protocol

var (
	// ErrAuthRequired — the attacher signals the MCP server needs
	// authorization. The service parks on the unified pause/resume primitive.
	// Concrete attachers wrap this so the service reaches it via errors.Is.
	ErrAuthRequired = errors.New("agentcfg/protocol: mcp connection requires authorization")
	// ErrConnectionAttachUnavailable — add_mcp_connection was called but no
	// ConnectionAttacher is wired on this runtime (→ 501).
	ErrConnectionAttachUnavailable = errors.New("agentcfg/protocol: mcp connection attach not wired on this runtime")
	// ErrStdioNotAllowed — a stdio add named a command absent from the
	// fail-closed allowlist (→ 403). Adding a stdio server is the most
	// privileged action; the allowlist is the §7 RCE gate.
	ErrStdioNotAllowed = errors.New("agentcfg/protocol: stdio mcp connection command is not allowlisted")
	// ErrInvalidConnection — the connection descriptor failed validation
	// (empty name, unknown transport, missing/incoherent command/URL) (→ 400).
	ErrInvalidConnection = errors.New("agentcfg/protocol: invalid mcp connection descriptor")
	// ErrCoordinatorUnavailable — an auth-required attach fired but no
	// pause/resume Coordinator is wired (→ 500). Fail loud rather than drop
	// the auth requirement silently (CLAUDE.md §13).
	ErrCoordinatorUnavailable = errors.New("agentcfg/protocol: pause/resume coordinator not wired for the mcp oauth path")
)

var (
	// ErrAgentPacksReadOnly rejects the generic whole-payload authoring door.
	// Pack bodies are accepted only by the dedicated verbs, which apply the
	// server provenance stamp and the pack invariants before persistence.
	ErrAgentPacksReadOnly = errors.New("agentcfg/protocol: agent packs require the dedicated pack verbs")
	// ErrAgentPacksInvalid — a pack verb received a malformed item, a
	// non-agent scope, a smuggled origin, a caller-supplied origin_ref, an
	// over-bounded pack, or an empty/over-bounded intent. Fails closed
	// before any revision write.
	ErrAgentPacksInvalid = errors.New("agentcfg/protocol: invalid agent pack")
	// ErrAgentPackProposeUnavailable — propose was called but no
	// AgentPackProposer is wired on this runtime (→ 501 at the wire edge).
	// The deterministic pack verbs stay live regardless.
	ErrAgentPackProposeUnavailable = errors.New("agentcfg/protocol: agent pack proposer not wired on this runtime")
	// ErrAgentPackProposalUnavailable means the durable proposal ledger was not
	// wired. A proposal must never be represented by forgeable client text.
	ErrAgentPackProposalUnavailable = errors.New("agentcfg/protocol: durable agent pack proposal ledger not wired")
	// ErrAgentPackProposalInvalid means the proposal token is absent, expired,
	// consumed, or bound to different server-side inputs.
	ErrAgentPackProposalInvalid = errors.New("agentcfg/protocol: invalid or consumed agent pack proposal")
	// ErrAgentPackHashMismatch — commit's ReviewedHash does not equal the
	// canonical content hash of the submitted body. The commit is refused
	// and NOTHING is persisted (the two-phase CAS half).
	ErrAgentPackHashMismatch = errors.New("agentcfg/protocol: pack commit hash does not match the reviewed hash")
	// ErrAgentPackProvenanceMismatch — commit's Provenance does not match
	// the deterministic proposal stamp for (agent, reviewed hash). Refused
	// before any write — a commit must echo the exact proposal it reviewed.
	ErrAgentPackProvenanceMismatch = errors.New("agentcfg/protocol: pack commit provenance does not match the proposal stamp")
	// ErrAgentPackNotFound — remove named a pack item the active revision
	// does not contain. Fails loud so a stale remove can never silently
	// no-op (dangling-membership prevention).
	ErrAgentPackNotFound = errors.New("agentcfg/protocol: pack item not found")
)

