controlv1

type AuditChainVerification struct {
	Verified         bool                    `protobuf:"varint,1,opt,name=verified,proto3" json:"verified,omitempty"`
	AuditRecordCount int64                   `protobuf:"varint,2,opt,name=audit_record_count,json=auditRecordCount,proto3" json:"audit_record_count,omitempty"`
	AuditHeadSeq     int64                   `protobuf:"varint,3,opt,name=audit_head_seq,json=auditHeadSeq,proto3" json:"audit_head_seq,omitempty"`
	CheckpointCount  int32                   `protobuf:"varint,4,opt,name=checkpoint_count,json=checkpointCount,proto3" json:"checkpoint_count,omitempty"`
	Issues           []*AuditCheckpointIssue `protobuf:"bytes,5,rep,name=issues,proto3" json:"issues,omitempty"`
	// contains filtered or unexported fields
}

type AuditCheckpointIssue struct {
	Type    string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	Seq     int64  `protobuf:"varint,3,opt,name=seq,proto3" json:"seq,omitempty"`
	Line    int32  `protobuf:"varint,4,opt,name=line,proto3" json:"line,omitempty"`
	// contains filtered or unexported fields
}

type AuditEntry struct {
	EventId   string                 `protobuf:"bytes,1,opt,name=event_id,json=eventId,proto3" json:"event_id,omitempty"`
	EventType EventType              `protobuf:"varint,2,opt,name=event_type,json=eventType,proto3,enum=agentpaas.control.v1.EventType" json:"event_type,omitempty"`
	AgentName string                 `protobuf:"bytes,3,opt,name=agent_name,json=agentName,proto3" json:"agent_name,omitempty"`
	RunId     string                 `protobuf:"bytes,4,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	Timestamp *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=timestamp,proto3" json:"timestamp,omitempty"`
	Payload   []byte                 `protobuf:"bytes,6,opt,name=payload,proto3" json:"payload,omitempty"`
	// contains filtered or unexported fields
}

type AuditExportRequest struct {

	// Time range to export.
	TimeRange *TimeRange `protobuf:"bytes,1,opt,name=time_range,json=timeRange,proto3" json:"time_range,omitempty"`
	// Output format (e.g. "json", "csv", "ndjson").
	Format string `protobuf:"bytes,2,opt,name=format,proto3" json:"format,omitempty"`
	// Whether to include event payloads.
	IncludePayloads bool `protobuf:"varint,3,opt,name=include_payloads,json=includePayloads,proto3" json:"include_payloads,omitempty"`
	// contains filtered or unexported fields
}

type AuditExportResponse struct {

	// Exported audit data in the requested format.
	Data []byte `protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
	// Number of entries exported.
	EntryCount int32 `protobuf:"varint,2,opt,name=entry_count,json=entryCount,proto3" json:"entry_count,omitempty"`
	// contains filtered or unexported fields
}

type AuditQueryRequest struct {

	// Optional: filter by agent name.
	AgentName string `protobuf:"bytes,1,opt,name=agent_name,json=agentName,proto3" json:"agent_name,omitempty"`
	// Optional: filter by run ID.
	RunId string `protobuf:"bytes,2,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// Optional: filter by event type.
	EventType EventType `protobuf:"varint,3,opt,name=event_type,json=eventType,proto3,enum=agentpaas.control.v1.EventType" json:"event_type,omitempty"`
	// Optional: time range filter.
	TimeRange *TimeRange `protobuf:"bytes,4,opt,name=time_range,json=timeRange,proto3" json:"time_range,omitempty"`
	// Maximum number of results.
	PageSize int32 `protobuf:"varint,5,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// Pagination token.
	PageToken string `protobuf:"bytes,6,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// contains filtered or unexported fields
}

type AuditQueryResponse struct {
	Entries           []*AuditEntry           `protobuf:"bytes,1,rep,name=entries,proto3" json:"entries,omitempty"`
	NextPageToken     string                  `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	TotalCount        int32                   `protobuf:"varint,3,opt,name=total_count,json=totalCount,proto3" json:"total_count,omitempty"`
	ChainVerification *AuditChainVerification `protobuf:"bytes,4,opt,name=chain_verification,json=chainVerification,proto3" json:"chain_verification,omitempty"`
	// contains filtered or unexported fields
}

type BudgetConfig struct {

	// Maximum token budget for the run.
	MaxTokens int64 `protobuf:"varint,1,opt,name=max_tokens,json=maxTokens,proto3" json:"max_tokens,omitempty"`
	// Maximum cost in USD.
	MaxCostUsd float64 `protobuf:"fixed64,2,opt,name=max_cost_usd,json=maxCostUsd,proto3" json:"max_cost_usd,omitempty"`
	// Maximum wall-clock time in milliseconds.
	MaxWallClockMs int64 `protobuf:"varint,3,opt,name=max_wall_clock_ms,json=maxWallClockMs,proto3" json:"max_wall_clock_ms,omitempty"`
	// Maximum iteration count.
	MaxIterations int32 `protobuf:"varint,4,opt,name=max_iterations,json=maxIterations,proto3" json:"max_iterations,omitempty"`
	// contains filtered or unexported fields
}

