agent

type CreateCmd struct {
	SpaceID      string
	UserID       string
	Name         string
	Description  string
	Instructions string
	// Model is the catalog model name this agent's runs call. Empty means the
	// deployment default. See agentdef.Agent.Model.
	Model string
	// Plugins names catalog plugins this agent loads. Nothing is inherited
	// from the space's activations, so an empty list means no plugins.
	Plugins []string
	// SandboxNetworkTier and SandboxFilesystemTier declare this agent's
	// worker sandbox needs. Empty means the strictest tier on that axis. See
	// docs/design/agent-sandbox-policy.md §4.2.
	SandboxNetworkTier    string
	SandboxFilesystemTier string
	// SecretConsumption declares which Space Secrets this agent consumes.
	SecretConsumption agentdef.SecretConsumption
}

type ModelCatalog interface {
	ModelNames(ctx context.Context) ([]string, error)
}

type PluginSelection interface {
	ResolveSelection(ctx context.Context, spaceID string, names []string, actorID string) ([]coreplugin.Activation, error)
}

type RestoreRevisionCmd struct {
	SpaceID  string
	UserID   string
	AgentID  string
	Revision int
}

type SecretLookup interface {
	GetSecret(ctx context.Context, id string) (*coresecret.Secret, error)
}

type Service struct {
	Agents agentdef.Store
	Spaces interface {
		GetSpace(context.Context, string) (*corespace.Space, error)
	}
	// Plugins is optional, and nil means the deployment has no Marketplace.
	// An agent that names a plugin is then refused rather than saved: storing
	// a selection nothing can resolve would be a definition that silently does
	// less than it says.
	Plugins PluginSelection
	// Workflows is optional. Nil means the deployment cannot answer which
	// workflows use an agent, so a delete is not blocked on that check -- the
	// same behaviour as before, when the handler skipped it on a nil store.
	Workflows WorkflowUsage
	// Secrets is optional, and nil means the deployment has no secret store.
	// An agent that consumes a Secret is then refused rather than saved, the
	// same way a plugin selection is refused with no Marketplace.
	Secrets SecretLookup
	// Models is optional, and nil means this deployment cannot enumerate its
	// models -- a direct-transport deployment reads its one model from
	// server.yaml and has no catalog to check against. A model name is then
	// stored unchecked and takes effect only if the run's transport can reach
	// it; unlike a plugin, an unresolvable model has a defined fallback (the
	// deployment default) at run time, so it is accepted rather than refused.
	Models ModelCatalog
	// Audit is optional; nil discards the events. An agent definition is
	// instructions plus a tool and model selection that later runs execute, so a
	// change to one is a governed act worth the trail.
	Audit *audit.Recorder
}

type UpdateCmd struct {
	SpaceID               string
	UserID                string
	AgentID               string
	Name                  string
	Description           string
	Instructions          string
	Model                 string
	Plugins               []string
	SandboxNetworkTier    string
	SandboxFilesystemTier string
	SecretConsumption     agentdef.SecretConsumption
}

type WorkflowUsage interface {
	PublishedWorkflowsUsingAgent(ctx context.Context, spaceID, agentID string) ([]coreworkflow.Workflow, error)
}