data

type AccessRequest struct {
	Action    string
	Target    TargetKey
	Operation *Operation
	Receipt   *PreparationReceipt
	Artifact  *ArtifactRef
}

type ActivateRequest struct{ Input }

type Activation struct {
	ReceiptID  string `json:"receipt_id,omitempty"`
	Generation uint64 `json:"generation"`
	Ready      bool   `json:"ready"`
}

type ActiveState struct {
	Target           TargetKey  `json:"target"`
	Activation       Activation `json:"activation"`
	Transitioning    bool       `json:"transitioning"`
	RecoveryRequired bool       `json:"recovery_required"`
}

type ArtifactProvider interface {
	LookupArtifact(context.Context, Principal, ArtifactRef) (any, error)
}

type ArtifactRef struct {
	Provider    string    `json:"provider"`
	ID          string    `json:"id"`
	Target      TargetKey `json:"target"`
	Generation  uint64    `json:"generation"`
	RequesterID string    `json:"requester_id"`
	ExpiresAt   time.Time `json:"expires_at"`
}

type CancelRequest struct{ Input }

type Capability struct {
	Supported bool   `json:"supported"`
	Permitted bool   `json:"permitted"`
	Reason    string `json:"reason,omitempty"`
}

type CatalogProvider interface {
	Catalog(context.Context, Principal, TargetKey, int) ([]DatasetRef, error)
}

type Check struct {
	ID          string `json:"id"`
	Status      string `json:"status"`
	Expected    string `json:"expected,omitempty"`
	Actual      string `json:"actual,omitempty"`
	EvidenceRef string `json:"evidence_ref,omitempty"`
}

type Claim struct {
	Operation Operation
	Replay    bool
}

type Command[T Message] struct{ Service *Service }

type Component struct {
	Path   string `json:"path"`
	Digest string `json:"digest"`
}

type Coverage struct {
	Status string       `json:"status"`
	Sample SamplePeriod `json:"sample"`
}

type DatasetRef struct {
	Provider string `json:"provider"`
	ID       string `json:"id"`
	Version  string `json:"version"`
	Digest   string `json:"digest"`
}

type Descriptor struct {
	Dataset               DatasetRef          `json:"dataset"`
	Components            []Component         `json:"components"`
	SourceContractHash    string              `json:"source_contract_hash"`
	SourceContractVersion string              `json:"source_contract_version"`
	PolicyHash            string              `json:"policy_hash"`
	AudienceHashes        map[string]string   `json:"audience_hashes"`
	Attribution           []string            `json:"attribution"`
	Timezone              string              `json:"timezone"`
	Samples               []SamplePeriod      `json:"samples"`
	GeneratorVersion      string              `json:"generator_version,omitempty"`
	Seed                  string              `json:"seed,omitempty"`
	GeneratorOptions      map[string]string   `json:"generator_options,omitempty"`
	Synthetic             bool                `json:"synthetic"`
	Counts                map[string]uint64   `json:"counts"`
	Prerequisites         []string            `json:"prerequisites"`
	Scenarios             []ScenarioRef       `json:"scenarios"`
	Capabilities          map[Kind]Capability `json:"capabilities"`
}

type Failure struct {
	Code   string            `json:"code"`
	Fields map[string]string `json:"fields,omitempty"`
}

type GenerateRequest struct{ Input }

type Generator interface {
	Generate(context.Context, Work) (DatasetRef, error)
}

type Input struct {
	Dataset            DatasetRef  `json:"dataset"`
	Scenario           ScenarioRef `json:"scenario"`
	TargetID           string      `json:"target_id"`
	IdempotencyKey     string      `json:"idempotency_key"`
	ReceiptID          string      `json:"receipt_id,omitempty"`
	ExpectedGeneration *uint64     `json:"expected_generation,omitempty"`
	OperationID        string      `json:"operation_id,omitempty"`
	DryRun             bool        `json:"dry_run"`
	BatchLimit         int         `json:"batch_limit"`
	PageLimit          int         `json:"page_limit"`
	TimeoutSeconds     int         `json:"timeout_seconds"`
}

