tiny.sandbox.Plan

1/// One execution request, borrowed for the length of the call: the slices and2/// directory handles in it belong to the caller and have to outlive `execute` .3/// `max_file_bytes` bounds the size of a source file copied into the layer4/// during staging, and a larger file is left out of the copy and recorded as5/// skipped. The same bound applies to nothing else: the child's own output and6/// the hashing that builds the change set are unbounded by it.7pub const Plan = struct {8    scratch: sys.fs.Dir,9    source: ?sys.fs.Dir = null,10    argv: []const []const u8,11    cwd: []const u8 = ".",12    environ_map: ?*const sys.process.Environ.Map = null,13    runner: audit.Runner = .staging,14    policy: policy_data.Policy = .{},15    prefix: []const u8 = "sandbox",16    timeout_ms: u64 = 30_000,17    stdout_limit: usize = 1024 * 1024,18    stderr_limit: usize = 1024 * 1024,19    max_file_bytes: usize = 16 * 1024 * 1024,20    interrupt: command.Interrupt = .{},21};

1pub const Plan = plan.Plan;