execenv

type ApprovalAbortedError struct {
	Reason string
}

type ApprovalRequest struct {
	ToolName string
	Action   string
	Reason   string
	Command  string
}

type ApprovalRequiredError struct {
	Reason string
}

type Approver interface {
	Approve(context.Context, ApprovalRequest) (bool, error)
}

type CodedError interface {
	error
	Code() ErrorCode
}

type CommandDecision struct {
	Route      ExecutionRoute
	Escalation *EscalationReason
}

type CommandRequest struct {
	Command     string
	Dir         string
	Timeout     time.Duration
	IdleTimeout time.Duration
}

type CommandResult struct {
	Stdout   string
	Stderr   string
	ExitCode int
}

type CommandRunner interface {
	Run(context.Context, CommandRequest) (CommandResult, error)
}

type Config struct {
	PermissionMode PermissionMode
	SandboxType    string
	SafeCommands   []string
	SandboxPolicy  SandboxPolicy

	FileSystem    FileSystem
	HostRunner    CommandRunner
	SandboxRunner CommandRunner
}

type ErrorCode string

type EscalationReason struct {
	Message string
}

type ExecutionRoute string

type FileSystem interface {
	Getwd() (string, error)
	UserHomeDir() (string, error)
	Open(path string) (*os.File, error)
	ReadDir(path string) ([]os.DirEntry, error)
	Stat(path string) (os.FileInfo, error)
	ReadFile(path string) ([]byte, error)
	WriteFile(path string, data []byte, perm os.FileMode) error
	Glob(pattern string) ([]string, error)
	WalkDir(root string, fn fs.WalkDirFunc) error
}

type PermissionMode string

type Runtime interface {
	PermissionMode() PermissionMode
	SandboxType() string
	SandboxPolicy() SandboxPolicy
	FallbackToHost() bool
	FallbackReason() string
	FileSystem() FileSystem
	HostRunner() CommandRunner
	SandboxRunner() CommandRunner
	SafeCommands() []string
	DenyMetaChars() bool
	DecideRoute(command string, sandboxPermission SandboxPermission) CommandDecision
}

type SandboxFactory interface {
	Type() string
	Build(Config) (CommandRunner, error)
}

type SandboxPermission string

type SandboxPolicy struct {
	Type             SandboxPolicyType
	NetworkAccess    bool
	WritableRoots    []string
	ReadOnlySubpaths []string
}

type SandboxPolicyType string