sessionstate

type Actor interface {
	Act(ctx context.Context, sessionID string, action *abiv1.ActionRequest) (*abiv1.ActionResult, error)
}

type Admitter interface {
	Admit(ctx context.Context, sessionID, messageID, text, model string) (string, error)
}

type Authority struct {
	// contains filtered or unexported fields
}

type Config struct {
	PlatformDir string
	Parser      EventParser
	Store       StoreReader
	Passwords   []string
	RateLimit   RateLimitConfig
	Logger      *zap.Logger
	// ABIVersion is reported in the capability report snapshot frame.
	ABIVersion string
	// Capabilities, when set, is the capability report served on the
	// snapshot frame (provenance, supported actions, supported part
	// kinds). Built by the wiring layer from boot-time facts (0053 pins,
	// versions, D3 part limits) — the report is STATIC per boot so the
	// hot path never touches the harness (M3.1).
	Capabilities *abiv1.CapabilityReport
	// Admitter (US-69.7) is the delivery-admission seam; nil DISABLES
	// the ledger (Deliver returns NotSupported) — the authority owns
	// nothing dialect-specific.
	Admitter Admitter
	// AdmitterTimeout bounds one synchronous V1 admission (#1313: the
	// response IS the LLM turn, 30-120s). Zero ⇒ the 3-minute default.
	// Injectable so the #1315 incident repro can drive the hung-turn
	// window without wall-clock waits.
	AdmitterTimeout time.Duration
	// AnswerTimeout (#1396) bounds one ANSWER_QUESTION forward. The
	// forward targets the harness ask registry and completes in
	// milliseconds (53-307ms measured); zero ⇒ answerForwardBudget (5s).
	// Injectable so the budget leg tests expire it without wall-clock
	// waits (the AdmitterTimeout precedent).
	AnswerTimeout time.Duration
	// Actor (US-69.9) is the typed-actions seam; nil DISABLES the Act op
	// (NotSupported) — the wiring layer injects the opencode executor.
	Actor Actor
	// Wake (US-69.12) is the stall-recovery seam: agentd's best-effort
	// nudge when an admitted row crosses the promotion deadline
	// (checkStalls fires it once per row). Nil = no-op wake (stalls
	// still surface via metrics/alerts; wake failures count only when a
	// wake exists).
	Wake func(ctx context.Context, sessionID string) error
	// FastCursor disables per-event fsync (scenario harnesses replaying
	// event BURSTS; durability is covered by the fault-injection suite).
	FastCursor bool
}

type EventParser interface {
	Parse(raw []byte) (evt *abiv1.Event, ok bool, err error)
}

type LedgerState int

type Metrics struct {
	DroppedEvents     int64
	ParserFailures    int64
	PanicsContained   int64
	CustomValveEvents int64
	Subscribers       int
	BufferedPending   int
	// SecondsSinceSeqAdvance is how long since the projection last moved
	// (the R5 starvation signal: seq stalled N seconds while the pod
	// runs). Initialized at construction; a reseed counts as advance.
	SecondsSinceSeqAdvance float64
	// LedgerDepths is the per-state row count (the ledger funnel).
	// Nil when no ledger is wired.
	LedgerDepths map[string]int64
	// StalledEntries is the current stalled-row count (the #1119 class,
	// visible).
	// LeaseResolved/LeaseAppeared are the cumulative pending-lease diff
	// outcomes (#1310 slice B: asks resolved by absence; asks appeared
	// from live truth); LeaseGatherFails counts cadence pending-gather
	// failures (the unnoticed-source-failure signal).
	LeaseResolved    int64
	LeaseAppeared    int64
	LeaseGatherFails int64
	// OrphanPartsAborted is the cumulative count of in-flight tool parts
	// folded as aborted by the #1342 harness-restart sweep (S12's
	// backstop — every count is a turn that died without terminal state).
	OrphanPartsAborted int64
	StalledEntries     int64
	// OldestPromotionStallSeconds is the age of the oldest
	// admitted-unpromoted row (0 when none).
	OldestPromotionStallSeconds float64
	// Reconcile counts are the cumulative #1311 sweep outcomes (S7's
	// observable surface) plus evidence-read failures (rows left
	// untouched, retried next pass).
	ReconcilePromoted      int64
	ReconcileTurnEnded     int64
	ReconcileFailed        int64
	ReconcileBusyCleared   int64
	ReconcileEvidenceFails int64
	// AnswerBudgetExceeded is the cumulative count of answer forwards
	// that exceeded AnswerTimeout (#1396): the typed retryable
	// DeadlineExceeded path — every count is a would-be 125s hang made
	// visible and fast.
	AnswerBudgetExceeded int64
}

type RateLimitConfig struct {
	Burst        int
	RefillPerSec float64
}

type ReconcileStats struct {
	// Promoted / TurnEnded / Failed count rows the pass advanced.
	Promoted  int
	TurnEnded int
	Failed    int
	// DeclaredTimeouts counts tool parts terminated by #1576 layer 2 —
	// past their own declared deadline (store-independent, runs first).
	DeclaredTimeouts int
	// BusyCleared counts sessions whose BUSY view was re-derived idle
	// (evidence idle + no unresolved rows remain).
	BusyCleared int
	// EvidenceFailures counts store-evidence reads that errored — rows
	// were left untouched (never an authoritative empty) and retry on the
	// next pass.
	EvidenceFailures int
	// LeaseResolved/LeaseAppeared: #1310 slice B pending-lease diff
	// outcomes (asks resolved by absence; asks appeared from live truth).
	LeaseResolved int
	LeaseAppeared int
}

type ReseedReason int

type SessionSeed struct {
	Status        abiv1.SessionStatus
	PendingInputs []*abiv1.InputRequest
}

type SessionView struct {
	Status abiv1.SessionStatus
	// Busy is the DERIVED #1574 busy truth (streaming || in-flight
	// parts || queue depth) — not the raw streaming flag. Components
	// carry the why.
	Busy           bool
	BusyComponents *abiv1.BusyComponents
	InFlightParts  []*abiv1.Part
	PendingInputs  []*abiv1.InputRequest
}

type StallStats struct {
	// Stalled is the number of rows moved admitted→stalled THIS pass.
	Stalled int
	// WakeFailures is the number of wake attempts that errored THIS pass
	// (the escalation signal: wake-only recovery failing).
	WakeFailures int
}

type StateSnapshot struct {
	Seq      uint64
	Sessions map[string]*SessionView
}

type StoreReader interface {
	SessionStates(ctx context.Context) (map[string]SessionSeed, error)
	MessagePresence(ctx context.Context, sessionID string, messageIDs []string) (map[string]bool, error)
	// PendingInputs is the lease diff's truth source (#1310 slice B):
	// the harness live ask registries, keyed by session. STRICT failure
	// semantics — unlike SessionStates (whose reseed tolerates
	// endpoint-absence-as-empty), any fetch that is not a clean read
	// returns an error and the caller MUST treat the pending set as
	// indeterminate (skip the diff), never as empty.
	PendingInputs(ctx context.Context) (map[string][]*abiv1.InputRequest, error)
}