server

type Config struct {
	Port        int           `yaml:"port"`
	Bind        string        `yaml:"bind"`
	IdleTimeout time.Duration `yaml:"idle_timeout"`
	ConfigDir   string        // runtime, not from YAML
	StoreName   string        // runtime, empty = default unnamed store

	// Remote is the resolved remote-access configuration. Zero value
	// (Enabled false) keeps the server loopback-only. cli/serve.go
	// populates it -- resolving the token and certificate paths and
	// failing closed on missing material -- so the server itself
	// never touches config files or secret resolution.
	Remote RemoteRuntime
}

type CurationStatus struct {
	PendingCount      int        `json:"pending_count"`
	Overdue           bool       `json:"overdue"`
	ConceptCandidates int        `json:"concept_candidates,omitempty"`
	StaleCount        int        `json:"stale_count,omitempty"`
	OrphanCount       int        `json:"orphan_count,omitempty"`
	LastCurated       *time.Time `json:"last_curated,omitempty"`
	Autonomous        bool       `json:"autonomous,omitempty"`
	LLMCallsToday     int        `json:"llm_calls_today,omitempty"`
	LLMDailyCap       int        `json:"llm_daily_cap,omitempty"`
	LLMCapPct         int        `json:"llm_cap_pct,omitempty"`
	Paused            bool       `json:"paused,omitempty"`
	PauseReason       string     `json:"pause_reason,omitempty"`
}

type ErrorDetail struct {
	Code      string `json:"code"`
	Message   string `json:"message"`
	Retryable bool   `json:"retryable"`
	// RetryAfter is the suggested wait in seconds before retrying, set
	// only on 429 responses. It mirrors the Retry-After HTTP header for
	// transports (notably the CLI proxy) that surface the body but drop
	// response headers, so the agent still learns how long to back off.
	RetryAfter int `json:"retry_after,omitempty"`
}

type ErrorResponse struct {
	Error    ErrorDetail    `json:"error"`
	Curation CurationStatus `json:"curation,omitzero"`
	// StoreReadonly mirrors ResponseEnvelope.StoreReadonly: emitted
	// (true) only when the store is read-only, so a rejected write
	// carries the reason on the envelope as well as in the error.
	StoreReadonly bool `json:"store_readonly,omitempty"`
}

type MCPProxyInfo struct {
	PID       int       `json:"pid"`
	StartedAt time.Time `json:"started_at"`
	// Binary is the resolved executable path of the proxy process,
	// from os.Executable(). Surfaced by `gramaton status` so a proxy
	// that predates a binary upgrade is visible. Gramaton never
	// restarts proxies -- the spawning harness owns respawning.
	Binary string `json:"binary,omitempty"`
}

type RemoteRuntime struct {
	Enabled  bool
	BindAddr string // empty = all interfaces
	Port     int
	Token    string // resolved shared secret; required when Enabled
	CertFile string // resolved cert path; required when Enabled
	KeyFile  string // resolved key path; required when Enabled
	AdminOps bool   // open path-taking admin ops to authenticated remotes

	// WriteRate, WriteBurst, and MaxConcurrentWrites are the resolved
	// admission-control limits for the remote write path (see
	// config.RemoteServerConfig.ResolvedWriteLimits). A non-positive
	// value disables that gate. All three zero -- the zero
	// RemoteRuntime, i.e. remote access disabled -- means no admission
	// control, which is correct because only loopback callers reach a
	// loopback-only server and loopback is always exempt.
	WriteRate           float64
	WriteBurst          int
	MaxConcurrentWrites int
}

type ResponseEnvelope struct {
	Data     any            `json:"data"`
	Curation CurationStatus `json:"curation"`
	// StoreReadonly is emitted (true) only when the store is in
	// store-level read-only mode, on every response -- reads included
	// -- so agents learn the store is frozen from any call. Omitted
	// on writable stores.
	StoreReadonly bool         `json:"store_readonly,omitempty"`
	Meta          ResponseMeta `json:"meta"`
}

type ResponseMeta struct {
	DurationMs int64  `json:"duration_ms,omitempty"`
	Version    string `json:"version"`
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerInfo struct {
	PID       int       `json:"pid"`
	Port      int       `json:"port"`
	Bind      string    `json:"bind"`
	StartedAt time.Time `json:"started_at"`
	StoreDir  string    `json:"store_dir"`
	StoreName string    `json:"store_name,omitempty"`
	Version   string    `json:"version"`
}