cli

type ErrContainerRequired struct {
	Ref string
}

type ErrPersistentSessionContinuesTarget struct {
	StepID   string
	TargetID string
	Ref      string
}

type ErrPersistentSessionGateEvaluate struct {
	StepID string
	Ref    string
}

type ErrRuntimeDrift struct {
	Ref       string
	Container string
	Recorded  string
	Current   string
}

type ErrThreadedRequired struct {
	StepID string // the step that declares continues:
	Ref    string // its uses: ref (the non-threaded adapter)
}

type Runner struct {
	// Backend is the container.Backend the run subcommand passes to
	// engine.LocalDispatcher. Production: left nil — the run/resume
	// subcommands construct on-demand via newBackend (cli/backend.go),
	// choosing a concrete fake/docker/native backend from the --backend flag
	// after resolving auto. Tests: inject any container.Backend (typically
	// a pre-programmed *container.Fake) to short-circuit construction
	// via (*Runner).resolveBackend.
	Backend container.Backend
	// Resolver is the agent.Adapter registry the CLI uses to look up `uses:`
	// refs at run-start and resume. Test-injection point:
	// tests assign a *agent.Registry populated with agent/fake adapters and
	// drive workflows that exercise the version-pinning + drift-check paths.
	//
	// Production leaves this nil. cli/run.go and cli/resume.go then build a
	// fresh *agent.Registry for the current invocation from --agent-env/default
	// env allowlists plus workflow env: declarations, and pass that registry
	// down without caching it here. This matters for long-lived Runner values:
	// imported workflow roles and env allowlists must not leak across runs.
	//
	// Workflows that don't reference any `uses:` step (every Phase 2-4
	// fixture) run unaffected — they hit zero Lookup calls regardless of
	// what Resolver is.
	Resolver agent.Resolver
	// AgentEnv is the env-var allowlist the CLI uses to construct the
	// production *agent.Registry (when Resolver is nil). Slice 5.3
	// test-injection point: tests assign []string{"ANTHROPIC_API_KEY"} to
	// drive cli/agent_registry.go's buildAgentRegistry without the
	// os.Setenv dance that --agent-env-via-flag would require.
	//
	// When Resolver is non-nil, AgentEnv is ignored (the test has injected
	// a fully-constructed Registry, bypassing buildAgentRegistry).
	// Production: cli/run.go reads --agent-env, splits to []string, and
	// passes here BEFORE calling buildAgentRegistry.
	AgentEnv []string
	// AgentEventTap is the io.Writer agent.AgentEvent live-tap lines are written
	// to during dispatch. Test-injection point: tests assign a bytes.Buffer to
	// capture the rendered lines, or io.Discard to silence. Production wiring
	// in cli/execute.go (Task 11) defaults to stderr.
	//
	// nil disables the live tap entirely (the dispatcher's writeAgentEventTap
	// becomes a no-op). Workflows without any `uses:` step (Phase 2-4
	// fixtures) are unaffected — the tap never fires.
	AgentEventTap io.Writer
	// IDGen mints run ids. Production: clock.CryptoIDGen{}. Tests: a
	// seeded *clock.Fake so run dir paths are reproducible.
	IDGen clock.IDGen
	// BrokerOptions are passed to signal.NewBroker when the run/resume
	// subcommands construct a broker. Slice 3.5 test-injection hook: tests
	// pass signal.WithPollInterval(time.Millisecond) for fast polling; the
	// production cli.Run constructor leaves this nil (defaults to 100ms).
	BrokerOptions []signal.BrokerOption
	// Stdin is the reader `awf run --input-file -` consumes for stdin-supplied
	// run input (S7). Tests inject a strings.Reader; production leaves it nil and
	// the run subcommand falls back to os.Stdin (see (*Runner).stdin). Read ONLY
	// on the `--input-file -` path — nil everywhere else.
	Stdin io.Reader
}