bootstrap

type Session struct {
	Agent         *agent.Agent
	ToolReg       *core.Registry
	TaskStore     *tasks.Store
	PlanMode      *planmode.PlanMode
	Goal          *goal.Goal
	AskBridge     *askuser.Bridge
	Gate          *permission.Gate
	MCPManager    *mcp.Manager
	MCPController *mcp.Controller
	MCPPolicy     core.MCPDisablePolicy
	PathPolicy    *tool.PathPolicy
	AgentsMD      string
	Skills        []skill.Skill
	SkillsIndex   string
	SystemPrompt  string
	// BuildBasePrompt regenerates the base system prompt from a tool-spec set,
	// capturing the same inputs (AgentsMD, CWD, verify, indexes) used at
	// construction. The MCP controller uses it to rebuild the prompt after a
	// server is enabled/disabled, so the model is never told about a tool that
	// is no longer registered.
	BuildBasePrompt   func([]core.ToolSpec) string
	MemoryStore       *memory.Store
	SessionCheckpoint *sessioncheckpoint.Slot
	HasVerify         bool
	Model             core.Model
	MoaCfg            core.MoaConfig
	CWD               string // workspace directory

	// UntrustedMCP is true when .mcp.json exists but CWD is not in TrustedMCPPaths.
	UntrustedMCP bool

	// Headless is true when the session was created in headless mode (no user
	// to approve permissions). Preserved so RuntimeConfig() can set GateConfig
	// correctly even when Gate is nil (yolo mode).
	Headless bool

	// Subagents is the handle onto the subagent job store, returned by
	// subagent.RegisterAll. Used for the init snapshot (reconnect), the agent
	// tray, and cancellation.
	Subagents *subagent.Jobs
	BashJobs  *tool.BashJobs
	// contains filtered or unexported fields
}

type SessionConfig struct {
	// Required.
	CWD             string                                  // Working directory. Must exist and be a directory.
	Model           core.Model                              // Resolved LLM model.
	Provider        core.Provider                           // LLM provider for the primary model.
	ProviderFactory func(core.Model) (core.Provider, error) // Creates providers for subagents, plan review, etc.

	// Config overrides. When nil, loaded from disk via core.LoadMoaConfig(CWD).
	MoaCfg *core.MoaConfig

	// MCPDisableSources gives the provenance (global/project) of MCP disable
	// vetoes when MoaCfg is injected. The merged MoaCfg.DisabledMCPServers loses
	// which scope each name came from, so callers that inject MoaCfg should also
	// pass the resolved sources; otherwise a project-only veto would be
	// misattributed to global and could never be cleared by editing Project.
	// Ignored when MoaCfg is nil (bootstrap resolves provenance from disk).
	MCPDisableSources *core.MCPDisableSources

	// ExtraMCPServers are session-scoped MCP servers merged on top of the
	// configured ones. They come from the caller (the Automation API attaches
	// per-run servers this way), live and die with the session, and are never
	// written to any config file. A name already taken by a configured server is
	// the caller's responsibility to reject: the merge would silently override
	// operator config.
	ExtraMCPServers map[string]core.MCPServer

	// Context for MCP servers and subagent async jobs. Required.
	Ctx context.Context

	// Agent tuning. Zero values use package defaults.
	ThinkingLevel       string        // Default: "medium"
	MaxTurns            int           // 0 = unlimited (default). Overrides config.json.
	MaxToolCallsPerTurn int           // 0 = unlimited (default). Overrides config.json.
	MaxRunDuration      time.Duration // 0 = unlimited (default). Overrides config.json.
	MaxBudget           float64       // Default: from config. 0 = unlimited.
	DisableSandbox      bool          // Overrides config (OR'd). Deprecated: use PathScope.

	// PathScope override. Empty = derive from config/permissions.
	// Valid values: "workspace", "unrestricted".
	PathScope string
	// ExtraAllowedPaths are merged with config allowed_paths (from --allow-path flags).
	ExtraAllowedPaths []string

	// Permission mode override. Empty = from config or "yolo".
	PermissionMode string
	// Model spec for auto-mode AI evaluator. Empty = "haiku".
	PermissionEvalModel string
	// Headless denies unresolved permissions instead of blocking (no user to approve).
	Headless bool
	// ExtraAllowPatterns are merged with config allow patterns (from --allow flags).
	ExtraAllowPatterns []string

	// PlanMode session dir. If empty, uses CWD.
	PlanSessionDir string

	// Feature toggles. All default to true.
	EnableAskUser bool // Register ask_user tool. Default: true.

	// BeforeWrite is called before write/edit tools modify a file.
	// Used by the checkpoint system to capture pre-edit state.
	BeforeWrite func(path string) error

	// MaterializeContent rehydrates byte-free attachment references before a
	// provider request. Nil preserves legacy inline content unchanged.
	MaterializeContent func(context.Context, []core.Message) ([]core.Message, error)

	// Subagent callbacks. All optional (nil = no-op).
	OnAsyncJobChange func(count int)
	OnAsyncComplete  func(jobID, task, status, resultTail string, truncated bool)

	// OnSubagentStart/OnSubagentEvent/OnSubagentUsage/OnSubagentEnd are the
	// rich, per-child streaming sinks (subagent.Config.OnChildStart/
	// OnChildEvent/OnChildUsage/OnChildEnd). The caller wires these into its
	// own bus (see cmd/moa's preBus, pkg/serve's session_lifecycle closure)
	// since bootstrap has no bus reference of its own. All optional (nil =
	// no-op).
	OnSubagentStart func(jobID, task, model, thinking, originToolCallID string, async bool, startedAt time.Time, accentIndex int)
	OnSubagentEvent func(jobID string, inner any)
	OnSubagentUsage func(jobID string, usage *core.Usage, costUSD float64, contextPct int)
	OnSubagentEnd   func(jobID, task string, async bool, status, result, resultErr string, finishedAt time.Time, usage *core.Usage, costUSD float64)

	// Background bash callbacks feed the shared session bus/UI. Output is a
	// lossy live delta; end carries the authoritative bounded log.
	OnBashJobStart  func(job tool.BashJobInfo)
	OnBashJobOutput func(job tool.BashJobInfo, delta string)
	OnBashJobEnd    func(job tool.BashJobInfo)

	// SubagentTranscriptLoader loads a finished subagent's persisted transcript
	// (messages plus the model/thinking it ran under) by job ID, enabling the
	// subagent tool's "resume" parameter. Optional (nil = resume unsupported).
	// The caller wires this to its transcript store (see pkg/serve's
	// SubagentStore).
	SubagentTranscriptLoader func(jobID string) (subagent.ResumedTranscript, error)
}