convert

func A2ASettingsToProto ¶ added in v0.4.0

func A2ASettingsToProto(s siblingssvc.A2ASettings) *airlockv1.A2ASettings

A2ASettingsToProto maps the per-agent protocol-surface toggles DTO to the wire A2ASettings.

func AddableSiblingToProto ¶ added in v0.4.0

func AddableSiblingToProto(a siblingssvc.Addable) *airlockv1.AddableSiblingInfo

AddableSiblingToProto maps the siblings service Addable DTO to the wire AddableSiblingInfo.

func AgentBuildDetailToProto ¶ added in v0.4.0

func AgentBuildDetailToProto(b dbq.AgentBuild, rollbackTargetSourceRef string) *airlockv1.AgentBuildInfo

AgentBuildDetailToProto maps the full build row (with sol/docker logs) to the wire AgentBuildInfo. rollbackTargetSourceRef is the resolved target row's SourceRef when this build is a rollback, blank otherwise.

func AgentBuildListItemToProto ¶ added in v0.4.0

func AgentBuildListItemToProto(b dbq.ListAgentBuildsByAgentRow, rollbackTargetSourceRef string) *airlockv1.AgentBuildInfo

AgentBuildListItemToProto maps a list row (no log fields) to the wire AgentBuildInfo. rollbackTargetSourceRef is resolved by the caller (the list query doesn't carry it; the handler builds a map keyed by build ID and threads the lookup through).

func AgentModelConfigToProto ¶ added in v0.4.0

func AgentModelConfigToProto(agent dbq.Agent, slots []dbq.AgentModelSlot, settings dbq.SystemSetting) *airlockv1.AgentModelConfig

AgentModelConfigToProto packs the agent's per-capability model pins plus its custom model slots into the wire AgentModelConfig. settings supplies the tenant defaults used to resolve each slot's effective model (what an unbound slot will actually run).

func AgentToProto ¶ added in v0.4.0

func AgentToProto(a dbq.Agent) *airlockv1.AgentInfo

AgentToProto maps an agents row to the wire AgentInfo. Does not set Running or YourAccess — those are layered on by the caller when known (the operator-facing list/detail handlers stamp both; agent-internal lookups leave them blank).

func AgentToolToProto ¶ added in v0.4.0

func AgentToolToProto(t dbq.AgentTool) *airlockv1.ToolInfo

func AnyToListValue ¶

func AnyToListValue(v any) *structpb.ListValue

AnyToListValue marshals an arbitrary Go slice to a protobuf ListValue via JSON round-trip.

func AnyToStruct ¶

func AnyToStruct(v any) *structpb.Struct

AnyToStruct marshals an arbitrary Go value to a protobuf Struct via JSON round-trip.

func BridgeFieldsToProto ¶ added in v0.4.0

func BridgeFieldsToProto(
	id, agentID, ownerPrincipalID pgtype.UUID,
	typ, name, botUsername, status string,
	isSystem, isManager bool,
	managerError string,
	createdAt, updatedAt pgtype.Timestamptz,
	ownerEmail, ownerDisplayName pgtype.Text,
) *airlockv1.BridgeInfo

BridgeFieldsToProto packs the union of a Bridge row plus an optional owner join into the wire BridgeInfo.

func BridgeListItemToProto ¶ added in v0.4.0

func BridgeListItemToProto(item bridgessvc.ListItem) *airlockv1.BridgeInfo

BridgeListItemToProto adapts a bridges service ListItem to the wire BridgeInfo. Same shape as Result but the JOIN's Owner pointer rides alongside the row instead of replacing owner_principal_id.

func BridgeResultToProto ¶ added in v0.4.0

func BridgeResultToProto(res bridgessvc.Result) *airlockv1.BridgeInfo

BridgeResultToProto adapts a bridges service Result (bridge row + optional owner DTO) to the wire BridgeInfo. The Result's Owner field carries the JOIN result for handlers that need the resolved owner email/name; nil-Owner falls back to the row.s owner_principal_id with blank owner-display fields.

func BridgeRowToProto ¶ added in v0.4.0

func BridgeRowToProto(br dbq.Bridge) *airlockv1.BridgeInfo

BridgeRowToProto adapts a bare Bridge row (no owner join) to the wire BridgeInfo.

