data

type AccessRequest struct {
	Action    string
	Target    TargetKey
	Operation *Operation
	Receipt   *PreparationReceipt
	Artifact  *ArtifactRef
	Explore   *ExploreAccess
}

type ActivateRequest struct{ Input }

type Activation struct {
	ReceiptID  string `json:"receipt_id,omitempty"`
	Generation uint64 `json:"generation"`
	Ready      bool   `json:"ready"`
}

type ActiveState struct {
	Target             TargetKey  `json:"target"`
	Activation         Activation `json:"activation"`
	Transitioning      bool       `json:"transitioning"`
	RecoveryRequired   bool       `json:"recovery_required"`
	PendingOperationID string     `json:"pending_operation_id,omitempty"`
	PendingReceiptID   string     `json:"pending_receipt_id,omitempty"`
}

type ApplicationPreviewAdapter interface {
	PreviewGuarantees() PreviewGuarantees
	PreviewReadiness(context.Context, Principal, ExploreRead) error
	OpenPreview(context.Context, PreviewRecord, int) (PreviewRecord, error)
	LookupPreview(context.Context, string) (PreviewRecord, error)
	InspectPreview(context.Context, PreviewRecord) error
	EndPreview(context.Context, string, string) error
	PrunePreviews(context.Context, int) error
	InsightAuthorizationRevision
}

type ApplicationPreviewConfig struct {
	Adapter                      ApplicationPreviewAdapter
	Enabled                      bool
	ApplicationID, EnvironmentID string
	Lifetime                     time.Duration
	Surfaces                     []PreviewSurface
	// Now is a host clock, shared with its durable adapter.
	Now func() time.Time
}

type ApplicationPreviewSession struct {
	SessionID string           `json:"session_id"`
	Selection ExploreSelection `json:"selection"`
	SurfaceID string           `json:"surface_id"`
	State     string           `json:"state"`
	ExpiresAt time.Time        `json:"expires_at"`
	LaunchURL string           `json:"launch_url,omitempty"`
	ReturnURL string           `json:"return_url,omitempty"`
	ReadOnly  bool             `json:"read_only"`
	// contains filtered or unexported fields
}

type ApplicationPreviewSessionQuery struct {
	SessionID string `json:"session_id"`
}

type ArtifactProvider interface {
	LookupArtifact(context.Context, Principal, ArtifactRef) (any, error)
}

type ArtifactRef struct {
	Provider    string    `json:"provider"`
	ID          string    `json:"id"`
	Target      TargetKey `json:"target"`
	Generation  uint64    `json:"generation"`
	RequesterID string    `json:"requester_id"`
	ExpiresAt   time.Time `json:"expires_at"`
}

type CancelRequest struct{ Input }

type Capability struct {
	Supported bool   `json:"supported"`
	Permitted bool   `json:"permitted"`
	Reason    string `json:"reason,omitempty"`
}

type CatalogProvider interface {
	Catalog(context.Context, Principal, TargetKey, int) ([]DatasetRef, error)
}

type Check struct {
	ID          string `json:"id"`
	Label       string `json:"label,omitempty"`
	Status      string `json:"status"`
	Expected    string `json:"expected,omitempty"`
	Actual      string `json:"actual,omitempty"`
	EvidenceRef string `json:"evidence_ref,omitempty"`
}

type Claim struct {
	Operation Operation
	Replay    bool
}

type CloseApplicationPreviewCommand struct {
	SessionID string `json:"session_id"`
}

type Command[T Message] struct{ Service *Service }

type CompareSelectionsQuery struct {
	Left        ExploreSelection `json:"left"`
	Right       ExploreSelection `json:"right"`
	MetricSetID string           `json:"metric_set_id"`
	InsightWindow
}

type Component struct {
	Path   string `json:"path"`
	Digest string `json:"digest"`
}

type Coverage struct {
	Status string       `json:"status"`
	Sample SamplePeriod `json:"sample"`
}

