runtime

package

Go to main page

Versions in this module

v0

v0.19.0

Aug 21, 2026

v0.18.1

Aug 20, 2026

Changes in this version

+ const AuditLLMCallFailed

+ const AuditPDPDecision

+ const EventMCPAuthRequired

+ const EventMCPAuthResolved

+ const EventMCPAuthTimeout

type LLMCallAuditArgs

+ ErrorText string

+ Failed bool

+ type SequenceRegistry struct

+ func NewSequenceRegistry() *SequenceRegistry

+ func (r *SequenceRegistry) Evict(correlationID, taskID string)

+ func (r *SequenceRegistry) Get(correlationID, taskID string) *SequenceCounter

+ func (r *SequenceRegistry) NextSequenceFor(correlationID, taskID string) int64

+ func (r *SequenceRegistry) Register(correlationID, taskID string, c *SequenceCounter)

v0.17.1

Jul 14, 2026

Changes in this version

+ type PlatformCommandGuard struct

+ func NewPlatformCommandGuard(specs []PlatformCommandSpec) (*PlatformCommandGuard, error)

+ func (g *PlatformCommandGuard) Empty() bool

+ func (g *PlatformCommandGuard) Match(toolName, toolInput string) *PlatformCommandMatch

+ type PlatformCommandMatch struct

+ LayerPath string

+ LayerSource string

+ Message string

+ Pattern string

+ type PlatformCommandSpec struct

+ LayerPath string

+ LayerSource string

+ Message string

+ Pattern string

v0.17.0

Jul 13, 2026

Changes in this version

+ const AuditAuthStepUpRequired

+ const AuditChainGenesis

+ const AuditCredentialFailed

+ const AuditCredentialIssued

+ const AuditCredentialRevoked

+ const AuditIntentAlignment

+ const AuditIntentDrift

+ const AuditTaskDeferred

+ const AuditTaskDeferredDecision

+ const AuditTaskDeferredTimeout

+ const CompressionMarkerPrefix

+ const EnvAuditStatusKeepaliveInterval

+ const SigCanonicalizationJCS1

+ var AuditExportStatusKeepaliveInterval = 15 * time.Minute

+ var AuditExportStatusPollInterval = 15 * time.Second

+ var ErrConflict = errors.New("session store: version conflict")

+ func EnsureCorrelationID(ctx context.Context) context.Context

+ func PublicKeyFromJWK(j JWK) (ed25519.PublicKey, error)

+ func VerifySignature(pub ed25519.PublicKey, canonical []byte, sigB64 string) error

type AuditEvent

+ Kid string

+ PrevHash string

+ Sig string

+ Sigp string

type AuditLogger

+ func (a *AuditLogger) SetSigner(s *AuditSigner)

+ type AuditSigner struct

+ func NewAuditSigner(k LoadedKey) *AuditSigner

+ func (s *AuditSigner) Kid() string

+ func (s *AuditSigner) Sign(canonical []byte) string

+ type DeferSpec struct

+ ContextForApprover string

+ Timeout time.Duration

+ To string

+ type JWK struct

+ Alg string

+ Crv string

+ Kid string

+ Kty string

+ Use string

+ X string

+ type JWKS struct

+ Keys []JWK

+ func PublicJWKS(keys ...LoadedKey) JWKS

type LLMExecutorConfig

+ DeferToolResultTruncation bool

+ type LoadedKey struct

+ Kid string

+ Private ed25519.PrivateKey

+ Public ed25519.PublicKey

+ func LoadEd25519KeyFromEnv(varName, kidEnvVar string) (*LoadedKey, error)

+ func LoadEd25519KeyFromFile(path, kid string) (*LoadedKey, error)

+ type PolicyDecision int

+ const DecisionAllow

+ const DecisionDefer

+ const DecisionDeny

+ const DecisionModify

+ const DecisionStepUp

+ func (d PolicyDecision) String() string

+ type PolicyResult struct

+ Decision PolicyDecision

+ Defer *DeferSpec

+ Modified string

+ Reason string

+ RequiredAcr string

+ func Allow() PolicyResult

+ func Defer(to string, timeout time.Duration, contextForApprover, reason string) PolicyResult

