operation

type Operation struct {
	Input     string `json:"input,omitempty"`
	Output    string `json:"output,omitempty"`
	Service   string `json:"service,omitempty"`
	Slot      string `json:"slot,omitempty"`
	Stack     string `json:"stack,omitempty"`
	Scope     int    `json:"scope,omitempty"`
	Name      string `json:"name,omitempty"` // filename-derived identity within (stack, scope); empty for legacy rules
	Txcl      string `json:"txcl,omitempty"`
	MockRes   string `json:"mockRes,omitempty"`
	MockReq   string `json:"mockReq,omitempty"`
	Resonator *resonator.Resonator
	Meta      string `json:"meta,omitempty"`
	OpID      string `json:"opId,omitempty"` // unique ID for this Operation

	// FullInput is the pre-projection envelope view, set by the
	// processor's SELECT block only when a SELECT projected Input
	// down to its assignments. In-memory only (json:"-"): stored
	// continuation records persist Input (the dispatched view), and
	// resumed ops recompute the projection through ResonatingOps, so
	// FullInput never needs to survive suspension. Read via
	// EnvelopeView() by chassis-internal consumers (mock selection,
	// EMIT/TTL resolution, mcp debug) that must see the whole
	// envelope regardless of projection.
	FullInput string `json:"-"`

	// Secrets holds materialized secret cleartext for this op
	// instance. The field is tagged `json:"-"` AND its type's
	// MarshalJSON / MarshalText / GobEncode all panic, so cleartext
	// cannot reach any envelope, trace, log, mock, or continuation
	// by construction (internal docs/todo-secret-store.md §4.1).
	//
	// Populated by the processor (PR 3) between WHEN/SET/SELECT/WITH
	// decoration and Exec; zeroed via defer on every exit path. Read
	// directly by secret-aware op handlers as op.Secrets.Get(NAME);
	// handlers never call the Resolver or Store themselves.
	Secrets secrets.SecretBag `json:"-"`
}