internal/adapters/providers

type Agent interface {
	InvokeAgent(context.Context, AgentRequest) (AgentResponse, error)
}

type AgentRequest struct {
	TaskID           string
	Prompt           string
	SchemaName       string
	SchemaJSON       string
	StrictSchemaJSON string
	SubmitTool       SubmitTool
}

type AgentResponse struct {
	Text               string
	Provider           string
	Model              string
	SessionID          string
	OutputFormat       string
	BinarySHA256       string
	EndpointHost       string
	EvidenceProvenance []reviewevidence.Provenance
	SandboxPolicy      SandboxPolicy
	EventSummary       map[string]int
	Result             execution.Result
	RunErr             error
}

type AutoProvider struct {
	Provider string
	Model    string
}

type ClaudeProvider struct {
	Binary                 string
	Model                  string
	Effort                 string
	SessionID              string
	ScafldBinary           string
	SubmissionPath         string
	CWD                    string
	Env                    []string
	EnvMode                execution.EnvMode
	BinarySHA256           string
	EndpointHost           string
	ReadRoots              []string
	MemoryAutoloadDisabled bool
	SandboxPolicy          SandboxPolicy
	Runner                 Runner
	Timeout                time.Duration
	IdleTimeout            time.Duration
}

type CodexProvider struct {
	Binary                 string
	Model                  string
	ModelReasoningEffort   string
	SchemaPath             string
	OutputPath             string
	CWD                    string
	Env                    []string
	EnvMode                execution.EnvMode
	BinarySHA256           string
	EndpointHost           string
	ReadRoots              []string
	MemoryAutoloadDisabled bool
	SandboxPolicy          SandboxPolicy
	Runner                 Runner
	Timeout                time.Duration
	IdleTimeout            time.Duration
}

type CommandProvider struct {
	Command     string
	CWD         string
	Env         []string
	Runner      Runner
	Timeout     time.Duration
	IdleTimeout time.Duration
}

type EvidenceSandbox struct {
	CWD        string
	Home       string
	ReadRoots  []string
	Env        []string
	ArgsPolicy SandboxArgsPolicy
	Provenance []reviewevidence.Provenance
	Policy     SandboxPolicy
	Cleanup    func()
}

type GateReviewerSelection struct {
	Provider     string
	Binary       string
	Model        string
	Independence Independence
}

type GeminiProvider struct {
	Binary                 string
	Model                  string
	ScafldBinary           string
	SubmissionPath         string
	SettingsPath           string
	PolicyPath             string
	CWD                    string
	Env                    []string
	EnvMode                execution.EnvMode
	BinarySHA256           string
	EndpointHost           string
	ReadRoots              []string
	MemoryAutoloadDisabled bool
	SandboxPolicy          SandboxPolicy
	Runner                 Runner
	Timeout                time.Duration
	IdleTimeout            time.Duration
}

type HardenProvider struct {
	Agent Agent
}

type Independence struct {
	Level    string `json:"level"`
	Distinct bool   `json:"distinct"`
}

type LocalProvider struct {
	Messages []string
}

type ProviderEnvInput struct {
	Provider     string
	HostEnviron  []string
	ExtraEnv     []string
	EndpointURL  string
	EndpointHost string
	RequireAuth  bool
	// MemoryHome, when set, overrides HOME and XDG_CONFIG_HOME with a clean
	// sandbox-owned directory so the reviewer cannot autoload host user-global
	// agent memory.
	MemoryHome string
}

type ProviderEnvResult struct {
	Env          []string
	EndpointHost string
}

type ReceiptGradeBinary struct {
	Path   string
	SHA256 string
}

type ReceiptGradeReviewInput struct {
	Selection   Selection
	HostEnviron []string
	Evidence    []reviewevidence.EvidenceFile
	Request     AgentRequest
}

type ReceiptGradeReviewResult struct {
	Response     AgentResponse
	RuntimeFacts RuntimeFacts
}

type Runner interface {
	Run(context.Context, execution.Request) (execution.Result, error)
}

type RuntimeFacts struct {
	BinarySHA256       string
	EndpointHost       string
	EvidenceProvenance []reviewevidence.Provenance
	SandboxPolicy      SandboxPolicy
}

type SandboxArgsPolicy struct {
	ReadRoots              []string `json:"read_roots"`
	MemoryAutoloadDisabled bool     `json:"memory_autoload_disabled"`
	Provider               string   `json:"provider,omitempty"`
}

type SandboxPolicy struct {
	ReadRoots []string `json:"read_roots"`
	// ReadRootsEnforced is true only when the provider CLI hard-confines the
	// reviewer's reads to ReadRoots (Claude --add-dir, Gemini includeDirectories).
	// For Codex it is false: its read-only sandbox plus working directory prevent
	// writes and default reads outside ReadRoots, but do not jail them, so the
	// receipt records best-effort confinement honestly rather than claiming a jail.
	ReadRootsEnforced       bool     `json:"read_roots_enforced"`
	MemoryAutoloadDisabled  bool     `json:"memory_autoload_disabled"`
	AgentInstructionBlocked []string `json:"agent_instruction_blocked,omitempty"`
}

type Selection struct {
	Provider                  string
	Command                   string
	Binary                    string
	Model                     string
	CodexModel                string
	CodexModelReasoningEffort string
	ClaudeModel               string
	ClaudeEffort              string
	GeminiModel               string
	CodexBinary               string
	ClaudeBinary              string
	GeminiBinary              string
	CodexEndpointURL          string
	ClaudeEndpointURL         string
	GeminiEndpointURL         string
	CodexEndpointHost         string
	ClaudeEndpointHost        string
	GeminiEndpointHost        string
	CWD                       string
	Runner                    Runner
	Timeout                   time.Duration
	Idle                      time.Duration
	FallbackPolicy            string
	HostAgent                 string
	CommandExists             func(string) bool
}

type SubmitTool struct {
	Name        string
	Title       string
	Description string
	Command     string
}