approval

type Adapter struct {
	Svc interface {
		IsRequired(ctx context.Context, tenantID uint64, serviceID, toolName string) (bool, error)
		IsEnabled(ctx context.Context, tenantID uint64, serviceID, toolName string) (bool, error)
		Policy(ctx context.Context, tenantID uint64, serviceID, toolName string) (*types.MCPToolApproval, error)
		ObserveRisk(ctx context.Context, tenantID uint64, serviceID, toolName string, risk string) error
	}
}

type Answer struct {
	PromptID string
	Answered bool
	Response types.AskUserPromptResponse
	Reason   string
	TimedOut bool
	Canceled bool
	// Suspended is set when the run must end and wait for the answer.
	Suspended *types.PromptSuspension
	// contains filtered or unexported fields
}

type AskRequest struct {
	TenantID           uint64
	UserID             string
	SessionID          string
	AssistantMessageID string
	RequestID          string
	ToolCallID         string
	EventBus           *event.EventBus
	Question           types.AskUserPromptRequest
	// Snapshot, when set, lets the run suspend after the hot wait.
	Snapshot        []byte
	SnapshotVersion int
}

type BuiltinApproval interface {
	RequestBuiltinApproval(ctx context.Context, req PendingRequest) (Decision, error)
	ResumeDecision(ctx context.Context, prompt *types.AgentPrompt, bus *event.EventBus) Decision
	MarkExecuted(ctx context.Context, pendingID string)
}

type BulkEnabledChecker interface {
	EnabledTools(context.Context, uint64, string, []string) (map[string]bool, error)
}

type Checker interface {
	IsRequired(ctx context.Context, tenantID uint64, serviceID, toolName string) (bool, error)
	IsEnabled(ctx context.Context, tenantID uint64, serviceID, toolName string) (bool, error)
}

type Decision struct {

	// PendingID identifies the prompt the decision belongs to; callers that
	// execute an approved call report back with MarkExecuted(PendingID).
	PendingID       string
	Approved        bool
	ModifiedArgs    json.RawMessage // optional JSON object; when set and Approved, replaces original args
	Reason          string
	TimedOut        bool
	ContextCanceled bool
	// AllowInSession, on approval, also allows later calls with the same
	// grant in the session.
	AllowInSession bool
	// Granted marks an approval given earlier in the session: no prompt was
	// raised, so there is no PendingID.
	Granted bool
	// Suspended is set when no decision arrived during the in-memory wait
	// and the prompt now outlives the run; the call must not execute.
	Suspended *types.PromptSuspension
	// Scope is "once" or "session" for host approvals; empty means once.
	Scope string
	// Access narrows a host grant to "read"; empty keeps the proposal.
	Access string
	// contains filtered or unexported fields
}

type Gate struct {
	// contains filtered or unexported fields
}

type GrantStore interface {
	FindGrant(ctx context.Context, tenantID uint64, userID string, scope types.GrantScope, key string) (
		*types.AgentGrant, error)
	SaveGrant(ctx context.Context, grant *types.AgentGrant) error
	TouchGrant(ctx context.Context, id string, at time.Time) error
}

type HostPendingRequest struct {
	TenantID           uint64
	UserID             string
	SessionID          string
	AssistantMessageID string
	RequestID          string
	ToolCallID         string
	EventBus           *event.EventBus
	Host               event.HostApprovalPayload
}

type MCPApproval interface {
	// Action is the policy action of calling tool; the caller decides it
	// under the run's access level.
	Action(ctx context.Context, tenantID uint64, serviceID string, tool *types.MCPTool) policy.Action
	IsEnabled(ctx context.Context, tenantID uint64, serviceID, toolName string) (bool, error)
	RequestAndWait(ctx context.Context, req PendingRequest) (Decision, error)
	// ResumeDecision is the decision carried by the answered prompt a resumed
	// run was suspended on.
	ResumeDecision(ctx context.Context, prompt *types.AgentPrompt, bus *event.EventBus) Decision
	// MarkExecuted records that an approved call has finished running, so an
	// approval is never mistaken for one still in flight.
	MarkExecuted(ctx context.Context, pendingID string)
}

type OAuthPendingRequest struct {
	TenantID           uint64
	UserID             string // session owner; required for Resolve authorization
	SessionID          string
	AssistantMessageID string
	RequestID          string
	EventBus           *event.EventBus
	ServiceID          string
	ServiceName        string
	MCPToolName        string
	ToolCallID         string
	// WaitTimeout overrides the gate's default wait timeout when > 0. The wait
	// is always bounded (either by this value, the gate default, or ctx
	// cancellation) so the blocked goroutine never leaks.
	WaitTimeout time.Duration
}

type PageActionRequest struct {
	TenantID           uint64
	UserID             string
	SessionID          string
	AssistantMessageID string
	RequestID          string
	ToolCallID         string
	EventBus           *event.EventBus
	Action             types.PageActionPromptRequest
	// Timeout overrides DefaultPageActionTimeout when > 0.
	Timeout time.Duration
}

type PageActionResult struct {
	Answered bool
	Response types.PageActionPromptResponse
	Reason   string
	TimedOut bool
	Canceled bool
}

type PageActor interface {
	RequestPageAction(ctx context.Context, req PageActionRequest) (PageActionResult, error)
}

type PendingRequest struct {
	TenantID           uint64
	UserID             string // owner of the session that initiated the call (used for Resolve authorization); empty disables user check
	SessionID          string
	AssistantMessageID string
	RequestID          string
	EventBus           *event.EventBus
	ServiceID          string
	ServiceName        string
	MCPToolName        string // name on MCP server
	RegisteredToolName string // registry name e.g. mcp_svc_tool
	Description        string
	Args               json.RawMessage
	ToolCallID         string
	// Grant, when set, names the kind of call for matching remembered
	// grants; see types.ToolApprovalPromptRequest. GrantRisk is the call's
	// risk, empty meaning write: only a write may be remembered from the
	// card, while a standing grant may also cover a destructive call.
	Grant      string
	GrantScope string
	GrantRisk  policy.Risk
	// Snapshot, when set, is the run state to resume from: the wait is cut
	// to the hot-wait window and then suspends instead of timing out.
	Snapshot        []byte
	SnapshotVersion int
}

type ResolveRequest struct {
	TenantID  uint64
	UserID    string
	SessionID string
	Kind      string
	PendingID string
	Decision  Decision
}

type RiskChecker interface {
	// Policy returns the stored policy of a tool, or nil when it has none.
	Policy(ctx context.Context, tenantID uint64, serviceID, toolName string) (*types.MCPToolApproval, error)
	// ObserveRisk records a risk the service declared; the stored one only rises.
	ObserveRisk(ctx context.Context, tenantID uint64, serviceID, toolName string, risk string) error
}

type UserAsker interface {
	AskUser(ctx context.Context, req AskRequest) (Answer, error)
	// ResumeAnswer is the answer carried by the prompt a resumed run was
	// suspended on.
	ResumeAnswer(ctx context.Context, prompt *types.AgentPrompt, bus *event.EventBus) Answer
}