type Intent struct {
	ID          string              `json:"id"`
	OperationID string              `json:"operation_id"`
	Target      TargetKey           `json:"target"`
	Kind        Kind                `json:"kind"`
	Prior       Activation          `json:"prior"`
	Next        Activation          `json:"next"`
	Receipt     *PreparationReceipt `json:"receipt,omitempty"`
	Fence       uint64              `json:"fence"`
}

type IntentObservation string

type Kind string

type Lease struct {
	OperationID string
	Target      TargetKey
	Fence       uint64
	ExpiresAt   time.Time
}

type ManagedTarget interface {
	Capabilities() TargetCapabilities
	Allocate(context.Context, Work) error
	InspectReceipt(context.Context, PreparationReceipt) error
	Commit(context.Context, Work, Intent) error
	InspectIntent(context.Context, Intent) (Observation, error)
	DrainCleanup(context.Context, Work, string) error
}

type Message interface {
	Type() string
	Validate() error
	OperationKind() Kind
	OperationInput() Input
}

type Observation struct {
	Routing IntentObservation
	// Ready means the observed physical routing is safe and healthy, including
	// a safely deactivated target. It is distinct from Activation.Ready, which
	// reports an active prepared dataset. An unready prior route cannot settle
	// an intent any more than an unready next route can.
	Ready bool
}

type Operation struct {
	Result            Result     `json:"result"`
	Target            TargetKey  `json:"target"`
	Principal         Principal  `json:"principal"`
	Input             Input      `json:"input"`
	Fingerprint       string     `json:"fingerprint"`
	CreatedAt         time.Time  `json:"created_at"`
	UpdatedAt         time.Time  `json:"updated_at"`
	RecoveryPrincipal *Principal `json:"recovery_principal,omitempty"`
	StageID           string     `json:"stage_id,omitempty"`
	CancelRequested   bool       `json:"cancel_requested"`
}

type OperationStore interface {
	Capabilities() StoreCapabilities
	Claim(context.Context, Operation) (Claim, error)
	GetOperation(context.Context, string) (Operation, error)
	ListOperations(context.Context, TargetKey, int) ([]Operation, error)
	Acquire(context.Context, string, TargetKey, time.Duration) (Lease, error)
	AcquireRecovery(context.Context, string, TargetKey, time.Duration) (Lease, error)
	Renew(context.Context, Lease, time.Duration) (Lease, error)
	CheckLease(context.Context, Lease) error
	// CheckCleanup rejects active, pending or retained receipts under the lease.
	CheckCleanup(context.Context, Lease, string) error
	Release(context.Context, Lease) error
	Save(context.Context, Operation, uint64, *Lease) (Operation, error)
	RequestCancel(context.Context, string, uint64) (Operation, error)
	PutReceipt(context.Context, Lease, PreparationReceipt) error
	GetReceipt(context.Context, string) (PreparationReceipt, error)
	// GetArtifact loads original metadata by provider and opaque ID; caller
	// claims about requester, scope, expiry or generation are never authoritative.
	GetArtifact(context.Context, string, string) (ArtifactRef, error)
	PutVerification(context.Context, Lease, string, uint64, VerificationResult) (PreparationReceipt, error)
	Target(context.Context, TargetKey) (TargetState, error)
	BeginIntent(context.Context, Lease, Intent, uint64) error
	ResolveIntent(context.Context, Lease, Intent, Observation, Operation, uint64) (Operation, error)
}

type Policy interface {
	Authorize(context.Context, Principal, AccessRequest) error
}

type PreparationReceipt struct {
	ID                string              `json:"id"`
	Target            TargetKey           `json:"target"`
	StageID           string              `json:"stage_id"`
	Dataset           DatasetRef          `json:"dataset"`
	Scenario          ScenarioRef         `json:"scenario"`
	ModuleHash        string              `json:"module_hash"`
	PolicyHash        string              `json:"policy_hash"`
	PermissionHash    string              `json:"permission_hash"`
	ContentRevision   uint64              `json:"content_revision"`
	SourceCheckpoint  string              `json:"source_checkpoint"`
	DerivedCheckpoint string              `json:"derived_checkpoint"`
	RequesterID       string              `json:"requester_id"`
	Verification      *VerificationResult `json:"verification,omitempty"`
}