type CheckResult struct {

	// Name of the health check (e.g. "buf_connectivity", "docker_daemon").
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Check status: "ok", "warning", "error".
	Status string `protobuf:"bytes,2,opt,name=status,proto3" json:"status,omitempty"`
	// Human-readable description of the check result.
	Message string `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
	// Suggested remediation if the check failed.
	FixHint string `protobuf:"bytes,4,opt,name=fix_hint,json=fixHint,proto3" json:"fix_hint,omitempty"`
	// contains filtered or unexported fields
}

type ConfirmationRequirement struct {
	RequiresConfirmation bool   `protobuf:"varint,1,opt,name=requires_confirmation,json=requiresConfirmation,proto3" json:"requires_confirmation,omitempty"`
	ConfirmationId       string `protobuf:"bytes,2,opt,name=confirmation_id,json=confirmationId,proto3" json:"confirmation_id,omitempty"`
	// "low", "medium", or "high".
	RiskLevel            string         `protobuf:"bytes,3,opt,name=risk_level,json=riskLevel,proto3" json:"risk_level,omitempty"`
	Rationale            string         `protobuf:"bytes,4,opt,name=rationale,proto3" json:"rationale,omitempty"`
	AffectedDestinations []string       `protobuf:"bytes,5,rep,name=affected_destinations,json=affectedDestinations,proto3" json:"affected_destinations,omitempty"`
	CredentialIds        []string       `protobuf:"bytes,6,rep,name=credential_ids,json=credentialIds,proto3" json:"credential_ids,omitempty"`
	EvidenceRefs         []*EvidenceRef `protobuf:"bytes,7,rep,name=evidence_refs,json=evidenceRefs,proto3" json:"evidence_refs,omitempty"`
	// contains filtered or unexported fields
}

type ControlServiceClient interface {
	// Pack builds an agent image from a project directory.
	Pack(ctx context.Context, in *PackRequest, opts ...grpc.CallOption) (*PackResponse, error)
	// Run starts a new agent run with the given budget and payload.
	Run(ctx context.Context, in *RunRequest, opts ...grpc.CallOption) (*RunResponse, error)
	// Stop terminates a running agent run.
	Stop(ctx context.Context, in *StopRequest, opts ...grpc.CallOption) (*StopResponse, error)
	// Logs returns a stream of log entries, optionally following in real-time.
	Logs(ctx context.Context, in *LogsRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[LogEntry], error)
	// PolicyApply applies or validates an OPA/Rego policy.
	PolicyApply(ctx context.Context, in *PolicyApplyRequest, opts ...grpc.CallOption) (*PolicyApplyResponse, error)
	// SecretSet creates or updates a secret.
	SecretSet(ctx context.Context, in *SecretSetRequest, opts ...grpc.CallOption) (*SecretSetResponse, error)
	// SecretGrant grants a secret to a specific run.
	SecretGrant(ctx context.Context, in *SecretGrantRequest, opts ...grpc.CallOption) (*SecretGrantResponse, error)
	// SecretRevoke revokes a secret from a specific run.
	SecretRevoke(ctx context.Context, in *SecretRevokeRequest, opts ...grpc.CallOption) (*SecretRevokeResponse, error)
	// AuditQuery queries audit log entries with filters and pagination.
	AuditQuery(ctx context.Context, in *AuditQueryRequest, opts ...grpc.CallOption) (*AuditQueryResponse, error)
	// AuditExport exports audit log entries in a specified format.
	AuditExport(ctx context.Context, in *AuditExportRequest, opts ...grpc.CallOption) (*AuditExportResponse, error)
	// Doctor runs system diagnostics and returns health check results.
	Doctor(ctx context.Context, in *DoctorRequest, opts ...grpc.CallOption) (*DoctorResponse, error)
	// ValidateAgentProject validates an agent project directory structure and
	// configuration.
	ValidateAgentProject(ctx context.Context, in *ValidateAgentProjectRequest, opts ...grpc.CallOption) (*ValidateAgentProjectResponse, error)
	// SummarizeRun generates a natural-language summary of a completed run.
	SummarizeRun(ctx context.Context, in *SummarizeRunRequest, opts ...grpc.CallOption) (*SummarizeRunResponse, error)
	// ExplainFailure analyzes a failed run and returns root cause and suggested
	// fixes.
	ExplainFailure(ctx context.Context, in *ExplainFailureRequest, opts ...grpc.CallOption) (*ExplainFailureResponse, error)
	// ExplainPolicyDenial explains why a specific destination was denied by
	// policy.
	ExplainPolicyDenial(ctx context.Context, in *ExplainPolicyDenialRequest, opts ...grpc.CallOption) (*ExplainPolicyDenialResponse, error)
	// RecommendPolicyPatch suggests a policy patch based on a desired behavior
	// description.
	RecommendPolicyPatch(ctx context.Context, in *RecommendPolicyPatchRequest, opts ...grpc.CallOption) (*RecommendPolicyPatchResponse, error)
	// GetRunTimeline returns a chronological timeline of events for a run.
	GetRunTimeline(ctx context.Context, in *GetRunTimelineRequest, opts ...grpc.CallOption) (*GetRunTimelineResponse, error)
	// NextAction recommends the next action based on the current context.
	NextAction(ctx context.Context, in *NextActionRequest, opts ...grpc.CallOption) (*NextActionResponse, error)
	// CronAdd creates a new cron schedule that auto-invokes an agent.
	CronAdd(ctx context.Context, in *CronAddRequest, opts ...grpc.CallOption) (*CronAddResponse, error)
	// CronList lists all cron schedules.
	CronList(ctx context.Context, in *CronListRequest, opts ...grpc.CallOption) (*CronListResponse, error)
	// CronRemove removes a cron schedule.
	CronRemove(ctx context.Context, in *CronRemoveRequest, opts ...grpc.CallOption) (*CronRemoveResponse, error)
}