func BuildMCPAuthURL ¶ added in v0.4.0

func BuildMCPAuthURL(publicURL, agentID, slug, authMode string) string

BuildMCPAuthURL returns the airlock-hosted URL operators visit to authorize an MCP server. Empty for non-interactive auth modes.

func CatalogModelToProto ¶ added in v0.4.0

func CatalogModelToProto(m catalogsvc.Model) *airlockv1.ModelInfo

CatalogModelToProto maps the catalog service Model DTO to the wire ModelInfo.

func CatalogProviderToProto ¶ added in v0.4.0

func CatalogProviderToProto(p catalogsvc.Provider) *airlockv1.ProviderInfo

CatalogProviderToProto maps the catalog service Provider DTO to the wire ProviderInfo.

func ConnectionDTOToProto ¶ added in v0.4.0

func ConnectionDTOToProto(c connsvc.Connection, publicURL, agentID string) *airlockv1.ConnectionInfo

ConnectionDTOToProto maps the connections service Connection DTO (already stripped of token bytes) to the wire ConnectionInfo. Used by ListConnections on both web and sysagent surfaces.

func ConnectionToProto ¶ added in v0.4.0

func ConnectionToProto(c dbq.ListConnectionNeedsByAgentRow, publicURL, agentID string) *airlockv1.ConnectionInfo

ConnectionToProto projects an agent's connection need (joined to its bound resource, if any) to the operator-visible wire shape: the need slug as the handle, derived booleans (Authorized, HasOAuthApp), the auth-flow start URL, and warnings. The row carries no secret columns, so none can leak. Id is the zero UUID for an unconfigured need. Every consumer that surfaces a connection — web UI handler and the in-airlock system agent — goes through this.

func ConnectionWarnings ¶ added in v0.4.0

func ConnectionWarnings(authMode string, authorized, hasRefreshToken bool) []string

ConnectionWarnings is the shared rule set for warning strings shown on a connection card. Exposed so the credentials handler — which builds ConnectionInfo from the connections service DTO (not the raw dbq row) — uses the same warning list as ConnectionToProto.

An expired access token is deliberately NOT a warning: the proxy renews it on demand (oauth.EnsureConnectionToken) so it self-heals on the next call. The only durable risk is having no refresh token to renew from — once that access token lapses the connection truly stops working until re-auth. A provider-revoked grant clears the credentials entirely, which drops authorized to false (card shows "Needs Setup"), handled by line 105.

func ConversationToProto ¶ added in v0.4.0

func ConversationToProto(c dbq.AgentConversation) *airlockv1.ConversationInfo

ConversationToProto maps an agent_conversations row to the wire ConversationInfo, defaulting an empty source to "web" so the frontend can always render a source chip.

AgentMessage rows aren't covered here: their parts JSON may carry S3-keyed media references that need presigned-URL resolution before they're safe to ship to the client. That converter lives in api/conversations.go::messageToProto, alongside the S3 client and logger it depends on.

func CredentialStatusToProto ¶ added in v0.4.0

func CredentialStatusToProto(st connsvc.Status) *airlockv1.CredentialStatusResponse

CredentialStatusToProto packs a connections.Status into the wire CredentialStatusResponse.

func EnvVarToProto ¶ added in v0.4.0

func EnvVarToProto(e connsvc.EnvVar) *airlockv1.EnvVarInfo

EnvVarToProto maps the connections service EnvVar DTO to the wire EnvVarInfo. Value is non-empty only when !is_secret AND configured (the service enforces this).

func ExecEndpointRowToProto ¶ added in v0.4.0

func ExecEndpointRowToProto(ep dbq.AgentExecEndpoint) *airlockv1.ExecEndpointInfo

ExecEndpointRowToProto packs an AgentExecEndpoint row into the wire ExecEndpointInfo. Strips PrivateKeyRef (a secrets-store reference) and the full host-key blob; only the SHA256 fingerprint is exposed so the operator can verify TOFU pinning without leaking the raw key material to clients or the LLM.

func ExecEndpointTestToProto ¶ added in v0.4.0

func ExecEndpointTestToProto(r execsvc.TestResult) *airlockv1.ExecEndpointTestResult

ExecEndpointTestToProto packs the exec-endpoint probe outcome into the wire ExecEndpointTestResult.

