"""evalharness.sandbox -- environment provisioning for eval AND deployment.

One registry of environment plugins; docker is a single implementation with
two faces:
  exec()  untrusted code, hard isolation (network off, caps, ro rootfs)
  serve() trusted engine containers (vllm/sglang), refcounted via acquire()

Lifecycle guarantees:
  - containers stop+rm when refcount hits 0 or at process exit (atexit)
  - images are NEVER auto-deleted; re-acquire re-runs the local image
  - host file sharing via bind mounts (no docker cp)
"""

from .base import (
    EnvHandle,
    ExecResult,
    SANDBOX_REGISTRY,
    Sandbox,
    acquire,
    get_sandbox,
    register_sandbox,
    stop_all,
)
from .docker import DockerSandbox, docker_available, docker_serve, serve_env
from .local import LocalSandbox

__all__ = [
    'Sandbox', 'DockerSandbox', 'LocalSandbox', 'ExecResult', 'EnvHandle',
    'SANDBOX_REGISTRY', 'register_sandbox', 'get_sandbox', 'acquire', 'stop_all',
    'docker_serve', 'serve_env', 'docker_available',
]