apiserver

type ACPAgentManifest struct {
	Name               string            `json:"name"`
	Namespace          string            `json:"namespace,omitempty"`
	Description        string            `json:"description"`
	InputContentTypes  []string          `json:"input_content_types"`
	OutputContentTypes []string          `json:"output_content_types"`
	Metadata           *ACPAgentMetadata `json:"metadata,omitempty"`
	Status             *ACPAgentStatus   `json:"status,omitempty"`

	// InputSchema is a JSON Schema describing the expected input format
	// (derived from the agent's configured tools + built-in tools).
	InputSchema map[string]any `json:"input_schema,omitempty"`

	// OutputSchema is a JSON Schema describing the expected output format.
	OutputSchema map[string]any `json:"output_schema,omitempty"`

	// AllowedTools lists the tools available to this agent with descriptions.
	AllowedTools []ACPToolInfo `json:"allowed_tools,omitempty"`

	// KnowledgeBases lists the KnowledgeBase names available to this agent.
	KnowledgeBases []string `json:"knowledge_bases,omitempty"`

	// GuardrailPolicy is the name of the GuardrailPolicy applied to this agent, if any.
	GuardrailPolicy string `json:"guardrail_policy,omitempty"`

	// ClarifyAvailable indicates whether the _clarify built-in tool is available
	// (i.e. human-in-the-loop is possible). False when DisableClarify is true.
	ClarifyAvailable bool `json:"clarify_available"`

	// Filesystem declares the agent's ACP fs/* relay policy (issue #34). nil
	// means the agent has no filesystem tools; the bridge's aoctl-side flags
	// layer on top of this (they can only narrow, never widen, this policy).
	Filesystem *ACPFilesystemPolicy `json:"filesystem,omitempty"`
}

type ACPAgentMetadata struct {
	Annotations         map[string]any `json:"annotations,omitempty"`
	Documentation       string         `json:"documentation,omitempty"`
	License             string         `json:"license,omitempty"`
	ProgrammingLanguage string         `json:"programming_language,omitempty"`
	NaturalLanguages    []string       `json:"natural_languages,omitempty"`
	Framework           string         `json:"framework,omitempty"`
}

type ACPAgentRunRequest struct {
	Input     []ACPMessage `json:"input"`
	SessionID string       `json:"session_id,omitempty"`
}

type ACPAgentStatus struct {
	AvgRunTokens      *float64 `json:"avg_run_tokens,omitempty"`
	AvgRunTimeSeconds *float64 `json:"avg_run_time_seconds,omitempty"`
	SuccessRate       *float64 `json:"success_rate,omitempty"`
}

type ACPAgentsListResponse struct {
	Agents []ACPAgentManifest `json:"agents"`
}

type ACPAwaitRequest struct {
	// Question is the human-readable clarifying question the agent asked,
	// copied from the AgentRun's ClarifyQuestion status field.
	Question string `json:"question,omitempty"`
}

type ACPErr struct {
	Code    string `json:"code"`
	Message string `json:"message"`
	Data    any    `json:"data,omitempty"`
}

type ACPErrEvent struct {
	Type  string `json:"type"`
	Error ACPErr `json:"error"`
}

type ACPEvent struct {
	Type string `json:"type"`
}

type ACPFilesystemPolicy struct {
	// Mode is "readOnly" or "readWrite".
	Mode string `json:"mode"`
	// WriteApproval asks the bridge to elicit explicit user approval per write.
	WriteApproval bool `json:"writeApproval,omitempty"`
	// RememberApproval, when false, forbids the bridge from remembering an
	// approval for the rest of the session (approve every write). nil means
	// the agent does not constrain it (issue #41).
	RememberApproval *bool `json:"rememberApproval,omitempty"`
}

type ACPGenericEvent struct {
	Type    string `json:"type"`
	Generic any    `json:"generic"`
}

type ACPMessage struct {
	Role        string           `json:"role"`
	Parts       []ACPMessagePart `json:"parts"`
	CreatedAt   string           `json:"created_at,omitempty"`
	CompletedAt string           `json:"completed_at,omitempty"`
}