var (
	// ErrPreviewIdentityRequired — the request carried no verified identity
	// on ctx, an incomplete target triple, or an empty effective agent id.
	// Fails closed (identity is mandatory).
	ErrPreviewIdentityRequired = errors.New("agentcfg/protocol: composition preview requires a complete verified identity and effective agent")
	// ErrPreviewMisconfigured — the service was constructed without a
	// mandatory dependency (the agent-config reader or the boot-pack reader).
	ErrPreviewMisconfigured = errors.New("agentcfg/protocol: composition preview missing a mandatory dependency")
	// ErrPreviewSessionReachDenied — a PRESENT signed session_reach claim
	// does not contain the target session. Loud — the settled reach contract.
	ErrPreviewSessionReachDenied = errors.New("agentcfg/protocol: composition preview session reach denied")
	// ErrPreviewAgentReachDenied — the caller's signed agent_reach does not
	// contain the effective agent, or no reach is established on ctx (the
	// gate fails closed; an unwired gate is an honest "cannot verify reach",
	// never a silent widening).
	ErrPreviewAgentReachDenied = errors.New("agentcfg/protocol: composition preview agent reach denied")
)

var (
	// ErrConnectionNotFound — remove_mcp_connection named a connection that is
	// not in the agent's active revision (never runtime-added, or already
	// removed). No revision recorded, no event emitted (→ 404).
	ErrConnectionNotFound = errors.New("agentcfg/protocol: mcp connection not found in the agent's active revision")
	// ErrBootDeclaredConnection — remove_mcp_connection named a server that is
	// declared in the boot yaml (`tools.mcp_servers`). Distinct from
	// ErrConnectionNotFound: the verb governs revisioned state only; a
	// boot-declared server is edited in yaml + restart, not removed through
	// the control plane. No revision recorded, no event emitted (→ 400).
	ErrBootDeclaredConnection = errors.New("agentcfg/protocol: connection is boot-declared (yaml) — edit tools.mcp_servers and restart; the control plane governs runtime-added connections only")
)

