egg

type AgentProfile struct {
	StateHomeEnv  string            // provider-supported state directory override variable
	ProviderHost  string            // default destination when no explicit provider URL is selected
	Domains       []string          // network domains needed (empty = no network)
	EnvVars       []string          // required env var names (merged from host)
	SetEnv        map[string]string // env vars forced to a default (host/config still wins)
	PlatformEnv   []string          // platform-specific env vars (e.g. macOS Keychain access)
	WriteDirs     []string          // relative to $HOME, need write access
	WriteRegex    []string          // dirs needing UseRegex (e.g. ".claude" covers .claude.json)
	SettingsFile  string            // agent config file relative to HOME (e.g. ".claude/settings.json")
	SessionDir    string            // agent session storage relative to $HOME (e.g. ".claude/projects")
	ResumeFlag    string            // CLI flag for resuming (e.g. "--resume")
	SessionIDFlag string            // CLI flag for controlling session ID (e.g. "--session-id")
}

type AttachOptions struct {
	// NativeTerminal requests canonical mouse modes after explicit discovery.
	// While tracking is active, selection uses the emulator's selection modifier.
	NativeTerminal bool
	ReadOnly       bool
	Takeover       bool
	Claim          bool
	Owner          string
	Rows           uint32
	Cols           uint32
}

type BaseField struct {
	Name    string `yaml:"name,omitempty"`
	FS      string `yaml:"fs,omitempty"`
	Network string `yaml:"network,omitempty"`
	Env     string `yaml:"env,omitempty"`
}

type Client struct {
	// contains filtered or unexported fields
}

type CodexCapability interface{ Supported(binary string) bool }

type CodexNativeEvent struct {
	Event             SessionEvent    `json:"event"`
	TurnID            string          `json:"turn_id,omitempty"`
	ItemID            string          `json:"item_id,omitempty"`
	ProviderRequestID json.RawMessage `json:"provider_request_id,omitempty"`
}

type ConfigSnapshot struct {
	// contains filtered or unexported fields
}

type DrilledHole struct {
	Kind   string // "domain" | "write_dir" | "env" | "local_port"
	Value  string
	Agent  string
	Reason string
}

type EffectivePolicy struct {
	Agent       string
	Mounts      []sandbox.Mount
	Deny        []string
	DenyWrite   []string
	NetworkNeed sandbox.NetworkNeed
	Domains     []string
	LocalPorts  []int
	Mode        string
	Drilled     []DrilledHole
	Derived     []DrilledHole
	Suppressed  []DrilledHole
	// contains filtered or unexported fields
}

type EggConfig struct {
	LaunchPolicy               *LaunchPolicySelection `yaml:"-"` // captured at resolution, never rediscovered for diagnostics
	Base                       BaseField              `yaml:"base,omitempty"`
	FS                         []string               `yaml:"fs"`
	RoostPolicyPaths           []string               `yaml:"-"` // runtime-only configured root policy files
	Network                    NetworkField           `yaml:"network"`
	Env                        EnvField               `yaml:"env,omitempty"`
	Resources                  EggResources           `yaml:"resources"`
	Shell                      string                 `yaml:"shell"`
	DangerouslySkipPermissions bool                   `yaml:"dangerously_skip_permissions"`
	Audit                      bool                   `yaml:"audit"`
	Trace                      bool                   `yaml:"trace"`
	AgentSettings              map[string]string      `yaml:"agent_settings,omitempty"` // agent name -> settings file path
}

type EggResources struct {
	CPU     string `yaml:"cpu"`    // duration: "300s"
	Memory  string `yaml:"memory"` // size: "2GB"
	MaxFDs  uint32 `yaml:"max_fds"`
	MaxPids uint32 `yaml:"max_pids"` // cgroup pids.max (Linux only)
}

