tool

type ApprovalNotUsableError struct {
	Reason ApprovalNotUsableReason
	Err    error
}

type ApprovalNotUsableReason string

type ExecutionRequest struct {
	Descriptor store.ToolDescriptor
	Action     string
	Resource   string
	Args       json.RawMessage
	Secret     SecretHandle
}

type ExecutionResult struct {
	Output      json.RawMessage
	FailureCode string
}

type Gateway struct {
	// contains filtered or unexported fields
}

type GatewayOption func(*Gateway)

type InvokeInput struct {
	TenantID  string
	TaskID    uuid.UUID
	RunID     uuid.UUID
	AttemptID uuid.UUID
	// FencingToken is the fenced identity of the invoking Attempt. The
	// gateway itself does not verify it (lease/fencing is enforced by the
	// Runtime Protocol boundary); carriers pass it through so downstream
	// fenced transports (for example a worker's gRPC forwarding) can
	// preserve it.
	FencingToken    int64
	AgentVersionRef string
	// SecretRef is an optional symbolic capability from the immutable
	// AgentVersion manifest. Empty means this invocation receives no secret.
	SecretRef string
	ToolName  string
	// ToolVersion selects a descriptor; empty resolves the latest version.
	ToolVersion    string
	Action         string
	Resource       string
	Args           json.RawMessage
	IdempotencyKey string
	// ApprovalID is required when the previous decision was REQUIRES_APPROVAL
	// and a human decided it; the gateway re-checks the binding (§9.2).
	ApprovalID *uuid.UUID
}

type InvokeOutcome string

type InvokeResult struct {
	Outcome          InvokeOutcome
	ToolCall         store.ToolCall
	ApprovalID       *uuid.UUID
	Result           json.RawMessage
	ReceiptOperation string
	DenyReasons      []string
	PolicyRevision   string
}

type PolicyChecker interface {
	EvaluateTool(context.Context, string, policy.ToolContext) policy.Decision
}

type ReceiptStore interface {
	GetRuntimeReceipt(context.Context, string, uuid.UUID, string, string) (store.RuntimeReceipt, error)
	WriteRuntimeReceipt(context.Context, store.WriteRuntimeReceiptInput) error
}

type SecretBroker interface {
	Issue(context.Context, SecretScope) (SecretHandle, error)
}

type SecretHandle string

type SecretScope struct {
	TenantID  string
	AttemptID string
	ToolName  string
	Resource  string
	SecretRef string
}

type ToolExecutionError struct {
	Code string
	Err  error
}

type ToolExecutor interface {
	Execute(context.Context, ExecutionRequest) (ExecutionResult, error)
}