api

Oct 19, 2026

Changes in this version

type Server

+ func (s *Server) RevokeStoppedRun(ctx context.Context, runID uuid.UUID) map[string]string

+ func (s *Server) SweepExpiredEphemeral(ctx context.Context) (int, error)

Oct 18, 2026

Changes in this version

+ func ParseTrustedProxies(list string) ([]netip.Prefix, error)

+ type AWSSSORefreshTuning struct

+ RetryDelay time.Duration

+ ServeFloor time.Duration

+ Skew time.Duration

+ Timeout time.Duration

+ func DefaultAWSSSORefreshTuning() AWSSSORefreshTuning

type Config

+ AWSSSORefresh AWSSSORefreshTuning

+ RecordingSelection string

+ SecretKeyServiceNodeRole bool

+ TrustedProxies []netip.Prefix

type Server

+ func (s *Server) RenewAWSSSOCredentials(ctx context.Context) (int, error)

+ func (s *Server) WarnUnresolvableProfiles(ctx context.Context)

Oct 15, 2026

Changes in this version

type Config

+ AgentImageVariants map[string]map[string]string

+ ProxyImage string

+ ProxyImageByArch map[string]string

Oct 14, 2026

Changes in this version

+ const TierLocalOnly

+ const TierOrg

+ const TierRunner

+ var ErrRemoteDigestNotFound = errors.New("remote digest not found")

+ func ValidateHarnessSetImages(images map[string]string) error

+ type BranchLister interface

+ ListBranches func(ctx context.Context, repo string, limit int) (branches []string, defaultBranch string, truncated bool, err error)

+ type BuiltImage struct

+ BaseDigest string

+ ID string

+ PinFile []byte

+ Ref string

type Config

+ AuditDelivery func(ctx context.Context) ([]store.AuditDeliveryStatus, error)

+ AzureCLIEntra func(componentID string) ADOEntraConfig

+ GitHubBranches BranchLister

+ RunnerAuditPrepare func(context.Context, types.AuditEvent) (types.AuditEvent, error)

+ RunnerHub remote.HubConfig

+ RunnerOnline func(id uuid.UUID) bool

+ RunnerOrgURL string

+ RunnersDisabled func(ctx context.Context)

+ SSHMaxSessionsPerRun int

+ SecretKeyServiceStaticKey bool

+ SecretLocalRows func(context.Context) (int, error)

+ type ImageIdentifier interface

+ LocalImage func(ctx context.Context, ref string) (id string, found bool, err error)

+ RemoteDigest func(ctx context.Context, ref string) (string, error)

+ type RepoBranches struct

+ Branches []string

+ Credential string

+ Default string

+ Listing string

+ Reason string

+ Truncated bool

type ResolvedProfile

+ AuthoredResources types.ResourceLimits

type RunLeaseConfig

+ RunMaxAge time.Duration

type Server

+ func (s *Server) ActionResultFromRunner(ctx context.Context, runnerID uuid.UUID, event runnerwire.Event) error

+ func (s *Server) ActivityFromRunner(ctx context.Context, runnerID, runID uuid.UUID) error

+ func (s *Server) BeginInventoryFromRunner(ctx context.Context, runnerID uuid.UUID, sessionID string) error

+ func (s *Server) BootstrapRunnerPools(ctx context.Context) error

+ func (s *Server) DecisionIngestFromRunner(ctx context.Context, runnerID uuid.UUID, event runnerwire.Event) error

+ func (s *Server) EventFromRunner(ctx context.Context, runnerID uuid.UUID, ev runnerwire.Event) error

+ func (s *Server) ExitFromRunner(ctx context.Context, runnerID uuid.UUID, event runnerwire.Event) error

+ func (s *Server) OfflineFromRunner(ctx context.Context, runnerID uuid.UUID) error

+ func (s *Server) PendingFromRunner(ctx context.Context, runnerID uuid.UUID) ([]runnerwire.PendingAction, error)

+ func (s *Server) PostureFromRunner(ctx context.Context, runnerID uuid.UUID, ev runnerwire.Event) error

+ func (s *Server) RecordRunnerConnected(ctx context.Context, id uuid.UUID, version string, resumed bool)

