conformance

type Candidate struct {
	// Backend is an authoritative backend ID.
	Backend string
	// ProfileID selects a validated profile when Backend is a compatible family.
	ProfileID string
	// OriginFail selects a deterministic failure mode for the candidate origin.
	OriginFail OriginFailMode
	// ProviderOrigin injects an external reference-provider origin base URL.
	ProviderOrigin string
	// OriginHandler injects a custom reference-provider origin responder for this
	// candidate, exactly as DeploymentSpec.OriginHandler does for the primary
	// backend, while the observing proxy still counts, captures, and redacts every
	// request. nil keeps the default family responder. It is what lets a failover
	// or parallel-race cell script one candidate leg deterministically.
	OriginHandler http.Handler
}

type ClientEntrypoint interface {
	// RoundTrip drives one create/turn and returns the deterministic result.
	RoundTrip(ctx context.Context, prompt string) (RoundTripResult, error)
	// Close releases any client-held resources (e.g. WebSocket connections).
	Close() error
}

type ClientTransport string

type Deployment struct {
	Spec DeploymentSpec
	// Exec is the wired real core executor.
	Exec *runtime.Executor
	// RouteSelector is the primary route selector the frontend default routes to.
	RouteSelector string
	// Mux is the composed frontend mux.
	Mux *http.ServeMux
	// Server is the full-path frontend origin.
	Server *httptest.Server
	// Client is the transport-selected client entrypoint.
	Client ClientEntrypoint
	// Clock is the injected virtual clock (nil when not injected).
	Clock testkitopenresponses.VirtualClock
	// contains filtered or unexported fields
}

type DeploymentSpec struct {
	// Frontend is an authoritative frontend ID (HarnessFrontendIDs).
	Frontend string
	// Backend is an authoritative backend ID (HarnessBackendIDs).
	Backend string
	// Model is the canonical model used by the client; empty uses the harness
	// default for Backend.
	Model string
	// Transport selects the client entrypoint (json/sse/compact/websocket).
	// Empty defaults to json.
	Transport ClientTransport
	// ProviderOrigin injects an external reference-provider origin base URL for
	// the primary backend (existing reference families, Phase 8 refbackend).
	// Empty deploys a harness contract-fake origin.
	ProviderOrigin string
	// ProfileID selects a validated provider profile for a compatible family.
	ProfileID string
	// ProviderClient is the HTTP client used by the real backend to reach the
	// origin; empty uses the origin loopback client.
	ProviderClient *http.Client
	// OriginFail selects a deterministic contract-fake origin failure mode for
	// the primary backend.
	OriginFail OriginFailMode
	// Candidates appends additional real backend candidates to the failover
	// chain, each with an independent injectable origin.
	Candidates []Candidate
	// Clock injects a virtual clock into the harness origins.
	Clock testkitopenresponses.VirtualClock
	// ArtifactLimit bounds the redacted request-capture artifact list per origin.
	ArtifactLimit int
	// OriginHandler injects a custom reference-provider origin responder for the
	// primary backend. When set, it replaces the harness contract-fake family
	// responder while the observing proxy still counts, captures, and redacts
	// every request. nil keeps the default family responder. This is the seam
	// Task 7.4 adversarial origins use (event injection, native ID/native
	// opaque evidence, abrupt mid-stream death).
	OriginHandler http.Handler
	// ContinuationMaxChainDepth overrides the OpenResponses frontend
	// continuation max_chain_depth when greater than zero, so amplification
	// proofs can exercise a short chain instead of the production default of 64.
	ContinuationMaxChainDepth int
	// AgentLoopGuardStrategy composes one real Agent Loop Guard feature
	// generation for the selected mutually exclusive strategy and installs it on
	// the deployment executor's request runtime snapshot, through the production
	// feature registry, enabled-surface merge, and production snapshot builder.
	// Empty (the default) composes no feature generation at all, so every existing
	// cell keeps its current no-provider terminal behavior. Preferred-strategy
	// cells get exactly the control provider and terminal provider the factory
	// composed; no provider is hand-assigned here or by any caller.
	AgentLoopGuardStrategy string
}

type Origin struct {
	// contains filtered or unexported fields
}

type OriginFailMode string

type RoundTripResult struct {
	// Text is the assembled assistant text.
	Text string
	// ResponseID is the proxy response id.
	ResponseID string
	// Status is the terminal response status ("completed", "failed", ...).
	Status string
	// Object is the response resource discriminator ("response" or
	// "response.compaction").
	Object string
	// Events is the ordered client-visible event type trajectory.
	Events []string
}

type SentinelCase struct {
	ID        string
	Frontend  string
	Backend   string
	Transport ClientTransport
	Negative  bool
	ProfileID string
	Protects  string
}