approver

type Approver interface {
	// Pending returns at most limit of a run's pending approvals, in
	// creation order, when the run is waiting for approval; an empty list
	// for a run that is not waiting, since nothing on it can be decided;
	// and agentrt.ErrNotFound for a run that does not exist.
	Pending(ctx context.Context, runID string, limit int) ([]Pending, error)
	// Show reads one approval of a run, whatever its status, for
	// presenting; agentrt.ErrNotFound when the run has no such approval.
	Show(ctx context.Context, runID, approvalID string) (Pending, error)
	// Approve grants the approval. The run stays waiting until its owner
	// resumes it.
	Approve(ctx context.Context, d Decision) error
	// Reject refuses the approval, which ends the run as CANCELLED.
	Reject(ctx context.Context, d Decision) error
	// Cancel ends a run that is not terminal, waiting or not, without
	// deciding its approvals.
	Cancel(ctx context.Context, runID, by, note string) error
}

type Decision struct {
	RunID      string `json:"run_id"`
	ApprovalID string `json:"approval_id"`
	Hash       string `json:"hash"`
	By         string `json:"by"`
	Note       string `json:"note,omitempty"`
}

type Local struct {
	// Now, when set before the Local is used, is the clock that judges
	// expiry and stamps decisions, for a channel's tests; nil is the wall
	// clock. It is not for a consumer's run clock: a deterministic
	// Config.Now also stamps the run's own records, one reading per
	// recorded state change, so a decision stamped through the same clock
	// here takes a reading the run did not, and every later timestamp of
	// the run shifts. casework's replay recordings stopped matching when
	// it shared its scenario clock this way; a consumer leaves Now nil.
	Now func() time.Time
	// contains filtered or unexported fields
}

type Pending struct {
	agentrt.Approval
	// Reason is the policy's reason for asking, from the decision that
	// paused the run (agentrt.Store.ApprovalReason), bounded as an
	// argument string is. It may carry text the model chose.
	Reason string `json:"reason,omitempty"`
	// Expired reports that ExpiresAt has passed by the Local's clock at
	// the read. Nothing is written: the runtime expires the approval, and
	// cancels the run, when the approval is next decided.
	Expired bool `json:"expired,omitempty"`
}

type RunReader interface {
	// Run returns the run as a front end reads one it may not trust:
	// every text column capped at agentrt.MaxPageText
	// (agentrt.Store.GetRunCapped), with Goal, ReasonDetail, and Result
	// then bounded as an approval's fields are (view.BoundValue,
	// view.BoundRaw). agentrt.ErrNotFound for a run that does not exist.
	Run(ctx context.Context, runID string) (agentrt.Run, error)
}