var (
	// ErrIdentityRequired — the request carried an incomplete identity
	// triple or an empty agent id. Fails closed.
	ErrIdentityRequired = errors.New("agentcfg/protocol: identity scope incomplete")
	// ErrMisconfigured — NewService was called with a nil registry.
	ErrMisconfigured = errors.New("agentcfg/protocol: NewService missing a mandatory dependency")
	// ErrSkillsUnavailable — a skills method was called but its SkillStore or
	// session-personal controller was not wired into the Service.
	ErrSkillsUnavailable = errors.New("agentcfg/protocol: skills control not wired on this runtime")
	// ErrUnknownModel — a set_llm_params (or a set_revision carrying an
	// LLMParams.Model) named a model with no configured ModelProfile. The
	// per-agent model is validated at set time (parity with the tenant
	// model-swap), so an invalid model can never be persisted — fail loud,
	// never a silent fallback (CLAUDE.md §13).
	ErrUnknownModel = errors.New("agentcfg/protocol: unknown model (no configured ModelProfile)")
	// ErrInvalidLLMParams — a set_llm_params (or a set_revision carrying an
	// LLMParams section) supplied an out-of-range sampling value (temperature
	// outside [0,2], non-positive max-tokens, or an unknown reasoning-effort).
	// Validated at set time so an invalid value never reaches a run (parity
	// with runs.set_overrides), fail loud (CLAUDE.md §13).
	ErrInvalidLLMParams = errors.New("agentcfg/protocol: invalid LLM parameters")
	// ErrInvalidHooks — a set_revision carrying a hooks section supplied an
	// invalid run-completion hook (a negative timeout_ms). Validated at set
	// time so an invalid value is rejected loud BEFORE any registry write —
	// parity with the yaml validator's negative-timeout rejection; the
	// normalizer's negative→0 coercion is defence-in-depth behind this gate,
	// never the primary posture (CLAUDE.md §13).
	ErrInvalidHooks = errors.New("agentcfg/protocol: invalid hooks section")
	// ErrInvalidToolExposureLoading — a set_tool_exposure (or a set_revision
	// carrying a ToolExposure section) supplied a server_loading_modes /
	// tool_loading_modes entry with an empty key or a value outside
	// "always"|"deferred". Validated at set time BEFORE any registry write
	// so an invalid override can never be persisted — no revision, no
	// event — fail loud, never a silent drop (CLAUDE.md §13).
	ErrInvalidToolExposureLoading = errors.New("agentcfg/protocol: invalid tool-loading-mode override")
	// ErrInvalidNaming — a set_revision carrying a naming section supplied an
	// invalid session auto-naming policy: a negative after_turns / repeat_every
	// / max_repetitions, a max_title_len outside [8,200], a repeat_every > 0
	// with max_repetitions < 1 (no unlimited value exists), or an unknown
	// model. Validated at set time BEFORE any registry write so an invalid
	// policy can never be persisted — fail loud, never a silent clamp
	// (CLAUDE.md §13). The model is validated via the same validateModel path
	// as set_llm_params.
	ErrInvalidNaming = errors.New("agentcfg/protocol: invalid naming section")
	// ErrInvalidExtraSystemBlocks — a set_extra_system_blocks (or a
	// set_revision carrying a blocks section) supplied a block with an
	// empty / out-of-charset name, an empty body, or a DUPLICATE name.
	// Uniqueness is what makes remove-by-name well defined — it is the
	// whole composability property the section exists for — so a duplicate
	// is refused loud BEFORE any registry write rather than silently
	// de-duplicated (CLAUDE.md §13). The message names the offender and,
	// for a duplicate, BOTH offending positions.
	ErrInvalidExtraSystemBlocks = errors.New("agentcfg/protocol: invalid extra system blocks section")
	// ErrSignedCapabilityPairReadOnly rejects every generic authoring door for
	// immutable signed-pair state. It is a client error, not a silently
	// ignored field: callers must use register_oauth_mcp_capability.
	ErrSignedCapabilityPairReadOnly = errors.New("agentcfg/protocol: signed oauth mcp capability pair is server-owned and read-only")
	// ErrSignedCapabilityUnavailable means this Runtime was not booted with an
	// explicitly enabled signed-capability trust anchor or private preparation seams.
	ErrSignedCapabilityUnavailable = errors.New("agentcfg/protocol: signed oauth mcp capability registration is not wired or boot-authorized")
	// ErrSignedCapabilityPairExists rejects a second pair for an agent until the
	// paired-removal lifecycle lands; generic provider/connection writers never
	// compose with a signed pair.
	ErrSignedCapabilityPairExists = errors.New("agentcfg/protocol: signed oauth mcp capability pair already exists")
	// ErrInvalidSignedCapabilityDescriptor is the closed descriptor validation
	// failure for the signed capability's HTTP-only MCP connection shape.
	ErrInvalidSignedCapabilityDescriptor = errors.New("agentcfg/protocol: invalid signed oauth mcp capability descriptor")
)

var (
	// ErrInvalidLLMProvider — the descriptor failed validation (empty name /
	// provider, empty/non-remote credential_source, empty inference_broker)
	// (→ 400).
	ErrInvalidLLMProvider = errors.New("agentcfg/protocol: invalid llm provider descriptor")
	// ErrLLMProviderBrokerUnknown — the descriptor's inference_broker resolves
	// to no boot-declared broker (→ 400). No admin-writable field determines a
	// sink, so an unknown broker is a loud client error, never a silent accept.
	ErrLLMProviderBrokerUnknown = errors.New("agentcfg/protocol: inference_broker resolves to no boot-declared broker")
	// ErrLLMProviderInstallUnavailable — set_llm_provider was called but no
	// LLMProviderInstaller is wired on this runtime (→ 501).
	ErrLLMProviderInstallUnavailable = errors.New("agentcfg/protocol: llm provider install not wired on this runtime")
)