type ACPMessageCompletedEvent struct {
	Type    string     `json:"type"`
	Message ACPMessage `json:"message"`
}

type ACPMessageCreatedEvent struct {
	Type    string     `json:"type"`
	Message ACPMessage `json:"message"`
}

type ACPMessageMetadata struct {
	Kind string `json:"kind"` // "citation" or "trajectory"
	// Citation fields
	StartIndex  *int   `json:"start_index,omitempty"`
	EndIndex    *int   `json:"end_index,omitempty"`
	URL         string `json:"url,omitempty"`
	Title       string `json:"title,omitempty"`
	Description string `json:"description,omitempty"`
	// Trajectory fields
	Message    string `json:"message,omitempty"`
	ToolName   string `json:"tool_name,omitempty"`
	ToolInput  any    `json:"tool_input,omitempty"`
	ToolOutput any    `json:"tool_output,omitempty"`
}

type ACPMessagePart struct {
	Name            string              `json:"name,omitempty"`
	ContentType     string              `json:"content_type"`
	Content         string              `json:"content,omitempty"`
	ContentEncoding string              `json:"content_encoding,omitempty"`
	ContentURL      string              `json:"content_url,omitempty"`
	Metadata        *ACPMessageMetadata `json:"metadata,omitempty"`
}

type ACPMessagePartEvent struct {
	Type string         `json:"type"`
	Part ACPMessagePart `json:"part"`
}

type ACPRun struct {
	AgentName    string           `json:"agent_name"`
	SessionID    string           `json:"session_id,omitempty"`
	RunID        string           `json:"run_id"`
	Status       ACPRunStatus     `json:"status"`
	AwaitRequest *ACPAwaitRequest `json:"await_request,omitempty"`
	Output       []ACPMessage     `json:"output,omitempty"`
	Error        *ACPErr          `json:"error,omitempty"`
	CreatedAt    string           `json:"created_at"`
	FinishedAt   string           `json:"finished_at,omitempty"`
	// ContinuationRunRef is the name of a follow-up AgentRun created when a
	// waiting run is resumed with a clarify answer (see resumeACPRun). Clients
	// should poll this run instead of the original.
	ContinuationRunRef string `json:"continuationRunRef,omitempty"`
}

type ACPRunAwaitingEvent struct {
	Type string `json:"type"`
	Run  ACPRun `json:"run"`
}

type ACPRunCancelledEvent struct {
	Type string `json:"type"`
	Run  ACPRun `json:"run"`
}

type ACPRunCompletedEvent struct {
	Type string `json:"type"`
	Run  ACPRun `json:"run"`
}

type ACPRunCreateRequest struct {
	AgentName string       `json:"agent_name"`
	Input     []ACPMessage `json:"input"`
	SessionID string       `json:"session_id,omitempty"`
	Session   *ACPSession  `json:"session,omitempty"`
	Mode      ACPRunMode   `json:"mode,omitempty"`
}

type ACPRunCreatedEvent struct {
	Type string `json:"type"`
	Run  ACPRun `json:"run"`
}

type ACPRunFailedEvent struct {
	Type string `json:"type"`
	Run  ACPRun `json:"run"`
}

type ACPRunInProgressEvent struct {
	Type string `json:"type"`
	Run  ACPRun `json:"run"`
}

type ACPRunMode string

type ACPRunStatus string

type ACPServer struct {
	// contains filtered or unexported fields
}

type ACPSession struct {
	ID      string   `json:"id"`
	History []string `json:"history"`
	State   string   `json:"state,omitempty"`
}

type ACPToolInfo struct {
	Name        string         `json:"name"`
	Description string         `json:"description,omitempty"`
	InputSchema map[string]any `json:"input_schema,omitempty"`
}

type AdminRateLimit struct {
	RequestsPerMinute int `json:"requestsPerMinute,omitempty"`
	ConcurrentRuns    int `json:"concurrentRuns,omitempty"`
}

type AdminTenantCreateRequest struct {
	Name              string          `json:"name"`
	AllowedNamespaces []string        `json:"allowedNamespaces"`
	ClientID          string          `json:"clientID"`
	ClientSecret      string          `json:"clientSecret,omitempty"`
	AllowedAgents     []string        `json:"allowedAgents,omitempty"`
	RateLimit         *AdminRateLimit `json:"rateLimit,omitempty"`
	BudgetPerDayUSD   string          `json:"budgetPerDayUSD,omitempty"`
}

