runctx

type AllowedHost struct {
	Host  string
	Rules []string // human-readable rule summaries, e.g. "allow GET /repos/*"
}

type BuildOptions struct {
	// WorkspaceMode is the resolved workspace mode ("bind"/"volume"). Empty is
	// treated as bind. Sourced from the resolved run options, not cfg, because a
	// --workspace-mode CLI flag can override the moat.yaml value.
	WorkspaceMode config.WorkspaceMode
	// DockerMode is the resolved Docker mode ("host"/"dind"). Empty means Docker
	// is not enabled for this run.
	DockerMode deps.DockerMode
}

type Docker struct {
	Mode string // "dind" (Docker-in-Docker) or "host" (mounted host socket)
}

type Grant struct {
	Name        string
	Description string
}

type MCPServer struct {
	Name        string
	Description string
}

type NetworkPolicy struct {
	Policy       string
	AllowedHosts []AllowedHost
}

type Port struct {
	Name          string
	ContainerPort int
	EnvHostPort   string
}

type RuntimeContext struct {
	RunID           string
	Agent           string
	Workspace       string
	WorkspaceMode   string // "bind" or "volume"; empty is treated as bind
	Grants          []Grant
	Services        []Service
	Tools           []string // installed non-service, non-docker dependencies
	Docker          *Docker  // non-nil when Docker access is available
	Ports           []Port
	NetworkPolicy   *NetworkPolicy
	MCPServers      []MCPServer
	HasDependencies bool // true when the config declares any dependencies
}

type Service struct {
	Name    string
	Version string
	EnvURL  string
}