proto

type AddBackgroundRequest struct {
	Pid int32 `protobuf:"varint,1,opt,name=pid,proto3" json:"pid,omitempty"`
	// contains filtered or unexported fields
}

type CLISubcommand struct {

	// the subcommand word, e.g. "live", "boxes"
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// one-line help text, shown in `--help` and used as the MCP tool description
	Help string `protobuf:"bytes,2,opt,name=help,proto3" json:"help,omitempty"`
	// hidden-but-reachable: the host renders a hidden child with a Kong `hidden:""` tag — it is still a REAL dispatchable cmd node, but `--help` and the CLI model (MCP) keep it invisible, mirroring the `hidden:""` tag on the plugin's own grammar struct field (KongSubcommands derives it)
	Hidden bool `protobuf:"varint,3,opt,name=hidden,proto3" json:"hidden,omitempty"`
	// contains filtered or unexported fields
}

type Capabilities struct {

	// the plugin's CalVer (CalVer is the version authority)
	Calver string `protobuf:"bytes,1,opt,name=calver,proto3" json:"calver,omitempty"`
	// the unit's capabilities + the def validating each input
	Provided []*ProvidedCapability `protobuf:"bytes,3,rep,name=provided,proto3" json:"provided,omitempty"`
	// the unit's package-less, SELF-CONTAINED .cue source text
	SchemaCue string `protobuf:"bytes,4,opt,name=schema_cue,json=schemaCue,proto3" json:"schema_cue,omitempty"`
	// the OTHER plugins this unit declares it depends on; the host resolves each (class,word) against the provider registry and connects it declaratively — identically in every placement
	Requires []*PluginRequirement `protobuf:"bytes,5,rep,name=requires,proto3" json:"requires,omitempty"`
	// contains filtered or unexported fields
}

type CaptureReply struct {
	Stdout   string `protobuf:"bytes,1,opt,name=stdout,proto3" json:"stdout,omitempty"`
	Stderr   string `protobuf:"bytes,2,opt,name=stderr,proto3" json:"stderr,omitempty"`
	ExitCode int32  `protobuf:"varint,3,opt,name=exit_code,json=exitCode,proto3" json:"exit_code,omitempty"`
	Error    string `protobuf:"bytes,4,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type ChannelFrame struct {

	// stable idempotency/correlation key for the channel
	RequestId string `protobuf:"bytes,1,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// monotonic sender sequence; zero is reserved for an unsequenced open
	Sequence uint64 `protobuf:"varint,2,opt,name=sequence,proto3" json:"sequence,omitempty"`
	// highest contiguous peer sequence consumed
	AckSequence uint64 `protobuf:"varint,3,opt,name=ack_sequence,json=ackSequence,proto3" json:"ack_sequence,omitempty"`
	// open|stdin|stdout|stderr|terminal|status|resize|signal|ack|cancel|exit|error|resync
	Kind string `protobuf:"bytes,4,opt,name=kind,proto3" json:"kind,omitempty"`
	// provider class, set on open
	Class string `protobuf:"bytes,5,opt,name=class,proto3" json:"class,omitempty"`
	// provider word, set on open
	Reserved string `protobuf:"bytes,6,opt,name=reserved,proto3" json:"reserved,omitempty"`
	// provider operation, set on open
	Op string `protobuf:"bytes,7,opt,name=op,proto3" json:"op,omitempty"`
	// CUE-generated domain payload or structured status
	PayloadJson []byte `protobuf:"bytes,8,opt,name=payload_json,json=payloadJson,proto3" json:"payload_json,omitempty"`
	// binary-safe process or terminal bytes; never shell-interpreted
	Data []byte `protobuf:"bytes,9,opt,name=data,proto3" json:"data,omitempty"`
	// canonical key, signal, stream, or status name
	Name     string `protobuf:"bytes,10,opt,name=name,proto3" json:"name,omitempty"`
	Cols     uint32 `protobuf:"varint,11,opt,name=cols,proto3" json:"cols,omitempty"`
	Rows     uint32 `protobuf:"varint,12,opt,name=rows,proto3" json:"rows,omitempty"`
	ExitCode int32  `protobuf:"varint,13,opt,name=exit_code,json=exitCode,proto3" json:"exit_code,omitempty"`
	Error    string `protobuf:"bytes,14,opt,name=error,proto3" json:"error,omitempty"`
	// CUE-generated generic target chain, set on open
	TargetJson []byte `protobuf:"bytes,15,opt,name=target_json,json=targetJson,proto3" json:"target_json,omitempty"`
	// first sequence requested during attach/resynchronization
	ReplayFrom uint64 `protobuf:"varint,16,opt,name=replay_from,json=replayFrom,proto3" json:"replay_from,omitempty"`
	// contains filtered or unexported fields
}