type ControlServiceServer interface {
	// Pack builds an agent image from a project directory.
	Pack(context.Context, *PackRequest) (*PackResponse, error)
	// Run starts a new agent run with the given budget and payload.
	Run(context.Context, *RunRequest) (*RunResponse, error)
	// Stop terminates a running agent run.
	Stop(context.Context, *StopRequest) (*StopResponse, error)
	// Logs returns a stream of log entries, optionally following in real-time.
	Logs(*LogsRequest, grpc.ServerStreamingServer[LogEntry]) error
	// PolicyApply applies or validates an OPA/Rego policy.
	PolicyApply(context.Context, *PolicyApplyRequest) (*PolicyApplyResponse, error)
	// SecretSet creates or updates a secret.
	SecretSet(context.Context, *SecretSetRequest) (*SecretSetResponse, error)
	// SecretGrant grants a secret to a specific run.
	SecretGrant(context.Context, *SecretGrantRequest) (*SecretGrantResponse, error)
	// SecretRevoke revokes a secret from a specific run.
	SecretRevoke(context.Context, *SecretRevokeRequest) (*SecretRevokeResponse, error)
	// AuditQuery queries audit log entries with filters and pagination.
	AuditQuery(context.Context, *AuditQueryRequest) (*AuditQueryResponse, error)
	// AuditExport exports audit log entries in a specified format.
	AuditExport(context.Context, *AuditExportRequest) (*AuditExportResponse, error)
	// Doctor runs system diagnostics and returns health check results.
	Doctor(context.Context, *DoctorRequest) (*DoctorResponse, error)
	// ValidateAgentProject validates an agent project directory structure and
	// configuration.
	ValidateAgentProject(context.Context, *ValidateAgentProjectRequest) (*ValidateAgentProjectResponse, error)
	// SummarizeRun generates a natural-language summary of a completed run.
	SummarizeRun(context.Context, *SummarizeRunRequest) (*SummarizeRunResponse, error)
	// ExplainFailure analyzes a failed run and returns root cause and suggested
	// fixes.
	ExplainFailure(context.Context, *ExplainFailureRequest) (*ExplainFailureResponse, error)
	// ExplainPolicyDenial explains why a specific destination was denied by
	// policy.
	ExplainPolicyDenial(context.Context, *ExplainPolicyDenialRequest) (*ExplainPolicyDenialResponse, error)
	// RecommendPolicyPatch suggests a policy patch based on a desired behavior
	// description.
	RecommendPolicyPatch(context.Context, *RecommendPolicyPatchRequest) (*RecommendPolicyPatchResponse, error)
	// GetRunTimeline returns a chronological timeline of events for a run.
	GetRunTimeline(context.Context, *GetRunTimelineRequest) (*GetRunTimelineResponse, error)
	// NextAction recommends the next action based on the current context.
	NextAction(context.Context, *NextActionRequest) (*NextActionResponse, error)
	// CronAdd creates a new cron schedule that auto-invokes an agent.
	CronAdd(context.Context, *CronAddRequest) (*CronAddResponse, error)
	// CronList lists all cron schedules.
	CronList(context.Context, *CronListRequest) (*CronListResponse, error)
	// CronRemove removes a cron schedule.
	CronRemove(context.Context, *CronRemoveRequest) (*CronRemoveResponse, error)
	// contains filtered or unexported methods
}

type ControlService_LogsClient = grpc.ServerStreamingClient[LogEntry]