type EnvField []string

type InstalledCodexCapability struct{}

type LaunchCapabilities struct {
	OS                   string     `json:"os"`
	Network              string     `json:"network"` // unknown, none, proxy-only, full
	WorkspaceWritable    LaunchFact `json:"workspace_writable"`
	ProviderHomeWritable LaunchFact `json:"provider_home_writable"`
	NativeSandbox        LaunchFact `json:"native_sandbox"`
	ParentSandbox        string     `json:"parent_sandbox"` // unknown, none, sandboxed, scoped
	UserBus              LaunchFact `json:"user_bus"`
	RequiresUserBus      bool       `json:"requires_user_bus"`
	ElanHome             string     `json:"elan_home,omitempty"` // explicit inherited path only
	ElanHomeWritable     LaunchFact `json:"elan_home_writable"`
	RawSocketsRequired   bool       `json:"raw_sockets_required"`
}

type LaunchCheck struct {
	Code       string `json:"code"`
	Status     string `json:"status"`
	Reason     string `json:"reason"`
	Source     string `json:"source"`
	Correction string `json:"correction,omitempty"`
}

type LaunchFact string

type LaunchPolicySelection struct {
	Origin string             `json:"origin"`
	Path   string             `json:"path,omitempty"`
	Base   string             `json:"base,omitempty"`
	Rules  []PolicyRuleSource `json:"rules,omitempty"`
}

type LaunchPreparationOptions struct {
	Binary, Home, HostHome, EggDir                                    string
	ProviderURL, BrowserRequestsPath, ToolBinary, PreviewClaudeOSHome string
	Environment                                                       map[string]string
	CodexCapability                                                   CodexCapability
	// A different saved platform can describe capabilities, but this process
	// cannot execute that platform's final policy builder.
	Platform string
	// EnvironmentConfig selects from an explicit snapshot when the caller has
	// not already selected Environment. Production can pass its selected map.
	EnvironmentConfig    *EggConfig
	InheritedEnvironment []string
	Requirements         *LaunchRequirements
}

type LaunchProviderEvidence struct {
	BinarySHA256  string `json:"binary_sha256"`
	VersionOutput string `json:"version_output"`
	HelpOutput    string `json:"help_output"`
	CompleteHelp  bool   `json:"complete_help"`
}

type LaunchRequirements struct {
	Route, AllowedHomeRoot, ProviderStateDir   string
	CredentialPaths                            []string
	Capabilities                               *LaunchCapabilities
	CapabilitySource, PolicySource, PolicyBase string
	Rules                                      []PolicyRuleSource
	Evidence                                   *LaunchProviderEvidence
	EvidenceBound, VersionKnown                bool
	// contains filtered or unexported fields
}

type LaunchState interface {
	MkdirAll(string) error
	// DirectoryLayout checks supplemental write requirements without creating
	// paths in selected state. Both effects use the same metadata mirror.
	DirectoryLayout(string) error
	ProviderSpool(home, relative string) error
	ClaudeSettings(args []string, home, eggDir, providerID, cwd string, policy *sandbox.Config) (argv []string, deferred bool, err error)
}

type NetworkField struct {
	Domains      []string `yaml:"domains,omitempty"`
	LocalPorts   []int    `yaml:"local_ports,omitempty"`
	Mode         string   `yaml:"mode,omitempty"`          // "" (default) | "observe" | "enforce"
	Log          *bool    `yaml:"log,omitempty"`           // legacy compatibility; policy-decision auditing is always on
	AgentDomains string   `yaml:"agent_domains,omitempty"` // ""/"merge" (default) | "none"
}

type PolicyRuleSource struct {
	Section string `json:"section"`
	Rule    string `json:"rule"`
	Source  string `json:"source"`
}

type PreparedLaunch struct {
	Args                  []string
	CodexRun, NativeRun   bool
	Sandboxed             bool
	Policy                EffectivePolicy
	Sandbox               sandbox.Config
	ProfileDirs           []string
	LifecycleSettingsPath string
	Deferred              []string
	ProviderHost          string
	NetworkFailure        string
	Transport             string
	Checks                []LaunchCheck
	Environment           map[string]string
	FailureReason         string // fixed classifier for a failed preparation step
}

type PromptDelivery struct {
	BytesEnqueued int
	// NoInputAttempted is explicit sender evidence, never inferred from a
	// zero byte count or an error. Clear it before the first input Send.
	NoInputAttempted bool
	Release          func()
	Lost             <-chan error
}