type AdminTenantResponse struct {
	Name              string          `json:"name"`
	Namespace         string          `json:"namespace"`
	ClientID          string          `json:"clientID"`
	ClientSecret      string          `json:"clientSecret,omitempty"`
	AllowedNamespaces []string        `json:"allowedNamespaces"`
	AllowedAgents     []string        `json:"allowedAgents,omitempty"`
	RateLimit         *AdminRateLimit `json:"rateLimit,omitempty"`
	BudgetPerDayUSD   string          `json:"budgetPerDayUSD,omitempty"`
}

type Alert struct {
	// ID is a stable identifier for the alert (e.g. "redis-down").
	ID string `json:"id"`
	// SubSystem is the subsystem the alert pertains to (e.g. "redis", "kubernetes-api").
	SubSystem string `json:"subsystem"`
	// State is "firing" or "resolved".
	State AlertState `json:"state"`
	// Message is a human-readable description of the current condition.
	Message string `json:"message"`
	// FirstSeen is when the alert first entered the firing state.
	FirstSeen time.Time `json:"firstSeen"`
	// LastSeen is when the alert was last evaluated.
	LastSeen time.Time `json:"lastSeen"`
	// ResolvedAt is set when the alert transitions to resolved.
	ResolvedAt *time.Time `json:"resolvedAt,omitempty"`
}

type AlertManager struct {
	// contains filtered or unexported fields
}

type AlertState string

type AlertWebhook struct {
	URL     string `json:"url"`
	HMACKey []byte `json:"-"` // raw HMAC key (resolved from K8s Secret by caller)
}

type ApprovalNotifier interface {
	NotifyApproval(ctx context.Context, a postgresql.Approval) error
}

type ExternalAPIServer struct {
	// contains filtered or unexported fields
}

type ExternalAuth struct {
	// contains filtered or unexported fields
}

type MetricSample struct {
	Time            int64   `json:"time"`
	RequestCount    int     `json:"requestCount"`
	EgressPublished int     `json:"egressPublished"`
	EgressFailed    int     `json:"egressFailed"`
	P50LatencyMs    float64 `json:"p50LatencyMs"`
	P95LatencyMs    float64 `json:"p95LatencyMs"`
	P99LatencyMs    float64 `json:"p99LatencyMs"`
	TokenThroughput float64 `json:"tokenThroughput"`
}

type OIDCLoginHandler struct {
	// contains filtered or unexported fields
}

type OIDCLoginOption func(*OIDCLoginHandler)

type ProviderHealth struct {
	Name      string `json:"name"`
	Namespace string `json:"namespace"`
	Ready     bool   `json:"ready"`
	LatencyMs int    `json:"latencyMs,omitempty"`
	Message   string `json:"message,omitempty"`
}

type QuotaError struct {
	Code       int
	Message    string
	RetryAfter time.Duration // >0 only for 429
}

type RateLimiter struct {
	// contains filtered or unexported fields
}

type Server struct {
	// contains filtered or unexported fields
}

type SystemMetrics struct {
	RequestCount24h int            `json:"requestCount24h"`
	P50LatencyMs    float64        `json:"p50LatencyMs"`
	P95LatencyMs    float64        `json:"p95LatencyMs"`
	P99LatencyMs    float64        `json:"p99LatencyMs"`
	TokenThroughput float64        `json:"tokenThroughput"`
	EgressPublished int            `json:"egressPublished"`
	EgressFailed    int            `json:"egressFailed"`
	Samples         []MetricSample `json:"samples,omitempty"`
}

type SystemStatusResponse struct {
	StateConfigured      bool                    `json:"stateConfigured"`
	Version              string                  `json:"version"`
	SubSystems           []SystemSubSystemStatus `json:"subsystems"`
	ModelProviders       []ProviderHealth        `json:"modelProviders,omitempty"`
	Metrics              *SystemMetrics          `json:"metrics,omitempty"`
	RunHistoryConfigured bool                    `json:"runHistoryConfigured"`
}