+ func Deny(reason string) PolicyResult

+ func Modify(newContent, reason string) PolicyResult

+ func StepUp(requiredAcr, reason string) PolicyResult

+ type RemoteSessionStore struct

+ func NewRemoteSessionStore(cfg RemoteSessionStoreConfig) *RemoteSessionStore

+ func (r *RemoteSessionStore) Delete(taskID string) error

+ func (r *RemoteSessionStore) Load(taskID string) (*SessionData, error)

+ func (r *RemoteSessionStore) Save(data *SessionData) error

+ type RemoteSessionStoreConfig struct

+ AgentID string

+ BaseURL string

+ HTTPClient *http.Client

+ Logger Logger

+ OrgID string

+ PlatformToken string

+ WorkspaceID string

+ type SessionStore interface

+ Delete func(taskID string) error

+ Load func(taskID string) (*SessionData, error)

+ Save func(data *SessionData) error

+ type VerifyOptions struct

+ Pubkeys map[string]ed25519.PublicKey

+ SkipChain bool

+ type VerifyResult struct

+ BadEvent AuditEvent

+ ChainChecked int

+ Errors []string

+ EventCount int

+ FirstBadLine int

+ GenesisSeen bool

+ Reason string

+ SigChecked int

+ func VerifyAuditLog(r io.Reader, opts VerifyOptions) (VerifyResult, error)

+ func (r VerifyResult) OK() bool

v0.16.0

Jul 1, 2026

Changes in this version

+ const AuditTaskAdmissionDenied

+ const EnvAuditCaptureLLMMessages

+ const EnvAuditCaptureLLMResponse

+ const EnvAuditCaptureMaxBytes

+ const EnvAuditCaptureRedact

+ const EnvAuditCaptureToolArgs

+ const EnvAuditCaptureToolResult

+ const HeaderWorkflowExecutionID

+ func EnsureSequenceCounter(ctx context.Context) context.Context

+ func PrepareCapturedContent(s string, redact bool, maxBytes int) string

+ func WrapTransportForWorkflowPropagation(rt http.RoundTripper, matcher *WorkflowPropagationMatcher) http.RoundTripper

