cloud

type APIError struct {
	StatusCode int    `json:"-"`
	Code       string `json:"code"`
	Message    string `json:"message"`
}

type Backoff struct {
	Min time.Duration
	Max time.Duration
	// contains filtered or unexported fields
}

type CEKWrap struct {
	EphemeralPubKey string `json:"ephemeral_pubkey"` // base64 SPKI DER, P-256
	Nonce           string `json:"nonce"`            // base64, 12 bytes
	CT              string `json:"ct"`               // base64 ciphertext
}

type CapabilityModel struct {
	Provider string `json:"provider"`
	ID       string `json:"id"`
	Label    string `json:"label"`
}

type CapabilityProject struct {
	Path string `json:"path"`
	Name string `json:"name"`
}

type CapabilitySlashCommand struct {
	Slash       string `json:"slash"`
	Description string `json:"description"`
	Type        string `json:"type"` // "skill" | "flow"
}

type Client struct {
	BaseURL    string
	HTTPClient *http.Client
}

type CommandAck struct {
	Status string `json:"status"` // "ok" | "error"
	Result any    `json:"result,omitempty"`
}

type Connector struct {
	// contains filtered or unexported fields
}

type ConnectorConfig struct {
	CloudURL    string       // orchestrator base URL (config.cloud.url, else credentials)
	Credentials *Credentials // device identity from ~/.jcode/cloud.json
	LocalBase   string       // local web control plane, e.g. http://127.0.0.1:8080
	LocalToken  string       // web auth token (empty when the server doesn't require auth)
	Version     string       // jcode version reported at register

	// Optional knobs (tests inject these; zero values use defaults).
	HTTPClient        *http.Client
	Hostname          string
	HeartbeatInterval time.Duration
	PollWait          time.Duration
	IndexPollInterval time.Duration
	BatchWindow       time.Duration
	BatchMax          int
	Backoff           *Backoff
	// IndexPathFn / ListSessionsFn default to the real session index; tests
	// override them to point at a temp dir.
	IndexPathFn    func() (string, error)
	ListSessionsFn func() (map[string][]session.SessionMeta, error)

	// InboxDir is the root under which chat attachments land
	// (<InboxDir>/<session_id>/<filename>). Empty → ~/.jcode/inbox.
	InboxDir string
	// ModelCapabilitiesFn overrides the model/effort facet of the capabilities
	// mirror (default: config + model registry); tests inject a fixed list.
	ModelCapabilitiesFn func() ([]CapabilityModel, []string, error)
	// SlashCommandsFn overrides the slash-commands facet of the capabilities
	// mirror (default: GET /api/slash-commands on the local control plane);
	// tests inject a fixed list.
	SlashCommandsFn func() ([]CapabilitySlashCommand, error)

	// Cipher, when non-nil, seals uplink payloads (events/ephemeral payload,
	// sessions meta, ack result) and opens downlink command payloads. Nil
	// means plaintext uplink (pre-CEK grey period; see crypto.go). Run lazily
	// initializes it from ~/.jcode/cloud.json when left nil; tests inject one
	// explicitly (or set CipherDisabled to force the plaintext path).
	Cipher         *EnvelopeCipher
	CipherDisabled bool

	// SyncStore is the M19 per-session cloud-sync gate (~/.jcode/cloud-sessions.json):
	// only sessions with an explicit opt-in are upserted / have their events
	// uploaded. Nil lazily loads the default path on first use; a load failure
	// fails CLOSED (nothing syncs). Tests inject a temp-file store.
	SyncStore *SyncStore
}

type Credentials struct {
	CloudURL    string `json:"cloud_url"`
	DeviceID    string `json:"device_id"`
	DeviceToken string `json:"device_token"`
	DeviceName  string `json:"device_name"`
	// PublicKey / PrivateKey are the X25519 device identity key pair, base64
	// (standard encoding) encoded raw keys. The public key is registered with
	// the orchestrator for later E2E key exchange (CEK wrapping).
	PublicKey  string `json:"public_key"`
	PrivateKey string `json:"private_key"`
	// KeyGen is the current CEK generation this device holds.
	KeyGen int `json:"key_gen"`
	// CEK is the account-level AES-256-GCM content encryption key, base64.
	// Empty means "not initialized yet" (pre-M5 credentials file); it is
	// lazily generated on first need (see crypto.go EnsureCEK).
	CEK string `json:"cek,omitempty"`
	// Fingerprint is the stable machine fingerprint SOURCE (M16): the OS
	// machine id, or a "fallback:<hostname>:<random>" string generated once.
	// It never leaves the machine — only its sha256 (FingerprintHash) is sent
	// to the orchestrator for login dedup. Empty on pre-M16 files; resolved
	// on the fly then (see ResolveFingerprintSource).
	Fingerprint string `json:"fingerprint,omitempty"`
}

