worker

type Activity struct {
	Kind  string `json:"kind"`
	Label string `json:"label,omitempty"`
}

type CLIExecutor struct{}

type Executor interface {
	Execute(context.Context, Request) (Reply, error)
}

type GitWorktreeCreator struct{}

type InvocationFailure struct{ Err error }

type IsolatedWorkspace struct {
	Path       string
	Mode       string
	BaseRev    string
	RepoRoot   string
	Worktree   bool
	SecurityOK bool // true only when a runtime/enforcement layer is also active
}

type LogLine struct {
	At       int64     `json:"at"`
	Stream   string    `json:"stream"`
	Text     string    `json:"text"`
	Activity *Activity `json:"activity,omitempty"`
}

type LogMeta struct {
	Invocation string `json:"invocation"`
	Agent      string `json:"agent"`
	Runtime    string `json:"runtime"`
	StartedAt  string `json:"startedAt"`
}

type PromptLayout struct {
	Prompt                  string
	StablePrefix            string
	StablePrefixBytes       int
	StablePrefixFingerprint string
}

type Reply struct {
	Outcome                 string                 `json:"outcome"`
	ReportedOutcome         string                 `json:"-"`
	Content                 string                 `json:"content"`
	CostUSD                 float64                `json:"costUsd"`
	CostReported            bool                   `json:"-"`
	Focus                   string                 `json:"focus,omitempty"`
	Reason                  string                 `json:"reason,omitempty"`
	NextSteps               []string               `json:"nextSteps,omitempty"`
	AcceptanceCriteria      []string               `json:"acceptanceCriteria,omitempty"`
	Checks                  []adaptive.Check       `json:"checks,omitempty"`
	Subtasks                *adaptive.SubtaskGraph `json:"subtasks,omitempty"`
	SessionID               string                 `json:"sessionId,omitempty"`
	InputTokens             *int64                 `json:"inputTokens,omitempty"`
	OutputTokens            *int64                 `json:"outputTokens,omitempty"`
	ToolCalls               *int64                 `json:"toolCalls,omitempty"`
	CacheReadTokens         *int64                 `json:"cacheReadTokens,omitempty"`
	CacheCreationTokens     *int64                 `json:"cacheCreationTokens,omitempty"`
	UsageProvenance         string                 `json:"usageProvenance,omitempty"`
	StablePrefixBytes       int                    `json:"stablePrefixBytes,omitempty"`
	StablePrefixFingerprint string                 `json:"stablePrefixFingerprint,omitempty"`
	// ElapsedMS is the invocation's wall-clock time, set by the caller that
	// timed Execute.
	ElapsedMS        int64    `json:"-"`
	CompactCompleted bool     `json:"-"`
	WorkspaceDrift   []string `json:"-"`
	DriftTruncated   bool     `json:"-"`
}

type Request struct {
	Agent          enrollment.Agent
	Assignment     adaptive.Assignment
	Task           string
	OriginalTask   string
	Plan           string
	Diff           string
	DiffPath       string
	WorkDir        string
	Workspace      string
	AllowRead      []string
	Yolo           bool
	SecurityPolicy string
	SDLCRunID      string
	LogDir         string
	// LogTailBytes overrides MaxLogTail for this invocation's saved
	// stdout/stderr/lines.jsonl bound. Zero or negative uses MaxLogTail.
	LogTailBytes     int
	LiveOutput       func(stream, line string)
	SessionID        string
	CaptureSession   bool
	Compact          bool
	JevkitHooks      bool
	JevkitMCP        bool
	JevkitBinary     string
	JevkitCompaction *bool
	// PromptCache controls Claude Code's invocation-wide provider prompt cache.
	// Nil leaves runtimes without a supported control unmanaged.
	PromptCache *bool
}