type DatasetRef struct {
	Provider string `json:"provider"`
	ID       string `json:"id"`
	Version  string `json:"version"`
	Digest   string `json:"digest"`
}

type Descriptor struct {
	Dataset               DatasetRef          `json:"dataset"`
	Components            []Component         `json:"components"`
	SourceContractHash    string              `json:"source_contract_hash"`
	SourceContractVersion string              `json:"source_contract_version"`
	PolicyHash            string              `json:"policy_hash"`
	AudienceHashes        map[string]string   `json:"audience_hashes"`
	Attribution           []string            `json:"attribution"`
	Timezone              string              `json:"timezone"`
	Samples               []SamplePeriod      `json:"samples"`
	GeneratorVersion      string              `json:"generator_version,omitempty"`
	Seed                  string              `json:"seed,omitempty"`
	GeneratorOptions      map[string]string   `json:"generator_options,omitempty"`
	Synthetic             bool                `json:"synthetic"`
	Counts                map[string]uint64   `json:"counts"`
	Prerequisites         []string            `json:"prerequisites"`
	Scenarios             []ScenarioRef       `json:"scenarios"`
	Capabilities          map[Kind]Capability `json:"capabilities"`
	// Presentation is optional and excluded from the composite digest.
	Presentation *DescriptorPresentation `json:"presentation,omitempty"`
}

type DescriptorPresentation struct {
	Title   string `json:"title,omitempty"`
	Summary string `json:"summary,omitempty"`
	// Scenarios names scenarios by ID; the versions of one scenario share it.
	Scenarios map[string]ScenarioPresentation `json:"scenarios,omitempty"`
}

type ExplorationProvider interface {
	AuthorizeExplore(context.Context, Principal, ExploreAccess) error
	ExploreMetadata(context.Context, Principal, ExploreRead) (ExploreMetadata, error)
	ExploreSamples(context.Context, Principal, ExploreRead, ExploreSamplesQuery) (ExploreSamples, error)
	ExploreRelated(context.Context, Principal, ExploreRead, ExploreRelatedQuery) (ExploreSamples, error)
}

type ExploreAccess struct {
	Selection      ExploreSelection
	MetricSetID    string
	MetricIDs      []string
	Coverage       bool
	EntityID       string
	Fields         []string
	RecordKeys     []string
	SurfaceIDs     []string
	RelationshipID string
	SourceEntityID string
	RecordKey      string
}

type ExploreCell struct {
	State string `json:"state"`
	Value any    `json:"value"`
}

type ExploreCount struct {
	EntityID string  `json:"entity_id"`
	Scope    string  `json:"scope"`
	Total    *uint64 `json:"total"`
}

type ExploreEffect struct {
	Phase       string `json:"phase"`
	Description string `json:"description"`
}

type ExploreEntity struct {
	ID            string                `json:"id"`
	Label         string                `json:"label"`
	Description   string                `json:"description,omitempty"`
	Fields        []ExploreField        `json:"fields"`
	Relationships []ExploreRelationship `json:"relationships,omitempty"`
}

type ExploreEnvelope struct {
	Selection            ExploreSelection `json:"selection"`
	PresentationRevision string           `json:"presentation_revision"`
	ObservedAt           time.Time        `json:"observed_at"`
	Provenance           string           `json:"provenance"`
	Completeness         string           `json:"completeness"`
	State                string           `json:"state"`
	Reason               string           `json:"reason,omitempty"`
}

type ExploreField struct {
	ID          string `json:"id"`
	Label       string `json:"label"`
	Description string `json:"description,omitempty"`
	Type        string `json:"type"`
	Unit        string `json:"unit,omitempty"`
}

type ExploreInsights struct {
	ExploreEnvelope
	MetricSetID      string            `json:"metric_set_id"`
	EquivalentSchema string            `json:"equivalent_schema,omitempty"`
	Metrics          []InsightMetric   `json:"metrics"`
	Coverage         []InsightCoverage `json:"coverage"`
	Work             InsightWork       `json:"work"`
	// contains filtered or unexported fields
}