var (
	// ErrInvalidProvider — the provider descriptor failed validation (empty
	// name, wrong driver, empty/wrong credential_source, empty credential_broker)
	// (→ 400).
	ErrInvalidProvider = errors.New("agentcfg/protocol: invalid oauth provider descriptor")
	// ErrBootDeclaredProvider — set/remove_oauth_provider named a boot-declared
	// (yaml) provider — a DISTINCT loud error (boot wins; edit yaml + restart)
	// (→ 400).
	ErrBootDeclaredProvider = errors.New("agentcfg/protocol: oauth provider is boot-declared (edit yaml + restart, not the control plane)")
	// ErrProviderNotFound — remove_oauth_provider named a provider absent from
	// the agent's revisioned installed-provider set (→ 404).
	ErrProviderNotFound = errors.New("agentcfg/protocol: oauth provider not found in the agent's installed set")
	// ErrProviderInstallUnavailable — set/remove_oauth_provider was called but
	// no ProviderInstaller is wired on this runtime (→ 501).
	ErrProviderInstallUnavailable = errors.New("agentcfg/protocol: oauth provider install not wired on this runtime")
	// ErrProviderBrokerUnknown — the descriptor's credential_broker resolves to
	// no boot-declared broker (→ 400). The installer wraps its own broker error;
	// this sentinel lets the wire handler classify it as a client error.
	ErrProviderBrokerUnknown = errors.New("agentcfg/protocol: credential_broker resolves to no boot-declared broker")
	// ErrWireDescriptorNotAllowed — a provider descriptor (set_oauth_provider or
	// an add_mcp_connection inline binding) carried a credential-sink field
	// (token_url / audience / remote) while the fail-closed
	// tools.allow_wire_oauth_descriptor opt-in was OFF (→ 400). The default
	// zero-URL name-only posture is unchanged; the reject names the offending
	// field + the opt-in key.
	ErrWireDescriptorNotAllowed = errors.New("agentcfg/protocol: wire-carried oauth-provider descriptor is not allowed (the fail-closed tools.allow_wire_oauth_descriptor opt-in is off)")
)