type ControlService_LogsServer = grpc.ServerStreamingServer[LogEntry]

type CronAddRequest struct {
	AgentName         string `protobuf:"bytes,1,opt,name=agent_name,json=agentName,proto3" json:"agent_name,omitempty"`
	Expr              string `protobuf:"bytes,2,opt,name=expr,proto3" json:"expr,omitempty"`
	AgentVersion      string `protobuf:"bytes,3,opt,name=agent_version,json=agentVersion,proto3" json:"agent_version,omitempty"`
	Timezone          string `protobuf:"bytes,4,opt,name=timezone,proto3" json:"timezone,omitempty"`
	MissedRunPolicy   string `protobuf:"bytes,5,opt,name=missed_run_policy,json=missedRunPolicy,proto3" json:"missed_run_policy,omitempty"`
	ConcurrencyPolicy string `protobuf:"bytes,6,opt,name=concurrency_policy,json=concurrencyPolicy,proto3" json:"concurrency_policy,omitempty"`
	// contains filtered or unexported fields
}

type CronAddResponse struct {
	Schedule *CronScheduleInfo `protobuf:"bytes,1,opt,name=schedule,proto3" json:"schedule,omitempty"`
	// contains filtered or unexported fields
}

type CronListRequest struct {
	// contains filtered or unexported fields
}

type CronListResponse struct {
	Schedules []*CronScheduleInfo `protobuf:"bytes,1,rep,name=schedules,proto3" json:"schedules,omitempty"`
	// contains filtered or unexported fields
}

type CronRemoveRequest struct {
	ScheduleId string `protobuf:"bytes,1,opt,name=schedule_id,json=scheduleId,proto3" json:"schedule_id,omitempty"`
	// contains filtered or unexported fields
}

type CronRemoveResponse struct {
	Removed bool `protobuf:"varint,1,opt,name=removed,proto3" json:"removed,omitempty"`
	// contains filtered or unexported fields
}

type CronScheduleInfo struct {
	ScheduleId        string `protobuf:"bytes,1,opt,name=schedule_id,json=scheduleId,proto3" json:"schedule_id,omitempty"`
	Expr              string `protobuf:"bytes,2,opt,name=expr,proto3" json:"expr,omitempty"`
	AgentName         string `protobuf:"bytes,3,opt,name=agent_name,json=agentName,proto3" json:"agent_name,omitempty"`
	AgentVersion      string `protobuf:"bytes,4,opt,name=agent_version,json=agentVersion,proto3" json:"agent_version,omitempty"`
	Timezone          string `protobuf:"bytes,5,opt,name=timezone,proto3" json:"timezone,omitempty"`
	MissedRunPolicy   string `protobuf:"bytes,6,opt,name=missed_run_policy,json=missedRunPolicy,proto3" json:"missed_run_policy,omitempty"`
	ConcurrencyPolicy string `protobuf:"bytes,7,opt,name=concurrency_policy,json=concurrencyPolicy,proto3" json:"concurrency_policy,omitempty"`
	// contains filtered or unexported fields
}

type DoctorRequest struct {
	// contains filtered or unexported fields
}

type DoctorResponse struct {
	Checks []*CheckResult `protobuf:"bytes,1,rep,name=checks,proto3" json:"checks,omitempty"`
	// Overall system health status.
	OverallStatus string `protobuf:"bytes,2,opt,name=overall_status,json=overallStatus,proto3" json:"overall_status,omitempty"`
	// contains filtered or unexported fields
}

type EventType int32

type EvidenceRef struct {

	// Kind of evidence: "audit_seq", "run_id", "policy_rule", "span", "log",
	// "redacted_excerpt", "verification".
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// Opaque identifier for the evidence.
	Ref string `protobuf:"bytes,2,opt,name=ref,proto3" json:"ref,omitempty"`
	// Optional redacted human-readable detail.
	Detail string `protobuf:"bytes,3,opt,name=detail,proto3" json:"detail,omitempty"`
	// contains filtered or unexported fields
}

type ExplainFailureRequest struct {
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// contains filtered or unexported fields
}

