gate

type ApprovalTokenError struct {
	Code string
	Err  error
}

type ApprovalValidationOptions struct {
	Now                             time.Time
	ExpectedIntentDigest            string
	ExpectedPolicyDigest            string
	ExpectedDelegationBindingDigest string
	RequiredScope                   []string
}

type ApprovedScriptMatch struct {
	Matched   bool
	PatternID string
	Reason    string
}

type BuildApprovalAuditOptions struct {
	CreatedAt         time.Time
	ProducerVersion   string
	TraceID           string
	ToolName          string
	IntentDigest      string
	PolicyDigest      string
	RequiredApprovals int
	Entries           []schemagate.ApprovalAuditEntry
}

type BuildBrokerCredentialRecordOptions struct {
	CreatedAt       time.Time
	ProducerVersion string
	TraceID         string
	ToolName        string
	Identity        string
	Broker          string
	Reference       string
	Scope           []string
	CredentialRef   string
	IssuedAt        time.Time
	ExpiresAt       time.Time
	TTLSeconds      int64
}

type BuildDelegationAuditOptions struct {
	CreatedAt          time.Time
	ProducerVersion    string
	TraceID            string
	ToolName           string
	IntentDigest       string
	PolicyDigest       string
	DelegationRequired bool
	DelegationRef      string
	Entries            []schemagate.DelegationAuditEntry
}

type DataflowPolicy struct {
	Enabled               bool     `yaml:"enabled"`
	TaintedSources        []string `yaml:"tainted_sources"`
	DestinationKinds      []string `yaml:"destination_kinds"`
	DestinationValues     []string `yaml:"destination_values"`
	DestinationOperations []string `yaml:"destination_operations"`
	Action                string   `yaml:"action"`
	ReasonCode            string   `yaml:"reason_code"`
	Violation             string   `yaml:"violation"`
}

type DelegationTokenError struct {
	Code string
	Err  error
}

type DelegationValidationOptions struct {
	Now                  time.Time
	ExpectedDelegator    string
	ExpectedDelegate     string
	RequiredScope        []string
	ExpectedIntentDigest string
	ExpectedPolicyDigest string
}

type EmitTraceOptions struct {
	ProducerVersion       string
	CorrelationID         string
	ApprovalTokenRef      string
	DelegationTokenRef    string
	DelegationReasonCodes []string
	LatencyMS             float64
	ContextSource         string
	CompositeRiskClass    string
	StepVerdicts          []schemagate.TraceStepVerdict
	PreApproved           bool
	PatternID             string
	RegistryReason        string
	SigningPrivateKey     ed25519.PrivateKey
	TracePath             string
}

type EmitTraceResult struct {
	Trace        schemagate.TraceRecord
	TracePath    string
	PolicyDigest string
	IntentDigest string
}

type EndpointPolicy struct {
	Enabled           bool     `yaml:"enabled"`
	PathAllowlist     []string `yaml:"path_allowlist"`
	PathDenylist      []string `yaml:"path_denylist"`
	DomainAllowlist   []string `yaml:"domain_allowlist"`
	DomainDenylist    []string `yaml:"domain_denylist"`
	EgressClasses     []string `yaml:"egress_classes"`
	Action            string   `yaml:"action"`
	DestructiveAction string   `yaml:"destructive_action"`
	ReasonCode        string   `yaml:"reason_code"`
	Violation         string   `yaml:"violation"`
}

type EvalOptions struct {
	ProducerVersion string
	WrkrInventory   map[string]WrkrToolMetadata
	WrkrSource      string
}

type EvalOutcome struct {
	Result                   schemagate.GateResult
	MatchedRule              string
	MinApprovals             int
	RequireDistinctApprovers bool
	RequireBrokerCredential  bool
	RequireDelegation        bool
	BrokerReference          string
	BrokerScopes             []string
	RateLimit                RateLimitPolicy
	DataflowTriggered        bool
	Script                   bool
	StepCount                int
	ScriptHash               string
	CompositeRiskClass       string
	StepVerdicts             []schemagate.TraceStepVerdict
	ContextSource            string
	PreApproved              bool
	PatternID                string
	RegistryReason           string
}

type FailClosedPolicy struct {
	Enabled        bool     `yaml:"enabled"`
	RiskClasses    []string `yaml:"risk_classes"`
	RequiredFields []string `yaml:"required_fields"`
}

type MintApprovalTokenOptions struct {
	ProducerVersion         string
	ApproverIdentity        string
	ReasonCode              string
	IntentDigest            string
	PolicyDigest            string
	DelegationBindingDigest string
	Scope                   []string
	TTL                     time.Duration
	Now                     time.Time
	SigningPrivateKey       ed25519.PrivateKey
	TokenPath               string
}

type MintApprovalTokenResult struct {
	Token     schemagate.ApprovalToken
	TokenPath string
}

type MintDelegationTokenOptions struct {
	ProducerVersion   string
	DelegatorIdentity string
	DelegateIdentity  string
	Scope             []string
	ScopeClass        string
	IntentDigest      string
	PolicyDigest      string
	TTL               time.Duration
	Now               time.Time
	SigningPrivateKey ed25519.PrivateKey
	TokenPath         string
}

type MintDelegationTokenResult struct {
	Token     schemagate.DelegationToken
	TokenPath string
}