type RunConfig struct {
	LaunchPolicy *LaunchPolicySelection
	Agent        string
	Kind         string
	// Command replaces the agent entirely; AgentArgs extends the agent's own
	// invocation and keeps the session an agent session. They are alternatives.
	Command      []string
	AgentArgs    []string
	InitialRun   *RunTurnRequest // host-admitted Codex prompt, reserved before launch
	CWD          string
	Shell        string
	FS           []string // "rw:./", "deny:~/.ssh"
	Network      []string // domain list
	LocalPorts   []int    // host loopback ports forwarded into the network namespace
	NetworkMode  string   // ""/"enforce" or "observe"
	AgentDomains string   // ""/"merge" or "none"
	Env          map[string]string
	Rows         uint32
	Cols         uint32

	DangerouslySkipPermissions bool
	CPULimit                   time.Duration
	MemLimit                   uint64
	MaxFDs                     uint32
	PidLimit                   uint32
	Debug                      bool
	Audit                      bool
	Trace                      bool          // wrap sandbox command with strace (Linux only)
	VTE                        bool          // use VTerm snapshot for reconnect instead of replay buffer
	RenderedConfig             string        // effective egg config as YAML (after merge/resolve)
	UserHome                   string        // per-user home directory (relay sessions only)
	SkipHostAgentEnv           bool          // shared hosts keep provider credentials in UserHome
	IdleTimeout                time.Duration // 0 = disabled; self-terminate after this much idle
	ResumeSessionID            string        // agent session ID to resume (from chat.meta)
	ProviderSessionID          string        // exact native session ID used for capture
	ToolNames                  []string      // names of privileged tools (for shim generation)
	ToolSocketPath             string        // path to tool.sock (set by wing, empty = no tools)
	OuterBoundary              bool          // explicit trusted-host marker from the parent process
	ProtectedWriteTargets      []string      // host-owned paths the final sandbox policy must keep unwritable (empty = no contract)
	RoostPolicyPaths           []string      // administrator-configured root policy files
	OmitBrowserBridge          bool          // no browser request file, shim, BROWSER/WT_SESSION_DIR env, PATH entry or mount
}

type RunDescendant struct {
	PID            int `json:"pid"`
	ParentPID      int `json:"parent_pid"`
	ProcessGroupID int `json:"process_group_id"`
}

type RunTurnRPCServer interface {
	HandleRunTurn(context.Context, string, RunTurnRequest) (RunTurnResult, error)
}

type RunTurnRequest struct {
	RunID    string    `json:"run_id"`
	Prompt   string    `json:"prompt"`
	Deadline time.Time `json:"deadline"`
}

type RunTurnResult struct {
	RunID                string          `json:"run_id"`
	SessionID            string          `json:"session_id"`
	Status               string          `json:"status"`
	Text                 string          `json:"text"`
	ProviderSessionID    string          `json:"provider_session_id,omitempty"`
	TurnID               string          `json:"turn_id,omitempty"`
	StartedAt            time.Time       `json:"started_at"`
	EndedAt              time.Time       `json:"ended_at,omitempty"`
	Deadline             time.Time       `json:"deadline"`
	FailureKind          agent.ErrorKind `json:"failure_kind,omitempty"`
	Error                string          `json:"error,omitempty"`
	SurvivingDescendants []RunDescendant `json:"surviving_descendants,omitempty"`
	ContainmentError     string          `json:"containment_error,omitempty"`
}

type SavedCodexCapability string

type Server struct {
	pb.UnimplementedEggServer
	// contains filtered or unexported fields
}

type Session struct {
	ID  string
	PID int

	Agent          string
	Kind           string
	Command        []string
	CWD            string
	Network        string // summary: "none", "*", or comma-separated domains
	RenderedConfig string // effective egg config as YAML (after merge/resolve)
	Cols           uint32
	Rows           uint32
	StartedAt      time.Time
	// contains filtered or unexported fields
}

type SessionEvent struct {
	Sequence          int64           `json:"sequence"`
	Type              string          `json:"type"`
	Source            string          `json:"source"`
	State             string          `json:"state,omitempty"`
	Role              string          `json:"role,omitempty"`
	Text              string          `json:"text,omitempty"`
	Raw               json.RawMessage `json:"raw,omitempty"`
	ProviderSessionID string          `json:"provider_session_id,omitempty"`
	Timestamp         string          `json:"timestamp,omitempty"`
	Reason            string          `json:"reason,omitempty"`
	Truncated         bool            `json:"truncated,omitempty"`
	// Native record length, or serialized event length for legacy journal rows.
	OriginalBytes int64 `json:"original_bytes,omitempty"`
	ExitCode      *int  `json:"exit_code,omitempty"`
	// Import positions are persisted with each event in the same transaction.
	// This prevents duplicates if the reader or wing exits between imports.
	SourceKey    string `json:"source_key,omitempty"`
	SourceOffset int64  `json:"source_offset,omitempty"`
}

type SessionPromptOptions struct {
	RequestID string
	Input     string
	Timeout   time.Duration
	Read      func(context.Context, int64, int) (SessionView, error)
	Send      func(context.Context, string) (PromptDelivery, error)
}

type SessionPromptResult struct {
	SessionID                   string `json:"session_id"`
	RequestID                   string `json:"request_id"`
	Status                      string `json:"status"`
	NativeReceiptObserved       bool   `json:"native_receipt_observed"`
	ProviderRequestAcknowledged bool   `json:"provider_request_acknowledged"`
	ReceiptKind                 string `json:"receipt_kind,omitempty"`
	Causality                   string `json:"causality"`
	TransportEnqueued           bool   `json:"transport_enqueued"`
	TransportBytesEnqueued      int    `json:"transport_bytes_enqueued"`
	DefinitelyNotSent           bool   `json:"definitely_not_sent"`
	ReservedCursor              int64  `json:"reserved_cursor"`
	ReceiptCursor               int64  `json:"receipt_cursor,omitempty"`
	Retried                     bool   `json:"retried"`
	Reason                      string `json:"reason,omitempty"`
}

type SessionView struct {
	SessionID         string `json:"session_id"`
	Agent             string `json:"agent"`
	ProviderSessionID string `json:"provider_session_id,omitempty"`
	State             string `json:"state"`
	Status            string `json:"status"`
	StateSource       string `json:"state_source"`
	StateCursor       int64  `json:"state_cursor"`
	Reason            string `json:"reason,omitempty"`
	Ready             bool   `json:"ready"`
	ProcessAlive      bool   `json:"process_alive"`
	// Cursor is the last delivered event, not the journal head when paginated.
	Cursor     int64          `json:"cursor"`
	HeadCursor int64          `json:"head_cursor"`
	HasMore    bool           `json:"has_more"`
	Events     []SessionEvent `json:"events"`
}

type SocketPathTooLongError struct {
	Path     string
	Bytes    int
	MaxBytes int
}

type ToolContext struct {
	Client    *contextclient.Client
	Owner     string // verified EggIdentity.Email, fixed for this listener's lifetime
	OwnerID   string // verified EggIdentity.UserID, also fixed
	Reclaimed bool   // surviving egg has no trusted owner/client binding after restart
}

type ToolListEntry struct {
	Name        string             `json:"name"`
	Description string             `json:"description,omitempty"`
	Params      []config.ToolParam `json:"params,omitempty"`
}

type ToolListResponse struct {
	Tools []ToolListEntry `json:"tools"`
}

type ToolListener struct {
	// contains filtered or unexported fields
}

type ToolRequest struct {
	Action string   `json:"action,omitempty"` // "list" for tool discovery
	Tool   string   `json:"tool,omitempty"`
	Args   []string `json:"args,omitempty"`
}

type ToolResponse struct {
	ExitCode int    `json:"exit_code,omitempty"`
	Stdout   string `json:"stdout,omitempty"`
	Stderr   string `json:"stderr,omitempty"`
	Error    string `json:"error,omitempty"`
}

type ToolRunner struct {
	// contains filtered or unexported fields
}

type VTerm struct {
	// contains filtered or unexported fields
}