agent

type ActiveRunTracker struct {
	// contains filtered or unexported fields
}

type Annotation struct {
	ID        string    `json:"id"`
	Type      string    `json:"type"` // "comment" | "delete" | "modify"
	Content   string    `json:"content"`
	Section   string    `json:"section,omitempty"`
	CreatedBy string    `json:"created_by"`
	CreatedAt time.Time `json:"created_at"`
}

type ApprovalLevel struct {
	Role              string `yaml:"role"`
	TimeoutMinutes    int    `yaml:"timeout_minutes,omitempty"`
	EscalateOnTimeout bool   `yaml:"escalate_on_timeout,omitempty"`
}

type Attachment struct {
	Filename string
	Content  []byte
}

type CircuitBreaker struct {
	// contains filtered or unexported fields
}

type CircuitState int

type ExecutionPlan struct {
	ID               string       `json:"id"`
	CorrelationID    string       `json:"correlation_id"`
	SessionID        string       `json:"session_id,omitempty"`
	TenantID         string       `json:"tenant_id"`
	AgentID          string       `json:"agent_id"`
	Status           PlanStatus   `json:"status"`
	SelectedModel    string       `json:"selected_model"`
	DataTier         int          `json:"data_tier"`
	ToolsAvailable   []string     `json:"tools_available"`
	CostEstimate     float64      `json:"cost_estimate"`
	PolicyDecision   string       `json:"policy_decision"`
	SystemPromptHash string       `json:"system_prompt_hash"`
	InputHash        string       `json:"input_hash"`
	Prompt           string       `json:"prompt,omitempty"`      // canonical prompt to execute after approval
	PolicyPath       string       `json:"policy_path,omitempty"` // resolved policy path used when plan was created
	ReviewedBy       string       `json:"reviewed_by,omitempty"`
	ReviewedAt       *time.Time   `json:"reviewed_at,omitempty"`
	ReviewReason     string       `json:"review_reason,omitempty"`
	Annotations      []Annotation `json:"annotations,omitempty"`
	ProposedSteps    []string     `json:"proposed_steps,omitempty"` // LLM-proposed task steps for Art. 11/13 transparency
	CreatedAt        time.Time    `json:"created_at"`
	TimeoutAt        time.Time    `json:"timeout_at"`
}

type FailureReason string

type Hook interface {
	Point() HookPoint
	Execute(ctx context.Context, data *HookData) (*HookResult, error)
}

type HookConfig struct {
	Type string `yaml:"type"` // "webhook"
	URL  string `yaml:"url"`
	On   string `yaml:"on"` // "fired" | "allowed" | "denied" | "all"
}

type HookData struct {
	TenantID      string          `json:"tenant_id"`
	AgentID       string          `json:"agent_id"`
	CorrelationID string          `json:"correlation_id"`
	Stage         HookPoint       `json:"stage"`
	Payload       json.RawMessage `json:"payload"`
}

type HookPoint string

type HookRegistry struct {
	// contains filtered or unexported fields
}

type HookResult struct {
	Continue bool            `json:"continue"`
	Modified json.RawMessage `json:"modified,omitempty"`
}

type IdempotencyKey struct {
	AgentID       string
	CorrelationID string
	ToolName      string
	ArgumentHash  string // sha256 of canonical JSON args
}

type IdempotencyResult struct {
	Found  bool
	Status string // "pending" or "completed"
	Result []byte // cached result (only when Status == "completed")
}

type IdempotencyStore struct {
	// contains filtered or unexported fields
}

type IntentClassDefinition struct {
	Class       string   `json:"class"`
	DefaultRisk string   `json:"default_risk"`
	Description string   `json:"description"`
	Examples    []string `json:"examples"`
}

type IntentClassification struct {
	ToolName       string `json:"tool_name"`
	OperationClass string `json:"operation_class"`
	RiskLevel      string `json:"risk_level"`
	IsBulk         bool   `json:"is_bulk"`
	RequiresReview bool   `json:"requires_review"`
	Reason         string `json:"reason"`
}