func ExecNeedRowToProto ¶ added in v0.4.0

func ExecNeedRowToProto(ep dbq.ListExecNeedsByAgentRow) *airlockv1.ExecEndpointInfo

ExecNeedRowToProto packs an agent's exec-endpoint need (joined to its bound resource, if any) into the wire ExecEndpointInfo. Id is the zero UUID for an unconfigured need; the agent's handle is the need Slug.

func GitCredToProto ¶ added in v0.4.0

func GitCredToProto(c gitcredssvc.Credential) *airlockv1.GitCredential

GitCredToProto maps the gitcredentials service DTO to the wire GitCredential. The service DTO already omits the token bytes; this converter is a pure field projection.

func InboundSiblingToProto ¶ added in v0.4.0

func InboundSiblingToProto(s siblingssvc.Inbound) *airlockv1.InboundSiblingInfo

InboundSiblingToProto maps the siblings service Inbound DTO to the wire InboundSiblingInfo (the reverse-direction address-book entry).

func JSONToListValue ¶ added in v0.4.0

func JSONToListValue(data []byte) *structpb.ListValue

JSONToListValue decodes a JSON array blob into a protobuf ListValue, treating empty / "[]" / "null" as absent.

func JSONToStruct ¶ added in v0.4.0

func JSONToStruct(data []byte) *structpb.Struct

JSONToStruct decodes a JSON object blob into a protobuf Struct, treating empty / "{}" / "null" as absent.

func MCPServerToProto ¶ added in v0.4.0

func MCPServerToProto(m connsvc.MCPServer, publicURL, agentID string) *airlockv1.MCPServerInfo

MCPServerToProto maps the connections service MCPServer DTO to the wire MCPServerInfo. auth_url is derived from publicURL + agentID + slug; empty for non-interactive auth modes.

func MCPStatusToProto ¶ added in v0.4.0

func MCPStatusToProto(s connsvc.MCPStatus) *airlockv1.MCPStatusInfo

MCPStatusToProto maps the MCPStatus service DTO to the wire MCPStatusInfo. No URLs, no metadata — just configured + name.

func MemberToProto ¶ added in v0.4.0

func MemberToProto(m memberssvc.Member) *airlockv1.AgentMemberInfo

MemberToProto maps the members service DTO to the wire AgentMemberInfo.

func PasskeyToProto ¶ added in v0.4.0

func PasskeyToProto(p passkeyssvc.Passkey) *airlockv1.Passkey

PasskeyToProto maps a service passkey DTO to its wire type.

func PendingSystemToolFromCheckpoint ¶ added in v0.4.0

func PendingSystemToolFromCheckpoint(blob []byte) *airlockv1.PendingSystemTool

PendingSystemToolFromCheckpoint pulls the first pending tool call out of the sol.SuspensionContext JSON blob stored on the conversation row. The confirmation UI is one-call-at-a-time today (matches agent chat); if a gate ever surfaces multiple calls at once we'd extend PendingSystemTool to carry a list.

func PgNumericToFloat ¶ added in v0.4.0

func PgNumericToFloat(n pgtype.Numeric) float64

PgNumericToFloat reads a pgtype.Numeric as float64. Returns 0 if the value isn't representable.

func PgTimestampToProto ¶

func PgTimestampToProto(t pgtype.Timestamptz) *timestamppb.Timestamp

func PgUUIDToString ¶

func PgUUIDToString(u pgtype.UUID) string

func ProviderCapabilityToProto ¶ added in v0.4.0

func ProviderCapabilityToProto(c catalogsvc.ProviderCapability) *airlockv1.ProviderCapabilityInfo

ProviderCapabilityToProto maps the catalog service capability DTO to the wire ProviderCapabilityInfo.

func ProviderToProto ¶

func ProviderToProto(p dbq.Provider) *airlockv1.Provider

ProviderToProto converts a dbq.Provider to the proto type. The API key is never included — it's write-once and encrypted at rest; HasApiKey reports only whether a key is configured (the ciphertext column is non-empty).

func RouteToProto ¶ added in v0.4.0

func RouteToProto(r dbq.AgentRoute) *airlockv1.RouteInfo

func RunToProto ¶ added in v0.4.0

func RunToProto(r dbq.Run, detail bool) *airlockv1.RunInfo

RunToProto maps a Run row to the wire RunInfo. The detail flag controls whether heavy fields (input payload, action timeline, stdout log, panic trace) are populated; list endpoints leave them off, detail endpoints turn them on.

