controller

type AgentDeploymentReconciler struct {
	client.Client
	Scheme           *runtime.Scheme
	Recorder         record.EventRecorder
	K8s              kubernetes.Interface
	ModelRouterImage string
	StateConfig      state.Config
	CloudProvider    security.CloudProvider
	// TokenReviewerClusterRole is the ClusterRole that grants "create tokenreviews".
	TokenReviewerClusterRole string
	// OperatorAPIURL is the base URL of the operator's internal API server.
	// Injected into the router config so the model-router can call RAG, handoff, etc.
	OperatorAPIURL string
	// LLMRequestTimeout is the per-LLM-request timeout written into every router
	// config (default 1h). Injected from the LLM_REQUEST_TIMEOUT env var.
	LLMRequestTimeout time.Duration
	// ContextCompactionRatio is the target fraction of the context window to
	// compact the in-memory buffer down to when truncation fires (issue #54).
	// Default 0.5 (50%); set to 0.1 for aggressive compaction to ~10%.
	// Injected from the CONTEXT_COMPACTION_RATIO env var.
	ContextCompactionRatio float64

	// HindsightURL is the configured hindsight API endpoint (e.g. http://hindsight.local).
	// Injected from the HINDSIGHT_URL env var. Used to generate ipBlock egress rules
	// in the per-run NetworkPolicies when the cluster has a default-deny egress policy.
	HindsightURL string
}

type AgentReconciler struct {
	client.Client
	Scheme        *runtime.Scheme
	CloudProvider security.CloudProvider
}

type AgentRunReconciler struct {
	client.Client
	Scheme           *runtime.Scheme
	Recorder         record.EventRecorder
	K8s              kubernetes.Interface
	Dynamic          dynamic.Interface
	ModelRouterImage string
	StateConfig      state.Config
	StateStore       state.Store
	CloudProvider    security.CloudProvider
	// PostgresStore is the optional PostgreSQL archival store. When non-nil,
	// terminal-phase AgentRuns are snapshotted here for long-term retention
	// and historical querying by the UI.
	PostgresStore *postgresql.Store
	// TokenReviewerClusterRole is the name of the ClusterRole that grants
	// "create tokenreviews" — injected at startup from the Helm release name.
	// The agentrun controller binds each agent SA to this role so the
	// model-router sidecar can call the TokenReview API.
	TokenReviewerClusterRole string
	// OperatorAPIURL is the base URL of the operator's internal API server,
	// injected from the OPERATOR_API_URL env var. Written into every router
	// ConfigMap so sidecars can call /agentrun endpoints for handoff and child runs.
	// Example: "http://agent-orca-internal-api.agent-orca-system.svc.cluster.local:8082"
	OperatorAPIURL string
	// LLMRequestTimeout is the per-LLM-request timeout written into every router
	// config (default 1h). Injected from the LLM_REQUEST_TIMEOUT env var.
	LLMRequestTimeout time.Duration
	// ContextCompactionRatio is the target fraction of the context window to
	// compact the in-memory buffer down to when truncation fires (issue #54).
	// Default 0.5 (50%); set to 0.1 for aggressive compaction to ~10%.
	// Injected from the CONTEXT_COMPACTION_RATIO env var.
	ContextCompactionRatio float64

	// HindsightURL is the configured hindsight API endpoint (e.g. http://hindsight.local).
	// Injected from the HINDSIGHT_URL env var. Used to generate ipBlock egress rules
	// in the per-run NetworkPolicies when the cluster has a default-deny egress policy.
	HindsightURL string
}

type AgentWorkflowReconciler struct {
	client.Client
	Scheme *runtime.Scheme
}

type KnowledgeBaseReconciler struct {
	client.Client
	Scheme           *runtime.Scheme
	MCPIngesterImage string
	QdrantImage      string
}

type MCPServerReconciler struct {
	client.Client
	Scheme *runtime.Scheme
}

type ModelProviderReconciler struct {
	client.Client
	Scheme *runtime.Scheme
}

type ModelSelectorReconciler struct {
	client.Client
	Scheme *runtime.Scheme
}

type TenantConfigReconciler struct {
	client.Client
	Scheme    *runtime.Scheme
	Refresher TenantRefresher
}

type TenantRefresher interface {
	RefreshTenants(ctx context.Context) error
}

type ToolReconciler struct {
	client.Client
	Scheme *runtime.Scheme
}