type CheckContextServiceClient interface {
	HTTPDo(ctx context.Context, in *HTTPDoRequest, opts ...grpc.CallOption) (*HTTPDoReply, error)
	AddBackground(ctx context.Context, in *AddBackgroundRequest, opts ...grpc.CallOption) (*Empty, error)
	// ResolveEndpoint: resolve the check target's venue (container / VM / ssh / local) and
	// return a host-reachable address for an in-venue TCP port — opening (and host-side
	// tracking, for post-Invoke teardown) any ssh -L forward a VM/ssh venue needs. Class-
	// generic: ANY endpoint check verb (cdp/vnc/spice/…) declares its port and dials the addr.
	ResolveEndpoint(ctx context.Context, in *ResolveEndpointRequest, opts ...grpc.CallOption) (*ResolveEndpointReply, error)
	// ResolveGraphicsEndpoint: resolve a VM's <graphics type='<kind>'> listener (kind = "vnc"
	// | "spice") to a dialable endpoint — the host owns the go-libvirt resolution, any
	// qemu+ssh:// tunnel (tracked for post-Invoke teardown), the socket->TCP bridge a TCP-only
	// client needs, and the credential-store password. Class-generic: parameterized by kind,
	// shared by the vnc + spice verbs (never a per-verb RPC).
	ResolveGraphicsEndpoint(ctx context.Context, in *ResolveGraphicsEndpointRequest, opts ...grpc.CallOption) (*ResolveGraphicsEndpointReply, error)
	// ResolveImageLabel: read one OCI label value off the deployment-under-test's image — the
	// host owns the podman engine + container→image resolution the out-of-process plugin cannot
	// reach. Class-generic (parameterized by label name): the mcp verb reads ai.opencharly.mcp_provide;
	// any verb needing a baked label uses it. Empty value (label absent) is a valid reply.
	ResolveImageLabel(ctx context.Context, in *ResolveImageLabelRequest, opts ...grpc.CallOption) (*ResolveImageLabelReply, error)
}

type CheckContextServiceServer interface {
	HTTPDo(context.Context, *HTTPDoRequest) (*HTTPDoReply, error)
	AddBackground(context.Context, *AddBackgroundRequest) (*Empty, error)
	// ResolveEndpoint: resolve the check target's venue (container / VM / ssh / local) and
	// return a host-reachable address for an in-venue TCP port — opening (and host-side
	// tracking, for post-Invoke teardown) any ssh -L forward a VM/ssh venue needs. Class-
	// generic: ANY endpoint check verb (cdp/vnc/spice/…) declares its port and dials the addr.
	ResolveEndpoint(context.Context, *ResolveEndpointRequest) (*ResolveEndpointReply, error)
	// ResolveGraphicsEndpoint: resolve a VM's <graphics type='<kind>'> listener (kind = "vnc"
	// | "spice") to a dialable endpoint — the host owns the go-libvirt resolution, any
	// qemu+ssh:// tunnel (tracked for post-Invoke teardown), the socket->TCP bridge a TCP-only
	// client needs, and the credential-store password. Class-generic: parameterized by kind,
	// shared by the vnc + spice verbs (never a per-verb RPC).
	ResolveGraphicsEndpoint(context.Context, *ResolveGraphicsEndpointRequest) (*ResolveGraphicsEndpointReply, error)
	// ResolveImageLabel: read one OCI label value off the deployment-under-test's image — the
	// host owns the podman engine + container→image resolution the out-of-process plugin cannot
	// reach. Class-generic (parameterized by label name): the mcp verb reads ai.opencharly.mcp_provide;
	// any verb needing a baked label uses it. Empty value (label absent) is a valid reply.
	ResolveImageLabel(context.Context, *ResolveImageLabelRequest) (*ResolveImageLabelReply, error)
	// contains filtered or unexported methods
}

