runtimeapi

type Authenticator ¶

type Authenticator interface {
	Authenticate(context.Context, string) (Identity, error)
}

Authenticator turns one bearer credential into a bounded caller identity.

type Clock ¶

type Clock = clock.Clock

Clock supplies the request-duration clock when observability is enabled.

type Config ¶

type Config struct {
	Runtime         Runtime
	Authenticator   Authenticator
	RequestIDs      agentruntime.RequestIDSource
	MaxRequestBytes int64
	Observability   Observability
}

Config declares every dependency and finite request bound used by the API.

type CorrelationEnvelope ¶

type CorrelationEnvelope struct {
	// contains filtered or unexported fields
}

CorrelationEnvelope is a validated, finite observability-only projection of runtime IDs. Its fields are private so an injected composition provider cannot accidentally bypass validation.

func NewCorrelationEnvelope(values CorrelationValues) (CorrelationEnvelope, error)

func (envelope CorrelationEnvelope) Values() CorrelationValues

type CorrelationValues ¶

type CorrelationValues struct {
	AgentID         string
	AgentRevisionID string
	SessionID       string
	TurnID          string
	InvocationID    string
	ToolCallID      string
	ToolExecutionID string
	ApprovalID      string
	SandboxID       string
	ProcessID       string
	OperationID     string
}

CorrelationValues is the finite set of runtime references that may be sent to an operator's trace or log sink. Values are deliberately references, not names, content, credentials, paths, provider handles, or arbitrary labels.

The fields are not metric dimensions. In particular, implementations must not turn this envelope into a high-cardinality metric label set.

type HMACIdentityCorrelator ¶

type HMACIdentityCorrelator struct {
	// contains filtered or unexported fields
}

HMACIdentityCorrelator derives stable, keyed, bounded identity correlations.

func NewHMACIdentityCorrelator(key []byte) (*HMACIdentityCorrelator, error)

func (correlator *HMACIdentityCorrelator) Correlate(identity Identity) IdentityCorrelation

type Identity ¶

type Identity struct {
	Tenant    string
	Principal string
	Admin     bool
}

Identity is the authenticated tenant and principal boundary for one request.

type IdentityCorrelation ¶

type IdentityCorrelation struct {
	Tenant    string
	Principal string
}

IdentityCorrelation contains non-reversible operator correlation references.

type IdentityCorrelator ¶

type IdentityCorrelator interface {
	Correlate(Identity) IdentityCorrelation
}

IdentityCorrelator derives safe operator correlations without returning a raw identity.

type Observability ¶

type Observability struct {
	Clock              Clock
	Observer           RequestObserver
	IdentityCorrelator IdentityCorrelator
	// CorrelationProvider may add validated durable runtime references after a
	// request completes. It is intentionally optional: route-derived safe IDs
	// remain useful without coupling the HTTP role to a runtime implementation.
	CorrelationProvider RequestCorrelationProvider
}

Observability declares every dependency required to observe public HTTP requests. Its zero value deliberately disables observations for the local memory-unsafe role.

type RequestCorrelationProvider ¶

type RequestCorrelationProvider interface {
	CorrelateRequest(context.Context, RequestObservation) CorrelationEnvelope
}

RequestCorrelationProvider is the explicit seam through which a trusted runtime composition can add durable IDs that are not present in the public HTTP route (for example an invocation, tool execution, sandbox, or process). It receives the already-redacted observation: never the request body, credentials, raw identity, URL, or provider/backend details.

type RequestObservation ¶

type RequestObservation struct {
	RequestID            agentruntime.RequestID
	Operation            string
	Status               int
	Outcome              RequestOutcome
	FailureCode          agentruntime.FailureCode
	StartedAt            time.Time
	Duration             time.Duration
	TenantCorrelation    string
	PrincipalCorrelation string
	Correlation          CorrelationEnvelope
}

RequestObservation contains the bounded, application-safe outcome of one HTTP request.

