Rulvar API reference / @rulvar/executor / ContainerExecutorOptions
Interface: ContainerExecutorOptions
Defined in: packages/executor/src/container.ts:42
Properties
| Property | Type | Description | Defined in |
|---|---|---|---|
args? | readonly string[] | Argv prepended before the tool's own args. | packages/executor/src/container.ts:84 |
capDrop? | readonly string[] | Capabilities to drop. Default ['ALL']. | packages/executor/src/container.ts:58 |
command? | string | Fallback command (inside the container) when executorSpec omits one. | packages/executor/src/container.ts:82 |
cpus? | string | --cpus. Default '1.0'. | packages/executor/src/container.ts:52 |
credentials? | (request) => | Record<string, string> | Promise<Record<string, string>> | Mints per-call short-lived credentials, forwarded into the container. | packages/executor/src/container.ts:68 |
daemonEnv? | readonly string[] | Host env names the docker CLI itself may read. Default the daemon set. | packages/executor/src/container.ts:66 |
docker? | string | The docker-compatible CLI. Default 'docker'. | packages/executor/src/container.ts:46 |
extraDockerArgs? | readonly string[] | Extra raw docker run flags, appended before the image. | packages/executor/src/container.ts:62 |
forwardEnv? | readonly string[] | Host env names forwarded INTO the container (not the daemon env). Default none. | packages/executor/src/container.ts:64 |
image | string | The image the tool runs in (required). | packages/executor/src/container.ts:44 |
killGraceMs? | number | Grace between SIGTERM and SIGKILL of the docker CLI. Default 5_000. | packages/executor/src/container.ts:74 |
ledger? | ToolEffectLedger | Records every dispatch. | packages/executor/src/container.ts:80 |
maxOutputBytes? | number | Max stdout/stderr bytes captured. Default 1 MiB. | packages/executor/src/container.ts:76 |
memory? | string | --memory. Default '256m'. | packages/executor/src/container.ts:50 |
network? | string | --network. Default 'none' (no network at all). | packages/executor/src/container.ts:48 |
now? | () => number | Injectable clock for the ledger's timing fields (tests). | packages/executor/src/container.ts:86 |
pidsLimit? | number | --pids-limit. Default 128. | packages/executor/src/container.ts:54 |
readOnly? | boolean | --read-only root filesystem. Default true. | packages/executor/src/container.ts:56 |
timeoutMs? | number | Hard wall-clock ceiling per call. Default 30_000. | packages/executor/src/container.ts:72 |
workdirBase? | string | Base directory for the per-call ephemeral workdir. Default os.tmpdir(). | packages/executor/src/container.ts:78 |
workMount? | string | Where the ephemeral workdir is mounted inside the container. Default '/work'. | packages/executor/src/container.ts:60 |