#pragma once


#define COMM_SOCKET_ENVVAR "EXEC_INTERCEPT_SOCKET"

// Socket protocol: the client process sends one message per execve invocation.
// Format:
// - Number of arguments (8 byte little-endian unsigned integer)
// - Program path (null-terminated string)
// - Arguments (null-terminated strings)