1 files changed, 10 insertions, 0 deletions
diff --git a/lib/libintercept.h b/lib/libintercept.h
new file mode 100644
index 0000000..0efb3a8
--- /dev/null
+++ b/lib/libintercept.h
@@ -0,0 +1,10 @@
+#pragma once
+
+
+#define COMM_SOCKET_ENVVAR "EXEC_INTERCEPT_SOCKET"
+
+// Socket protocol: the client process sends one message per execve invocation.
+// Format:
+// - Number of arguments (8 byte little-endian unsigned integer)
+// - Program path (null-terminated string)
+// - Arguments (null-terminated strings)