+ func (s *Server) RecordRunnerDisconnected(ctx context.Context, id uuid.UUID, lastSeen *time.Time)

+ func (s *Server) RecordRunnerInventoryHold(ctx context.Context, id uuid.UUID)

+ func (s *Server) RedeemAzureARMAccess(ctx context.Context, cfg ADOEntraConfig, owner, componentID string) (ADOEntraAccess, error)

+ func (s *Server) RegisterRunnerSubstrates(ctx context.Context) error

+ func (s *Server) ResidentEraseFromRunner(ctx context.Context, runnerID uuid.UUID, ev runnerwire.Event) error

+ func (s *Server) RevokeRunnerSession(ctx context.Context, id uuid.UUID) error

+ func (s *Server) RunRunnerExitSweeper(ctx context.Context)

+ func (s *Server) RunnerOnline(id uuid.UUID) bool

+ func (s *Server) RunnersDisabled(ctx context.Context)

+ func (s *Server) ServeRelay(tlsCfg *tls.Config) *http.Server

+ func (s *Server) StatePageFromRunner(ctx context.Context, runnerID uuid.UUID, sessionID string, ...) error

+ func (s *Server) SweepRunQueue(ctx context.Context) error

+ func (s *Server) SweepRunnerExits(ctx context.Context) error

type SetupFix

+ ID string

+ Target string

+ Tool string

type SetupHarnessTool

+ ApprovalHold bool

+ Installed bool

type SetupProviderAccess

+ Cause string

+ ChangedAt *time.Time

+ NewDestination string

type SetupStatus

+ HarnessSets [][]string

+ Tier string

+ type TemplateFieldRule struct

+ Empty string

+ Excluded string

+ KeyedBy string

+ Meaning string

+ Name string

+ Omitted string

+ Part client.TemplatePart

+ Pending string

+ PersonOnly bool

+ Section string

+ Sensitive bool

+ Why string

Oct 9, 2026

Changes in this version

type Config

+ PolicyPreviewRatePerMin int

type Server

+ func (s *Server) LoginGrantGeneration(ctx context.Context) (int64, error)

Oct 7, 2026

Changes in this version

type Config

+ SSHProxyCommand string

type Server

+ func (s *Server) MetricsListenerHandler() http.Handler

+ func (s *Server) SeedSiteConfig(ctx context.Context, seed *SiteConfigSeed) error

+ type SiteConfigSeed struct

+ InternalHosts []types.InternalHost

+ UpstreamProxyNoProxy []string

+ UpstreamProxySecretRef string

+ UpstreamProxyURL string

+ func LoadSiteConfigSeed(path string) (*SiteConfigSeed, error)

Oct 5, 2026

Changes in this version

+ func GovernanceSecondHumanEnabled() bool

+ func NewIdentityGate(st identityGateStore) oidc.IdentityGate

type Config

+ ADORunPATs *adorunpat.Store

+ APITokenMaxTTL time.Duration

+ AuditActorSubject func(ctx context.Context, principal string) (string, error)

+ AuditUnsealer audit.Unsealer

+ AzureFoundryEntra func(ctx context.Context, rowUID string) (ADOEntraConfig, bool, error)

+ GovernAdminRuns bool

+ GovernAdminRunsExempt []string

+ GovernanceChangeTTL time.Duration

+ HA bool

+ HostResolver func(host string) ([]net.IP, error)

+ KEKRequired bool

+ KeyDomainKeys map[string]string

+ KeyDomains *keydomain.Service

+ LiveBus *livebus.Bus

+ MaskManifests *maskmanifest.Manifests

+ MaskSync MaskSyncProbe

+ MaxConcurrentRuns int

+ PreflightRatePerMin int

+ PrincipalKeys bool

+ RoleStampTTL time.Duration

+ RunOutputPersistOff bool

+ RunOutputRetention time.Duration

+ RunOutputTailBytes int

+ SCIM *SCIMConfig

+ SubjectKeys *subjectkey.Manager

+ SweepHealth *sweephealth.Tracker

+ SweeperLease SweeperLease

+ type MaskSyncProbe interface

+ Synced func(ctx context.Context) error

+ type ResolvedProfile struct

+ AdminWarnings []string

+ Ceiling types.RunPolicySpec

+ Chain []profileLink

+ Composed bool

+ Contact *policyref.Contact

+ ID uuid.UUID

+ Limits types.GovernanceLimits

+ Name string

+ Warnings []string

+ type SCIMConfig struct

+ Issuer string

+ KeepWorkspaces bool

+ PurgeAfter time.Duration

+ Tenant string

+ Token string

+ TokenNext string

type Server

+ func (s *Server) EraseRunOutputs(ctx context.Context, runIDs []uuid.UUID) error