type RequestObserver ¶

type RequestObserver interface {
	ObserveRequest(context.Context, RequestObservation)
}

RequestObserver receives exactly one completed request observation.

type RequestOutcome ¶

type RequestOutcome string

RequestOutcome classifies one bounded HTTP completion without exposing request data.

const (
	// RequestOutcomeSucceeded reports a completed non-error HTTP request.
	RequestOutcomeSucceeded RequestOutcome = "succeeded"
	// RequestOutcomeFailed reports a completed HTTP request with a safe failure status.
	RequestOutcomeFailed RequestOutcome = "failed"
	// RequestOutcomeCancelled reports a request whose caller context ended before completion.
	RequestOutcomeCancelled RequestOutcome = "cancelled"
)

type Runtime ¶

type Runtime interface {
	CreateAgent(context.Context, Identity, agentruntime.CreateAgentRequest) (agentruntime.AgentSpecification, error)
	ReviseAgent(context.Context, Identity, agentruntime.ReviseAgentRequest) (agentruntime.AgentSpecification, error)
	GetAgentRevision(context.Context, Identity, agentruntime.AgentID, agentruntime.AgentRevisionID) (agentruntime.AgentSpecification, error)
	CreatePolicy(context.Context, Identity, agentruntime.CreatePolicyRequest) (agentruntime.Policy, error)
	RevisePolicy(context.Context, Identity, agentruntime.RevisePolicyRequest) (agentruntime.Policy, error)
	GetPolicy(context.Context, Identity, string, uint64) (agentruntime.Policy, error)
	ReadArtifact(context.Context, Identity, agentruntime.ArtifactID) (agentruntime.ArtifactDownload, error)
	ListSessionArtifacts(context.Context, Identity, agentruntime.SessionID) (agentruntime.ArtifactPage, error)
	InspectApproval(context.Context, Identity, agentruntime.ApprovalID) (agentruntime.Approval, error)
	ListApprovals(context.Context, Identity) (agentruntime.ApprovalPage, error)
	DecideApproval(context.Context, Identity, agentruntime.DecideApprovalRequest) (agentruntime.Approval, error)
	IdempotencyStatus(context.Context, Identity, string) (agentruntime.IdempotencyStatus, error)
	CreateSession(context.Context, Identity, agentruntime.CreateSessionRequest) (agentruntime.Session, error)
	SendInput(context.Context, Identity, agentruntime.SendInputRequest) (agentruntime.SendInputResult, error)
	InspectSession(context.Context, Identity, agentruntime.SessionID) (agentruntime.SessionView, error)
	InspectTurn(context.Context, Identity, agentruntime.SessionID, agentruntime.TurnID) (agentruntime.Turn, error)
	Events(context.Context, Identity, agentruntime.SessionID, agentruntime.Cursor, int) (agentruntime.EventPage, error)
	CancelTurn(context.Context, Identity, agentruntime.CancelTurnRequest) (agentruntime.Turn, error)
	CloseSession(context.Context, Identity, agentruntime.CloseSessionRequest) (agentruntime.Session, error)
	CancelSession(context.Context, Identity, agentruntime.CancelSessionRequest) (agentruntime.Session, error)
}

Runtime owns the internal application operations used by the public HTTP routes.

func NewKernelRuntime(service *kernel.Kernel) (Runtime, error)

type StateRuntime ¶

type StateRuntime struct {
	// contains filtered or unexported fields
}

StateRuntime is the application seam that will route every public operation through content staging, compiler, planner, and state persistence.