var (
	// ErrUserSkillImportMisconfigured — the service was constructed without
	// a mandatory dependency (importer / artifact store / token sealer /
	// commit ledger / skill store / registry / capability policy).
	ErrUserSkillImportMisconfigured = errors.New("agentcfg/protocol: user skill import missing a mandatory dependency")
	// ErrUserSkillImportIdentityRequired — the request carried no verified
	// identity on ctx, an incomplete triple, or an empty effective agent id.
	ErrUserSkillImportIdentityRequired = errors.New("agentcfg/protocol: user skill import requires a complete verified identity and effective agent")
	// ErrUserSkillImportSessionReachDenied — a PRESENT signed session_reach
	// claim does not contain the caller's session.
	ErrUserSkillImportSessionReachDenied = errors.New("agentcfg/protocol: user skill import session reach denied")
	// ErrUserSkillImportAgentReachDenied — the effective agent is outside
	// the caller's signed agent_reach, or no reach is established on ctx
	// (the gate fails closed; an unwired gate is an honest "cannot verify
	// reach", never a silent widening).
	ErrUserSkillImportAgentReachDenied = errors.New("agentcfg/protocol: user skill import effective-agent reach denied")
	// ErrUserSkillImportArtifactNotFound — the artifact id does not resolve
	// under the caller's exact (tenant, user, session) triple. Non-oracular:
	// a foreign / erased / cross-session reference and a never-uploaded id
	// return the same typed not-found.
	ErrUserSkillImportArtifactNotFound = errors.New("agentcfg/protocol: user skill import artifact not found or not caller-owned")
	// ErrUserSkillImportArtifactChanged — the re-resolved artifact bytes do
	// not match the recorded digest/size the claims pinned.
	ErrUserSkillImportArtifactChanged = errors.New("agentcfg/protocol: user skill import artifact changed after validation")
	// ErrUserSkillImportPackageInvalid — the artifact is not a valid
	// complete skill package (archive / path / MIME / SKILL.md / support-ref
	// / frontmatter violations, including every authority-bearing
	// frontmatter field). Wraps the canonical importer / skillpkg sentinel.
	ErrUserSkillImportPackageInvalid = errors.New("agentcfg/protocol: user skill import artifact is not a valid complete skill package")
	// ErrUserSkillImportProposalInvalid — the proposal token is unknown,
	// consumed, foreign, or stale: oversize, malformed base64, failed
	// authentication, unknown schema, malformed claims, or bound to
	// different server-side inputs (actor, agent, name, reviewed hash,
	// expected config hash).
	ErrUserSkillImportProposalInvalid = errors.New("agentcfg/protocol: invalid, consumed, foreign, or stale user skill import proposal token")
	// ErrUserSkillImportExpired — the proposal token's review window elapsed
	// before an explicit commit.
	ErrUserSkillImportExpired = errors.New("agentcfg/protocol: user skill import proposal token expired")
	// ErrUserSkillImportHashMismatch — the reviewed package hash the commit
	// echoes does not equal the package the claims pinned (a changed review
	// is refused before any write).
	ErrUserSkillImportHashMismatch = errors.New("agentcfg/protocol: user skill import reviewed package hash mismatch")
	// ErrUserSkillImportPolicyRevoked — the capability policy snapshot
	// changed between validate and commit (the review is no longer
	// authoritative).
	ErrUserSkillImportPolicyRevoked = errors.New("agentcfg/protocol: user skill import capability policy revoked (the reviewed snapshot changed)")
	// ErrUserSkillImportConfigMoved — the caller's user-scope config base
	// moved between validate and commit (the expected content hash is no
	// longer active).
	ErrUserSkillImportConfigMoved = errors.New("agentcfg/protocol: user skill import config base moved (the expected content hash is no longer active)")
	// ErrUserSkillImportCeilingChanged — the effective archive/SKILL.md
	// ceilings changed between validate and commit (the reviewed ceiling
	// snapshot is no longer current).
	ErrUserSkillImportCeilingChanged = errors.New("agentcfg/protocol: user skill import configured ceilings changed after validation")
	// ErrUserSkillImportReplaceRequired — a different package already wins
	// the target key and the commit did not carry explicit replacement
	// consent.
	ErrUserSkillImportReplaceRequired = errors.New("agentcfg/protocol: user skill import replacement requires explicit consent")
	// ErrUserSkillImportConcurrentWinner — the target key is held by a
	// different package version than the one this commit's claims
	// reviewed/wrote. One winner only: this commit refuses rather than
	// overwrite.
	ErrUserSkillImportConcurrentWinner = errors.New("agentcfg/protocol: user skill import target is held by a different winner")
)

var ErrBootPackOwned = errors.New("agentcfg/protocol: pack name is boot-declared and read-only to the control plane")

var ErrConnectionOwnerMismatch = errors.New("agentcfg/protocol: connection is registered to a different owner — a live connection write applies to the caller's own connection")

var ErrDiscoveryOriginsNotHTTP = errors.New("agentcfg/protocol: connection is a stdio transport — OAuth-discovery origins apply only to http connections")

var ErrDiscoveryTargetNotLive = errors.New("agentcfg/protocol: connection not attached in the live MCP registry — allowance recorded in the revision, applied on next reconcile")

var ErrSessionOverlayUnavailable = errors.New("agentcfg/protocol: session safe-subset control not wired on this runtime")

var ErrWireInjectionNotAllowed = errors.New("agentcfg/protocol: wire-carried credential-injection mapping is not allowed (the fail-closed tools.allow_wire_injection opt-in is off)")