+ type AdmissionChecker interface

+ Admit func(ctx context.Context) Decision

type AuditEvent

+ WorkflowExecutionID string

type AuditPayloadCapture

+ Redact bool

+ func AuditPayloadCaptureFromEnv() AuditPayloadCapture

+ type Decision struct

+ Allowed bool

+ Cached bool

+ Fallback bool

+ Reason string

+ ResetAt time.Time

+ Scope string

+ Window string

+ type NoopAdmissionChecker struct

+ func (NoopAdmissionChecker) Admit(_ context.Context) Decision

type WorkflowContext

+ WorkflowExecutionID string

+ type WorkflowPropagationMatcher struct

+ func NewWorkflowPropagationMatcher(hosts []string) *WorkflowPropagationMatcher

+ func (m *WorkflowPropagationMatcher) IsEmpty() bool

+ func (m *WorkflowPropagationMatcher) Matches(host string) bool

v0.15.0

Jun 15, 2026

Changes in this version

+ const AuditAuthFailure

+ const AuditAuthSuccess

+ const AuditChannelDeniedByPolicy

+ const AuditEgressAllowed

+ const AuditEgressBlocked

+ const AuditExportStatus

+ const AuditGuardrail

+ const AuditInvocationCancelled

+ const AuditInvocationComplete

+ const AuditLLMCall

+ const AuditLLMCallCancelled

+ const AuditPolicyLoaded

+ const AuditPolicyViolationAtBuildTime

+ const AuditScheduleComplete

+ const AuditScheduleFire

+ const AuditScheduleModify

+ const AuditScheduleSkip

+ const AuditSchemaVersion

+ const AuditSessionEnd

+ const AuditSessionStart

+ const AuditToolExec

+ const DefaultPayloadCaptureCapBytes

+ const DefaultSpanContentCapBytes

+ const EnvAuditHTTPEndpoint

+ const EnvAuditSocket

+ const EnvAuditWriteTimeout

+ const EventAgentCardPublished

+ const EventAuthFail

+ const EventAuthVerify

+ const EventMCPServerDegraded

+ const EventMCPServerFailed

+ const EventMCPServerStarted

+ const EventMCPTokenRefresh

+ const EventMCPToolCall

+ const EventMCPToolConflict

+ const EventMCPToolResult

+ const HeaderForgeOrgID

+ const HeaderForgeWorkspaceID

+ const HeaderInvocationCaller

+ const HeaderWorkflowID

+ const HeaderWorkflowStageID

+ const HeaderWorkflowStepID

+ const InstrumentationName

+ const ProtocolVersion

+ const RedactionMarker

+ var AuditExportStatusInterval = 60 * time.Second

+ var ModelContextWindows = map[string]int

+ func AgentCardFromConfig(cfg *types.ForgeConfig, baseURL string) *a2a.AgentCard

+ func AgentCardFromSpec(spec *agentspec.AgentSpec, baseURL string) *a2a.AgentCard

+ func AppendSkillsFromDescriptors(card *a2a.AgentCard, descs []contract.SkillDescriptor)

+ func CapOrDefault(configured int) int

+ func ContextBudgetForModel(model string) int

+ func CorrelationIDFromContext(ctx context.Context) string

+ func ExtractText(msg *a2a.Message) string

+ func FilesDirFromContext(ctx context.Context) string

+ func GenerateID() string

+ func HTTPEndpointForLog(s Sink) string

+ func NextSequence(ctx context.Context) int64

+ func ParseEnvVars(r io.Reader) (map[string]string, error)

+ func PopulateSecuritySchemes(card *a2a.AgentCard, cfg *types.ForgeConfig)

+ func PrepareSpanContent(s string, redact bool, maxBytes int) string

+ func RedactSecrets(s string) string

+ func ResetTracerProviderForTest()

+ func SetTracerProvider(tp trace.TracerProvider)

+ func StartAuditExportStatus(ctx context.Context, audit *AuditLogger) (stop func())

+ func TaskIDFromContext(ctx context.Context) string

+ func Tracer() trace.Tracer

+ func TruncateForAudit(s string, max int) string

+ func WithCorrelationID(ctx context.Context, id string) context.Context

+ func WithFilesDir(ctx context.Context, dir string) context.Context

+ func WithLLMUsageAccumulator(ctx context.Context, acc *LLMUsageAccumulator) context.Context

+ func WithProgressEmitter(ctx context.Context, emitter ProgressEmitter) context.Context

+ func WithSequenceCounter(ctx context.Context, c *SequenceCounter) context.Context

+ func WithTaskID(ctx context.Context, id string) context.Context

+ func WithTenancyContext(ctx context.Context, t TenancyContext) context.Context

+ func WithWorkflowContext(ctx context.Context, w WorkflowContext) context.Context

+ type AgentExecutor interface

+ Close func() error

+ Execute func(ctx context.Context, task *a2a.Task, msg *a2a.Message) (*a2a.Message, error)

+ ExecuteStream func(ctx context.Context, task *a2a.Task, msg *a2a.Message) (<-chan *a2a.Message, error)

+ type AgentRuntime interface

+ Healthy func(ctx context.Context) bool

+ Invoke func(ctx context.Context, taskID string, msg *a2a.Message) (*a2a.Task, error)

+ Restart func(ctx context.Context) error

+ Start func(ctx context.Context) error

+ Stop func() error

+ Stream func(ctx context.Context, taskID string, msg *a2a.Message) (<-chan *a2a.Task, error)