type DeployTraits struct {

	// "container" | "ssh" | "shell" | "parent" | "none": how commands physically execute in this substrate's venue
	Venue string `protobuf:"bytes,1,opt,name=venue,proto3" json:"venue,omitempty"`
	// the substrate runs a baked OCI image (pod)
	ImageBacked bool `protobuf:"varint,2,opt,name=image_backed,json=imageBacked,proto3" json:"image_backed,omitempty"`
	// the substrate composes over an image build context (pod overlay, kubernetes manifests)
	ImageContext bool `protobuf:"varint,3,opt,name=image_context,json=imageContext,proto3" json:"image_context,omitempty"`
	// the substrate is a full machine with a system init (host/vm/local) — services render as systemd units, not a container init
	MachineVenue bool `protobuf:"varint,4,opt,name=machine_venue,json=machineVenue,proto3" json:"machine_venue,omitempty"`
	// the substrate holds an exclusive host-resource lease boundary (vm)
	ExclusiveVenue bool `protobuf:"varint,5,opt,name=exclusive_venue,json=exclusiveVenue,proto3" json:"exclusive_venue,omitempty"`
	// the substrate is a deploy-chain LEAF — it cannot be descended into (kubernetes)
	LeafOnly bool `protobuf:"varint,6,opt,name=leaf_only,json=leafOnly,proto3" json:"leaf_only,omitempty"`
	// the substrate's Start/Stop accept direct-mode CLI opts AND need the Q1 resource-arbiter claim bracketed around the dispatch (pod); a substrate that manages its own venue lifecycle + resource claim (vm) leaves this false
	BracketedLifecycle bool `protobuf:"varint,7,opt,name=bracketed_lifecycle,json=bracketedLifecycle,proto3" json:"bracketed_lifecycle,omitempty"`
	// the substrate is a valid kind:check bed target (pod/vm/local/android); kubernetes and unknown words are not
	BedTarget bool `protobuf:"varint,8,opt,name=bed_target,json=bedTarget,proto3" json:"bed_target,omitempty"`
	// the substrate's Add/Del path wires the ephemeral register/teardown seam (TTL timer + charly.yml persistence) — vm only today
	SupportsEphemeral bool `protobuf:"varint,9,opt,name=supports_ephemeral,json=supportsEphemeral,proto3" json:"supports_ephemeral,omitempty"`
	// the substrate has a backing chain from_snapshot restores from — vm only
	SupportsFromSnapshot bool `protobuf:"varint,10,opt,name=supports_from_snapshot,json=supportsFromSnapshot,proto3" json:"supports_from_snapshot,omitempty"`
	// contains filtered or unexported fields
}

type DescribeProviderReply struct {
	Found        bool          `protobuf:"varint,1,opt,name=found,proto3" json:"found,omitempty"`
	StepContract *StepContract `protobuf:"bytes,2,opt,name=step_contract,json=stepContract,proto3" json:"step_contract,omitempty"`
	// contains filtered or unexported fields
}

type DescribeProviderRequest struct {
	Class string `protobuf:"bytes,1,opt,name=class,proto3" json:"class,omitempty"`
	Word  string `protobuf:"bytes,2,opt,name=word,proto3" json:"word,omitempty"`
	// contains filtered or unexported fields
}

type Empty struct {
	// contains filtered or unexported fields
}

type ExecutorServiceClient interface {
	Venue(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*VenueReply, error)
	RunSystem(ctx context.Context, in *RunRequest, opts ...grpc.CallOption) (*RunReply, error)
	RunUser(ctx context.Context, in *RunRequest, opts ...grpc.CallOption) (*RunReply, error)
	// place file content on the venue (binary-safe; owner_root → root:root via sudo)
	PutFile(ctx context.Context, in *PutFileRequest, opts ...grpc.CallOption) (*PutFileReply, error)
	// capture stdout/stderr/exit (no root escalation — callers add sudo)
	RunCapture(ctx context.Context, in *RunRequest, opts ...grpc.CallOption) (*CaptureReply, error)
	// F12: run script on the venue wired to the operator's LIVE TTY (the host reverse-server runs IN the charly process, so it inherits os.Stdin/os.Stdout/os.Stderr = the operator's terminal — stdio NEVER crosses the wire, only script→exit; the child podman exec -it / ssh -t owns the PTY + resize + Ctrl-C). Blocks until the session ends; UNARY (host holds the TTY — the hostBuildCli doctrine). Consumers: charly shell (-it), charly cmd (-i)
	RunInteractive(ctx context.Context, in *RunRequest, opts ...grpc.CallOption) (*LiveReply, error)
	// F12: run script on the venue streaming stdout/stderr LIVE to the operator (inherited os.Stdout/os.Stderr; no stdin). Blocks until exit. UNARY (host holds the terminal). Consumer: charly logs --follow
	RunStream(ctx context.Context, in *RunRequest, opts ...grpc.CallOption) (*LiveReply, error)
	// read a venue file (e.g. a record/screenshot artifact pulled back to the host)
	GetFile(ctx context.Context, in *GetFileRequest, opts ...grpc.CallOption) (*GetFileReply, error)
	// run a HOST-ENGINE step (Builder/LocalPkgInstall/SystemPackages/act-OpStep/ExternalPlugin) on the host engine + apply onto the venue
	RunHostStep(ctx context.Context, in *HostStepRequest, opts ...grpc.CallOption) (*HostStepReply, error)
	// F10 plugin↔plugin: the host resolves another provider by (class,word) + Invokes it on the calling plugin's behalf (threading the SAME venue executor) — the generalization of the RunHostStep ExternalPlugin arm to ANY class/op
	InvokeProvider(ctx context.Context, in *InvokeProviderRequest, opts ...grpc.CallOption) (*InvokeReply, error)
	// F10 host-build: the calling plugin requests a HOST-side build (the build engine stays in core) — the host runs the registered host-builder for `kind` and returns its result
	HostBuild(ctx context.Context, in *HostBuildRequest, opts ...grpc.CallOption) (*HostBuildReply, error)
	// K5-A item 2: the host resolves another provider by (class,word) and returns its CACHED capability metadata (today: StepContract) — no Invoke, no live Describe round-trip. The metadata twin of InvokeProvider (dispatch) and HostBuild (host-side build).
	DescribeProvider(ctx context.Context, in *DescribeProviderRequest, opts ...grpc.CallOption) (*DescribeProviderReply, error)
}

