session

const (
	// KeyAffect is the reading, an affect.Reading object.
	KeyAffect = "affect"
	// KeyTargetTurn is the turn whose reply the message answers; 0 when the
	// message opens the session.
	KeyTargetTurn = "target_turn"
)

const (
	// ContainerUser is the user every session container runs as.
	ContainerUser = "1000:1000"
	// ContainerNetwork is the Docker network mode a session container joins:
	// the default bridge, which reaches the internet and the tailnet.
	ContainerNetwork = "default"
	// ContainerExecutor is the executor's name on the session image's PATH.
	ContainerExecutor = "claude"
	// ContainerCopilotExecutor is the Copilot CLI's name on the session
	// image's PATH, for a recipe that chooses Copilot. It authenticates with
	// gh's credential, which every session container mounts.
	ContainerCopilotExecutor = "copilot"
	// DefaultDockerExecutable attaches the executor to its container.
	DefaultDockerExecutable = "docker"
	// SessionImageFile is where a repository pins its session image.
	SessionImageFile = "bazel/session_image.txt"
	// DefaultSessionImage is the fallback for a worktree that pins no image:
	// the tag bazel/session_image/build.sh gives the last image it built on
	// this host.
	DefaultSessionImage = "csf-session:latest"
	// LabelAssignment is the label every session container carries: its
	// assignment, which is its run directory's name.
	LabelAssignment = "csf.assignment"
)

const (
	// EventTypeContainerStarted records the session container and how long it
	// took to start.
	EventTypeContainerStarted = "harness_container_started"
	// EventTypeLaunchReceipt records, when a session closes, how it was
	// launched (KeyLaunch) and, for a container session, what its container
	// spent. A host session is one the operator chose explicitly.
	EventTypeLaunchReceipt = "harness_launch_receipt"
	// KeyLaunch names how a session was launched: LaunchContainer or
	// LaunchHost.
	KeyLaunch       = "launch"
	LaunchContainer = "container"
	LaunchHost      = "host"
)

const (
	DefaultContainerMemoryBytes int64 = 9 << 30
	DefaultContainerNanoCPUs    int64 = 28_000_000_000
	DefaultContainerPidsLimit   int64 = 2048
)

const (
	// EventTypeSessionSuspended records that an open session was suspended: its
	// turn executor closed, the session open on its recorded conversation.
	EventTypeSessionSuspended = "harness_session_suspended"
	// EventTypeSessionResumed records that a suspended session was resumed: its
	// turn executor opened again on the recorded conversation for the next turn.
	EventTypeSessionResumed = "harness_session_resumed"
	// EventTypeTurnResumed records, after the first turn on a resumed session,
	// what the resume cost: the time to the turn's first token.
	EventTypeTurnResumed = "harness_turn_resumed"
	// KeyIdleSeconds is how long the session had been between turns when its
	// session was suspended.
	KeyIdleSeconds = "idle_seconds"
	// KeySuspendedSeconds is how long the session was suspended before it resumed.
	KeySuspendedSeconds = "suspended_seconds"
	// KeyTimeToFirstToken is the resumed turn's time to its first assistant
	// event, in milliseconds.
	KeyTimeToFirstToken = "time_to_first_token_ms"
)

const (
	// DefaultDockerUpstream is the host's Docker Engine socket the per-session
	// proxy forwards allowed calls to.
	DefaultDockerUpstream = "/var/run/docker.sock"

	// EventTypeSandboxReceipt records a confined session's cgroup usage when it
	// closes, so the ops view can show what it spent.
	EventTypeSandboxReceipt = "harness_sandbox_receipt"
)

const (
	KeyTraceID      = "trace_id"
	KeySpanID       = "span_id"
	KeyParentSpanID = "parent_span_id"
	KeySessionID    = "session_id"
	KeyTurn         = "turn"
	KeySequence     = "sequence"
	KeyEventType    = "event_type"
	KeyElapsed      = "elapsed_ms"
	KeyError        = "error"
	// KeyExecutor is the turn executor a run started on, on its run started
	// record.
	KeyExecutor = "executor"
)

const (
	EventTypeRunStarted          = "harness_run_started"
	EventTypeWorktreeReady       = "harness_worktree_ready"
	EventTypeBuildContainerReady = "harness_build_container_ready"
	EventTypeTurnRequested       = "harness_turn_requested"
	EventTypeRunFinished         = "harness_run_finished"
	EventTypeGateDecision        = "session_gate_decision"
	EventTypeReceiptWritten      = "harness_receipt"
	// EventTypeControlAction records one control-plane operation on the
	// session — submit, send, cancel, ready, merge_started or merge — whichever client called
	// it: the CLI, an MCP client or the Workbench page.
	EventTypeControlAction = "harness_control_action"
	// EventTypeGitHubCall records one GitHub operation the session called
	// through CSF's typed GitHub tools, with its outcome.
	EventTypeGitHubCall = "github_call"
)

const (
	KeyAction           = "action"
	KeyOperatorAuthored = "operator_authored"
	// KeyQuestionWanted marks a send by which the operator overrides the
	// question gate: the operator wanted the question it last refused.
	KeyQuestionWanted = "question_wanted"
	KeyTurnID         = "turn_id"
	KeyPullRequestURL = keyPullRequestURL

