native

type Classified struct {
	Type runtime.EventType
	Data string
}

type Provider struct {
	Name string
	// Command builds the argv for a run (argv[0] is the binary).
	Command func(spec runtime.RunSpec) []string
	// Parse optionally normalizes a stdout line into a message. When ok is
	// false the line is emitted as a raw EventStdout.
	Parse func(line string) (msg string, ok bool)
	// Classify optionally turns a stdout line into typed events (spec 030). A
	// line may yield several (text + tool_use blocks). When set it supersedes
	// Parse; ok=false falls through to a raw EventStdout.
	Classify func(line string) ([]Classified, bool)
	// Interactive opts the provider into a stdin PIPE so Signal can inject input
	// mid-run (HITL). Default false: the child gets /dev/null and so an immediate
	// EOF. This matters — a CLI that drains stdin (e.g. `codex exec`, which
	// prints "Reading additional input from stdin...") hangs forever on an open
	// pipe that is never written to nor closed. None of the shipped agent CLIs
	// read their prompt from stdin; they take it as argv.
	Interactive bool
}

type Runtime struct {

	// EnvAllow, when non-empty, restricts which host environment variables are
	// passed to spawned CLIs (least privilege, AO-041). Empty = pass the full
	// environment (the relaxed default; providers need their own auth keys).
	EnvAllow []string
	// contains filtered or unexported fields
}