type ExecutorServiceServer interface {
	Venue(context.Context, *Empty) (*VenueReply, error)
	RunSystem(context.Context, *RunRequest) (*RunReply, error)
	RunUser(context.Context, *RunRequest) (*RunReply, error)
	// place file content on the venue (binary-safe; owner_root → root:root via sudo)
	PutFile(context.Context, *PutFileRequest) (*PutFileReply, error)
	// capture stdout/stderr/exit (no root escalation — callers add sudo)
	RunCapture(context.Context, *RunRequest) (*CaptureReply, error)
	// F12: run script on the venue wired to the operator's LIVE TTY (the host reverse-server runs IN the charly process, so it inherits os.Stdin/os.Stdout/os.Stderr = the operator's terminal — stdio NEVER crosses the wire, only script→exit; the child podman exec -it / ssh -t owns the PTY + resize + Ctrl-C). Blocks until the session ends; UNARY (host holds the TTY — the hostBuildCli doctrine). Consumers: charly shell (-it), charly cmd (-i)
	RunInteractive(context.Context, *RunRequest) (*LiveReply, error)
	// F12: run script on the venue streaming stdout/stderr LIVE to the operator (inherited os.Stdout/os.Stderr; no stdin). Blocks until exit. UNARY (host holds the terminal). Consumer: charly logs --follow
	RunStream(context.Context, *RunRequest) (*LiveReply, error)
	// read a venue file (e.g. a record/screenshot artifact pulled back to the host)
	GetFile(context.Context, *GetFileRequest) (*GetFileReply, error)
	// run a HOST-ENGINE step (Builder/LocalPkgInstall/SystemPackages/act-OpStep/ExternalPlugin) on the host engine + apply onto the venue
	RunHostStep(context.Context, *HostStepRequest) (*HostStepReply, error)
	// F10 plugin↔plugin: the host resolves another provider by (class,word) + Invokes it on the calling plugin's behalf (threading the SAME venue executor) — the generalization of the RunHostStep ExternalPlugin arm to ANY class/op
	InvokeProvider(context.Context, *InvokeProviderRequest) (*InvokeReply, error)
	// F10 host-build: the calling plugin requests a HOST-side build (the build engine stays in core) — the host runs the registered host-builder for `kind` and returns its result
	HostBuild(context.Context, *HostBuildRequest) (*HostBuildReply, error)
	// K5-A item 2: the host resolves another provider by (class,word) and returns its CACHED capability metadata (today: StepContract) — no Invoke, no live Describe round-trip. The metadata twin of InvokeProvider (dispatch) and HostBuild (host-side build).
	DescribeProvider(context.Context, *DescribeProviderRequest) (*DescribeProviderReply, error)
	// contains filtered or unexported methods
}

type Frame struct {
	ResultJson []byte `protobuf:"bytes,1,opt,name=result_json,json=resultJson,proto3" json:"result_json,omitempty"`
	// contains filtered or unexported fields
}

