taskrun

type ManagedInference struct {
	// ServerURL is the BuildMax server that minted RunToken. A managed entry
	// naming any other server is refused rather than sent this credential.
	ServerURL string
	// RunToken authorizes this one run's inference calls.
	RunToken string
}

type RunScope struct {
	SpaceID   string
	TaskID    string
	TaskRunID string
}

type RunTaskInput struct {
	Task *coretask.Task
	// AdditionalSystemPrompt is the instruction text of the agent this task names, resolved by
	// the server for this run. It becomes the last layer of the system prompt, where it is
	// re-sent whole on every call, instead of riding in the task input where compaction
	// eventually drops it.
	AdditionalSystemPrompt string
	SpaceAgentInstructions string
	Run                    *coretask.Run
	SessionID              string
	Paths                  RuntimePaths
	Persist                blob.PersistStorage
	RunOutputStorage       blob.RunOutputStorage
	Updater                TaskRunUpdater
	StreamSender           workerclient.StreamSender
	Model                  config.ModelEntry
	Managed                ManagedInference
	// ManagedHTTPClient carries the worker's server trust to managed inference,
	// which reaches the gateway on the same internal listener as every other
	// worker call. Nil uses http.DefaultClient, which is correct only for a
	// plain-HTTP development server. See
	// docs/design/worker-api-network-boundary.md §6.
	ManagedHTTPClient *http.Client
	// WorkerAPI is how this run reaches the server it was dispatched by. Its
	// zero value leaves the run without the artifact capability, so the agent
	// gets no artifact tool rather than one that always fails.
	WorkerAPI workerclient.WorkerAPIClientConfig
	// Plugins are the releases the server resolved for this run. They are
	// materialized into the run's BUILDMAX_HOME before the runtime is
	// assembled; a pin that cannot be materialized fails the run.
	Plugins []coreplugin.Pin
	// SandboxNetworkTier and SandboxFilesystemTier are this run's agent-
	// declared sandbox tiers, resolved by the server when the worker claimed
	// the run. Empty means the strictest tier on that axis. See
	// docs/design/agent-sandbox-policy.md.
	SandboxNetworkTier    config.SandboxNetworkTier
	SandboxFilesystemTier config.SandboxFilesystemTier
	// SecretEnvGrants are this run's resolved Space Secret grants, variable name
	// to value, computed by the server from the agent's consumption config.
	// They are set in the run's environment and their names are allow-listed
	// past env scrubbing. Empty when the agent consumes no Secret. See
	// docs/design/space-secrets.md §8.2.
	SecretEnvGrants map[string]string
	// InterruptGrace is how long this run may spend reporting after its process
	// is asked to stop. Zero uses interruptReportTimeout. A dispatcher that will
	// kill the worker on its own deadline passes that deadline here, so the run
	// stops reporting before it is killed mid-upload rather than after.
	InterruptGrace time.Duration
}

type RuntimePaths interface {
	RuntimeTaskRunDir(spaceID, taskID, taskRunID string) string
	RuntimeTaskRunWorkspaceDir(spaceID, taskID, taskRunID string) string
	RuntimeTaskRunGlobalDir(spaceID, taskID, taskRunID string) string
}

type TaskRunUpdater interface {
	UpdateRunStatus(ctx context.Context, taskRunID string, req *workerclient.PatchTaskRunRequest) error
}