type ExploreInsightsQuery struct {
	Selection   ExploreSelection `json:"selection"`
	MetricSetID string           `json:"metric_set_id"`
	InsightWindow
}

type ExploreMetadata struct {
	ExploreEnvelope
	Title             string            `json:"title"`
	Summary           string            `json:"summary"`
	Origin            string            `json:"origin"`
	Entities          []ExploreEntity   `json:"entities"`
	Scenarios         []ExploreScenario `json:"scenarios"`
	Inventory         []ExploreCount    `json:"inventory"`
	Period            *ExplorePeriod    `json:"period"`
	Prerequisites     []string          `json:"prerequisites"`
	Attribution       []string          `json:"attribution"`
	Usages            []ExploreUsage    `json:"usages"`
	UsageCompleteness string            `json:"usage_completeness"`
}

type ExploreMetadataQuery struct {
	Selection ExploreSelection `json:"selection"`
}

type ExplorePeriod struct {
	Start    string `json:"start"`
	End      string `json:"end"`
	Timezone string `json:"timezone"`
}

type ExploreRead struct {
	Selection ExploreSelection
	Target    TargetKey
	Receipt   *PreparationReceipt
}

type ExploreRelatedQuery struct {
	ExploreSamplesQuery
	RecordKey      string `json:"record_key"`
	RelationshipID string `json:"relationship_id"`
}

type ExploreRelationship struct {
	ID       string `json:"id"`
	Label    string `json:"label"`
	EntityID string `json:"entity_id"`
}

type ExploreRow struct {
	RecordKey string                 `json:"record_key"`
	Cells     map[string]ExploreCell `json:"cells"`
}

type ExploreSamples struct {
	ExploreEnvelope
	EntityID       string         `json:"entity_id"`
	Columns        []ExploreField `json:"columns"`
	Rows           []ExploreRow   `json:"rows"`
	Total          *uint64        `json:"total"`
	NextCursor     *string        `json:"next_cursor"`
	SamplingMethod string         `json:"sampling_method"`
}

type ExploreSamplesQuery struct {
	Selection ExploreSelection `json:"selection"`
	EntityID  string           `json:"entity_id"`
	Cursor    string           `json:"cursor,omitempty"`
	Limit     int              `json:"limit,omitempty"`
}

type ExploreScenario struct {
	Scenario         ScenarioRef `json:"scenario"`
	Title            string      `json:"title"`
	Summary          string      `json:"summary"`
	ExpectedOutcomes []string    `json:"expected_outcomes"`
}

type ExploreSelection struct {
	Dataset         DatasetRef  `json:"dataset"`
	Scenario        ScenarioRef `json:"scenario"`
	TargetID        string      `json:"target_id"`
	Context         string      `json:"context"`
	ReceiptID       string      `json:"receipt_id,omitempty"`
	ContentRevision uint64      `json:"content_revision,omitempty"`
	Generation      *uint64     `json:"generation,omitempty"`
}

type ExploreSurface struct {
	Resolve func(context.Context, Principal) (string, error)
}

type ExploreUsage struct {
	SurfaceID string          `json:"surface_id"`
	Kind      string          `json:"kind"`
	Label     string          `json:"label"`
	Effects   []ExploreEffect `json:"effects"`
	Href      string          `json:"href,omitempty"`
}

type Failure struct {
	Code   string            `json:"code"`
	Fields map[string]string `json:"fields,omitempty"`
}

type GenerateRequest struct{ Input }

type Generator interface {
	Generate(context.Context, Work) (DatasetRef, error)
}