type ExplainFailureResponse struct {

	// Identified root cause of the failure.
	RootCause string `protobuf:"bytes,1,opt,name=root_cause,json=rootCause,proto3" json:"root_cause,omitempty"`
	// Factors that contributed to the failure.
	ContributingFactors []string `protobuf:"bytes,2,rep,name=contributing_factors,json=contributingFactors,proto3" json:"contributing_factors,omitempty"`
	// Suggested code or config changes to fix the issue.
	SuggestedFixes []string `protobuf:"bytes,3,rep,name=suggested_fixes,json=suggestedFixes,proto3" json:"suggested_fixes,omitempty"`
	// --- Block 11 operator contract fields ---
	SchemaVersion string `protobuf:"bytes,10,opt,name=schema_version,json=schemaVersion,proto3" json:"schema_version,omitempty"`
	// Stable error category classifying the failure.
	ErrorCategory    string             `protobuf:"bytes,11,opt,name=error_category,json=errorCategory,proto3" json:"error_category,omitempty"`
	RedactedExcerpts []*RedactedExcerpt `protobuf:"bytes,12,rep,name=redacted_excerpts,json=redactedExcerpts,proto3" json:"redacted_excerpts,omitempty"`
	EvidenceRefs     []*EvidenceRef     `protobuf:"bytes,13,rep,name=evidence_refs,json=evidenceRefs,proto3" json:"evidence_refs,omitempty"`
	// Recommended next action from the fixed enum.
	NextAction string `protobuf:"bytes,14,opt,name=next_action,json=nextAction,proto3" json:"next_action,omitempty"`
	// contains filtered or unexported fields
}

type ExplainPolicyDenialRequest struct {
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// Optional: specific destination that was denied.
	DeniedDestination string `protobuf:"bytes,2,opt,name=denied_destination,json=deniedDestination,proto3" json:"denied_destination,omitempty"`
	// contains filtered or unexported fields
}

type ExplainPolicyDenialResponse struct {

	// The destination that was denied.
	DeniedDestination string `protobuf:"bytes,1,opt,name=denied_destination,json=deniedDestination,proto3" json:"denied_destination,omitempty"`
	// The OPA/Rego rule that produced the denial.
	MatchingRule string `protobuf:"bytes,2,opt,name=matching_rule,json=matchingRule,proto3" json:"matching_rule,omitempty"`
	// Human-readable explanation of why the denial occurred.
	Explanation string `protobuf:"bytes,3,opt,name=explanation,proto3" json:"explanation,omitempty"`
	// --- Block 11 operator contract fields ---
	SchemaVersion string `protobuf:"bytes,10,opt,name=schema_version,json=schemaVersion,proto3" json:"schema_version,omitempty"`
	// Run that was denied (empty for pre-run checks).
	RunId string `protobuf:"bytes,11,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// What the agent tried to do.
	DeniedAction string `protobuf:"bytes,12,opt,name=denied_action,json=deniedAction,proto3" json:"denied_action,omitempty"`
	// Policy rule id that blocked the action (e.g. "egress[0]").
	BlockingRuleId string `protobuf:"bytes,13,opt,name=blocking_rule_id,json=blockingRuleId,proto3" json:"blocking_rule_id,omitempty"`
	// SHA-256 digest of the compiled policy at denial time.
	PolicyDigest string         `protobuf:"bytes,14,opt,name=policy_digest,json=policyDigest,proto3" json:"policy_digest,omitempty"`
	Rationale    string         `protobuf:"bytes,15,opt,name=rationale,proto3" json:"rationale,omitempty"`
	EvidenceRefs []*EvidenceRef `protobuf:"bytes,16,rep,name=evidence_refs,json=evidenceRefs,proto3" json:"evidence_refs,omitempty"`
	// Always "review_policy_patch".
	NextAction string `protobuf:"bytes,17,opt,name=next_action,json=nextAction,proto3" json:"next_action,omitempty"`
	// contains filtered or unexported fields
}

type GetRunTimelineRequest struct {
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// contains filtered or unexported fields
}

type GetRunTimelineResponse struct {
	Events []*TimelineEvent `protobuf:"bytes,1,rep,name=events,proto3" json:"events,omitempty"`
	// --- Block 11 operator contract fields ---
	SchemaVersion string `protobuf:"bytes,10,opt,name=schema_version,json=schemaVersion,proto3" json:"schema_version,omitempty"`
	RunId         string `protobuf:"bytes,11,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// contains filtered or unexported fields
}

type KeyEvent struct {
	Timestamp   *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=timestamp,proto3" json:"timestamp,omitempty"`
	Description string                 `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	EventType   string                 `protobuf:"bytes,3,opt,name=event_type,json=eventType,proto3" json:"event_type,omitempty"`
	// contains filtered or unexported fields
}

type LogEntry struct {

	// Timestamp of the log entry.
	Timestamp *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=timestamp,proto3" json:"timestamp,omitempty"`
	// Run ID the entry belongs to.
	RunId string `protobuf:"bytes,2,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// Severity level.
	Level string `protobuf:"bytes,3,opt,name=level,proto3" json:"level,omitempty"`
	// Log message body.
	Message string `protobuf:"bytes,4,opt,name=message,proto3" json:"message,omitempty"`
	// Structured fields (key-value pairs).
	Fields map[string]string `` /* 139-byte string literal not displayed */
	// contains filtered or unexported fields
}