type GetFileReply struct {
	Content []byte `protobuf:"bytes,1,opt,name=content,proto3" json:"content,omitempty"`
	Error   string `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type GetFileRequest struct {
	Path     string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	AsRoot   bool   `protobuf:"varint,2,opt,name=as_root,json=asRoot,proto3" json:"as_root,omitempty"`
	OptsJson []byte `protobuf:"bytes,3,opt,name=opts_json,json=optsJson,proto3" json:"opts_json,omitempty"`
	// contains filtered or unexported fields
}

type HTTPDoReply struct {
	Status int32  `protobuf:"varint,1,opt,name=status,proto3" json:"status,omitempty"`
	Body   []byte `protobuf:"bytes,2,opt,name=body,proto3" json:"body,omitempty"`
	// pre-formatted "Key: value\n" blob (multi-value preserved), matcher-ready
	HeaderBlob string `protobuf:"bytes,3,opt,name=header_blob,json=headerBlob,proto3" json:"header_blob,omitempty"`
	Error      string `protobuf:"bytes,4,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type HTTPDoRequest struct {
	Method            string            `protobuf:"bytes,1,opt,name=method,proto3" json:"method,omitempty"`
	Url               string            `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	Body              []byte            `protobuf:"bytes,3,opt,name=body,proto3" json:"body,omitempty"`
	Headers           map[string]string `` /* 141-byte string literal not displayed */
	Timeout           string            `protobuf:"bytes,5,opt,name=timeout,proto3" json:"timeout,omitempty"`
	AllowInsecure     bool              `protobuf:"varint,6,opt,name=allow_insecure,json=allowInsecure,proto3" json:"allow_insecure,omitempty"`
	NoFollowRedirects bool              `protobuf:"varint,7,opt,name=no_follow_redirects,json=noFollowRedirects,proto3" json:"no_follow_redirects,omitempty"`
	CaPem             []byte            `protobuf:"bytes,8,opt,name=ca_pem,json=caPem,proto3" json:"ca_pem,omitempty"`
	// contains filtered or unexported fields
}

type HostBuildReply struct {
	ResultJson []byte `protobuf:"bytes,1,opt,name=result_json,json=resultJson,proto3" json:"result_json,omitempty"`
	Error      string `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type HostBuildRequest struct {
	Kind     string `protobuf:"bytes,1,opt,name=kind,proto3" json:"kind,omitempty"`
	SpecJson []byte `protobuf:"bytes,2,opt,name=spec_json,json=specJson,proto3" json:"spec_json,omitempty"`
	// contains filtered or unexported fields
}

type HostStepReply struct {
	ReverseOpsJson []byte `protobuf:"bytes,1,opt,name=reverse_ops_json,json=reverseOpsJson,proto3" json:"reverse_ops_json,omitempty"`
	Error          string `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type HostStepRequest struct {
	StepJson []byte `protobuf:"bytes,1,opt,name=step_json,json=stepJson,proto3" json:"step_json,omitempty"`
	OptsJson []byte `protobuf:"bytes,2,opt,name=opts_json,json=optsJson,proto3" json:"opts_json,omitempty"`
	// contains filtered or unexported fields
}

type InvokeProviderRequest struct {
	Class      string `protobuf:"bytes,1,opt,name=class,proto3" json:"class,omitempty"`
	Reserved   string `protobuf:"bytes,2,opt,name=reserved,proto3" json:"reserved,omitempty"`
	Op         string `protobuf:"bytes,3,opt,name=op,proto3" json:"op,omitempty"`
	ParamsJson []byte `protobuf:"bytes,4,opt,name=params_json,json=paramsJson,proto3" json:"params_json,omitempty"`
	EnvJson    []byte `protobuf:"bytes,5,opt,name=env_json,json=envJson,proto3" json:"env_json,omitempty"`
	// OPTIONAL marshalled spec.VenueDescriptor (S1 — the venue-scoped-executor-session
	// seam). The calling plugin supplies its OWN self-described venue (shell or ssh) when
	// it wants the target provider Invoked WITH a live executor but holds no enclosing
	// executor of its own to forward (e.g. a verb/kind Invoke with no deploy-context
	// broker). On presence, the host re-materializes a FRESH DeployExecutor from the
	// descriptor (venueFromDescriptor) and threads THAT onto the nested InvokeWithExecutor
	// call instead of the caller's own executor. Empty/absent — byte-identical prior
	// behavior (the caller's own executor, if any, is forwarded as before).
	VenueDescriptorJson []byte `protobuf:"bytes,6,opt,name=venue_descriptor_json,json=venueDescriptorJson,proto3" json:"venue_descriptor_json,omitempty"`
	// OPTIONAL canonical candy ref (S3b — the Pass-2 lazy-connect gap). The host's
	// InvokeProvider handler falls back to connectPluginByWordRef(class, word, extraRef)
	// on a registry miss (S2); passing "" only ever reaches Pass-1 (the calling project's
	// own candy closure) — a target declared nowhere in that closure but resolvable via an
	// explicit @github canonical ref (the same Pass-2 fetch the credential/vm/kube host
	// adapters already use) needs this field set. Empty/absent — byte-identical S2
	// behavior (Pass-1 only).
	ExtraRef string `protobuf:"bytes,7,opt,name=extra_ref,json=extraRef,proto3" json:"extra_ref,omitempty"`
	// contains filtered or unexported fields
}

