wire

type Actuate struct {
	Rung string `json:"rung"`
	// Params carries rung-specific parameters (e.g. egress_apply's port and
	// application list), schema owned by the rung.
	Params json.RawMessage `json:"params,omitempty"`
}

type ActuateResult struct {
	Rung string `json:"rung"`
	OK   bool   `json:"ok"`
	// Observed is what the OS reported back, per observation.
	Observed []string `json:"observed,omitempty"`
	// SkippedReason is set when the rung was not attempted (e.g. not
	// elevated).
	SkippedReason string `json:"skipped_reason,omitempty"`
}

type AuditAnchor struct {
	Seq  uint64 `json:"seq"`
	Head string `json:"head"`
}

type Capabilities struct {
	// Signals are the declared signal ids the servant can evaluate.
	Signals []string `json:"signals,omitempty"`
	// Actuators are the rungs the servant can execute.
	Actuators []string `json:"actuators,omitempty"`
	// Elevated reports whether the process holds administrative rights —
	// a policy demanding OS enforcement of a non-elevated servant refuses at
	// handshake rather than serving a weaker posture.
	Elevated bool `json:"elevated"`
	// RunContext names the process's Windows security context (session,
	// integrity), as the run-context signal reports it.
	RunContext string `json:"run_context,omitempty"`
}

type CredentialEvent struct {
	Kind string   `json:"kind"`
	IDs  []string `json:"ids,omitempty"`
}

type EffectiveConfig struct {
	EnforceHTTPS   bool     `json:"enforce_https,omitempty"`
	ProtectedPaths []string `json:"protected_paths,omitempty"`
	Banner         bool     `json:"banner,omitempty"`
	// EgressProxyPort, when non-zero, names the harness-side loopback proxy
	// port; the server then runs no proxy of its own and points its dialers
	// and OS enforcement at this port.
	EgressProxyPort int `json:"egress_proxy_port,omitempty"`
	// EgressProxyExecutable is the full image path of the harness process
	// serving that proxy, for the firewall allow rule under a global outbound
	// block: the rule must name the process actually dialing out, or it is a
	// grant nothing uses. Host-local by nature — both processes share the
	// machine.
	EgressProxyExecutable string `json:"egress_proxy_executable,omitempty"`
	// HeartbeatIntervalMS is how often the servant pushes heartbeats.
	HeartbeatIntervalMS int `json:"heartbeat_interval_ms,omitempty"`
}

type EgressApplyParams struct {
	// ProxyPort is the harness proxy's loopback port the blocked applications
	// must still be able to reach.
	ProxyPort int `json:"proxy_port"`
	// ProxyExecutable is the harness image, for the global-block allow rule.
	ProxyExecutable string `json:"proxy_executable,omitempty"`
	// Applications are full image paths to block outbound (scoped tier).
	Applications []string `json:"applications,omitempty"`
	// BlockAllOutbound flips the machine's default outbound action (global tier).
	BlockAllOutbound bool `json:"block_all_outbound,omitempty"`
	// AllowPorts bounds the proxy's own allow rule under a global block.
	AllowPorts []int `json:"allow_ports,omitempty"`
	// SetSystemProxy points this user's WinINET settings at the proxy.
	SetSystemProxy bool `json:"set_system_proxy,omitempty"`
}

type EgressState struct {
	Tier         string `json:"tier"`
	RulesPresent bool   `json:"rules_present"`
	Recovered    bool   `json:"recovered"`
}

type Envelope struct {
	V       int             `json:"v"`
	Type    string          `json:"type"`
	ID      string          `json:"id,omitempty"`
	Re      string          `json:"re,omitempty"`
	TS      string          `json:"ts"`
	Payload json.RawMessage `json:"payload,omitempty"`
}

type Heartbeat struct {
	Seq           uint64 `json:"seq"`
	DesktopAlive  bool   `json:"desktop_alive"`
	RecorderState string `json:"recorder_state,omitempty"`
}

type Hello struct {
	// ProtoMin and ProtoMax bound the protocol versions the server speaks.
	ProtoMin int `json:"proto_min"`
	ProtoMax int `json:"proto_max"`
	// ServerVersion is the governed server's build version, for the audit
	// record and version-skew diagnostics.
	ServerVersion string `json:"server_version"`
	// SessionStamp identifies the session for correlation across both audit
	// chains.
	SessionStamp string `json:"session_stamp"`
	// Token is the bootstrap secret from AGENTWEAVE_CONTROL_TOKEN. The
	// harness compares it in constant time and kills the child on mismatch.
	Token string `json:"token"`
	// Capabilities declare what this servant can do, so the harness never has
	// to guess and a policy needing more than the servant offers can refuse
	// the session at handshake.
	Capabilities Capabilities `json:"capabilities"`
}

type HelloAck struct {
	Proto int `json:"proto"`
	// Mode is "enforce" or "observe". Observe means the harness proxies and
	// records but synthesizes no refusals — the server keeps its local stack.
	Mode string `json:"mode"`
	// EffectiveConfig must be applied before the tool surface is built.
	EffectiveConfig EffectiveConfig `json:"effective_config"`
}

type Reader struct {
	// contains filtered or unexported fields
}

type Refusal struct {
	Code string `json:"code"`
}

type Shutdown struct {
	Reason   string `json:"reason"`
	Graceful bool   `json:"graceful"`
}

type SignalEvaluate struct {
	IDs  []string          `json:"ids"`
	Args map[string]string `json:"args,omitempty"`
}

type SignalResult struct {
	Results []json.RawMessage `json:"results"`
}

type Writer struct {
	// contains filtered or unexported fields
}