type Input struct {
	Dataset            DatasetRef  `json:"dataset"`
	Scenario           ScenarioRef `json:"scenario"`
	TargetID           string      `json:"target_id"`
	IdempotencyKey     string      `json:"idempotency_key"`
	ReceiptID          string      `json:"receipt_id,omitempty"`
	ExpectedGeneration *uint64     `json:"expected_generation,omitempty"`
	OperationID        string      `json:"operation_id,omitempty"`
	DryRun             bool        `json:"dry_run"`
	BatchLimit         int         `json:"batch_limit"`
	PageLimit          int         `json:"page_limit"`
	TimeoutSeconds     int         `json:"timeout_seconds"`
}

type InsightAuthorizationRevision interface {
	InsightAuthorizationRevision(context.Context, Principal) (string, error)
}

type InsightBucket struct {
	ID     string   `json:"id"`
	Label  string   `json:"label"`
	Value  *float64 `json:"value"`
	Status string   `json:"status"`
}

type InsightCoverage struct {
	LocalDay string           `json:"local_day"`
	Timezone string           `json:"timezone"`
	Status   string           `json:"status"`
	Evidence *InsightEvidence `json:"evidence"`
	Reason   string           `json:"reason,omitempty"`
}

type InsightDeclarations struct {
	Usages            []ExploreUsage `json:"usages"`
	UsageCompleteness string         `json:"usage_completeness"`
	ExpectedOutcomes  []string       `json:"expected_outcomes"`
}

type InsightDeliveryCheck func(context.Context) (context.Context, error)

type InsightEvidence struct {
	Selection      ExploreSelection `json:"selection"`
	Ref            string           `json:"ref"`
	VerificationID string           `json:"verification_id,omitempty"`
}

type InsightMetric struct {
	InsightMetricDefinition
	TimeScope      ExplorePeriod   `json:"time_scope"`
	Denominator    *float64        `json:"denominator"`
	Value          *float64        `json:"value"`
	Status         string          `json:"status"`
	Buckets        []InsightBucket `json:"buckets"`
	SamplingMethod string          `json:"sampling_method"`
}

type InsightMetricComparison struct {
	ID            string         `json:"id"`
	Left          *InsightMetric `json:"left"`
	Right         *InsightMetric `json:"right"`
	Compatibility string         `json:"compatibility"`
	Delta         *float64       `json:"delta"`
	PercentChange *float64       `json:"percent_change"`
	Reason        string         `json:"reason,omitempty"`
}

type InsightMetricDefinition struct {
	ID         string `json:"id"`
	Label      string `json:"label"`
	Kind       string `json:"kind"`
	Unit       string `json:"unit"`
	Population string `json:"population"`
}

type InsightMetricSet struct {
	ID               string                    `json:"id"`
	EquivalentSchema string                    `json:"equivalent_schema,omitempty"`
	Metrics          []InsightMetricDefinition `json:"metrics"`
	Period           ExplorePeriod             `json:"period"`
	MaxQueries       int                       `json:"max_queries"`
	MaxRecords       int                       `json:"max_records"`
	WorkEvidence     string                    `json:"work_evidence"`
}

type InsightWindow struct {
	From  string `json:"from,omitempty"`
	To    string `json:"to,omitempty"`
	Limit int    `json:"limit,omitempty"`
}

type InsightWork struct {
	Queries int `json:"queries"`
	Records int `json:"records"`
}

type InsightsProvider interface {
	ExplorationProvider
	InsightMetricSets(context.Context, Principal, ExploreRead) ([]InsightMetricSet, error)
	ExploreInsights(context.Context, Principal, ExploreRead, ExploreInsightsQuery, InsightWork) (ExploreInsights, error)
}

type Intent struct {
	ID          string              `json:"id"`
	OperationID string              `json:"operation_id"`
	Target      TargetKey           `json:"target"`
	Kind        Kind                `json:"kind"`
	Prior       Activation          `json:"prior"`
	Next        Activation          `json:"next"`
	Receipt     *PreparationReceipt `json:"receipt,omitempty"`
	Fence       uint64              `json:"fence"`
}

