sandbox

type ExitError struct {
	ExitCode int
}

type Sandbox struct {
	Stdin  io.Reader
	Stdout io.Writer
	Stderr io.Writer

	Args []string

	// Dir specifies the working directory of the command. If Dir is the empty
	// string, Run runs the command in the calling process's current directory.
	Dir string

	// Env specifies the environment of the process. Each entry is of the form
	// "key=value".
	Env []string

	// Bind mounts or directories the process should have access too. These
	// should be absolute paths. If a mount is intended to be readonly add ":ro"
	// to the end of the path like `/tmp:ro`
	Mounts []string

	// Network will allow network access
	Network bool

	ReadOnlyPaths []string
	HiddenPaths   []string
}