type DeviceCapabilities struct {
	Projects      []CapabilityProject      `json:"projects"`
	Models        []CapabilityModel        `json:"models"`
	CurrentModel  *CapabilityModel         `json:"current_model,omitempty"`
	Efforts       []string                 `json:"efforts"`
	SlashCommands []CapabilitySlashCommand `json:"slash_commands"`
}

type DeviceCodeResponse struct {
	DeviceCode      string `json:"device_code"`
	UserCode        string `json:"user_code"`
	VerificationURI string `json:"verification_uri"`
	ExpiresIn       int    `json:"expires_in"` // seconds
	Interval        int    `json:"interval"`   // seconds
}

type DeviceCommand struct {
	ID        string          `json:"id"`
	Kind      string          `json:"kind"` // chat.send | chat.stop | approval.respond | …
	SessionID string          `json:"session_id,omitempty"`
	Payload   json.RawMessage `json:"payload,omitempty"`
}

type DeviceTokenResponse struct {
	AccessToken string `json:"access_token"`
	TokenType   string `json:"token_type"`
	DeviceID    string `json:"device_id"`
	// Deduped is true when the orchestrator recognized the machine fingerprint
	// and reused the existing devices row (M16) instead of minting a new one.
	Deduped bool `json:"deduped"`
}

type Envelope struct {
	Enc    string `json:"enc"`
	KeyGen int    `json:"key_gen"`
	Nonce  string `json:"nonce"` // base64, 12 bytes
	CT     string `json:"ct"`    // base64 ciphertext
}

type EnvelopeCipher struct {
	// contains filtered or unexported fields
}

type EventUpload struct {
	Seq     int64           `json:"seq"`
	Kind    string          `json:"kind"`
	Payload json.RawMessage `json:"payload"`
}

type EventsUploadResponse struct {
	Accepted   []int64 `json:"accepted"`
	Conflicted []int64 `json:"conflicted"`
	MaxSeq     int64   `json:"max_seq"`
}

type PairedInfo struct {
	PairingID string    `json:"pairing_id"`
	Label     string    `json:"label"`
	Auto      bool      `json:"auto"`
	PairedAt  time.Time `json:"paired_at"`
}

type Pairing struct {
	ID        string `json:"id"`
	Label     string `json:"label"`
	PubKey    string `json:"pubkey"` // requester P-256 public key, base64 SPKI DER
	Status    string `json:"status"` // "pending" | "approved" | "denied"
	CreatedAt string `json:"created_at"`
}

type PendingPairing struct {
	PairingID  string    `json:"pairing_id"`
	Label      string    `json:"label"`
	ReceivedAt time.Time `json:"received_at"`
	PubKey     string    `json:"-"`
}

type RegisterDeviceRequest struct {
	Name         string `json:"name"`
	Hostname     string `json:"hostname"`
	JcodeVersion string `json:"jcode_version"`
	PubKey       string `json:"pubkey"` // X25519 public key, base64
	// Platform is how this jcode instance was launched ("desktop" | "cli");
	// see detectPlatform in connector.go.
	Platform string `json:"platform,omitempty"`
	// E2EE reports the connector's ACTUAL encryption state (M13): true only
	// when the CEK cipher is active and cloud.e2ee did not disable it. The
	// orchestrator gates plaintext downlink on it (docs/17 §6.7).
	E2EE bool `json:"e2ee,omitempty"`
	// Fingerprint is the sha256 of the machine fingerprint (M16): it backfills
	// rows minted without one so a later login dedups onto this device.
	Fingerprint string `json:"fingerprint,omitempty"`
}

type SessionSeqInfo struct {
	SessionID string `json:"session_id"`
	LastSeq   int64  `json:"last_seq"`
}

type SessionUpsert struct {
	SessionID string          `json:"session_id"`
	Status    string          `json:"status"` // "running" | "idle"
	Meta      json.RawMessage `json:"meta"`   // SessionMeta JSON, as-is
}

type SessionsUpsertResponse struct {
	Sessions []SessionSeqInfo `json:"sessions"`
}

type Status struct {
	LoggedIn    bool   `json:"logged_in"`
	AutoConnect bool   `json:"auto_connect"`
	State       string `json:"state"` // "offline" | "connecting" | "online" | "error"
	DeviceName  string `json:"device_name"`
	CloudURL    string `json:"cloud_url"`
	Error       string `json:"error,omitempty"`
}

type Supervisor struct {

	// Version is the jcode version reported at device register. It lives in
	// the command package (import cycle), so callers set it before Start.
	Version string
	// contains filtered or unexported fields
}

type SyncStore struct {
	// contains filtered or unexported fields
}