type IntentObservation string

type Kind string

type Lease struct {
	OperationID string
	Target      TargetKey
	Fence       uint64
	ExpiresAt   time.Time
}

type MaintenanceBackend interface {
	Acquire(context.Context) (func(), error)
	Authorize(context.Context, bool) (Principal, error)
	AuthorizePolicy(context.Context, MaintenanceRecord) error
	Delegate(context.Context, MaintenanceRecord) context.Context
	Load(context.Context) (MaintenanceRecord, TargetState, error)
	Save(context.Context, MaintenanceRecord) error
	Configure(context.Context, Principal, MaintenanceConfigureRequest, MaintenanceRecord) (MaintenanceRecord, error)
	Profile(context.Context) (MaintenanceProfile, error)
	Observe(context.Context, MaintenanceRecord, TargetState) (MaintenanceObservation, error)
	Plan(context.Context, MaintenanceRecord) (Input, error)
	Generated(context.Context, DatasetRef) (ScenarioRef, error)
	Complete(context.Context, MaintenanceRecord, TargetState) (MaintenanceIdentity, time.Time, time.Time, error)
	Prune(context.Context) error
}

type MaintenanceConfigureCommand struct{ Service *MaintenanceService }

type MaintenanceConfigureRequest struct {
	Enabled          bool   `json:"enabled"`
	ExpectedRevision uint64 `json:"expected_revision"`
	RequestKey       string `json:"request_key"`
	DryRun           bool   `json:"dry_run"`
}

type MaintenanceEnsureCommand struct{ Service *MaintenanceService }

type MaintenanceEnsureRequest struct {
	PolicyRevision     uint64 `json:"policy_revision"`
	ExpectedGeneration uint64 `json:"expected_generation"`
	RequestKey         string `json:"request_key"`
	DryRun             bool   `json:"dry_run"`
}

type MaintenanceIdentity struct {
	Dataset    DatasetRef `json:"dataset"`
	Generation uint64     `json:"generation,omitempty"`
	Anchor     string     `json:"anchor"`
	Timezone   string     `json:"timezone"`
	PreparedAt string     `json:"prepared_at,omitempty"`
}

type MaintenanceLifecycle interface {
	Run(context.Context, Kind, Input) (Result, error)
	Recover(context.Context, string) (Result, error)
}

type MaintenanceObservation struct{ Fresh, Changed bool }

type MaintenanceProfile struct {
	Digest    string
	Principal string
	// ReplaceDrift requires host-enforced immutable automatic data. Manual
	// activation generation changes pause regardless of this capability.
	ReplaceDrift bool
}

type MaintenanceRecord struct {
	Revision                          uint64
	Enabled                           bool
	Owner, Principal, RecipeDigest    string
	Generation                        uint64
	Active                            *MaintenanceIdentity
	Due, ExpiresAt                    time.Time
	State, Reason, Epoch, EpochPrefix string
	Input                             Input
	Step                              Kind
	OperationID                       string
	Attempts                          int
	FailureWindow                     time.Time
	Failures                          int
	OriginActor, TriggerKey           string
}

type MaintenanceResult struct {
	Record MaintenanceRecord `json:"maintenance"`
	Target TargetState       `json:"target"`
	DryRun bool              `json:"dry_run"`
}

type MaintenanceService struct {
	// contains filtered or unexported fields
}

type MaintenanceStatusHandler struct{ Service *MaintenanceService }

type MaintenanceStatusQuery struct{}

type ManagedTarget interface {
	Capabilities() TargetCapabilities
	Allocate(context.Context, Work) error
	InspectReceipt(context.Context, PreparationReceipt) error
	Commit(context.Context, Work, Intent) error
	InspectIntent(context.Context, Intent) (Observation, error)
	DrainCleanup(context.Context, Work, string) error
}

type Message interface {
	Type() string
	Validate() error
	OperationKind() Kind
	OperationInput() Input
}

