agentversion

type Budget struct {
	Tokens       int64          `json:"tokens"`
	CostMicroUSD money.MicroUSD `json:"costUsd"`
	ToolCalls    int64          `json:"toolCalls"`
	WallSeconds  int64          `json:"wallSeconds"`
}

type Capabilities struct {
	Tools []string `json:"tools"`
	// ToolVersions is the derived version vocabulary of the tool grants:
	// pinned ("echo.dev@1.0.0") and floating ("echo.dev@*") grants. The
	// kernel derives it from the published tool grants, so a runtime
	// capability check compares bare tool names while the publish-time
	// tool freeze still sees the pinned version. It is not author input.
	ToolVersions        []string `json:"toolVersions,omitempty"`
	Models              []string `json:"models"`
	Memory              []string `json:"memory"`
	MemorySensitivities []string `json:"memorySensitivities,omitempty"`
	Secrets             []string `json:"secrets"`
	SpawnTasks          bool     `json:"spawnTasks,omitempty"`
	ChildAgents         []string `json:"childAgents,omitempty"`
	// Peers lists the AgentVersion references this version may send IPC
	// messages to, in agentversion.FormatRef form. Empty denies every peer.
	// It constrains only the sender: the receiving run does not have to
	// declare who may write to it, so knowing a run id is enough to reach it.
	Peers []string `json:"peers,omitempty"`
}

type CheckpointPolicy struct {
	Mode            string `json:"mode"`
	SchemaVersion   string `json:"schemaVersion,omitempty"`
	IntervalSeconds int64  `json:"intervalSeconds,omitempty"`
}

type Image struct {
	Ref    string `json:"ref"`
	Digest string `json:"digest,omitempty"`
}

type Lifecycle struct {
	MaxAttempts int `json:"maxAttempts,omitempty"`
}

type Manifest struct {
	APIVersion string   `json:"apiVersion"`
	Kind       string   `json:"kind"`
	Metadata   Metadata `json:"metadata"`
	Spec       Spec     `json:"spec"`
}

type Metadata struct {
	Name      string `json:"name"`
	Version   string `json:"version"`
	Namespace string `json:"namespace"`
}

type ResourceLimits struct {
	CPUMillis      int64 `json:"cpuMillis"`
	MemoryMiB      int64 `json:"memoryMiB"`
	WorkspaceBytes int64 `json:"workspaceBytes"`
}

type RuntimeClassPolicy struct {
	Allowed   []string `json:"allowed,omitempty"`
	Preferred string   `json:"preferred,omitempty"`
}

type RuntimeTarget struct {
	Class      string   `json:"class"`
	Interface  string   `json:"interface"`
	RuntimeABI string   `json:"runtimeABI"`
	Entrypoint []string `json:"entrypoint"`
}

type Spec struct {
	RuntimeClassPolicy RuntimeClassPolicy `json:"runtimeClassPolicy,omitempty"`
	Lifecycle          Lifecycle          `json:"lifecycle,omitempty"`
	// Runtimes declares the portable launch targets shipped by this version.
	// Each target binds a runtime class to the stable Runtime Interface, a
	// provider ABI and an argv entrypoint.
	Runtimes []RuntimeTarget `json:"runtimes,omitempty"`
	// Capabilities are policy identifiers, not network endpoints or secret
	// values. Adapters map them to the corresponding Kernel gateways.
	Capabilities *Capabilities     `json:"capabilities,omitempty"`
	Resources    *ResourceLimits   `json:"resources,omitempty"`
	Budget       *Budget           `json:"budget,omitempty"`
	Checkpoint   *CheckpointPolicy `json:"checkpoint,omitempty"`
	// Image pins the container image the published version is allowed to run
	// (ADR-010). When set, admission rejects tasks whose spec pins a
	// different image.
	Image *Image `json:"image,omitempty"`
}

type ToolGrantSet struct {
	// Capability is matched against a bare tool name.
	Capability []string
	// NameLevel holds the grants authored without a version.
	NameLevel []string
	// Versioned holds the pinned and floating grants.
	Versioned []string
}