKEN.
	ExtraEnv []string

	// ShutdownTimeout overrides the service's graceful-shutdown window.
	ShutdownTimeout string
}