+ func (s *Server) FinishRunOutput(ctx context.Context, runID uuid.UUID)

+ func (s *Server) HealthSweeps() []sweephealth.Sweep

+ func (s *Server) RedeemAzureFoundryAccess(ctx context.Context, cfg ADOEntraConfig, owner, uid, audience string) (ADOEntraAccess, error)

+ func (s *Server) SnapshotRunPane(ctx context.Context, runID uuid.UUID)

+ func (s *Server) SweepRunOutputs(ctx context.Context) error

+ func (s *Server) SweepSCIMPurge(ctx context.Context) error

type SetupAuth

+ GovernAdminRuns bool

+ GovernAdminRunsExempt []string

type SetupRunner

+ SandboxStart *SetupSandboxStart

+ type SetupSandboxStart struct

+ CapacityWaitSeconds int

+ StartTimeoutSeconds int

+ type SweeperLease interface

+ Current func(ctx context.Context, epoch int64) (bool, error)

+ Join func() (ctx context.Context, epoch int64, end func(), ok bool)

Oct 1, 2026

Changes in this version

+ func CapabilitySecondHumanEnabled() bool

type SCMAccess

+ RefusedAt string

Sep 30, 2026

Changes in this version

+ const ReasonADOPATNeedsConsoleApp

+ const RetiredModelCredentialRefusal

+ var ErrADOMintNeedsSecret = errors.New(...)

+ func RetiredADOSharedSecretNames(sc types.SiteConfig) (names, skipped []string)

+ func RetiredModelCredentialNames() []string

type ADOEntraConfig

+ PATAPIOverride string

+ TokenMode types.ADOTokenMode

+ type ADOPATAccess struct

+ DefaultProfile []adoscope.Capability

+ LastToken *adoLastToken

type Config

+ ADOEntraByRow func(ctx context.Context, rowID string) (ADOEntraConfig, bool, error)

+ ADOLoginFacts func() (clientID, tenantID string, hasSecret bool)

+ ExecOutputTailOff bool

+ ExecOutputTailTTL time.Duration

type SCMAccess

+ ExpiresOn string

+ GitOnly bool

+ MaxDays int

+ TokenMode string

+ TokenScopes []string

type SetupRunner

+ Kubernetes bool

Sep 29, 2026

Changes in this version

+ const AWSSSOSpentTokenRetention

+ const HTTPShutdownTimeout

+ const InternalPathPrefix

+ var ErrADOEntraStoreRefused = errors.New("the secret store refused the captured Azure DevOps sign-in")

+ func ValidateDemoVideoBaseURL(raw string) (string, error)

+ func ValidateEnvToggles()

type ADOEntraFailure

+ const ADOEntraFailureStoreRefused

type ApprovalService

+ ExpireOne func(ctx context.Context, id uuid.UUID, actor, reason string) error

type Config

+ AllowTestEndpoints bool

+ ApprovalExpiryAfter time.Duration

+ BasePath string

+ DemoVideoBaseURL string

+ HarnessLoginCPUMillis int

+ HarnessLoginMemoryMiB int

+ LLMGatewayAuth map[string]LLMGatewayAuth

+ OrgFederation func() federation.Status

+ PlatformKeySeparate bool

+ RunConfigKey []byte

+ SecretKeyService string

+ SecretStoreExternal string

+ UICookiePolicy UICookiePolicy

+ UserMounts runner.UserMountPolicy

+ type HostCapacityConfig struct

+ HostCapacity *hostcapacity.Guard

+ type LLMGatewayAuth struct

+ Format string

+ Header string

+ type LLMGatewayRaw struct

+ BaseURL string

+ Format string

+ Header string

+ type RunLeaseConfig struct

+ EndedRunGrace time.Duration

type SCMAccess

+ CapabilityCeiling []adoscope.Capability

type Server

+ func (s *Server) GoBackground(fn func())