type LogLevel int32

type LogsRequest struct {

	// Optional: filter by run ID.
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// Optional: minimum log level to include.
	MinLevel LogLevel `protobuf:"varint,2,opt,name=min_level,json=minLevel,proto3,enum=agentpaas.control.v1.LogLevel" json:"min_level,omitempty"`
	// Optional: follow the log stream in real-time.
	Follow bool `protobuf:"varint,3,opt,name=follow,proto3" json:"follow,omitempty"`
	// Maximum number of historical entries to return.
	Tail int32 `protobuf:"varint,4,opt,name=tail,proto3" json:"tail,omitempty"`
	// contains filtered or unexported fields
}

type NextActionRequest struct {

	// Current context describing the system state.
	Context string `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"`
	// contains filtered or unexported fields
}

type NextActionResponse struct {

	// Recommended action type (e.g. "invoke", "stop", "policy_apply", "pack").
	Action string `protobuf:"bytes,1,opt,name=action,proto3" json:"action,omitempty"`
	// Target resource for the action.
	Target string `protobuf:"bytes,2,opt,name=target,proto3" json:"target,omitempty"`
	// Parameters to pass with the action.
	Params map[string]string `` /* 139-byte string literal not displayed */
	// LLM reasoning behind the recommendation.
	Reasoning string `protobuf:"bytes,4,opt,name=reasoning,proto3" json:"reasoning,omitempty"`
	// --- Block 11 operator contract fields ---
	SchemaVersion string `protobuf:"bytes,10,opt,name=schema_version,json=schemaVersion,proto3" json:"schema_version,omitempty"`
	RunId         string `protobuf:"bytes,11,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// Next action from the fixed enum.
	NextAction   string                   `protobuf:"bytes,12,opt,name=next_action,json=nextAction,proto3" json:"next_action,omitempty"`
	Rationale    string                   `protobuf:"bytes,13,opt,name=rationale,proto3" json:"rationale,omitempty"`
	EvidenceRefs []*EvidenceRef           `protobuf:"bytes,14,rep,name=evidence_refs,json=evidenceRefs,proto3" json:"evidence_refs,omitempty"`
	Confirmation *ConfirmationRequirement `protobuf:"bytes,15,opt,name=confirmation,proto3" json:"confirmation,omitempty"`
	// contains filtered or unexported fields
}

type OperatorIssue struct {

	// Stable error category from the versioned enum.
	Category string `protobuf:"bytes,1,opt,name=category,proto3" json:"category,omitempty"`
	// Human-readable description of the issue.
	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// Evidence refs supporting this issue.
	EvidenceRefs []*EvidenceRef `protobuf:"bytes,3,rep,name=evidence_refs,json=evidenceRefs,proto3" json:"evidence_refs,omitempty"`
	// Recommended next action from the fixed enum.
	NextAction string `protobuf:"bytes,4,opt,name=next_action,json=nextAction,proto3" json:"next_action,omitempty"`
	// contains filtered or unexported fields
}

type PackRequest struct {

	// Path to the agent project directory.
	AgentProjectPath string `protobuf:"bytes,1,opt,name=agent_project_path,json=agentProjectPath,proto3" json:"agent_project_path,omitempty"`
	// Name of the agent to pack.
	AgentName string `protobuf:"bytes,2,opt,name=agent_name,json=agentName,proto3" json:"agent_name,omitempty"`
	// Version string for the agent image.
	AgentVersion string `protobuf:"bytes,3,opt,name=agent_version,json=agentVersion,proto3" json:"agent_version,omitempty"`
	// Override base image (optional).
	BaseImage string `protobuf:"bytes,4,opt,name=base_image,json=baseImage,proto3" json:"base_image,omitempty"`
	// contains filtered or unexported fields
}

type PackResponse struct {

	// Digest of the built agent image.
	ImageDigest string `protobuf:"bytes,1,opt,name=image_digest,json=imageDigest,proto3" json:"image_digest,omitempty"`
	// Human-readable build log excerpt.
	BuildLog string `protobuf:"bytes,2,opt,name=build_log,json=buildLog,proto3" json:"build_log,omitempty"`
	// contains filtered or unexported fields
}

type PolicyApplyRequest struct {

	// OPA/Rego policy YAML content.
	PolicyYaml string `protobuf:"bytes,1,opt,name=policy_yaml,json=policyYaml,proto3" json:"policy_yaml,omitempty"`
	// When true, validate without applying.
	DryRun bool `protobuf:"varint,2,opt,name=dry_run,json=dryRun,proto3" json:"dry_run,omitempty"`
	// contains filtered or unexported fields
}

type PolicyApplyResponse struct {

	// Digest of the applied policy.
	PolicyDigest string `protobuf:"bytes,1,opt,name=policy_digest,json=policyDigest,proto3" json:"policy_digest,omitempty"`
	// Number of rules applied.
	RulesApplied int32 `protobuf:"varint,2,opt,name=rules_applied,json=rulesApplied,proto3" json:"rules_applied,omitempty"`
	// Any validation warnings.
	Warnings []string `protobuf:"bytes,3,rep,name=warnings,proto3" json:"warnings,omitempty"`
	// contains filtered or unexported fields
}