type SystemSubSystemStatus struct {
	Name      string `json:"name"`
	Status    string `json:"status"`
	Message   string `json:"message,omitempty"`
	LatencyMs int    `json:"latencyMs,omitempty"`
}

type TaskCallback struct {
	URL string `json:"url"`
	// SecretRef is the name of a Kubernetes Secret in the tenant namespace.
	// When set, the controller reads its `hmac-key` value and signs each
	// delivery with an `X-Agentorc-Signature: sha256=<hex>` header (HMAC-SHA256
	// over the raw JSON body) plus an `X-Agentorc-Timestamp`. Receivers verify
	// the signature with the same shared key. When absent, the callback is
	// delivered unsigned (backward compatible).
	SecretRef string `json:"secretRef,omitempty"`
}

type TaskLinks struct {
	Self   string `json:"self"`
	Stream string `json:"stream,omitempty"`
}

type TaskResponse struct {
	ID          string            `json:"id"`
	Agent       string            `json:"agent"`
	Status      string            `json:"status"`
	Output      string            `json:"output,omitempty"`
	SpendUSD    string            `json:"spendUSD,omitempty"`
	CreatedAt   string            `json:"createdAt,omitempty"`
	CompletedAt string            `json:"completedAt,omitempty"`
	Metadata    map[string]string `json:"metadata,omitempty"`
	Links       *TaskLinks        `json:"links,omitempty"`
}

type TaskSubmission struct {
	Agent    string            `json:"agent"`
	Input    string            `json:"input"`
	Timeout  string            `json:"timeout,omitempty"`
	Callback *TaskCallback     `json:"callback,omitempty"`
	Metadata map[string]string `json:"metadata,omitempty"`
	// Egress configures durable result delivery to an external message bus.
	// +optional
	Egress *agentorcav1alpha1.EgressConfig `json:"egress,omitempty"`
}

type TenantIdentity struct {
	// TenantName is the TenantConfig CR name.
	TenantName string
	// Namespace is the tenant's primary (first) authorized namespace. Kept as a
	// single string for backward compatibility with the "namespace" bearer/session
	// JWT claim and single-namespace consumers; the full authorized set is in
	// Namespaces below.
	Namespace string
	// Namespaces is the full set of Kubernetes namespaces this tenant is
	// authorized to access (spec.allowedNamespaces). Agent/run lookups resolve to
	// the resource's own namespace within this set; lists span the whole set.
	Namespaces []string
	// AllowedAgents is the list of agents this tenant may invoke. Nil means all.
	AllowedAgents []string

	// UserID is the authenticated user's stable identifier (e.g. the IdP sub or
	// email claim). Populated from the bearer/session token's "userid" claim.
	// Empty for client_credentials and K8s SA callers (tenant-level, not user-level).
	// +optional
	UserID string
	// Groups are the user's group memberships (e.g. from an IdP "groups" claim),
	// carried through the identity so a future RBAC layer can map group -> role.
	// Intentionally NOT used for authorization yet.
	// +optional
	Groups []string
	// Roles are resolved from Groups by a future role-mapper; empty until that
	// layer exists. Present so the identity shape is stable for RBAC.
	// +optional
	Roles []string

	// Quota fields below are populated from the tenant's TenantConfig (if any) and
	// are only set for issued/federated tenants — never for in-cluster K8s SA callers,
	// which assert their own namespace identity and are not rate/budget limited here.
	//
	// RateLimitRPM is RequestsPerMinute from TenantConfig.spec.rateLimit.
	RateLimitRPM int
	// ConcurrentRuns is spec.rateLimit.concurrentRuns.
	ConcurrentRuns int
	// BudgetPerDayUSD is spec.budgetPerDayUSD.
	BudgetPerDayUSD string
}

type ToolApprovalStore interface {
	RequestApproval(ctx context.Context, a postgresql.Approval) (postgresql.Approval, error)
	GetApproval(ctx context.Context, id string) (postgresql.Approval, error)
	DecideApproval(ctx context.Context, id, status, by, reason string) (postgresql.Approval, error)
}

type UIServer struct {
	// contains filtered or unexported fields
}