type InvokeReply struct {
	ResultJson []byte `protobuf:"bytes,1,opt,name=result_json,json=resultJson,proto3" json:"result_json,omitempty"`
	// contains filtered or unexported fields
}

type InvokeRequest struct {

	// the reserved word, e.g. "exampleprobe","cdp","local"
	Reserved string `protobuf:"bytes,1,opt,name=reserved,proto3" json:"reserved,omitempty"`
	// operation selector for the word's class
	Op string `protobuf:"bytes,2,opt,name=op,proto3" json:"op,omitempty"`
	// the CUE-generated params (Op for verbs/steps; entity for kinds)
	ParamsJson []byte `protobuf:"bytes,3,opt,name=params_json,json=paramsJson,proto3" json:"params_json,omitempty"`
	// snapshotCheckEnv / venue descriptor (serializable invocation ctx)
	EnvJson []byte `protobuf:"bytes,4,opt,name=env_json,json=envJson,proto3" json:"env_json,omitempty"`
	// the ProviderClass ("verb"/"kind"/...) — words aren't unique across classes
	Class string `protobuf:"bytes,5,opt,name=class,proto3" json:"class,omitempty"`
	// E3b: the go-plugin broker id the host serves ExecutorService on for a deploy/step/builder op; 0 = none (verb/kind ops need no executor)
	ExecutorBrokerId uint32 `protobuf:"varint,6,opt,name=executor_broker_id,json=executorBrokerId,proto3" json:"executor_broker_id,omitempty"`
	// contains filtered or unexported fields
}

type LiveReply struct {
	ExitCode int32  `protobuf:"varint,1,opt,name=exit_code,json=exitCode,proto3" json:"exit_code,omitempty"`
	Error    string `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type PluginMetaClient interface {
	Describe(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*Capabilities, error)
}

type PluginMetaServer interface {
	Describe(context.Context, *Empty) (*Capabilities, error)
	// contains filtered or unexported methods
}

type PluginRequirement struct {

	// the peer's ProviderClass ("verb"/"kind"/...)
	Class string `protobuf:"bytes,1,opt,name=class,proto3" json:"class,omitempty"`
	// the peer's reserved word, e.g. "enc"
	Word string `protobuf:"bytes,2,opt,name=word,proto3" json:"word,omitempty"`
	// OPTIONAL canonical candy ref for a peer absent from the project's candy closure — fetched declaratively instead of by a call-time ExtraRef
	Source string `protobuf:"bytes,3,opt,name=source,proto3" json:"source,omitempty"`
	// when true, an absent peer is recorded and skipped rather than failing the load
	Optional bool `protobuf:"varint,4,opt,name=optional,proto3" json:"optional,omitempty"`
	// contains filtered or unexported fields
}