func NewStateRuntime(config StateRuntimeConfig) (*StateRuntime, error)

func (runtime *StateRuntime) CancelSession(ctx context.Context, identity Identity, request agentruntime.CancelSessionRequest) (agentruntime.Session, error)

func (runtime *StateRuntime) CancelTurn(ctx context.Context, identity Identity, request agentruntime.CancelTurnRequest) (agentruntime.Turn, error)

func (runtime *StateRuntime) CloseSession(ctx context.Context, identity Identity, request agentruntime.CloseSessionRequest) (agentruntime.Session, error)

func (runtime *StateRuntime) CreateAgent(ctx context.Context, identity Identity, request agentruntime.CreateAgentRequest) (agentruntime.AgentSpecification, error)

func (runtime *StateRuntime) CreatePolicy(ctx context.Context, identity Identity, request agentruntime.CreatePolicyRequest) (agentruntime.Policy, error)

func (runtime *StateRuntime) CreateSession(ctx context.Context, identity Identity, request agentruntime.CreateSessionRequest) (agentruntime.Session, error)

func (runtime *StateRuntime) DecideApproval(ctx context.Context, identity Identity, request agentruntime.DecideApprovalRequest) (agentruntime.Approval, error)

func (runtime *StateRuntime) Events(ctx context.Context, identity Identity, sessionID agentruntime.SessionID, after agentruntime.Cursor, limit int) (agentruntime.EventPage, error)

func (runtime *StateRuntime) GetAgentRevision(ctx context.Context, identity Identity, agentID agentruntime.AgentID, revisionID agentruntime.AgentRevisionID) (agentruntime.AgentSpecification, error)

func (runtime *StateRuntime) GetPolicy(ctx context.Context, identity Identity, name string, revision uint64) (agentruntime.Policy, error)

func (runtime *StateRuntime) IdempotencyStatus(ctx context.Context, identity Identity, key string) (agentruntime.IdempotencyStatus, error)

func (runtime *StateRuntime) InspectApproval(ctx context.Context, identity Identity, approvalID agentruntime.ApprovalID) (agentruntime.Approval, error)

func (runtime *StateRuntime) InspectSession(ctx context.Context, identity Identity, sessionID agentruntime.SessionID) (agentruntime.SessionView, error)

func (runtime *StateRuntime) InspectToolCalls(ctx context.Context, identity Identity, sessionID agentruntime.SessionID, turnID agentruntime.TurnID) (agentruntime.ToolCallPage, error)

func (runtime *StateRuntime) InspectTurn(ctx context.Context, identity Identity, sessionID agentruntime.SessionID, turnID agentruntime.TurnID) (agentruntime.Turn, error)

func (runtime *StateRuntime) ListApprovals(ctx context.Context, identity Identity) (agentruntime.ApprovalPage, error)

func (runtime *StateRuntime) ListSessionArtifacts(ctx context.Context, identity Identity, sessionID agentruntime.SessionID) (agentruntime.ArtifactPage, error)

func (runtime *StateRuntime) OpenArtifact(ctx context.Context, identity Identity, artifactID agentruntime.ArtifactID) (runtimecontent.ArtifactStream, error)

func (runtime *StateRuntime) ReadArtifact(ctx context.Context, identity Identity, artifactID agentruntime.ArtifactID) (agentruntime.ArtifactDownload, error)

func (runtime *StateRuntime) ReviseAgent(ctx context.Context, identity Identity, request agentruntime.ReviseAgentRequest) (agentruntime.AgentSpecification, error)

func (runtime *StateRuntime) RevisePolicy(ctx context.Context, identity Identity, request agentruntime.RevisePolicyRequest) (agentruntime.Policy, error)

func (runtime *StateRuntime) SendInput(ctx context.Context, identity Identity, request agentruntime.SendInputRequest) (agentruntime.SendInputResult, error)

type StateRuntimeConfig ¶

type StateRuntimeConfig struct {
	Content  *runtimecontent.Store
	Compiler *runtimestate.Compiler
	Planner  *runtimestate.RuntimeStatePlanner
	Store    runtimestate.RuntimeStateStore
	// ModelProfiles is the explicit allow-list for public Agent specifications.
	ModelProfiles []string
}

StateRuntimeConfig supplies the complete metadata/content authority required by the state-backed public runtime.