type OverrideStore struct {
	// contains filtered or unexported fields
}

type PlanReviewConfig struct {
	RequireForTools bool            `yaml:"require_for_tools"`
	RequireForTier  string          `yaml:"require_for_tier"`
	CostThreshold   float64         `yaml:"cost_threshold"`
	TimeoutMinutes  int             `yaml:"timeout_minutes"`
	NotifyWebhook   string          `yaml:"notify_webhook"`
	VolumeThreshold int             `yaml:"volume_threshold,omitempty"`
	Mode            string          `yaml:"mode,omitempty"` // sequential | any
	ApprovalChain   []ApprovalLevel `yaml:"approval_chain,omitempty"`
}

type PlanReviewStore struct {
	// contains filtered or unexported fields
}

type PlanStats struct {
	Pending          int `json:"pending"`
	Approved         int `json:"approved"`
	Rejected         int `json:"rejected"`
	Modified         int `json:"modified"`
	Dispatched       int `json:"dispatched"`
	DispatchFailures int `json:"dispatch_failures"`
}

type PlanStatus string

type ReviewHistoryEntry struct {
	PlanID     string     `json:"plan_id"`
	TenantID   string     `json:"tenant_id"`
	AgentID    string     `json:"agent_id"`
	Status     PlanStatus `json:"status"`
	ReviewedBy string     `json:"reviewed_by"`
	ReviewedAt *time.Time `json:"reviewed_at"`
}

type RunRegistry struct {
	// contains filtered or unexported fields
}

type RunRequest struct {
	TenantID         string
	AgentName        string
	Prompt           string
	AgentReasoning   string // Optional caller-provided reasoning (e.g. X-Talon-Reasoning)
	AgentVerified    bool   // True when per-agent signature has been verified by API layer
	SessionID        string // Optional session to join; empty means create a new one
	Attachments      []Attachment
	InvocationType   string // "manual", "scheduled", "webhook:name"
	DryRun           bool
	PolicyPath       string           // explicit path to .talon.yaml
	ToolInvocations  []ToolInvocation // optional; when set, each is policy-checked and executed, and names recorded in evidence
	SkipMemory       bool             // if true, do not write memory observation for this run (e.g. --no-memory)
	SovereigntyMode  string           // optional: eu_strict | eu_preferred | global; when set, router uses OPA routing and records RouteDecision for evidence
	BypassPlanReview bool             // internal: when true, skip plan-review gate (used by approved-plan dispatcher)
}

type RunResponse struct {
	Response     string
	EvidenceID   string
	SessionID    string
	Cost         float64
	DurationMS   int64
	PolicyAllow  bool
	DenyReason   string
	PlanPending  string   // set when execution is gated for human review (EU AI Act Art. 14)
	ModelUsed    string   // LLM model used for generation
	ToolsCalled  []string // MCP tools invoked
	InputTokens  int      // prompt tokens (for OpenAI-compatible API responses)
	OutputTokens int      // completion tokens (for OpenAI-compatible API responses)
	// Dry-run / CLI feedback: PII and injection scan results (set even when DryRun is true).
	PIIDetected                  []string // entity names detected in input
	InputTier                    int      // classification tier of input (0–2)
	AttachmentInjectionsDetected int      // number of injection patterns found in attachments
	AttachmentBlocked            bool     // true if any attachment was blocked due to injection
}

type RunState struct {
	CorrelationID string        `json:"correlation_id"`
	TenantID      string        `json:"tenant_id"`
	AgentID       string        `json:"agent_id"`
	SessionID     string        `json:"session_id,omitempty"`
	Status        RunStatus     `json:"status"`
	FailureReason FailureReason `json:"failure_reason,omitempty"`
	StartedAt     time.Time     `json:"started_at"`
	UpdatedAt     time.Time     `json:"updated_at"`
	StepCount     int           `json:"step_count"`
	CostAccrued   float64       `json:"cost_accrued"`
	ToolCalls     int           `json:"tool_calls"`
	DurationMS    int64         `json:"duration_ms"`
	// contains filtered or unexported fields
}

type RunStatus string

type Runner struct {
	// contains filtered or unexported fields
}

type RunnerCacheConfig struct {
	Enabled             bool
	DefaultTTL          int
	SimilarityThreshold float64
	MaxEntriesPerTenant int
}