type ProjectValidation struct {

	// Name of the validation check.
	Check string `protobuf:"bytes,1,opt,name=check,proto3" json:"check,omitempty"`
	// Whether the check passed.
	Passed bool `protobuf:"varint,2,opt,name=passed,proto3" json:"passed,omitempty"`
	// Human-readable details.
	Details string `protobuf:"bytes,3,opt,name=details,proto3" json:"details,omitempty"`
	// contains filtered or unexported fields
}

type RecommendPolicyPatchRequest struct {

	// Description of the desired behavior the policy should allow.
	DesiredBehavior string `protobuf:"bytes,1,opt,name=desired_behavior,json=desiredBehavior,proto3" json:"desired_behavior,omitempty"`
	// contains filtered or unexported fields
}

type RecommendPolicyPatchResponse struct {

	// Suggested OPA/Rego policy patch in YAML.
	PatchYaml string `protobuf:"bytes,1,opt,name=patch_yaml,json=patchYaml,proto3" json:"patch_yaml,omitempty"`
	// Explanation of what the patch does.
	Explanation string `protobuf:"bytes,2,opt,name=explanation,proto3" json:"explanation,omitempty"`
	// Risk assessment: "low", "medium", "high".
	RiskAssessment string `protobuf:"bytes,3,opt,name=risk_assessment,json=riskAssessment,proto3" json:"risk_assessment,omitempty"`
	// --- Block 11 operator contract fields ---
	SchemaVersion string `protobuf:"bytes,10,opt,name=schema_version,json=schemaVersion,proto3" json:"schema_version,omitempty"`
	// Proposed patch (YAML snippet or unified diff).
	ProposedPatch string `protobuf:"bytes,11,opt,name=proposed_patch,json=proposedPatch,proto3" json:"proposed_patch,omitempty"`
	// "low", "medium", or "high".
	RiskLevel            string                   `protobuf:"bytes,12,opt,name=risk_level,json=riskLevel,proto3" json:"risk_level,omitempty"`
	Rationale            string                   `protobuf:"bytes,13,opt,name=rationale,proto3" json:"rationale,omitempty"`
	AffectedDestinations []string                 `protobuf:"bytes,14,rep,name=affected_destinations,json=affectedDestinations,proto3" json:"affected_destinations,omitempty"`
	CredentialIds        []string                 `protobuf:"bytes,15,rep,name=credential_ids,json=credentialIds,proto3" json:"credential_ids,omitempty"`
	EvidenceRefs         []*EvidenceRef           `protobuf:"bytes,16,rep,name=evidence_refs,json=evidenceRefs,proto3" json:"evidence_refs,omitempty"`
	Confirmation         *ConfirmationRequirement `protobuf:"bytes,17,opt,name=confirmation,proto3" json:"confirmation,omitempty"`
	// Always "review_policy_patch".
	NextAction string `protobuf:"bytes,18,opt,name=next_action,json=nextAction,proto3" json:"next_action,omitempty"`
	// contains filtered or unexported fields
}

type RedactedExcerpt struct {
	Source    string `protobuf:"bytes,1,opt,name=source,proto3" json:"source,omitempty"`
	StartLine int32  `protobuf:"varint,2,opt,name=start_line,json=startLine,proto3" json:"start_line,omitempty"`
	EndLine   int32  `protobuf:"varint,3,opt,name=end_line,json=endLine,proto3" json:"end_line,omitempty"`
	// Redacted content (secrets stripped).
	Content string `protobuf:"bytes,4,opt,name=content,proto3" json:"content,omitempty"`
	// contains filtered or unexported fields
}

type RunRequest struct {

	// Name of the agent to run.
	AgentName string `protobuf:"bytes,1,opt,name=agent_name,json=agentName,proto3" json:"agent_name,omitempty"`
	// Version of the agent to run.
	AgentVersion string `protobuf:"bytes,2,opt,name=agent_version,json=agentVersion,proto3" json:"agent_version,omitempty"`
	// Trigger payload passed to the agent.
	TriggerPayload []byte `protobuf:"bytes,3,opt,name=trigger_payload,json=triggerPayload,proto3" json:"trigger_payload,omitempty"`
	// Budget configuration (optional).
	Budget *BudgetConfig `protobuf:"bytes,4,opt,name=budget,proto3" json:"budget,omitempty"`
	// contains filtered or unexported fields
}

type RunResponse struct {

	// Unique identifier for the started run.
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// contains filtered or unexported fields
}

type SecretGrantRequest struct {

	// Run ID to grant the secret to.
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// Name of the secret to grant.
	SecretName string `protobuf:"bytes,2,opt,name=secret_name,json=secretName,proto3" json:"secret_name,omitempty"`
	// contains filtered or unexported fields
}