+ type AuditEvent struct

+ CorrelationID string

+ DurationMs *int64

+ EntityID string

+ EntityType string

+ Event string

+ Fields map[string]any

+ InputTokens *int

+ InvocationCaller string

+ Model string

+ OrgID string

+ OutputTokens *int

+ Provider string

+ RequestID string

+ SchemaVersion string

+ Sequence int64

+ SpanID string

+ StageID string

+ StepID string

+ TaskID string

+ Timestamp string

+ TokensUnavailable bool

+ TraceID string

+ WorkflowID string

+ WorkspaceID string

+ type AuditExportConfig struct

+ DialTimeout time.Duration

+ HTTPEndpoint string

+ SocketPath string

+ WriteTimeout time.Duration

+ func AuditExportConfigFromEnv() AuditExportConfig

+ type AuditLogger struct

+ func NewAuditLogger(w io.Writer) *AuditLogger

+ func NewAuditLoggerFromConfig(cfg AuditExportConfig) *AuditLogger

+ func (a *AuditLogger) AddSink(s Sink)

+ func (a *AuditLogger) Close(ctx context.Context) error

+ func (a *AuditLogger) Emit(event AuditEvent)

+ func (a *AuditLogger) EmitChannelDeniedByPolicy(channel, layer, source string)

+ func (a *AuditLogger) EmitFromContext(ctx context.Context, event AuditEvent)

+ func (a *AuditLogger) EmitInvocationCancelled(ctx context.Context, reason CancellationReason, duration time.Duration, ...)

+ func (a *AuditLogger) EmitInvocationComplete(ctx context.Context, duration time.Duration, fields map[string]any)

+ func (a *AuditLogger) EmitLLMCall(ctx context.Context, args LLMCallAuditArgs)

+ func (a *AuditLogger) EmitPolicyLoaded(fields map[string]any)

+ func (a *AuditLogger) EmitPolicyViolationAtBuildTime(fields map[string]any)

+ func (a *AuditLogger) EmitToolExec(ctx context.Context, tool string, duration time.Duration, ...)

+ func (a *AuditLogger) SetOpsLogger(l Logger)

+ func (a *AuditLogger) Sinks() []Sink

+ func (a *AuditLogger) WithEntity(entityType, entityID string) *AuditLogger

+ func (a *AuditLogger) WithTenancy(orgID, workspaceID string) *AuditLogger

+ type AuditPayloadCapture struct

+ CapLLMMessagesBytes int

+ CapLLMResponseBytes int

+ CapToolArgsBytes int

+ CapToolResultBytes int

+ LLMMessages bool

+ LLMResponse bool

+ ToolArgs bool

+ ToolResult bool

+ func (c AuditPayloadCapture) AnyEnabled() bool

+ type CancellationReason string

+ const CancelReasonCostLimitExceeded

+ const CancelReasonExternalSignal

+ const CancelReasonTimeout

+ const CancelReasonWorkflowFailure

+ func CancellationReasonFromCause(ctx context.Context) CancellationReason

+ func (r CancellationReason) IsValid() bool

+ type CancellationRegistry struct

+ func NewCancellationRegistry() *CancellationRegistry

+ func (r *CancellationRegistry) Cancel(taskID string, reason CancellationReason) bool

+ func (r *CancellationRegistry) Len() int

+ func (r *CancellationRegistry) Register(taskID string, cancel context.CancelCauseFunc) (release func())

+ type Compactor struct

+ func NewCompactor(cfg CompactorConfig) *Compactor

+ func (c *Compactor) MaybeCompact(taskID string, mem *Memory) (bool, error)

+ func (c *Compactor) SetMemoryFlusher(f MemoryFlusher)

+ type CompactorConfig struct

+ CharBudget int

+ Client llm.Client

+ Logger Logger

+ MemoryFlusher MemoryFlusher

+ Store *MemoryStore

+ TriggerRatio float64

+ type FallbackModelConfig struct

+ Client llm.ClientConfig

+ Provider string

+ type GuardrailChecker interface

+ CheckContext func(ctx context.Context, content string) (string, error)

+ CheckInbound func(ctx context.Context, msg *a2a.Message) error

+ CheckOutbound func(ctx context.Context, msg *a2a.Message) error

+ CheckStream func(ctx context.Context, chunk string) (string, error)

