headers

const (
	Status = ":status"
	Method = ":method"
	Path   = ":path"
)

const (
	// ContentType drives the reducer's reduceStream vs. reduceOneShot
	// dispatch — text/event-stream takes the SSE path, anything else
	// (typically application/json) takes the one-shot JSON path.
	ContentType = "content-type"

	// ContentEncoding gates request- and response-body decompression.
	// Reducers parse textual JSON / SSE, so any non-identity encoding
	// must be undone before captured bytes reach parsing or ingest.
	// If a new encoding shows up, this is the single read site to audit.
	ContentEncoding = "content-encoding"

	// ContentLength feeds pre-boundary request-size observation.
	// Envoy always delivers request headers, even when the body is
	// later rejected at the gRPC recv limit — so the declared length
	// read here at the headers phase is the only size signal that
	// covers requests too large to ever reach a body-phase callback.
	ContentLength = "content-length"
)

const (
	// AgentName tags the captured turn with the caller's agent
	// identity (Claude Code, opencode, etc.). Optional; tapes-ingest
	// stores it on the TurnEnvelope but does not gate on it.
	AgentName = "x-tapes-agent-name"

	// AIGSelectedBackend is the Envoy AI Gateway's per-request
	// indication of which AIServiceBackend it selected. extproc
	// prefers it for provider resolution because it survives path
	// rewrites and unusual routing configurations.
	AIGSelectedBackend = "x-ai-eg-selected-backend"

	// RequestID is the per-request correlation handle Envoy and
	// downstream logs use. extproc echoes it on every drop / accept
	// log line so an operator can join across components.
	RequestID = "x-request-id"
)

const (
	// TapesEnvelopePrefix is the common prefix for every session
	// envelope header. envelope-stripping uses prefix matching so
	// new optional members (forward compatibility) drop out of the
	// upstream request automatically.
	TapesEnvelopePrefix = "x-tapes-"

	// TapesHarnessID identifies the harness flavor. Missing or empty
	// is parsed as harnessIDUnknown.
	TapesHarnessID = "x-tapes-harness-id"

	// TapesHarnessSessionID is the harness's session id (a UUID for
	// claude).
	TapesHarnessSessionID = "x-tapes-harness-session-id"

	// TapesHarnessVersion is opaque (e.g. claude version string).
	TapesHarnessVersion = "x-tapes-harness-version"

	// TapesCwd is the harness's working directory. UTF-8 path.
	TapesCwd = "x-tapes-cwd"

	// TapesSessionName is the user-given session label. Percent-
	// encoded UTF-8 on the wire (RFC 3986).
	TapesSessionName = "x-tapes-session-name"

	// TapesParentHarnessSessionID is the fork parent's harness session
	// id, when known. Same id-space as TapesHarnessSessionID.
	TapesParentHarnessSessionID = "x-tapes-parent-harness-session-id"

	// TapesHarnessMetadata is a base64url-encoded JSON object with
	// harness-specific metadata. The parser accepts whatever arrived
	// (size-wise) and surfaces malformed payloads as a non-fatal
	// drop of the field.
	TapesHarnessMetadata = "x-tapes-harness-metadata"
)

const (
	// CodexSessionID is the Codex harness's root session id, present
	// on every Codex call.
	CodexSessionID = "session-id"

	// CodexThreadID is the Codex harness's thread id for this call:
	// equal to session-id on root turns, a distinct id on sub-thread
	// (spawned agent) turns.
	CodexThreadID = "thread-id"
)

const (
	// PaperAuthOrgID carries the `org_id` JWT claim (the WorkOS token
	// names it org_id, not org).
	PaperAuthOrgID = "x-paper-auth-org-id"

	// PaperAuthSubject carries the `sub` JWT claim — the WorkOS user id,
	// persisted as the captured session's auth_subject.
	PaperAuthSubject = "x-paper-auth-subject"
)