runner

type DeniedError struct{ Argv []string }

type Deny struct{}

type Exec struct{}

type Fake struct {
	// Handle computes the answer for a spec; nil answers StatusOK with no output.
	Handle func(spec Spec) Result
	// contains filtered or unexported fields
}

type Func func(ctx context.Context, spec Spec) Result

type LineFunc func(line []byte) (stop bool)

type LineRunner interface {
	RunLines(ctx context.Context, spec Spec, onLine LineFunc) Result
}

type Result struct {
	Status Status
	// ExitCode is the exit status, or -1 when the command did not exit normally.
	ExitCode int
	Stdout   []byte
	Stderr   []byte
	// StdoutTruncated and StderrTruncated report output beyond MaxOutput.
	StdoutTruncated bool
	StderrTruncated bool
	// Timeout is the effective timeout that applied.
	Timeout  time.Duration
	Duration time.Duration
	// Err is the underlying error for every status other than StatusOK.
	Err error
}

type Runner interface {
	Run(ctx context.Context, spec Spec) Result
}

type Spec struct {
	// Argv is the command and its arguments; Argv[0] is looked up on PATH unless it contains a separator.
	Argv []string
	// Dir is the working directory; empty means the current directory.
	Dir string
	// Env is the complete environment (KEY=VALUE) of the child. It is ignored when InheritEnv is set.
	// Build it with ScrubEnv; an empty Env gives the child no environment at all.
	Env []string
	// InheritEnv passes the parent's full environment to the child. Prefer an explicit Env.
	InheritEnv bool
	// Stdin is the data piped to the child; nil connects it to the null device.
	Stdin []byte
	// Timeout bounds the run; zero means DefaultTimeout and values above MaxTimeout are lowered to it.
	Timeout time.Duration
	// MaxTimeout raises the ceiling on Timeout above MaxTimeout, up to
	// HardMaxTimeout; zero keeps MaxTimeout. The caller owns the policy that grants it.
	MaxTimeout time.Duration
	// MaxOutput caps each of stdout and stderr in bytes; zero means DefaultMaxOutput. Output past the
	// cap is discarded (the child is not blocked) and reported through Result.*Truncated.
	MaxOutput int64
	// ShortLived marks a trusted command that finishes quickly and does not
	// detach helpers on purpose (git). The runner then skips the descendant
	// watcher and reads the process table once after the command instead of
	// several times; the group kill, run token and marker descriptor still
	// apply. Never set it for scanners, verifiers or evaluated commands.
	ShortLived bool
}

type Status string