type Observation struct {
	Routing IntentObservation
	// Ready means the observed physical routing is safe and healthy, including
	// a safely deactivated target. It is distinct from Activation.Ready, which
	// reports an active prepared dataset. An unready prior route cannot settle
	// an intent any more than an unready next route can.
	Ready bool
}

type OpenApplicationPreviewCommand = OpenApplicationPreviewInput

type OpenApplicationPreviewInput struct {
	Selection ExploreSelection `json:"selection"`
	SurfaceID string           `json:"surface_id"`
	RequestID string           `json:"request_id"`
}

type Operation struct {
	Result            Result     `json:"result"`
	Target            TargetKey  `json:"target"`
	Principal         Principal  `json:"principal"`
	Input             Input      `json:"input"`
	Fingerprint       string     `json:"fingerprint"`
	CreatedAt         time.Time  `json:"created_at"`
	UpdatedAt         time.Time  `json:"updated_at"`
	RecoveryPrincipal *Principal `json:"recovery_principal,omitempty"`
	StageID           string     `json:"stage_id,omitempty"`
	CancelRequested   bool       `json:"cancel_requested"`
}

type OperationStore interface {
	Capabilities() StoreCapabilities
	Claim(context.Context, Operation) (Claim, error)
	// LookupRequest returns found=true for a live claim, including a tombstone
	// whose operation was pruned (CodeGone). An expired/absent claim is not found.
	LookupRequest(context.Context, RequestKey) (Operation, bool, error)
	GetOperation(context.Context, string) (Operation, error)
	ListOperations(context.Context, TargetKey, int) ([]Operation, error)
	Acquire(context.Context, string, TargetKey, time.Duration) (Lease, error)
	AcquireRecovery(context.Context, string, TargetKey, time.Duration) (Lease, error)
	Renew(context.Context, Lease, time.Duration) (Lease, error)
	CheckLease(context.Context, Lease) error
	// CheckCleanup rejects active, pending or retained receipts under the lease.
	CheckCleanup(context.Context, Lease, string) error
	Release(context.Context, Lease) error
	Save(context.Context, Operation, uint64, *Lease) (Operation, error)
	RequestCancel(context.Context, string, uint64) (Operation, error)
	PutReceipt(context.Context, Lease, PreparationReceipt) error
	GetReceipt(context.Context, string) (PreparationReceipt, error)
	ListReceipts(context.Context, TargetKey, ReceiptQuery) (ReceiptPage, error)
	// GetArtifact loads original metadata by provider and opaque ID; caller
	// claims about requester, scope, expiry or generation are never authoritative.
	GetArtifact(context.Context, string, string) (ArtifactRef, error)
	PutVerification(context.Context, Lease, string, uint64, VerificationResult) (PreparationReceipt, error)
	Target(context.Context, TargetKey) (TargetState, error)
	BeginIntent(context.Context, Lease, Intent, uint64) error
	ResolveIntent(context.Context, Lease, Intent, Observation, Operation, uint64) (Operation, error)
}

type Policy interface {
	// Return CodeDenied (or a legacy untyped denial) for denied access.
	// Backend failures must use CodeProvider/CodeUnavailable; cancellation uses
	// standard context causes. These fail closed without declaring grant loss.
	Authorize(context.Context, Principal, AccessRequest) error
}

type PreparationReceipt struct {
	ID                string              `json:"id"`
	Target            TargetKey           `json:"target"`
	StageID           string              `json:"stage_id"`
	Dataset           DatasetRef          `json:"dataset"`
	Scenario          ScenarioRef         `json:"scenario"`
	ModuleHash        string              `json:"module_hash"`
	PolicyHash        string              `json:"policy_hash"`
	PermissionHash    string              `json:"permission_hash"`
	ContentRevision   uint64              `json:"content_revision"`
	SourceCheckpoint  string              `json:"source_checkpoint"`
	DerivedCheckpoint string              `json:"derived_checkpoint"`
	RequesterID       string              `json:"requester_id"`
	Verification      *VerificationResult `json:"verification,omitempty"`
}

