provadapter

type ActivationResult struct {
	DefaultActorID provenance.ActorID
}

type ApplyRequest struct {
	// Mutation is the portable idempotency handle for this logical operation; it
	// converts to the Provenance OperationID the §9.4 replay short-circuit keys on,
	// so a stable Mutation across retries is a stable OperationID.
	Mutation portable.MutationRef
	// Actor is the already-resolved committing actor of the whole operation (§2.1):
	// the pasture-system default from activation, or a historical actor from
	// HistoricalActorID. It is validated with ValidateActorID before the store call.
	Actor provenance.ActorID
	// Authority is the JournalID of the bootstrap/assignment authority this
	// operation executes under; nil marks a genesis operation whose sole effect is
	// one bootstrap authority (§4.6, §10 rule 6).
	Authority *provenance.JournalID
	// Command is the #43-produced canonical command digest; the facade maps it
	// byte-preservingly to the Provenance CommandDigest with no re-canonicalization
	// and no caller digest flag (digest.go).
	Command ir.CanonicalCommandDigest
	// RecordedAt is the caller-supplied wall-clock stamp copied onto the operation
	// anchor for audit/display only (§12); it never establishes causality or order.
	RecordedAt int64
	// Effects is the caller-validated, #43-produced operation body folded in slice
	// order (§9.3.1). The facade neither defines nor interprets it.
	Effects []provenance.Effect
}

type BaselineMigrationOutcome struct {
	Result          provenance.MigrationResult
	OrderedRowIDs   []provenance.TaskID
	SourceUnchanged bool
}

type BaselineMigrationRequest struct {
	// System is the migration's committing actor (the pasture-system actor, §2.1),
	// validated with ValidateActorID before the batch runs.
	System provenance.ActorID
	// BootstrapAuthority is the genesis-established bootstrap authority JournalID the
	// per-task baseline anchors execute under (§4.6, §13).
	BootstrapAuthority provenance.JournalID
	// Owners resolves a legacy owner string to a registered ActorID. A non-empty
	// legacy owner absent from this map fails the WHOLE batch (§13 item 4).
	Owners map[string]provenance.ActorID
	// Rows are the legacy task rows to migrate, in any input order.
	Rows []provenance.LegacyTaskRow
}

type Journal struct {
	// contains filtered or unexported fields
}

type LegacyAuditEvent struct {
	// LegacyRowID is the row's identity within its source table; it is the
	// total-order tiebreak in the deterministic listing order.
	LegacyRowID string
	// SourceTable is the source-identity qualifier the row was extracted from, kept
	// so #43 can attribute a raw row to its origin.
	SourceTable string
	// RecordedAt is the row's original recorded wall-clock time; it is the primary
	// key of the deterministic (RecordedAt, LegacyRowID) listing order.
	RecordedAt time.Time
	// RawActor is the legacy actor text exactly as stored — uninterpreted and
	// unresolved. An empty string is preserved as an empty string.
	RawActor string
	// RawContexts are the original context strings in source order, preserved
	// verbatim (never deduplicated or reordered).
	RawContexts []string
	// Payload is the opaque source payload, byte-preserved. It is copied defensively
	// on extraction so the returned event cannot alias the source's buffer.
	Payload json.RawMessage
}

type LegacyAuditSource interface {
	// ExtractLegacyAuditEvents returns every non-task legacy audit row read-only, in
	// any order. It must not mutate the source. An extraction failure is returned as
	// an error, which ListLegacyAuditEvents surfaces verbatim.
	ExtractLegacyAuditEvents() ([]LegacyAuditEvent, error)
}

type Outcome struct {
	Kind      OutcomeKind
	Committed provenance.CommittedResult
	Conflict  *provenance.OperationConflict
}

type OutcomeKind int

type SourceHasher func() ([]byte, error)