agents

type Agent interface {
	Name() string
	Capabilities() Capabilities
	HandlePreTool(ctx context.Context, req Request) (Response, error)
	HandlePostTool(ctx context.Context, req Request) (Response, error)
	HandleStop(ctx context.Context, req Request) (Response, error)
	// Passthrough is the fail-open JSON body for event (empty/allow). It must
	// always be valid JSON the agent accepts as "do nothing".
	Passthrough(event Event) []byte
	Install(opts InstallOptions) error
	Uninstall(opts InstallOptions) error
}

type Antigravity struct {
	// Binary is the jevkit executable name/path used in rewrites and install
	// commands. Empty means "jevkit".
	Binary          string
	Security        *config.Config
	SecurityDecider *registry.Decider
	StateDir        string
}

type ApplyReport struct {
	Agent    string
	Previews []FilePreview
}

type Capabilities struct {
	// PreTool is true when HandlePreTool may rewrite or decide on a tool call.
	PreTool bool
	// PostTool is true when HandlePostTool may replace or observe tool output.
	PostTool bool
	// Stop is true when HandleStop may block or continue a stop event.
	Stop bool
	// OutputReplace is true when PostTool can replace model-visible output.
	OutputReplace bool
	// PreToolRewrite is true when PreTool can rewrite the shell command into
	// `jevkit exec -- ...`.
	PreToolRewrite bool
}

type Claude struct {
	// Getenv reads process env; nil means os.Getenv. Gates:
	// JEVKIT_COMPACT=1 enables compaction; JEVKIT_COMPACT_SHADOW=1 passes through.
	Getenv func(string) string
	// ThresholdBytes overrides the compact threshold; zero uses the default.
	ThresholdBytes int
	// Asker is the optional jev ranked-line tier; nil is deterministic-only.
	Asker compact.Asker
	// StateDir is forwarded to compact shadow logging (unused when shadow
	// passthrough skips compaction).
	StateDir        string
	Policy          *compact.Policy
	Security        *config.Config
	SecurityDecider *registry.Decider
}

type Codex struct {
	// Binary is the jevkit executable name/path used in rewrites and install
	// commands. Empty means "jevkit".
	Binary string
	// Getenv reads process env; nil means os.Getenv. JEVKIT_COMPACT enables
	// result replacement, while JEVKIT_COMPACT_SHADOW preserves original output.
	Getenv func(string) string
	// ThresholdBytes overrides the compaction threshold; zero uses the default.
	ThresholdBytes int
	// Asker is the optional Jev ranked-line tier. A nil or unavailable client
	// fails open and preserves Codex's original tool result.
	Asker           compact.Asker
	StateDir        string
	Policy          *compact.Policy
	Security        *config.Config
	SecurityDecider *registry.Decider
}

type Components struct {
	Hooks bool
	MCP   bool
}

type Cursor struct {
	// Binary is the jevkit executable name/path used in rewrites and install
	// commands. Empty means "jevkit".
	Binary string
	// Getenv reads process env; nil means os.Getenv. Gates:
	// JEVKIT_COMPACT=1 enables post-tool compaction; JEVKIT_COMPACT_SHADOW=1
	// passes through post-tool replacements (pre-tool rewrite still applies).
	Getenv func(string) string
	// ThresholdBytes overrides the compact threshold; zero uses the default.
	ThresholdBytes int
	// Asker is the optional jev ranked-line tier; nil is deterministic-only.
	Asker compact.Asker
	// StateDir is forwarded to compact shadow logging.
	StateDir        string
	Policy          *compact.Policy
	Security        *config.Config
	SecurityDecider *registry.Decider
}

type Event string

type FilePreview struct {
	Path   string
	Before []byte
	After  []byte
}

type InstallOptions struct {
	// WorkDir is the project root (project-scoped config).
	WorkDir string
	// ConfigDir is the user config home (user-scoped config).
	ConfigDir string
	// Scope is "project" or "user"; empty means project when WorkDir is set.
	Scope string
	// Binary is the absolute path to the jevkit binary to register.
	Binary string
	// DryRun reports the planned edit without writing.
	DryRun         bool
	InjectionGuard bool
	// Preview receives each planned file edit (hooks and, when used by the
	// installer, MCP configs). Called on dry-run and on write.
	Preview func(FilePreview)
}

type InstallState struct {
	Name     string
	Detected bool
	Binary   string // first PATH hit; empty when not detected
	Hooks    string // "not installed" | "project" | "user" | "project+user"
	MCP      string // same vocabulary
}

type OpenCode struct {
	// Binary is the jevkit executable name/path used in rewrites and the
	// staged plugin default. Empty means "jevkit".
	Binary         string
	Getenv         func(string) string
	ThresholdBytes int
	Asker          compact.Asker
	StateDir       string
	Policy         *compact.Policy
}

type Options struct {
	// Timeout is the hard upper bound; zero means DefaultTimeout.
	Timeout time.Duration
	// StateDir is the usage/telemetry state home (see usage.Path). Empty
	// disables telemetry unless AppendHook is set.
	StateDir string
	// LoadError is a policy-load failure recorded with this invocation.
	LoadError string
	// Now is the clock; nil means time.Now.
	Now func() time.Time
	// AppendHook records one invocation; nil uses usage.AppendHook when
	// StateDir is set. Tests inject a recorder here.
	AppendHook func(stateDir string, rec usage.HookInvocation) error
}

type ReplacementScope string

type Request struct {
	// Raw is the original stdin bytes (valid JSON when the runner reached the
	// adapter; garbage never reaches adapters).
	Raw json.RawMessage
	// Event is the normalized CLI event.
	Event Event
	// ProtocolVersion is the version declared by the payload, or
	// ProtocolVersion when the field is absent.
	ProtocolVersion int
}

type Response struct {
	Body    []byte
	Outcome string
	// Deny marks a deliberate policy denial (as opposed to a fail-open
	// passthrough). When true and ExitCode is 0, the process still exits 0
	// and the body carries the deny for agents that encode it in JSON.
	Deny bool
	// ExitCode overrides the process exit code for a deliberate deny. Zero
	// keeps the fail-open default of exit 0.
	ExitCode int
}

type RuntimeCapability struct {
	Name               string
	PreToolDecision    bool
	Evidence           string
	PostToolOutput     bool
	AuthoritativeState string
	Replacement        ReplacementScope
	ContextInjection   bool
	Telemetry          bool
	Installation       string
	// ShellPolicyCoverage is true when the installed pre-tool hook actually
	// inspects and can rewrite an eligible shell call before it runs (see
	// IsShellWrapperCommand / buildSecurityShellWrapperCommand call sites).
	// OpenCode's plugin never receives a pre-tool event (HandlePreTool is a
	// documented no-op; see opencode.go and docs/AGENT-INTEGRATIONS.md), so its
	// shell calls are never policy-checked in this version. This must stay in
	// sync with PreToolDecision for every runtime that claims shell coverage;
	// see TestRuntimeCapabilityAuditMatchesAdapterClaims.
	ShellPolicyCoverage bool
	InjectionGuard      bool
}