type PrepareRequest struct{ Input }

type PreviewCapabilitiesQuery struct {
	Selection ExploreSelection `json:"selection"`
}

type PreviewCapability struct {
	Supported  bool              `json:"supported"`
	Reason     string            `json:"reason,omitempty"`
	Surfaces   []PreviewSurface  `json:"surfaces"`
	Guarantees PreviewGuarantees `json:"guarantees"`
	// contains filtered or unexported fields
}

type PreviewGuarantees struct {
	Durable   bool `json:"durable"`
	Isolation bool `json:"isolation"`
	ReadOnly  bool `json:"read_only"`
	Retention bool `json:"retention"`
	Cleanup   bool `json:"cleanup"`
}

type PreviewReadContext struct {
	Session   ApplicationPreviewSession
	Principal Principal
	Read      ExploreRead
}

type PreviewRecord struct {
	Session                      ApplicationPreviewSession
	Principal                    Principal
	ApplicationID, EnvironmentID string
	RequestID, Fingerprint       string
	Receipt                      PreparationReceipt
	// Original monotonic domain/host policy observations survive restart and
	// revoke/restore. They are authority metadata, never browser credentials.
	AuthorizationRevisions []string
}

type PreviewSurface struct {
	// Required domain/field grants stay server-side; these are not wire input.
	EntityID string   `json:"-"`
	Fields   []string `json:"-"`
	ID       string   `json:"id"`
	Label    string   `json:"label"`
	Kind     string   `json:"kind"`
}

type Principal struct {
	ActorID        string `json:"actor_id"`
	ScopeKey       string `json:"scope_key"`
	ExecutionID    string `json:"execution_id"`
	CorrelationID  string `json:"correlation_id,omitempty"`
	ModuleHash     string `json:"module_hash"`
	PolicyHash     string `json:"policy_hash"`
	PermissionHash string `json:"permission_hash"`
}

type Progress struct {
	Stage     string `json:"stage"`
	Completed uint64 `json:"completed"`
	Total     uint64 `json:"total"`
}

type Provider interface {
	Describe(context.Context, Principal, DatasetRef) (Descriptor, error)
	Validate(context.Context, Principal, Input) ([]Check, error)
	Plan(context.Context, Principal, Kind, Input) ([]Check, error)
	Prepare(context.Context, Work) (PreparationReceipt, error)
	Refresh(context.Context, Work) (PreparationReceipt, error)
	Verify(context.Context, Work, PreparationReceipt) (VerificationResult, error)
}

type ReceiptPage struct {
	Receipts   []PreparationReceipt `json:"receipts"`
	NextCursor string               `json:"next_cursor,omitempty"`
}

type ReceiptQuery struct {
	Limit  int
	Cursor string
}

type RecoverRequest struct {
	TargetID    string `json:"target_id"`
	OperationID string `json:"operation_id"`
}

type RefreshRequest struct{ Input }

type RequestKey struct {
	ActorID        string
	Target         TargetKey
	Kind           Kind
	IdempotencyKey string
}

type RequestState string

type RequestStatus struct {
	State      RequestState
	Operation  *Operation
	RetryUntil time.Time
}

type ResetRequest struct{ Input }

type Result struct {
	OperationID  string              `json:"operation_id"`
	Kind         Kind                `json:"kind"`
	State        State               `json:"state"`
	Revision     uint64              `json:"revision"`
	Phase        string              `json:"phase"`
	DryRun       bool                `json:"dry_run"`
	Active       bool                `json:"active"`
	Receipt      *PreparationReceipt `json:"receipt,omitempty"`
	Verification *VerificationResult `json:"verification,omitempty"`
	Activation   *Activation         `json:"activation,omitempty"`
	Checks       []Check             `json:"checks,omitempty"`
	Progress     Progress            `json:"progress"`
	Dataset      *DatasetRef         `json:"dataset,omitempty"`
	Failure      *Failure            `json:"failure,omitempty"`
}