type RuntimeMatrix struct {
	Runtime string
	// VersionArgs are the args used to probe CLI reach and version (see
	// ProbeVersion). "--version" is the common convention across all five
	// runtimes' documented CLIs as of the evidence dates in
	// internal/agents/capability_audit.go.
	VersionArgs []string
	// ReadOnlyExecution is true when command() can build a read-only
	// invocation for this runtime without erroring. False means the CLI
	// adapter cannot enforce read-only and must fail closed instead of
	// silently running with write access (see OpenCodeReadOnlyUnenforceable).
	ReadOnlyExecution bool
	// ReadOnlyUnenforceable explains why ReadOnlyExecution is false. Empty
	// when ReadOnlyExecution is true.
	ReadOnlyUnenforceable string
	// WritableExecution is true when command() can build a write-capable
	// (implementer) invocation for this runtime.
	WritableExecution bool
	// ReadOnlyApprovals and WritableApprovals describe the actual argument(s)
	// command() passes to control the runtime's own approval/permission
	// behavior for each invocation kind, in plain language grounded in the
	// literal flag(s) used. Kept separate so a runtime whose read-only and
	// writable paths differ (every runtime here) never has one overwrite the
	// other in display or in tests.
	ReadOnlyApprovals string
	WritableApprovals string
	// PermissionBypassArgument is the literal CLI flag, if any, that a
	// write-capable invocation passes to skip the runtime's own interactive
	// permission prompts entirely. Empty when no such flag is passed. This
	// must never be silently added to a runtime's writable command without
	// updating this field and the matching test.
	PermissionBypassArgument string
	// ShellHookCoverage mirrors agents.RuntimeCapability.ShellPolicyCoverage:
	// whether the installed pre-tool hook can inspect and rewrite an eligible
	// shell call before the runtime executes it. OpenCode is false; see
	// internal/agents/capability_audit.go and docs/AGENT-INTEGRATIONS.md.
	ShellHookCoverage bool
	// WorkdirScoped is true for every runtime: CLIExecutor.Execute always
	// sets cmd.Dir to req.WorkDir (worker.go), independent of the runtime
	// binary. It is not a per-runtime CLI flag.
	WorkdirScoped bool
	// SessionResume is true when command() accepts req.SessionID and passes
	// a runtime-specific resume argument.
	SessionResume bool
	// Cancellation and ChildCleanup are true for every runtime: both are
	// enforced by prepareRuntimeCommand/runRuntimeCommand (process_unix.go,
	// process_windows.go), which own a process group per invocation
	// regardless of which runtime binary it started. See
	// TestRuntimeCancellationKillsSpawnedChild and
	// TestRuntimeExitKillsSpawnedChild.
	Cancellation bool
	ChildCleanup bool
}

type VerifyRequest struct {
	Checks               []adaptive.Check
	ChecksDigest         string
	AuthorizedDigest     string
	PlanDigest           string
	CandidateFingerprint string // patch.diff / report hash (secondary identity)
	Workspace            string
	AllowRead            []string
	// LogDir is the absolute path for diagnostic streams (typically
	// <run>/logs/verification). Receipts themselves are written by the caller.
	LogDir string
	// OutputPathPrefix is the path prefix stored on receipts (relative to the
	// run root), e.g. "logs/verification".
	OutputPathPrefix string
	Now              time.Time
	MaxOutputBytes   int
	Security         *securityconfig.Config
	// RunArgv is optional; tests inject fakes. Default uses security.RunArgv.
	RunArgv func(context.Context, security.ArgvRequest) (security.ArgvResult, error)
	// CaptureIdentity is optional; tests inject fakes. Default captures the
	// private-index worktree tree hash.
	CaptureIdentity func(context.Context, string) (string, error)
}

type VerifyResult struct {
	Record         adaptive.VerificationRecord
	FailureSummary string
	AllPassed      bool
	Invalidated    bool
}

type WorktreeCreator interface {
	Create(ctx context.Context, repoRoot, baseRev, dest string) (IsolatedWorkspace, error)
	Remove(ctx context.Context, ws IsolatedWorkspace) error
	Available(ctx context.Context, repoRoot string) bool
}