+ func (s *Server) InternalHandler() http.Handler

+ func (s *Server) SweepExpiredCredentials(ctx context.Context) int

+ func (s *Server) SweepTerminalSandboxesPage(ctx context.Context, page store.Page) (swept, pageLen int, err error)

+ func (s *Server) WaitBackground()

type SetupBedrock

+ PerUserBearer bool

type SetupCheck

+ Cause string

type SetupHarnessTool

+ ProvidersUngranted bool

+ type SetupModelProvider struct

+ DefaultFor []string

+ Disabled bool

+ Harnesses []string

+ Host string

+ ID string

+ Kind string

+ Name string

+ type SetupProviderAccess struct

+ Action string

+ AddedAt *time.Time

+ Deadline string

+ LastUsedAt *time.Time

+ Provider string

+ SourceRunID string

+ State string

type SetupStatus

+ CredentialStorage string

+ ModelProviders []SetupModelProvider

+ ProviderAccess []SetupProviderAccess

+ type UICookiePolicy struct

+ Allow bool

+ Names []string

+ func ParseUICookiePolicy(raw string) (UICookiePolicy, error)

Sep 23, 2026

Changes in this version

type Config

+ ControlPlaneCAPEM string

Sep 22, 2026

Changes in this version

+ const ADOEntraCallbackPath

+ const EntraAuthorityOverrideRefusal

+ const EntraAuthorityOverrideWarn

+ var ErrADOEntraConsentRequired = errors.New("access to Azure DevOps requires consent that has not been granted")

+ var ErrADOEntraDeadCredential = errors.New("the captured Azure DevOps sign-in can no longer be renewed")

+ var ErrADOEntraInteractionRequired = errors.New("access to Azure DevOps requires interactive sign-in")

+ var ErrADOEntraNotCaptured = errors.New("no Azure DevOps sign-in has been captured for this principal")

+ var ErrADOEntraUnavailable = errors.New("renewing the captured Azure DevOps sign-in did not complete")

+ func ValidateEntraAuthorityOverride(raw string, allowTestEndpoints bool) (string, error)

+ type ADOEntraAccess struct

+ AccessToken string

+ ExpiresAt time.Time

+ Scopes []string

+ type ADOEntraConfig struct

+ AllowTestEndpoints bool

+ AuthorityOverride string

+ ClientID string

+ ClientSecret string

+ LoginClientID string

+ LoginTenantID string

+ RedirectURL string

+ RowID string

+ Scopes []string

+ TenantID string

+ type ADOEntraFailure string

+ const ADOEntraFailureConsentRequired

+ const ADOEntraFailureDeadCredential

+ const ADOEntraFailureInteractionRequired

+ const ADOEntraFailureNone

+ const ADOEntraFailureNotCaptured

+ const ADOEntraFailureUnavailable

+ func ADOEntraClassify(err error) ADOEntraFailure

+ type ADOEntraSource func(ctx context.Context) (ADOEntraConfig, bool, error)

type Config

+ ADOEntra ADOEntraSource

+ MemberMode bool

+ SSOOnly bool

+ type SCMAccess struct

+ Cause string

+ Kind string

+ Org string

+ Source string

+ State string

type Server

+ func (s *Server) CaptureLoginGrant(ctx context.Context, subject string, grant oidc.LoginGrant)