type RetryDescriptor struct {
	OperationID        string
	Kind               Kind
	State              State
	Input              Input
	ObservedGeneration *uint64
	FailureCode        string
}

type SamplePeriod struct {
	LocalDay    string `json:"local_day"`
	Timezone    string `json:"timezone"`
	EvidenceRef string `json:"evidence_ref"`
}

type ScenarioPresentation struct {
	Title   string `json:"title,omitempty"`
	Summary string `json:"summary,omitempty"`
}

type ScenarioRef struct {
	Dataset     DatasetRef `json:"dataset"`
	ID          string     `json:"id"`
	Version     string     `json:"version"`
	ProfileHash string     `json:"profile_hash"`
}

type SelectionComparison struct {
	Left              ExploreInsights           `json:"left"`
	Right             ExploreInsights           `json:"right"`
	ComparisonID      string                    `json:"comparison_id"`
	ObservedAt        time.Time                 `json:"observed_at"`
	Metrics           []InsightMetricComparison `json:"metrics"`
	LeftDeclarations  InsightDeclarations       `json:"left_declarations"`
	RightDeclarations InsightDeclarations       `json:"right_declarations"`
}

type Service struct {
	// contains filtered or unexported fields
}

type ServiceConfig struct {
	Preview         ApplicationPreviewConfig
	ExploreSurfaces map[string]ExploreSurface
	Providers       map[string]Provider
	Target          ManagedTarget
	Store           OperationStore
	Policy          Policy
	// Resolve must consult current trusted state, including revocation, on every
	// invocation. It must not read actor/scope/delegation from Input.
	// Current principal hashes must cover every mutable host policy decision.
	// Policies with independent mutable grants/filters must also implement
	// InsightAuthorizationRevision before offering coherent aggregate reads.
	// Use CodeProvider/CodeUnavailable for backend outages, standard context
	// causes for cancellation, and CodeDenied (or a legacy untyped denial) for
	// invalid/revoked identities.
	Resolve        func(context.Context) (Principal, error)
	LeaseDuration  time.Duration
	CleanupTimeout time.Duration
	// WritesEnabled is the host's explicit conformance gate (T05). Durable capability
	// flags are additionally required; they are not themselves conformance evidence.
	WritesEnabled bool
	// RetryWindow is the host-declared replay window of request claims; it must
	// match the operation store's retention (1 hour–90 days). Zero leaves it
	// undeclared, so request reconciliation never reports a missing claim as
	// safely resubmittable.
	RetryWindow time.Duration
}

type State string

type StoreCapabilities struct {
	Durable              bool
	AtomicClaims         bool
	Fencing              bool
	AtomicIntentFinalize bool
	ProtectedRetention   bool
}

type TargetCapabilities struct {
	Recovery     bool
	Fencing      bool
	SafeReset    bool
	Cancellation bool
}

type TargetKey struct {
	ScopeKey string `json:"scope_key"`
	TargetID string `json:"target_id"`
}

type TargetState struct {
	Activation       Activation
	Pending          *Intent
	RecoveryRequired bool
}

type ValidateRequest struct{ Input }

type VerificationResult struct {
	ID              string        `json:"id"`
	ContentRevision uint64        `json:"content_revision"`
	Checks          []Check       `json:"checks"`
	Coverage        []Coverage    `json:"coverage"`
	Artifacts       []ArtifactRef `json:"artifacts,omitempty"`
}

type VerifyRequest struct{ Input }

type Work struct {
	OperationID   string
	Principal     Principal
	Input         Input
	Lease         Lease
	StageID       string
	BeforeEffects func(context.Context) error
	Progress      func(context.Context, Progress) error
}