type SecretGrantResponse struct {

	// Whether the grant succeeded.
	Acknowledged bool `protobuf:"varint,1,opt,name=acknowledged,proto3" json:"acknowledged,omitempty"`
	// contains filtered or unexported fields
}

type SecretRevokeRequest struct {

	// Run ID to revoke the secret from.
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// Name of the secret to revoke.
	SecretName string `protobuf:"bytes,2,opt,name=secret_name,json=secretName,proto3" json:"secret_name,omitempty"`
	// contains filtered or unexported fields
}

type SecretRevokeResponse struct {

	// Whether the revocation succeeded.
	Acknowledged bool `protobuf:"varint,1,opt,name=acknowledged,proto3" json:"acknowledged,omitempty"`
	// contains filtered or unexported fields
}

type SecretSetRequest struct {

	// Name of the secret.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Scope of the secret (e.g. agent name or global).
	Scope string `protobuf:"bytes,2,opt,name=scope,proto3" json:"scope,omitempty"`
	// How the secret is injected.
	Type SecretType `protobuf:"varint,3,opt,name=type,proto3,enum=agentpaas.control.v1.SecretType" json:"type,omitempty"`
	// contains filtered or unexported fields
}

type SecretSetResponse struct {

	// Whether the secret was created or updated.
	Created bool `protobuf:"varint,1,opt,name=created,proto3" json:"created,omitempty"`
	// contains filtered or unexported fields
}

type SecretType int32

type StopRequest struct {

	// ID of the run to stop.
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// Reason for stopping (optional).
	Reason string `protobuf:"bytes,2,opt,name=reason,proto3" json:"reason,omitempty"`
	// Force immediate termination without graceful shutdown.
	Force bool `protobuf:"varint,3,opt,name=force,proto3" json:"force,omitempty"`
	// contains filtered or unexported fields
}

type StopResponse struct {

	// Whether the stop was acknowledged.
	Acknowledged bool `protobuf:"varint,1,opt,name=acknowledged,proto3" json:"acknowledged,omitempty"`
	// contains filtered or unexported fields
}

type SummarizeRunRequest struct {
	RunId string `protobuf:"bytes,1,opt,name=run_id,json=runId,proto3" json:"run_id,omitempty"`
	// contains filtered or unexported fields
}

type SummarizeRunResponse struct {

	// Natural-language summary of the run.
	Summary string `protobuf:"bytes,1,opt,name=summary,proto3" json:"summary,omitempty"`
	// Key events extracted from the run.
	KeyEvents []*KeyEvent `protobuf:"bytes,2,rep,name=key_events,json=keyEvents,proto3" json:"key_events,omitempty"`
	// Budget consumed during the run.
	BudgetUsed string `protobuf:"bytes,3,opt,name=budget_used,json=budgetUsed,proto3" json:"budget_used,omitempty"`
	// --- Block 11 operator contract fields ---
	SchemaVersion string `protobuf:"bytes,10,opt,name=schema_version,json=schemaVersion,proto3" json:"schema_version,omitempty"`
	// Run status: "completed", "failed", "running", "stopped".
	Status        string                 `protobuf:"bytes,11,opt,name=status,proto3" json:"status,omitempty"`
	ExitCode      int32                  `protobuf:"varint,12,opt,name=exit_code,json=exitCode,proto3" json:"exit_code,omitempty"`
	StartedAt     *timestamppb.Timestamp `protobuf:"bytes,13,opt,name=started_at,json=startedAt,proto3" json:"started_at,omitempty"`
	FinishedAt    *timestamppb.Timestamp `protobuf:"bytes,14,opt,name=finished_at,json=finishedAt,proto3" json:"finished_at,omitempty"`
	DurationMs    int64                  `protobuf:"varint,15,opt,name=duration_ms,json=durationMs,proto3" json:"duration_ms,omitempty"`
	Invocations   int32                  `protobuf:"varint,16,opt,name=invocations,proto3" json:"invocations,omitempty"`
	PolicyDenials int32                  `protobuf:"varint,17,opt,name=policy_denials,json=policyDenials,proto3" json:"policy_denials,omitempty"`
	// Stable error category (set when status is "failed").
	ErrorCategory string         `protobuf:"bytes,18,opt,name=error_category,json=errorCategory,proto3" json:"error_category,omitempty"`
	EvidenceRefs  []*EvidenceRef `protobuf:"bytes,19,rep,name=evidence_refs,json=evidenceRefs,proto3" json:"evidence_refs,omitempty"`
	// contains filtered or unexported fields
}

type TimeRange struct {
	Start *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=start,proto3" json:"start,omitempty"`
	End   *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=end,proto3" json:"end,omitempty"`
	// contains filtered or unexported fields
}