+ func (s *Server) LoginScopes(ctx context.Context) []string

+ func (s *Server) RedeemADOEntraAccess(ctx context.Context, cfg ADOEntraConfig, owner string, scopes []string) (ADOEntraAccess, error)

type SetupStatus

+ SCMAccess SCMAccess

Sep 19, 2026

Changes in this version

type SetupCheck

+ Blocking bool

Sep 18, 2026

Changes in this version

+ func AWSSSOProxyInjectFlagDefault() string

+ func ResolveAWSSSOProxyInject(raw string) bool

type Config

+ AWSSSOProxyInject bool

type Server

+ func (s *Server) RecordCredentialReauthExpired(n int)

type SetupModelAccess

+ Cause string

Sep 17, 2026

Changes in this version

type SetupHarnessTool

+ CredentialResidency string

Sep 16, 2026

Changes in this version

+ const AWSSSOEndpointOverrideRefusal

+ const AWSSSOEndpointOverrideWarn

+ const BedrockPlainHTTPWarn

+ func ValidateAWSSSOEndpointOverride(raw string, allowTestEndpoints bool) (string, error)

type Config

+ AWSSSOEndpointOverride string

+ UISessionTTL time.Duration

type SetupBedrock

+ SSOAccountID string

+ SSORoleName string

type SetupModelAccess

+ PinMismatch bool

type SetupStatus

+ ChecksRedacted bool

Sep 15, 2026

Changes in this version

+ func AdminTokenPrincipal() string

+ func BedrockModelARNNamesNoAccount(model string) bool

+ func BedrockSSOPinUnenforced(sc types.SiteConfig, model string) bool

+ func OriginHostReadable(raw string) bool

type SetupBedrock

+ Mechanism bool

+ PerUser bool

Sep 13, 2026

Changes in this version

type ApprovalService

+ CancelForRun func(ctx context.Context, runID uuid.UUID, reason string) (int, error)

+ CountForRun func(ctx context.Context, runID uuid.UUID) (int, error)

type Config

+ AuditCoalesceWindow time.Duration

type Server

+ func (s *Server) CancelTerminalRunApprovals(ctx context.Context, runID uuid.UUID)

+ func (s *Server) FlushAuthFailedStreak()

type SetupBedrock

+ SSOExpired bool

type SetupHarnessTool

+ CredentialSource string

+ Enabled bool

+ Mechanism string

+ type SetupModelAccess struct

+ Action string

+ Deadline string

+ Mechanism string

+ PerUser bool

+ State string

type SetupRunner

+ EphemeralDiskEnforcement types.StorageEnforcement

type SetupStatus

+ ModelAccess SetupModelAccess

Sep 9, 2026

Changes in this version

+ func EgressSecondHumanEnabled() bool

+ func ValidateBedrockBaseURL(raw, region string) (string, error)

+ func ValidateLLMGateways(anthropicRaw, openaiRaw string) (map[string]string, error)

type AuditSpool

+ func (a *AuditSpool) Quarantined() int64

type Config

+ AllowEmailMappings bool

+ BedrockBaseURL string

+ Directory directory.Directory

+ DisableGitPATBroker bool

+ LLMGateways map[string]string

+ TrustedCAPEM string

+ UserDriveHostRoots []string

type SetupStatus

+ OnboardingComplete bool

+ TrustedCACerts int

Aug 27, 2026

Changes in this version

type Config

+ SubscriptionPostureOK bool

+ SubscriptionPostureReason string

type SetupAuth

+ SharedSubscriptionAllowed bool

+ SharedSubscriptionReason string

Aug 25, 2026

Changes in this version

+ const RunSecretGrace

+ func ReservedPlatformSecret(name string) bool

type AuditSpool

+ func (a *AuditSpool) Lines() int

+ func (a *AuditSpool) TornDrops() int64

type Config

+ AuditSinkDrops func() map[string]int64

+ MemberMounts runner.MemberMountPolicy

+ RequireOperatorSetEgress bool

+ SSHRoleTTL time.Duration

+ SessionRevocations oidc.SessionRevocations

+ UIAdvertiseURL string

+ UIListenAddr string

+ UIOriginTemplate string

+ UISessionKey []byte

type RecordTaskResult

+ Caught int

+ Clean *bool

+ type SandboxOrphanSweeper interface

+ SweepOrphanedSandboxes func(ctx context.Context, minAge time.Duration, isOrphan func(runID uuid.UUID) bool) (int, error)

type Server

+ func (s *Server) ReconcileWorkspaceEgressDecisions(ctx context.Context) (int, error)