type RunnerConfig struct {
	PolicyDir         string // base directory for policy path resolution
	DefaultPolicyPath string // path to default .talon.yaml (e.g. agent.talon.yaml); used by RunFromTrigger when request has no PolicyPath
	Classifier        *classifier.Scanner
	AttScanner        *attachment.Scanner
	Extractor         *attachment.Extractor
	Router            *llm.Router
	Secrets           *secrets.SecretStore
	Evidence          *evidence.Store
	PlanReview        *PlanReviewStore
	ToolRegistry      *tools.ToolRegistry
	ActiveRunTracker  *ActiveRunTracker     // optional; when set, rate-limit policy receives concurrent_executions
	RunRegistry       *RunRegistry          // optional; when set, tracks run lifecycle states for observability and control
	Overrides         *OverrideStore        // optional; when set, runtime overrides (lockdown, tool disable, cost caps) are checked
	ToolApprovals     *ToolApprovalStore    // optional; when set, tools requiring approval pause for human decision
	CircuitBreaker    *CircuitBreaker       // optional; when set, suspends agents after repeated policy denials
	ToolFailures      *ToolFailureTracker   // optional; tracks tool execution failures separately from circuit breaker
	Hooks             *HookRegistry         // optional; nil = no hooks
	Memory            *memory.Store         // optional; nil = memory disabled
	Pricing           *pricing.PricingTable // optional; when set, evidence gets pre_request_estimate and post_request_cost
	// Semantic cache (all optional; when nil or CacheConfig.Enabled false, cache is skipped)
	CacheStore    *cache.Store
	CacheEmbedder *cache.BM25
	CacheScrubber *cache.PIIScrubber
	CachePolicy   *cache.Evaluator
	CacheConfig   *RunnerCacheConfig
	SessionStore  *talonsession.Store
	PromptStore   *talonprompt.Store
	Idempotency   *IdempotencyStore // optional; deduplicates tool calls by (agent, correlation, tool, args_hash)
}

type TenantOverride struct {
	Lockdown      bool      `json:"lockdown"`                 // When true, all new runs are rejected
	LockdownAt    time.Time `json:"lockdown_at,omitempty"`    // When lockdown was activated
	LockdownBy    string    `json:"lockdown_by,omitempty"`    // Admin identifier who set lockdown
	DisabledTools []string  `json:"disabled_tools,omitempty"` // Tools blocked by override
	DisableReason string    `json:"disable_reason,omitempty"` // Incident ID or explanation

	MaxCostPerRun *float64 `json:"max_cost_per_run,omitempty"` // Tighter cost cap (overrides YAML)
	MaxToolCalls  *int     `json:"max_tool_calls,omitempty"`   // Tighter tool call cap
}

type ToolApprovalRequest struct {
	ID            string             `json:"id"`
	CorrelationID string             `json:"correlation_id"`
	TenantID      string             `json:"tenant_id"`
	AgentID       string             `json:"agent_id"`
	ToolName      string             `json:"tool_name"`
	ToolCallID    string             `json:"tool_call_id"`
	Arguments     map[string]any     `json:"arguments"`
	Status        ToolApprovalStatus `json:"status"`
	CreatedAt     time.Time          `json:"created_at"`
	ResolvedAt    time.Time          `json:"resolved_at,omitempty"`
	ResolvedBy    string             `json:"resolved_by,omitempty"`
	Reason        string             `json:"reason,omitempty"`
	// contains filtered or unexported fields
}

type ToolApprovalStatus string

type ToolApprovalStore struct {
	// contains filtered or unexported fields
}

type ToolCallResult struct {
	Content        string
	Executed       bool
	ToolName       string
	PIIFindings    []ToolPIIFinding
	ExecutionError string // non-empty when tool.Execute() returned an error (distinct from policy denial)
}

type ToolFailureTracker struct {
	// contains filtered or unexported fields
}

type ToolInvocation struct {
	Name   string          `json:"name"`
	Params json.RawMessage `json:"params"`
}

type ToolPIIFinding struct {
	Field     string   `json:"field"`
	Action    string   `json:"action"`
	PIITypes  []string `json:"pii_types"`
	PIICount  int      `json:"pii_count"`
	Direction string   `json:"direction"` // "argument" or "result"
}

type WebhookHook struct {
	// contains filtered or unexported fields
}