+ CheckToolCall func(ctx context.Context, toolName, args string) (string, error)

+ CheckToolOutput func(ctx context.Context, toolName, text string) (string, error)

+ type Hook func(ctx context.Context, hctx *HookContext) error

+ type HookContext struct

+ CorrelationID string

+ Error error

+ LLMCallDuration time.Duration

+ Messages []llm.ChatMessage

+ Model string

+ Provider string

+ Response *llm.ChatResponse

+ TaskID string

+ ToolExecDuration time.Duration

+ ToolInput string

+ ToolName string

+ ToolOutput string

+ type HookPoint int

+ const AfterLLMCall

+ const AfterToolExec

+ const BeforeLLMCall

+ const BeforeToolExec

+ const OnError

+ type HookRegistry struct

+ func NewHookRegistry() *HookRegistry

+ func (r *HookRegistry) Fire(ctx context.Context, point HookPoint, hctx *HookContext) error

+ func (r *HookRegistry) Register(point HookPoint, h Hook)

+ type JSONLogger struct

+ func NewJSONLogger(w io.Writer, verbose bool) *JSONLogger

+ func (l *JSONLogger) Debug(msg string, fields map[string]any)

+ func (l *JSONLogger) Error(msg string, fields map[string]any)

+ func (l *JSONLogger) Info(msg string, fields map[string]any)

+ func (l *JSONLogger) Warn(msg string, fields map[string]any)

+ type LLMCallAuditArgs struct

+ Cancelled bool

+ Duration time.Duration

+ Fields map[string]any

+ Model string

+ Provider string

+ RequestID string

+ Usage LLMUsage

+ type LLMExecutor struct

+ func NewLLMExecutor(cfg LLMExecutorConfig) *LLMExecutor

+ func (e *LLMExecutor) Close() error

+ func (e *LLMExecutor) Execute(ctx context.Context, task *a2a.Task, msg *a2a.Message) (outMsg *a2a.Message, outErr error)

+ func (e *LLMExecutor) ExecuteStream(ctx context.Context, task *a2a.Task, msg *a2a.Message) (<-chan *a2a.Message, error)

+ type LLMExecutorConfig struct

+ CharBudget int

+ Client llm.Client

+ Compactor *Compactor

+ FilesDir string

+ Hooks *HookRegistry

+ Logger Logger

+ MaxIterations int

+ ModelName string

+ Provider string

+ SessionMaxAge time.Duration

+ Store *MemoryStore

+ SystemPrompt string

+ Tools ToolExecutor

+ TracingConfig observability.TracingConfig

+ WorkflowPhases []string

+ type LLMUsage struct

+ InputTokens int

+ OutputTokens int

+ TotalTokens int

+ type LLMUsageAccumulator struct

+ func LLMUsageAccumulatorFromContext(ctx context.Context) *LLMUsageAccumulator

+ func NewLLMUsageAccumulator() *LLMUsageAccumulator

+ func (a *LLMUsageAccumulator) AddLLMCall(model, provider string, usage LLMUsage, duration time.Duration)

+ func (a *LLMUsageAccumulator) Snapshot() LLMUsageSnapshot

+ type LLMUsageSnapshot struct

+ InputTokens int

+ InvocationDuration time.Duration

+ LLMCallCount int

+ LLMTimeTotal time.Duration

+ OutputTokens int

+ PrimaryModel string

+ PrimaryProvider string

+ TokensUnavailable bool

+ type Logger interface

+ Debug func(msg string, fields map[string]any)

+ Error func(msg string, fields map[string]any)

+ Info func(msg string, fields map[string]any)

+ Warn func(msg string, fields map[string]any)

+ type Memory struct

+ func NewMemory(systemPrompt string, maxChars int, model string) *Memory

+ func (m *Memory) Append(msg llm.ChatMessage)

+ func (m *Memory) LoadFromStore(data *SessionData)

+ func (m *Memory) Messages() []llm.ChatMessage

+ func (m *Memory) Reset()