type ProvidedCapability struct {

	// "verb" / "kind" / "deploy" / "step" / "builder"
	Class string `protobuf:"bytes,1,opt,name=class,proto3" json:"class,omitempty"`
	// the reserved word, e.g. "externalprobe"
	Word string `protobuf:"bytes,2,opt,name=word,proto3" json:"word,omitempty"`
	// the CUE def for this word's plugin_input, e.g. "#ExternalprobeInput"
	InputDef string `protobuf:"bytes,3,opt,name=input_def,json=inputDef,proto3" json:"input_def,omitempty"`
	// set ONLY for class="step" (F3): the plugin-declared install-step contract
	StepContract *StepContract `protobuf:"bytes,4,opt,name=step_contract,json=stepContract,proto3" json:"step_contract,omitempty"`
	// set ONLY for class="kind" (F5): the kind decodes a STRUCTURAL entity (a spec.Deploy member tree -> uf.Deploy) rather than a FLAT body (-> uf.PluginKinds)
	Structural bool `protobuf:"varint,5,opt,name=structural,proto3" json:"structural,omitempty"`
	// set ONLY for class="deploy" (F6): the substrate brings its OWN host-side venue lifecycle (PrepareVenue/Start/Stop/...) served over the lifecycle Ops; the host registers a wire-backed substrateLifecycle for it
	Lifecycle bool `protobuf:"varint,6,opt,name=lifecycle,proto3" json:"lifecycle,omitempty"`
	// set ONLY for class="deploy" (F6): the substrate declares a host-side PRERESOLVE step (OpPreresolve) the host runs before apply, shipping the opaque result in DeployVenue.Substrate
	Preresolve bool `protobuf:"varint,7,opt,name=preresolve,proto3" json:"preresolve,omitempty"`
	// set ONLY for class="kind" (F7/C8): the kind serves a deep OpValidate check (returns Diagnostics) BEYOND the static CUE input-def gate; the host dispatches OpValidate at load
	Validates bool `protobuf:"varint,8,opt,name=validates,proto3" json:"validates,omitempty"`
	// F9: the plugin lifecycle PHASE (sdk.Phase*; "" => runtime default) — the ordered point at which the kernel loads/invokes the plugin; "bootstrap" runs BEFORE config validation/migration
	Phase string `protobuf:"bytes,9,opt,name=phase,proto3" json:"phase,omitempty"`
	// set ONLY for class="verb": the input field the scalar sugar shorthand targets (`file: /x` -> plugin_input: {<primary>: "/x"}); "" => map input only
	Primary string `protobuf:"bytes,10,opt,name=primary,proto3" json:"primary,omitempty"`
	// set ONLY for class="kind" (P9): a SUBSTRATE kind's DECLARED deploy behaviour traits, the SINGLE plugin-declared source kit.StampDescent stamps onto node.Descent — the consult sites read the traits off node.Descent instead of switching on the substrate kind word
	DeployTraits *DeployTraits `protobuf:"bytes,11,opt,name=deploy_traits,json=deployTraits,proto3" json:"deploy_traits,omitempty"`
	// set ONLY for class="command": the plugin's DECLARED one-level-deep CLI subcommand catalog (name+help). Lets the host build a REAL nested Kong grammar (in place of the opaque `[<args>...]` pass-through holder every command-class capability otherwise gets) and synthesize a dotted "<word>.<name>" CLI-model leaf per entry for `charly __cli-model` / MCP tool generation. Empty (the default) preserves today's flat pass-through behavior byte-for-byte.
	Subcommands []*CLISubcommand `protobuf:"bytes,12,rep,name=subcommands,proto3" json:"subcommands,omitempty"`
	// CUE #CLIModel JSON for class=command; lets CLI and MCP reflect plugin-owned leaves without importing plugin code
	CommandModelJson []byte `protobuf:"bytes,13,opt,name=command_model_json,json=commandModelJson,proto3" json:"command_model_json,omitempty"`
	// set ONLY for class="command": the command needs a real terminal (stdin/stdout/stderr/TTY) — `shell`, `logs -f`, `mcp serve --stdio`. A command DECLARING this keeps the process-replacing exec lane (the child becomes the process and inherits the terminal); every non-interactive command dispatches through the broker-backed Invoke(OpRun) path so it behaves identically compiled-in and runtime-loaded. Data-driven, never a class-wide exemption.
	Interactive bool `protobuf:"varint,14,opt,name=interactive,proto3" json:"interactive,omitempty"`
	// contains filtered or unexported fields
}

type ProviderClient interface {
	// single-shot (the common path)
	Invoke(ctx context.Context, in *InvokeRequest, opts ...grpc.CallOption) (*InvokeReply, error)
	// streaming (record/logcat/execute)
	InvokeStream(ctx context.Context, in *InvokeRequest, opts ...grpc.CallOption) (Provider_InvokeStreamClient, error)
	// generic bidirectional provider/process stream with explicit ordering, acknowledgements, cancellation, and resynchronization
	Channel(ctx context.Context, opts ...grpc.CallOption) (Provider_ChannelClient, error)
}

type ProviderServer interface {
	// single-shot (the common path)
	Invoke(context.Context, *InvokeRequest) (*InvokeReply, error)
	// streaming (record/logcat/execute)
	InvokeStream(*InvokeRequest, Provider_InvokeStreamServer) error
	// generic bidirectional provider/process stream with explicit ordering, acknowledgements, cancellation, and resynchronization
	Channel(Provider_ChannelServer) error
	// contains filtered or unexported methods
}

type Provider_ChannelClient interface {
	Send(*ChannelFrame) error
	Recv() (*ChannelFrame, error)
	grpc.ClientStream
}

