event

type Acceptance struct {
	Tenant string
	Stack  string
}

type DispatchResult struct {
	Payload Payload
	Tenant  string // "" or "_sys": the run never left the system tenant
	Stack   string // the routed stack; "" when unrouted
	// Ingress and HostnameVerified are the rest of the route the boot
	// handoff promoted (`_txc.ingress`, `_txc.hostname_verified`), so an
	// inlet that pins a connection can pre-stamp the same route on the
	// connection's later events.
	Ingress          string
	HostnameVerified bool
	Err              error // pipeline error, if any
}

type Envelope struct {
	Ctx     context.Context
	Payload *Payload
	ResCh   chan Payload
	// ResultCh, when set, replaces ResCh: the bus loop answers once with
	// the run's DispatchResult (final payload + trusted tenant/stack)
	// after the pipeline returns. Streaming responses need ResCh.
	ResultCh chan DispatchResult
	// Accepted, when set, is told once — before the tenant's stack runs
	// — that the chassis has accepted this event for execution: routed
	// out of _sys/boot into a concrete tenant and admitted. An inlet that
	// delivers from a durable outbox closes its claim on this signal
	// rather than at completion, so a long run never holds a delivery
	// claim open. The send is non-blocking: buffer the channel at 1. It
	// is never sent for a run that stays in _sys, or for one admission
	// denies (those answer on ResCh/ResultCh as before).
	Accepted chan Acceptance
	Rid      string
	Src      string
}

type OpsHandler interface {
	Route(ctx context.Context, opName string, in []byte, out []byte) (Payload, error)
}

type OpsHandlerFunc func(ctx context.Context, opName string, in []byte, out []byte) (Payload, error)

type Payload struct {
	Raw  string `json:"raw,omitempty"`
	Type Type   `json:"type,omitempty"`
	Meta string `json:"meta,omitempty"`
}

type RawJSON string

type Type int