modelhook

type CheckRequest struct {
	Phase   Phase
	Tool    string
	Content string
	Prompt  string
}

type CheckResult struct {
	Verdict Verdict
	Usage   session.AuxiliaryUsage
}

type CompiledRule struct {
	// contains filtered or unexported fields
}

type Mode string

type Phase string

type RuleSpec struct {
	// Match is the tool-NAME matcher: an exact name, a "prefix*" glob, or "*".
	Match string
	// Phases is the directions this rule inspects ("pre"/"post"); empty = BOTH.
	Phases []string
	// Mode is the enforcement posture ("advisory"/"block").
	Mode string
	// Prompt overrides the built-in inspection prompt for the rule's direction.
	Prompt string
	// FailClosed flips the fail-open default for enforcing modes.
	FailClosed bool
	// FailClosedSet reports whether the operator explicitly set failClosed on
	// this rule (vs the YAML default false). When false, the global onCheckerDown
	// posture fills in; when true, the per-rule value wins over the global.
	FailClosedSet bool
	// SkipReadOnlyShell, when set, makes a Pre-phase Shell call whose command is
	// CONFIDENTLY read-only skip the checker entirely — a zero-LLM-call cost guard
	// so a configured guardrail can cover the local-shell blast radius (a mutating /
	// outward command like `gh pr merge`) without inspecting every `ls`. It is
	// FAIL-SAFE: an ambiguous / substitution-bearing command that cannot be proven
	// read-only is still inspected. Honored ONLY for tool=="Shell" && phase==pre; it
	// is inert on any other tool or on the post phase.
	SkipReadOnlyShell bool
	// Order is the rule's index in the configured list (the equal-specificity tiebreak).
	Order int
}

type Verdict struct {
	// Safe reports the checker's judgement. nil (a missing "safe" key) is ambiguity
	// — the parse fails and the runner takes its configured fail-open/closed path.
	Safe *bool `json:"safe"`
	// Reason is the checker's short rationale, folded (clamped) into the model-facing
	// block message and the operator audit line.
	Reason string `json:"reason"`
}

type VerdictChecker interface {
	Check(context.Context, CheckRequest) (CheckResult, error)
}

type WaiverHolder struct {
	// contains filtered or unexported fields
}