runtime

type BrokerArtifact struct {
	URL       string `json:"url"`
	SHA256    string `json:"sha256"`
	SizeBytes int64  `json:"sizeBytes"`
}

type BrokerCapability struct {
	Token        string    `json:"token"`
	ExpiresAt    time.Time `json:"expiresAt"`
	RefreshAfter time.Time `json:"refreshAfter"`
}

type BrokerClient struct {
	// contains filtered or unexported fields
}

type BrokerJob struct {
	ID        string    `json:"id"`
	AttemptID string    `json:"attemptId"`
	Handler   string    `json:"handler"`
	Deadline  time.Time `json:"deadline"`
}

type BrokerResources struct {
	Database    *db.Credential        `json:"database,omitempty"`
	Storage     *storage.Credential   `json:"storage,omitempty"`
	Cache       *cache.Credential     `json:"cache,omitempty"`
	ModuleCalls *ModuleCallCapability `json:"moduleCalls,omitempty"`
}

type BrokerWorkload struct {
	AppID              string `json:"appId"`
	AppRef             string `json:"appRef"`
	ModuleID           string `json:"moduleId"`
	ModuleRef          string `json:"moduleRef"`
	DispatchURL        string `json:"dispatchUrl"`
	VersionID          string `json:"versionId"`
	Version            string `json:"version"`
	AppSchema          string `json:"appSchema"`
	ModulePrefix       string `json:"modulePrefix"`
	Class              string `json:"class"`
	CPUUnits           int    `json:"cpuUnits"`
	MemoryMB           int    `json:"memoryMb"`
	EphemeralStorageMB int    `json:"ephemeralStorageMb"`
	GPUModel           string `json:"gpuModel"`
	GPUCount           int    `json:"gpuCount"`
}

type ClaimResponse struct {
	Version    int              `json:"v"`
	Job        BrokerJob        `json:"job"`
	Workload   BrokerWorkload   `json:"workload"`
	Payload    json.RawMessage  `json:"payload"`
	Artifact   BrokerArtifact   `json:"artifact"`
	Resources  BrokerResources  `json:"resources"`
	Capability BrokerCapability `json:"capability"`
}

type DependencyGrant = db.DependencyGrant

type HeartbeatResponse struct {
	Version    int               `json:"v"`
	Cancelled  bool              `json:"cancelled"`
	Deadline   time.Time         `json:"deadline"`
	Capability *BrokerCapability `json:"capability,omitempty"`
}

type InjectParams struct {
	Resources       *Resources
	Dependencies    []DependencyGrant
	UserID          string
	AppID           string
	AppRole         string
	AppSchema       string
	ActorDelegation string
}

type LambdaRequest struct {
	Method  string            `json:"method"`
	Path    string            `json:"path"`
	Headers map[string]string `json:"headers"`
	Body    string            `json:"body"`
	// Invocation is the canonical v1 request-serving context. Its exact bytes
	// are shared with direct HTTP and WSS transports. Control-plane envelopes
	// omit it and retain the legacy fields below.
	Invocation json.RawMessage `json:"invocation,omitempty"`
	Resources  *Resources      `json:"resources,omitempty"`
	// Dependencies is the platform-resolved cross-module read manifest — one
	// entry per installed declared producer, holding only exposed+consented
	// tables at the running version (decision 18 §3). Advisory routing only;
	// the install-time GRANT is the authorizer. omitempty keeps old-SDK
	// backward-compat and old-platform absence (nil → deployed reads stay
	// dev-plane-only, the rollout gate).
	Dependencies []DependencyGrant `json:"dependencies,omitempty"`
	// Trusted fields — injected by platform, not from user headers
	UserID    string `json:"userId,omitempty"`
	AppID     string `json:"appId,omitempty"`
	AppRole   string `json:"appRole,omitempty"`
	AppSchema string `json:"appSchema,omitempty"`
	// ActorDelegation is an opaque, short-lived dispatch-signed assertion.
	// It is a typed trusted field because every inbound X-MS-* claim header is
	// stripped before the module router runs.
	ActorDelegation string `json:"actorDelegation,omitempty"`
}

type LambdaResponse struct {
	StatusCode int                 `json:"statusCode"`
	Headers    map[string][]string `json:"headers"`
	Body       string              `json:"body"`
	// IsBase64Encoded says Body is standard base64 of the handler's real bytes.
	//
	// 🔴 A Go string CANNOT CARRY ARBITRARY BYTES THROUGH encoding/json, which
	// is how this envelope travels. The marshaller substitutes U+FFFD for every
	// invalid UTF-8 sequence, silently and without error, so a handler that
	// writes binary gets a body of the right shape and the wrong bytes.
	//
	// Measured in production 2026-09-16: video-core's 16-byte AES playback key
	// reached the browser as 28 bytes — six invalid bytes, each replaced by the
	// three-byte replacement rune — and hls.js decrypted every segment to noise.
	// Nothing logged anything, on any side, because every side did exactly what
	// it was written to do.
	IsBase64Encoded bool `json:"isBase64Encoded,omitempty"`
}

type LambdaTaskEvent struct {
	Version int               `json:"v"`
	Task    LambdaTaskPointer `json:"task"`
}

type LambdaTaskPointer struct {
	BrokerURL      string `json:"brokerUrl"`
	JobID          string `json:"jobId"`
	AttemptID      string `json:"attemptId"`
	BootstrapToken string `json:"bootstrapToken"`
	OneShot        bool   `json:"oneShot"`
}

type ModuleCallCapability struct {
	Token     string    `json:"token"`
	ExpiresAt time.Time `json:"expiresAt"`
}

type ModuleCallCapabilityProvider interface {
	ModuleCallCapability(context.Context) (ModuleCallCapability, error)
}

type OneShotConfig struct {
	Broker         *BrokerClient
	JobID          string
	AttemptID      string
	BootstrapToken string
	Preclaimed     *ClaimResponse
	ModuleID       string
	ModuleRef      string
	// ExpectedClass is set by class-specific runtimes such as Standard Lambda.
	// Generic Heavy/GPU runners leave it empty because the signed claim is the
	// authoritative class selection.
	ExpectedClass  string
	Handlers       map[string]TaskEntry
	HeartbeatEvery time.Duration
}

type RefreshResponse struct {
	Version    int               `json:"v"`
	Cancelled  bool              `json:"cancelled"`
	Resources  BrokerResources   `json:"resources"`
	Capability *BrokerCapability `json:"capability,omitempty"`
}

type Resources struct {
	DB      *db.Credential      `json:"db,omitempty"`
	Cache   *cache.Credential   `json:"cache,omitempty"`
	Storage *storage.Credential `json:"storage,omitempty"`
}

type TaskEntry struct {
	Handler TaskHandlerFunc
	Timeout time.Duration
}

type TaskHandlerFunc func(context.Context, json.RawMessage) error