	ActionSubmit = "submit"
	ActionSend   = "send"
	ActionCancel = "cancel"
	ActionReady  = "ready"
	ActionMerge  = "merge"
	// ActionMergeStarted is written when a merge begins, before the merge
	// path runs, so a reader of the log knows one is in flight until the
	// merge record that ends it.
	ActionMergeStarted = "merge_started"
)

const (
	KeyTaskID        = "task_id"
	KeyToolUseID     = "tool_use_id"
	KeyTaskStatus    = "status"
	KeyTaskSummary   = "summary"
	KeyTaskElapsed   = "task_elapsed_ms"
	KeyTaskExitCode  = "exit_code"
	KeyTaskOutputEnd = "output_tail"

	// OutputTailBytes bounds the output a background result carries: the end
	// of the task's output, where a command's verdict and exit status are. It
	// is a size bound for the record, not a measured threshold.
	OutputTailBytes = 2048
)

const (
	// EventTypeProviderApplied records the provider a session was launched
	// through and the spelling its model resolved to, with no credential.
	EventTypeProviderApplied = "harness_provider_applied"
	// EventTypeProviderFallback records a turn the provider's first spelling
	// could not serve, retried on the next one.
	EventTypeProviderFallback = "harness_provider_fallback"
	// KeyProviderBaseURL is the provider's endpoint.
	KeyProviderBaseURL = "provider_base_url"
	// KeyProviderModel is the provider spelling the session's model resolved
	// to, and KeyProviderNextModel the spelling a fallback moved to.
	KeyProviderModel     = "provider_model"
	KeyProviderNextModel = "provider_next_model"
	// KeyProviderReason is why the provider could not serve the spelling, as
	// the executor reported it.
	KeyProviderReason = "provider_reason"
	// KeyModel is the CSF model name the recipe asked for.
	KeyModel = "model"
)

const (
	EventTypeUser      = "user"
	EventTypeAssistant = "assistant"
	EventTypeResult    = "result"
	EventTypeSystem    = "system"

	DirectionIn  = "in"
	DirectionOut = "out"

	BlockText       = "text"
	BlockToolUse    = "tool_use"
	BlockToolResult = "tool_result"

	// MaxRecordBytes bounds one event log line read back; a tool input can
	// carry a whole file.
	MaxRecordBytes = 16 << 20
)

const (

	// MCPServerName is the name sessions reach the host's own MCP server by,
	// so its tools are spelled mcp__csf__<tool> in a recipe's allowed tools.
	MCPServerName = "csf"
	// AssignmentHeader carries a session's assignment on every request it
	// makes to the host's MCP server, so an operation names its actor.
	AssignmentHeader = "X-CSF-Assignment"
)

const (
	HookPreToolUse  = "PreToolUse"
	HookPostToolUse = "PostToolUse"
	// HookStop is the turn executor's end-of-turn event: the reply gate's.
	HookStop = "Stop"
	// ToolBash is the tool the two tool gates watch.
	ToolBash = "Bash"
)

const (
	// ToolAskUserQuestion is the turn executor's tool for putting a question
	// to the operator; the question gate judges it before it is shown.
	ToolAskUserQuestion = "AskUserQuestion"
	// ReadyToolName is the CSF GitHub tool that marks a draft ready, and
	// ToolReadyPullRequest its name as a session's turn executor calls it.
	ReadyToolName        = "MarkPullRequestReady"
	ToolReadyPullRequest = "mcp__" + MCPServerName + "__" + ReadyToolName
	// ToolGrep and ToolGlob are the turn executor's search tools; a chain of
	// them is the search gate's.
	ToolGrep = "Grep"
	ToolGlob = "Glob"
)

const (
	// RunStateFile records the run for its gates and for a resumed turn.
	RunStateFile = "run.json"
	// SettingsFile is the Claude Code settings the session starts with.
	SettingsFile = "settings.json"
	// EventsFile is the run's event log, one JSON object per line.
	EventsFile = "events.jsonl"
	// WorktreeDirectory is the git worktree the session works in.
	WorktreeDirectory = "worktree"
)

const (
	// ResearchCheckFence tags the fenced block holding one research check as
	// a JSON object, or several as a JSON array.
	ResearchCheckFence = "research-check"

	FitsGoalYes    = "yes"
	FitsGoalNo     = "no"
	FitsGoalPartly = "partly"

	LikelySourceAgentOutput = "agent output"
	LikelySourcePaper       = "paper"
	LikelySourcePerson      = "person"
	LikelySourceUnknown     = "unknown"
)

const (
	VerdictFieldPass    = "pass"
	VerdictFieldDefects = "defects"
)

const EventTypeBackgroundResult = "harness_background_result"

const EventTypeOperatorAffect = "operator_affect"

const EventTypeRulings = "rulings"

const EventTypeRunResumed = "harness_run_resumed"

const EventTypeSessionClosed = "harness_session_closed"

const EventTypeUnvettedTerms = "unvetted_terms"

const KeyRulings = "rulings"

const (
	// KeyTerms is the unvetted terms, as the operator spelled them.
	KeyTerms = "terms"
)

const PushRemote = "origin"

const RecipeFile = "recipe.json"

const RulingsFile = "rulings.jsonl"

const StopReasonEndTurn = "end_turn"

const SubtypeBackgroundTasksChanged = "background_tasks_changed"

const Unenforced = "UNENFORCED"

const VerdictFence = "verdict"

const (
	VerifierAgentID = "slice-verifier"
)