+ func (s *Server) SweepRunSecrets(ctx context.Context) int

+ func (s *Server) UIGatewayHandler() http.Handler

Aug 18, 2026

Changes in this version

+ type CapState string

+ const CapAvailable

+ const CapImpossible

+ const CapNeedsSetup

+ const CapOff

+ type Capability struct

+ ID string

+ Reason string

+ Residency string

+ State CapState

type Config

+ GitHubRulesets RefRulesetVerifier

+ OIDCRedirectURL string

+ OIDCRoleMapConfigured bool

+ OIDCSecureCookies bool

+ OperatorEmails []string

+ SSHAdvertiseAddr string

+ SSHHostKey ed25519.PrivateKey

+ SSHListenAddr string

+ type ImageBuildSweeper interface

+ SweepOrphanedBuilds func(ctx context.Context) error

+ type RefRulesetVerifier interface

+ VerifyRefRuleset func(ctx context.Context, repo string) (confined bool, detail string, err error)

type Server

+ func (s *Server) ServeSSHGateway(ctx context.Context) error

+ func (s *Server) SweepTerminalSandboxes(ctx context.Context) (int, error)

type SetupBedrock

+ SSOPresent bool

+ type SetupHarnessTool struct

+ Display string

+ HasGateway bool

+ HasLogin bool

+ ID string

+ NoManagedAuth bool

+ type SetupIntegration struct

+ Capabilities []Capability

+ func (si *SetupIntegration) UnmarshalJSON(b []byte) error

type SetupStatus

+ Harnesses []SetupHarnessTool

+ Integrations []SetupIntegration

+ LLMReady bool

Jul 20, 2026

Changes in this version

type Server

+ func (s *Server) RunClaudeCompose(ctx context.Context, promptJSON []byte) ([]byte, error)

type SetupHarness

+ Expired bool

+ ExpiresAt string

+ Renewable bool

Jul 18, 2026

Changes in this version

type AuditSpool

+ func (a *AuditSpool) Drain(ctx context.Context, rec audit.Recorder, batch int) (int, error)

+ func (a *AuditSpool) StartDrain(ctx context.Context, rec audit.Recorder, interval time.Duration, batch int)

type ComponentInfo

+ Available []string

type Config

+ AuditDrainRecorder audit.Recorder

+ AuditSpool *AuditSpool

Jul 13, 2026

Changes in this version

+ func NewManagedCredProvider(store secretstore.Store, provider string) subscription.Provider

type Config

+ BedrockAWSConfigDir string

+ BedrockAWSProfile string

+ BedrockAWSSSORegion string

+ LocalTrustForwarder bool

+ ManagedToken subscription.Provider

type ImageBuilder

+ FinalizeBase func(ctx context.Context, baseRef, outputTag string) (imageRef string, err error)

type SetupBedrock

+ AWSMount bool

+ BearerPresent bool

+ Ready bool

+ type SetupHarness struct

+ Aging bool

+ Captured bool

+ CapturedAt string

+ Provider string

+ SourceRunID string

type SetupStatus

+ Harness []SetupHarness

+ SCM setup.SCMPosture

Jul 8, 2026

Changes in this version

+ func LoadPolicySpec(path string) (types.RunPolicySpec, error)

+ type ApprovalService interface

+ Decide func(ctx context.Context, id uuid.UUID, approve bool, decidedByType types.ActorType, ...) (types.ApprovalRequest, error)

+ Get func(ctx context.Context, id uuid.UUID) (types.ApprovalRequest, error)

+ List func(ctx context.Context, state types.ApprovalState) ([]types.ApprovalRequest, error)

+ Request func(ctx context.Context, req types.ApprovalRequest) (types.ApprovalRequest, error)

+ type AuditSpool struct

+ func NewAuditSpool(path string) (*AuditSpool, error)