type Provider_ChannelServer interface {
	Send(*ChannelFrame) error
	Recv() (*ChannelFrame, error)
	grpc.ServerStream
}

type Provider_InvokeStreamClient interface {
	Recv() (*Frame, error)
	grpc.ClientStream
}

type Provider_InvokeStreamServer interface {
	Send(*Frame) error
	grpc.ServerStream
}

type PutFileReply struct {
	Error string `protobuf:"bytes,1,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type PutFileRequest struct {
	Path      string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	Content   []byte `protobuf:"bytes,2,opt,name=content,proto3" json:"content,omitempty"`
	Mode      uint32 `protobuf:"varint,3,opt,name=mode,proto3" json:"mode,omitempty"`
	OwnerRoot bool   `protobuf:"varint,4,opt,name=owner_root,json=ownerRoot,proto3" json:"owner_root,omitempty"`
	OptsJson  []byte `protobuf:"bytes,5,opt,name=opts_json,json=optsJson,proto3" json:"opts_json,omitempty"`
	// contains filtered or unexported fields
}

type ResolveEndpointReply struct {
	Addr  string `protobuf:"bytes,1,opt,name=addr,proto3" json:"addr,omitempty"`
	Error string `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type ResolveEndpointRequest struct {
	Port int32 `protobuf:"varint,1,opt,name=port,proto3" json:"port,omitempty"`
	// contains filtered or unexported fields
}

type ResolveGraphicsEndpointReply struct {
	Addr        string `protobuf:"bytes,1,opt,name=addr,proto3" json:"addr,omitempty"`
	Socket      string `protobuf:"bytes,2,opt,name=socket,proto3" json:"socket,omitempty"`
	Password    string `protobuf:"bytes,3,opt,name=password,proto3" json:"password,omitempty"`
	Skip        bool   `protobuf:"varint,4,opt,name=skip,proto3" json:"skip,omitempty"`
	SkipMessage string `protobuf:"bytes,5,opt,name=skip_message,json=skipMessage,proto3" json:"skip_message,omitempty"`
	Error       string `protobuf:"bytes,6,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type ResolveGraphicsEndpointRequest struct {
	Kind string `protobuf:"bytes,1,opt,name=kind,proto3" json:"kind,omitempty"`
	// contains filtered or unexported fields
}

type ResolveImageLabelReply struct {
	Value string `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`
	Error string `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type ResolveImageLabelRequest struct {
	Label string `protobuf:"bytes,1,opt,name=label,proto3" json:"label,omitempty"`
	// contains filtered or unexported fields
}

type RunReply struct {
	Error string `protobuf:"bytes,1,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type RunRequest struct {
	Script   string `protobuf:"bytes,1,opt,name=script,proto3" json:"script,omitempty"`
	OptsJson []byte `protobuf:"bytes,2,opt,name=opts_json,json=optsJson,proto3" json:"opts_json,omitempty"`
	// contains filtered or unexported fields
}

type StepContract struct {

	// "system" | "user" | "user-profile"
	Scope string `protobuf:"bytes,1,opt,name=scope,proto3" json:"scope,omitempty"`
	// Venue enum: 0=host-native, 1=container-builder, 2=skip
	Venue int32 `protobuf:"varint,2,opt,name=venue,proto3" json:"venue,omitempty"`
	// "" | "allow-repo-changes" | "allow-root-tasks" | "with-services"
	Gate string `protobuf:"bytes,3,opt,name=gate,proto3" json:"gate,omitempty"`
	// F-STEP-EMIT: the step produces a build-context Containerfile FRAGMENT (Invoke(OpEmit)); the pod-overlay OCITarget bakes it. false => deploy-only step (no build fragment; OCITarget skips it, like apk on an image build)
	Emits bool `protobuf:"varint,4,opt,name=emits,proto3" json:"emits,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedCheckContextServiceServer struct {
}

type UnimplementedExecutorServiceServer struct {
}

type UnimplementedPluginMetaServer struct {
}

type UnimplementedProviderServer struct {
}

type UnsafeCheckContextServiceServer interface {
	// contains filtered or unexported methods
}

type UnsafeExecutorServiceServer interface {
	// contains filtered or unexported methods
}

type UnsafePluginMetaServer interface {
	// contains filtered or unexported methods
}

type UnsafeProviderServer interface {
	// contains filtered or unexported methods
}

type VenueReply struct {
	Venue string `protobuf:"bytes,1,opt,name=venue,proto3" json:"venue,omitempty"`
	// contains filtered or unexported fields
}