api

type BinaryView struct {
	Name     string `json:"name"`
	Path     string `json:"path"`
	Resolved bool   `json:"resolved"`
}

type CapabilityView struct {
	ID             string          `json:"id"`
	Title          string          `json:"title"`
	Summary        string          `json:"summary"`
	Local          bool            `json:"local"`
	Network        bool            `json:"network"`
	ExternalWrites bool            `json:"external_writes"`
	Provider       string          `json:"provider"`
	CostKnown      bool            `json:"cost_known"`
	RequestSchema  json.RawMessage `json:"request_schema,omitempty"`
	// ToolName is what the agent calls this capability in chat, so a person can
	// see the connection between a capability here and a tool the agent used.
	ToolName string `json:"tool_name"`
	// NeedsApproval is true when the approval policy (tools.approval) asks
	// before a run from this page, which then offers "Approve and run".
	NeedsApproval bool `json:"needs_approval"`
}

type CatalogEntry = modelservice.CatalogEntry

type CatalogModel = modelservice.CatalogModel

type CatalogStore = modelservice.CatalogStore

type Handler struct {
	// contains filtered or unexported fields
}

type InvokeResult struct {
	OK         bool               `json:"ok"`
	Module     string             `json:"module"`
	Capability string             `json:"capability"`
	DurationMS int64              `json:"duration_ms"`
	Error      *modproto.Error    `json:"error,omitempty"`
	Execution  modproto.Execution `json:"execution"`
	Warnings   []string           `json:"warnings"`
	// HostWarnings are the host's own findings about this invocation, kept
	// separate from the module's so a reader can tell who is complaining.
	HostWarnings []string        `json:"host_warnings"`
	Result       json.RawMessage `json:"result,omitempty"`
	Stderr       string          `json:"stderr,omitempty"`
	At           time.Time       `json:"at"`
}

type LauncherAuthRouteOpts struct {
	// Session is the process session every sign-in shares; rotating it signs
	// every browser out. When nil, SessionCookie is a fixed session token.
	Session       *middleware.LauncherDashboardSession
	SessionCookie string
	SecureCookie  func(*http.Request) bool
	// PasswordStore enables password login. It must be non-nil for auth to work.
	PasswordStore PasswordStore
	// StoreError holds the error returned when opening the password store. When
	// non-nil and PasswordStore is nil, auth endpoints fail closed with a
	// recovery message.
	StoreError error
	// SetupToken must accompany the first password. Only the launcher's own
	// browser launch and console show it; without one, first-run setup is
	// refused.
	SetupToken string
	// TrustedProxyCIDRs are the proxies whose X-Forwarded-For names the
	// client that login attempts are limited by. A list that does not parse
	// counts by peer address; the network policy refuses to start with one.
	TrustedProxyCIDRs []string
}

type LogBuffer struct {
	// contains filtered or unexported fields
}

type ModuleView struct {
	Module       string                 `json:"module"`
	Name         string                 `json:"name"`
	Version      string                 `json:"version"`
	Binary       string                 `json:"binary"`
	Capabilities []CapabilityView       `json:"capabilities"`
	Overlays     int                    `json:"overlays"`
	Skills       int                    `json:"skills"`
	Permissions  PermissionsView        `json:"permissions"`
	Requirements []modproto.Requirement `json:"requirements"`
	Warnings     []string               `json:"warnings"`
	// HostWarnings are the host's own findings about this module -- a stale
	// digest, a cost claim that contradicts a declaration -- kept apart from
	// what the module said about itself, so a reader can tell who is
	// complaining and which they can act on.
	HostWarnings []string `json:"host_warnings"`
	// Enabled is false when the user has turned this module off. It stays
	// listed with its capabilities, because there has to be something to turn
	// back on.
	Enabled bool   `json:"enabled"`
	Error   string `json:"error,omitempty"`
	// Dir is the install directory name, carried so a module that could not
	// describe itself can still be REMOVED. Such a module has no module id --
	// the id comes from the descriptor it failed to produce -- so without this
	// the cockpit can report the breakage and offer no way to clear it.
	Dir string `json:"dir,omitempty"`
}

type PasswordStore interface {
	IsInitialized(ctx context.Context) (bool, error)
	// InitializePassword stores the first password. It reports false and
	// changes nothing when a password is stored already.
	InitializePassword(ctx context.Context, plain string) (bool, error)
	SetPassword(ctx context.Context, plain string) error
	VerifyPassword(ctx context.Context, plain string) (bool, error)
}

type PermissionsView struct {
	FilesystemRead  []string     `json:"filesystem_read"`
	FilesystemWrite []string     `json:"filesystem_write"`
	Network         []string     `json:"network"`
	Credentials     []string     `json:"credentials"`
	PaidProviders   []string     `json:"paid_providers"`
	Publish         bool         `json:"publish"`
	Subprocess      []BinaryView `json:"subprocess"`
}

type ProviderCatalogSyncInput = modelservice.ProviderCatalogSyncInput