func ScheduleToProto ¶ added in v0.4.0

func ScheduleToProto(s dbq.ListSchedulesWithNextFireRow) *airlockv1.ScheduleInfo

ScheduleToProto renders a schedule handler (cron or schedule) with its next pending fire time for the operator-facing schedules list.

func SetupCountsToProto ¶ added in v0.4.0

func SetupCountsToProto(c connsvc.SetupCounts) *airlockv1.SetupCountsInfo

SetupCountsToProto packs the aggregate setup-completeness counters into the wire SetupCountsInfo.

func SiblingToProto ¶ added in v0.4.0

func SiblingToProto(s siblingssvc.Sibling) *airlockv1.SiblingInfo

SiblingToProto maps the siblings service Sibling DTO to the wire SiblingInfo.

func SysConversationToProto ¶ added in v0.4.0

func SysConversationToProto(t dbq.SystemConversation) *airlockv1.SystemConversationInfo

SysConversationToProto maps a system_conversations row to the wire SystemConversationInfo. When the conversation is paused for tool approval the pending_tool field is populated from the saved sol.SuspensionContext checkpoint blob.

func SysMessageToProto ¶ added in v0.4.0

func SysMessageToProto(m dbq.SystemMessage) *airlockv1.SystemMessageInfo

SysMessageToProto maps one system_messages row to the wire SystemMessageInfo. content carries the plain-text display string; parts carries the goai multi-part JSON only when set (empty string when NULL). MessageParts.vue / ToolBadge.vue render system and agent surfaces identically off this shape.

func SystemSettingsToProto ¶ added in v0.4.0

func SystemSettingsToProto(s dbq.SystemSetting) *airlockv1.SystemSettingsInfo

SystemSettingsToProto maps the persisted defaults row to its wire shape: the per-capability (provider FK, bare model name) pairs the agent-create flow prefills from and the settings page edits.

func TenantRoleStringToProto ¶ added in v0.4.0

func TenantRoleStringToProto(s string) airlockv1.TenantRole

TenantRoleStringToProto maps the storage form ("admin"/"manager"/ "user") to the wire enum. Exported so handlers that build proto shapes from service DTOs (not dbq.User rows) can use it without reaching for UserToProto.

func TenantToProto ¶

func TenantToProto(t dbq.Tenant) *airlockv1.Tenant

func TestCredentialResultToProto ¶ added in v0.4.0

func TestCredentialResultToProto(r connsvc.TestResult) *airlockv1.TestCredentialResponse

TestCredentialResultToProto packs the credential-probe outcome into the wire TestCredentialResponse.

func TodosFromJSON ¶ added in v0.4.0

func TodosFromJSON(raw []byte) []*airlockv1.TodoItem

TodosFromJSON decodes the agent_builds.todos jsonb into wire TodoItems. A malformed or empty blob yields nil (no todos) rather than an error — the todo list is presentational, never load-bearing.

func UserDetailToProto ¶ added in v0.4.0

func UserDetailToProto(d userssvc.Detail) *airlockv1.User

UserDetailToProto packs the users service Detail DTO into the wire User proto. Distinct from UserToProto, which maps a raw dbq.User row — the service DTO carries the same fields but with stricter types (uuid.UUID vs pgtype.UUID, string vs pgtype.Text).

func UserSummaryToProto ¶ added in v0.4.0

func UserSummaryToProto(u userssvc.Summary) *airlockv1.UserSummary

UserSummaryToProto maps the users Summary DTO to the wire UserSummary. The tenant_role hint rides as a non-proto detail — the slim UserSummary message intentionally carries only id + email + display_name; callers that need the role use User (UserDetailToProto).

func UserToProto ¶

func UserToProto(u dbq.User) *airlockv1.User

func WebhookToProto ¶ added in v0.4.0

func WebhookToProto(wh dbq.ListWebhooksByAgentWithStatusRow, publicURL, agentID string) *airlockv1.WebhookInfo

WebhookToProto masks the verification secret (first/last 4 of >8-char secrets, "***" otherwise) and builds the public ingress URL.