type PrepareRequest struct{ Input }

type Principal struct {
	ActorID        string `json:"actor_id"`
	ScopeKey       string `json:"scope_key"`
	ExecutionID    string `json:"execution_id"`
	CorrelationID  string `json:"correlation_id,omitempty"`
	ModuleHash     string `json:"module_hash"`
	PolicyHash     string `json:"policy_hash"`
	PermissionHash string `json:"permission_hash"`
}

type Progress struct {
	Stage     string `json:"stage"`
	Completed uint64 `json:"completed"`
	Total     uint64 `json:"total"`
}

type Provider interface {
	Describe(context.Context, Principal, DatasetRef) (Descriptor, error)
	Validate(context.Context, Principal, Input) ([]Check, error)
	Plan(context.Context, Principal, Kind, Input) ([]Check, error)
	Prepare(context.Context, Work) (PreparationReceipt, error)
	Refresh(context.Context, Work) (PreparationReceipt, error)
	Verify(context.Context, Work, PreparationReceipt) (VerificationResult, error)
}

type RefreshRequest struct{ Input }

type ResetRequest struct{ Input }

type Result struct {
	OperationID  string              `json:"operation_id"`
	Kind         Kind                `json:"kind"`
	State        State               `json:"state"`
	Revision     uint64              `json:"revision"`
	Phase        string              `json:"phase"`
	DryRun       bool                `json:"dry_run"`
	Active       bool                `json:"active"`
	Receipt      *PreparationReceipt `json:"receipt,omitempty"`
	Verification *VerificationResult `json:"verification,omitempty"`
	Activation   *Activation         `json:"activation,omitempty"`
	Checks       []Check             `json:"checks,omitempty"`
	Progress     Progress            `json:"progress"`
	Dataset      *DatasetRef         `json:"dataset,omitempty"`
	Failure      *Failure            `json:"failure,omitempty"`
}

type SamplePeriod struct {
	LocalDay    string `json:"local_day"`
	Timezone    string `json:"timezone"`
	EvidenceRef string `json:"evidence_ref"`
}

type ScenarioRef struct {
	Dataset     DatasetRef `json:"dataset"`
	ID          string     `json:"id"`
	Version     string     `json:"version"`
	ProfileHash string     `json:"profile_hash"`
}

type Service struct {
	// contains filtered or unexported fields
}

type ServiceConfig struct {
	Providers map[string]Provider
	Target    ManagedTarget
	Store     OperationStore
	Policy    Policy
	// Resolve must consult current trusted state, including revocation, on every
	// invocation. It must not read actor/scope/delegation from Input.
	Resolve        func(context.Context) (Principal, error)
	LeaseDuration  time.Duration
	CleanupTimeout time.Duration
	// WritesEnabled is the host's explicit conformance gate (T05). Durable capability
	// flags are additionally required; they are not themselves conformance evidence.
	WritesEnabled bool
}

type State string

type StoreCapabilities struct {
	Durable              bool
	AtomicClaims         bool
	Fencing              bool
	AtomicIntentFinalize bool
	ProtectedRetention   bool
}

type TargetCapabilities struct {
	Recovery     bool
	Fencing      bool
	SafeReset    bool
	Cancellation bool
}

type TargetKey struct {
	ScopeKey string `json:"scope_key"`
	TargetID string `json:"target_id"`
}

type TargetState struct {
	Activation       Activation
	Pending          *Intent
	RecoveryRequired bool
}

type ValidateRequest struct{ Input }

type VerificationResult struct {
	ID              string        `json:"id"`
	ContentRevision uint64        `json:"content_revision"`
	Checks          []Check       `json:"checks"`
	Coverage        []Coverage    `json:"coverage"`
	Artifacts       []ArtifactRef `json:"artifacts,omitempty"`
}

type VerifyRequest struct{ Input }

type Work struct {
	OperationID   string
	Principal     Principal
	Input         Input
	Lease         Lease
	StageID       string
	BeforeEffects func(context.Context) error
	Progress      func(context.Context, Progress) error
}