+ func (a *AuditSpool) Append(ev types.AuditEvent) error

+ type ComponentInfo struct

+ RecommendedProduction string

+ Selected string

+ Source string

+ type ComposerBackendReadiness struct

+ Auth string

+ Enabled bool

+ KeyResolved bool

+ KeySecret string

+ Model string

+ Name string

+ NeedsKey bool

+ Provider string

+ Transport string

+ Wire string

+ type Config struct

+ AdminToken string

+ AgeKeyDurable bool

+ AgentAnthropicModel string

+ AgentImages map[string]string

+ Approvals ApprovalService

+ Audit audit.Recorder

+ AuditFallback *AuditSpool

+ BaseCtx context.Context

+ BedrockModel string

+ BedrockRegion string

+ Broker MintBroker

+ Components map[string]ComponentInfo

+ Composer composer.Registry

+ ComposerBackends []ComposerBackendReadiness

+ ControlPlaneURL string

+ DefaultPolicy types.RunPolicySpec

+ DisableSubscriptionInject bool

+ Identity identity.Provider

+ ImageBuilder ImageBuilder

+ LocalLoopback bool

+ LocalMode bool

+ LocalOperator string

+ MaskRegistry *secretmask.Registry

+ Now func() time.Time

+ OIDC *oidc.Authenticator

+ Pool *pgxpool.Pool

+ ProxyURL string

+ RecordingStore recording.Store

+ Runner runner.Runner

+ RunnerTarget string

+ ScanAIAdvisor func(context.Context, workspacescan.ScanFacts, workspacescan.WorkspaceProfile) workspacescan.WorkspaceProfile

+ Secrets secretstore.Store

+ Store store.Store

+ SubscriptionToken subscription.Provider

+ TrustDomain string

+ UIDir string

+ type ImageBuilder interface

+ BuildDevcontainer func(ctx context.Context, repoURL, ref, outputTag string) (imageRef string, err error)

+ BuildFromDevcontainerFiles func(ctx context.Context, files map[string]string, outputTag string) (imageRef string, err error)

+ type MintBroker interface

+ MintForGrant func(ctx context.Context, caller *identity.Claims, grantID uuid.UUID) (broker.Minted, error)

+ RevokeRun func(ctx context.Context, runID uuid.UUID) error

+ type RecordTaskResult struct

+ Caveats []string

+ Confined bool

+ EgressPromoted bool

+ FailureHint string

+ FinishedAt *time.Time

+ KernelSensorBlind bool

+ LLMMode string

+ Label string

+ Mode string

+ Model string

+ Observations *recordmode.Observations

+ RunID uuid.UUID

+ SecretNamesMinted []string

+ StartedAt time.Time

+ Status string

+ Steps []workspacescan.VerifyStepResult

+ type Server struct

+ func New(cfg Config) *Server

+ func (s *Server) Handler() http.Handler

+ func (s *Server) ReconcileOnBoot(ctx context.Context) error

+ type SetupAgeKey struct

+ Durable bool

+ type SetupAuth struct

+ LocalLoopback bool

+ Mode string

+ type SetupBedrock struct

+ CredsPresent bool

+ Model string

+ Region string

+ type SetupCheck struct

+ Detail string

+ Fix string

+ ID string

+ Label string

+ Platform string

+ Status string

+ type SetupComposer struct

+ Backends []ComposerBackendReadiness

+ Default string

+ Enabled bool

+ type SetupDeployment struct

+ HostLike bool

+ type SetupFix struct

+ Action string

+ SecretName string

+ WorkspaceID string

+ type SetupItem struct

+ Detail string

+ Fix *SetupFix

+ ID string

+ Kind string

+ Label string

+ RequiredBy string

+ Residency string

+ Status string

+ type SetupPlatform struct

+ KVM bool

+ OS string

+ WSL bool

+ type SetupProvider struct

+ AuthMode string

+ Installed bool

+ LoggedIn bool

+ LoginDetectedVia string

+ Tool string

+ type SetupRunner struct

+ ConfinementClasses []string

+ ConfinementSubstrates map[string]string

+ Driver string

+ type SetupSecrets struct

+ GitHubApp bool

+ Present []string

+ type SetupStatus struct

+ AgeKey SetupAgeKey

+ Auth SetupAuth

+ Bedrock SetupBedrock

+ Checks []SetupCheck

+ Composer SetupComposer

+ Deployment SetupDeployment

+ HasRuns bool

+ HostProxy setup.HostProxyDetection

+ Platform SetupPlatform

+ Providers []SetupProvider

+ Ready bool

+ RestartReason string

+ RestartRequired bool

+ Runner SetupRunner

+ Secrets SetupSecrets