+ type MemoryFlusher interface

+ AppendDailyLog func(ctx context.Context, observation string) error

+ type MemoryStore struct

+ func NewMemoryStore(dir string) (*MemoryStore, error)

+ func (s *MemoryStore) Cleanup(maxAge time.Duration) (int, error)

+ func (s *MemoryStore) Delete(taskID string) error

+ func (s *MemoryStore) List() ([]string, error)

+ func (s *MemoryStore) Load(taskID string) (*SessionData, error)

+ func (s *MemoryStore) Save(data *SessionData) error

+ type ModelConfig struct

+ Client llm.ClientConfig

+ Fallbacks []FallbackModelConfig

+ Provider string

+ func ResolveModelConfig(cfg *types.ForgeConfig, envVars map[string]string, providerOverride string) *ModelConfig

+ type NoopGuardrailChecker struct

+ func (n *NoopGuardrailChecker) CheckContext(_ context.Context, content string) (string, error)

+ func (n *NoopGuardrailChecker) CheckInbound(_ context.Context, _ *a2a.Message) error

+ func (n *NoopGuardrailChecker) CheckOutbound(_ context.Context, _ *a2a.Message) error

+ func (n *NoopGuardrailChecker) CheckStream(_ context.Context, chunk string) (string, error)

+ func (n *NoopGuardrailChecker) CheckToolCall(_ context.Context, _, args string) (string, error)

+ func (n *NoopGuardrailChecker) CheckToolOutput(_ context.Context, _ string, text string) (string, error)

+ type ProgressEmitter func(event ProgressEvent)

+ func ProgressEmitterFromContext(ctx context.Context) ProgressEmitter

+ type ProgressEvent struct

+ Message string

+ Phase string

+ Tool string

+ type SequenceCounter = atomic.Int64

+ func SequenceCounterFromContext(ctx context.Context) *SequenceCounter

+ type SessionData struct

+ CreatedAt time.Time

+ Messages []llm.ChatMessage

+ Summary string

+ TaskID string

+ UpdatedAt time.Time

+ type Sink interface

+ Close func(ctx context.Context) error

+ Name func() string

+ Stats func() map[string]int64

+ Write func(ctx context.Context, eventBytes []byte) error

+ func NewHTTPSink(endpoint string, writeTimeout time.Duration) Sink

+ func NewSocketSink(path string, writeTimeout, dialTimeout time.Duration) Sink

+ type SkillGuardrailEngine struct

+ func NewSkillGuardrailEngine(rules *agentspec.SkillGuardrailRules, enforce bool, logger Logger) *SkillGuardrailEngine

+ func (s *SkillGuardrailEngine) CheckCommandInput(toolName, toolInput string) error

+ func (s *SkillGuardrailEngine) CheckCommandOutput(toolName, toolOutput string) (string, error)

+ func (s *SkillGuardrailEngine) CheckLLMResponse(text string) (string, bool)

+ func (s *SkillGuardrailEngine) CheckUserInput(text string) error

+ type TenancyContext struct

+ OrgID string

+ WorkspaceID string

+ func TenancyContextFromContext(ctx context.Context) TenancyContext

+ func TenancyContextFromHTTPHeaders(h http.Header) TenancyContext

+ func (t TenancyContext) ApplyToHTTPHeaders(h http.Header)

+ func (t TenancyContext) IsZero() bool

+ type ToolExecutor interface

+ Execute func(ctx context.Context, name string, arguments json.RawMessage) (string, error)

+ ToolDefinitions func() []llm.ToolDefinition

+ type WorkflowContext struct

+ InvocationCaller string

+ StageID string

+ StepID string

+ WorkflowID string

+ func WorkflowContextFromContext(ctx context.Context) WorkflowContext

+ func WorkflowContextFromHTTPHeaders(h http.Header) WorkflowContext

+ func (w WorkflowContext) ApplyToHTTPHeaders(h http.Header)

+ func (w WorkflowContext) IsZero() bool

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL