exec

type BackgroundProcess struct {
	ID        string
	Command   string
	Cmd       *exec.Cmd
	Output    *syncBuffer
	StartTime time.Time
	Done      bool
	ExitCode  int
	Error     string
}

type BlockedResult struct {
	Blocked bool   `json:"blocked"`
	Message string `json:"message"`
}

type CommandGuard struct {
	// contains filtered or unexported fields
}

type Config struct {
	DefaultTimeout   time.Duration
	AllowBackground  bool
	WorkDir          string
	EnvFilter        []string             // environment variables to exclude
	EnvWhitelist     []string             // if set, ONLY these vars are allowed
	Refs             *security.RefStore   // secret reference token resolver
	OSIsolator       sandboxos.OSIsolator // OS-level sandbox (nil = disabled)
	SandboxPolicy    sandboxos.Policy     // policy for sandboxed execution
	FailClosed       bool                 // if true, reject execution when sandbox unavailable
	ExcludedCommands []string             // command basenames that bypass the sandbox
	Bus              *eventbus.Bus        // event bus for SandboxDecisionEvent (optional)
}

type EventPublisher interface {
	Publish(event PolicyEvent)
}

type Executor interface {
	ExecuteTool(ctx context.Context, cmd string) (string, error)
	StartBackground(cmd string) (string, error)
	GetBackgroundStatus(id string) (map[string]interface{}, error)
	StopBackground(id string) error
}

type GuardFunc func(cmd string) string

type Option func(*PolicyEvaluator)

type PolicyDecision struct {
	Verdict   Verdict
	Reason    ReasonCode
	Message   string
	Command   string
	Unwrapped string // inner command after shell wrapper unwrap (empty if no wrapper)
}

type PolicyDecisionData struct {
	Command    string
	Unwrapped  string
	Verdict    string
	Reason     string
	Message    string
	SessionKey string
	AgentName  string
}

type PolicyEvaluator struct {
	// contains filtered or unexported fields
}

type PolicyEvent interface {
	EventName() string
}

type ReasonCode string

type Result struct {
	ExitCode int    `json:"exitCode"`
	Stdout   string `json:"stdout"`
	Stderr   string `json:"stderr"`
	TimedOut bool   `json:"timedOut,omitempty"`
}

type Tool struct {
	// contains filtered or unexported fields
}

type Verdict int