type MintSayTokenOptions struct {
	ProducerVersion    string
	CommitmentClass    string
	IntentDigest       string
	PolicyDigest       string
	CallID             string
	TurnIndex          int
	CallSeq            int
	Currency           string
	QuoteMinCents      int64
	QuoteMaxCents      int64
	RefundCeilingCents int64
	TTL                time.Duration
	Now                time.Time
	SigningPrivateKey  ed25519.PrivateKey
	TokenPath          string
}

type MintSayTokenResult struct {
	Token     schemavoice.SayToken
	TokenPath string
}

type Policy struct {
	SchemaID       string           `yaml:"schema_id"`
	SchemaVersion  string           `yaml:"schema_version"`
	DefaultVerdict string           `yaml:"default_verdict"`
	DefaultAction  string           `yaml:"default_action"`
	Scripts        ScriptPolicy     `yaml:"scripts"`
	FailClosed     FailClosedPolicy `yaml:"fail_closed"`
	Rules          []PolicyRule     `yaml:"rules"`
}

type PolicyMatch struct {
	ToolName                   string              `yaml:"tool_name"`
	ToolNames                  []string            `yaml:"tool_names"`
	RiskClasses                []string            `yaml:"risk_classes"`
	TargetKinds                []string            `yaml:"target_kinds"`
	TargetValues               []string            `yaml:"target_values"`
	EndpointClass              []string            `yaml:"endpoint_class"`
	EndpointClasses            []string            `yaml:"endpoint_classes"`
	DiscoveryMethods           []string            `yaml:"discovery_method"`
	ToolAnnotations            ToolAnnotationMatch `yaml:"tool_annotations"`
	SkillPublishers            []string            `yaml:"skill_publishers"`
	SkillSources               []string            `yaml:"skill_sources"`
	DataClasses                []string            `yaml:"data_classes"`
	DestinationKinds           []string            `yaml:"destination_kinds"`
	DestinationValues          []string            `yaml:"destination_values"`
	DestinationOps             []string            `yaml:"destination_operations"`
	ProvenanceSources          []string            `yaml:"provenance_sources"`
	Identities                 []string            `yaml:"identities"`
	WorkspacePrefixes          []string            `yaml:"workspace_prefixes"`
	ContextToolNames           []string            `yaml:"context_tool_names"`
	ContextDataClasses         []string            `yaml:"context_data_classes"`
	ContextEndpointClasses     []string            `yaml:"context_endpoint_classes"`
	ContextAutonomyLevels      []string            `yaml:"context_autonomy_levels"`
	RequireDelegation          bool                `yaml:"require_delegation"`
	AllowedDelegatorIdentities []string            `yaml:"allowed_delegator_identities"`
	AllowedDelegateIdentities  []string            `yaml:"allowed_delegate_identities"`
	DelegationScopes           []string            `yaml:"delegation_scopes"`
	MaxDelegationDepth         *int                `yaml:"max_delegation_depth"`
}

type PolicyRule struct {
	Name                        string          `yaml:"name"`
	Priority                    int             `yaml:"priority"`
	Effect                      string          `yaml:"effect"`
	Action                      string          `yaml:"action"`
	Match                       PolicyMatch     `yaml:"match"`
	Endpoint                    EndpointPolicy  `yaml:"endpoint"`
	ReasonCodes                 []string        `yaml:"reason_codes"`
	Violations                  []string        `yaml:"violations"`
	MinApprovals                int             `yaml:"min_approvals"`
	RequireDistinctApprovers    bool            `yaml:"require_distinct_approvers"`
	RequireContextEvidence      bool            `yaml:"require_context_evidence"`
	RequiredContextEvidenceMode string          `yaml:"required_context_evidence_mode"`
	MaxContextAgeSeconds        int64           `yaml:"max_context_age_seconds"`
	RequireBrokerCredential     bool            `yaml:"require_broker_credential"`
	BrokerReference             string          `yaml:"broker_reference"`
	BrokerScopes                []string        `yaml:"broker_scopes"`
	RateLimit                   RateLimitPolicy `yaml:"rate_limit"`
	Dataflow                    DataflowPolicy  `yaml:"dataflow"`
}

type RateLimitDecision struct {
	Allowed   bool   `json:"allowed"`
	Limit     int    `json:"limit"`
	Used      int    `json:"used"`
	Remaining int    `json:"remaining"`
	Scope     string `json:"scope"`
	Key       string `json:"key"`
}

type RateLimitPolicy struct {
	Requests int    `yaml:"requests"`
	Window   string `yaml:"window"`
	Scope    string `yaml:"scope"`
}

type SayTokenError struct {
	Code string
	Err  error
}

type SayTokenValidationOptions struct {
	Now                     time.Time
	ExpectedIntentDigest    string
	ExpectedPolicyDigest    string
	ExpectedCallID          string
	ExpectedTurnIndex       int
	ExpectedCallSeq         int
	ExpectedCommitmentClass string
}

type ScriptPolicy struct {
	MaxSteps             int  `yaml:"max_steps"`
	RequireApprovalAbove int  `yaml:"require_approval_above"`
	BlockMixedRisk       bool `yaml:"block_mixed_risk"`
}

type ToolAnnotationMatch struct {
	ReadOnlyHint    *bool `yaml:"readOnlyHint"`
	DestructiveHint *bool `yaml:"destructiveHint"`
	IdempotentHint  *bool `yaml:"idempotentHint"`
	OpenWorldHint   *bool `yaml:"openWorldHint"`
}

type WrkrInventory struct {
	Path    string
	ModTime time.Time
	Tools   map[string]WrkrToolMetadata
}

type WrkrToolMetadata struct {
	ToolName      string
	DataClass     string
	EndpointClass string
	AutonomyLevel string
}