runs

type APIError struct {
	Status  int    `json:"-"`
	Code    string `json:"code"`
	Message string `json:"message"`
}

type Callbacks struct {
	Start         string     `json:"start,omitempty"`
	End           string     `json:"end,omitempty"`
	LastHeartbeat *time.Time `json:"last_heartbeat,omitempty"`
}

type Client struct {
	// contains filtered or unexported fields
}

type CllamaRevoker struct {
	PodDir string
	Client *http.Client
}

type Config struct {
	PodDir            string
	Executor          Executor
	Revoker           Revoker
	Notifier          Notifier // nil disables credential custody
	HeartbeatInterval time.Duration
	Now               func() time.Time
	Logf              func(format string, args ...any)
}

type Container struct {
	ID       string
	Running  bool
	Exited   bool
	ExitCode int
	ImageID  string
	Labels   map[string]string
}

type ContextTemplate struct {
	Input cllama.AgentContextInput `json:"input"`
}

type DockerExecutor struct {
	Logf func(format string, args ...any)
	// Hold, when set, is the pod lock file. Every lifecycle subprocess
	// inherits it, so a SIGKILLed supervisor's in-flight compose command keeps
	// writer authority until it exits.
	Hold *os.File
	// contains filtered or unexported fields
}

type Executor interface {
	Up(ctx context.Context, project, file string, env map[string]string) error
	Down(ctx context.Context, project, file string) error
	Containers(ctx context.Context, keyHash string) ([]Container, error)
	// Stdout returns at most limit bytes of stdout, and whether more existed.
	Stdout(ctx context.Context, containerID string, limit int) ([]byte, bool, error)
}

type ExitInfo struct {
	Code int       `json:"code"`
	At   time.Time `json:"at"`
}

type HTTPNotifier struct {
	Origin       *url.URL
	PathTemplate string
	Client       *http.Client
	MaxSummary   int
}

type Key struct {
	Installation string `json:"installation"`
	RunID        string `json:"run_id"`
}

type LaunchRequest struct {
	Key                Key
	Generation         uint64
	SpecDigest         string
	Spec               json.RawMessage
	Credential         string
	AuthorityExpiresAt time.Time
}

type Ledger struct {
	// contains filtered or unexported fields
}

type Limits struct {
	MaxRuntimeSeconds   int64  `json:"max_runtime_seconds"`
	MaxAuthoritySeconds int64  `json:"max_authority_seconds"`
	MaxTaskBytes        int    `json:"max_task_bytes"`
	MaxResultBytes      int    `json:"max_result_bytes"`
	Memory              string `json:"memory"`
	Pids                int    `json:"pids"`
}

type Notifier interface {
	Started(ctx context.Context, rec *Record, credential string) error
	Heartbeat(ctx context.Context, rec *Record, credential string) error
	Ended(ctx context.Context, rec *Record, credential string, outcome, reason string, summary []byte) error
}

type PodLock struct {
	// contains filtered or unexported fields
}

type Record struct {
	Version            int         `json:"version"`
	Key                Key         `json:"key"`
	Generation         uint64      `json:"generation"`
	SpecDigest         string      `json:"spec_digest,omitempty"`
	Spec               *Spec       `json:"spec,omitempty"`
	TemplateID         string      `json:"template_id,omitempty"`
	ImageID            string      `json:"image_id,omitempty"`
	RunAgentID         string      `json:"run_agent_id,omitempty"`
	RunKey             string      `json:"run_key,omitempty"` // pod-scoped container label value
	Project            string      `json:"project,omitempty"`
	State              State       `json:"state"`
	Cancelled          bool        `json:"cancelled"`
	Revoked            bool        `json:"revoked"`
	RevocationProof    string      `json:"revocation_proof,omitempty"`
	SpawnAttempted     bool        `json:"spawn_attempted"`
	Exit               *ExitInfo   `json:"exit_observed,omitempty"`
	Failure            string      `json:"failure,omitempty"`
	AuthorityExpiresAt time.Time   `json:"authority_expires_at"`
	Deadline           *time.Time  `json:"deadline,omitempty"`
	Credential         string      `json:"credential"`
	Callbacks          Callbacks   `json:"callbacks"`
	Result             *ResultInfo `json:"result,omitempty"`
	Timestamps         Timestamps  `json:"timestamps"`
	LastError          string      `json:"last_error,omitempty"`

	// The trace capture epoch cllama had last written when the worker was
	// started. Observed once at spawn; it does not prove the live process.
	CaptureEpoch           string     `json:"capture_epoch,omitempty"`
	CaptureEpochObservedAt *time.Time `json:"capture_epoch_observed_at,omitempty"`
}

type ResultInfo struct {
	Bytes     int  `json:"bytes"`
	Truncated bool `json:"truncated"`
}

type Revoker interface {
	Revoke(ctx context.Context, agentID string, generation uint64) error
}

type Server struct {
	Sup        *Supervisor
	Pod        string
	AllowedUID []uint32
	Logf       func(string, ...any)
}

type Spec struct {
	Template          string   `json:"template"`
	Task              string   `json:"task"`
	Tools             []string `json:"tools"`
	MaxRuntimeSeconds int64    `json:"max_runtime_seconds,omitempty"`
}

type State string

type StatusView struct {
	Installation       string      `json:"installation"`
	RunID              string      `json:"run_id"`
	Generation         uint64      `json:"generation"`
	SpecDigest         string      `json:"spec_digest,omitempty"`
	Template           string      `json:"template,omitempty"`
	RunAgentID         string      `json:"run_agent_id,omitempty"`
	State              State       `json:"state"`
	Cancelled          bool        `json:"cancelled"`
	Revoked            bool        `json:"revoked"`
	RevocationProof    string      `json:"revocation_proof,omitempty"`
	ExitCode           *int        `json:"exit_code"`
	Failure            string      `json:"failure,omitempty"`
	Result             *ResultInfo `json:"result,omitempty"`
	Credential         string      `json:"credential"`
	Callbacks          Callbacks   `json:"callbacks"`
	AuthorityExpiresAt *time.Time  `json:"authority_expires_at,omitempty"`
	Deadline           *time.Time  `json:"deadline,omitempty"`
	Timestamps         Timestamps  `json:"timestamps"`
	Pending            string      `json:"pending,omitempty"`

	CaptureEpoch           string     `json:"capture_epoch,omitempty"`
	CaptureEpochObservedAt *time.Time `json:"capture_epoch_observed_at,omitempty"`
}

type Supervisor struct {
	// contains filtered or unexported fields
}

type Template struct {
	Version  int    `json:"version"`
	ID       string `json:"template_id"`
	Name     string `json:"template"`
	Pod      string `json:"pod"`
	ClawType string `json:"claw_type"`
	// ImageRef is the reference declared in the pod; ImageID pins the exact
	// image resolved at claw up.
	ImageRef     string `json:"image_ref"`
	ImageID      string `json:"image_id"`
	RunNetwork   string `json:"run_network"`
	CllamaURL    string `json:"cllama_url"`
	CllamaAPIURL string `json:"cllama_api_url"`
	// ToolsGrant is the sorted set of managed tool names a run may enable.
	ToolsGrant []string `json:"tools_grant"`
	// ContextDigest binds the cllama context (tools, models, policy, rules,
	// with credentials redacted) into the template identity.
	ContextDigest string               `json:"context_digest"`
	Limits        Limits               `json:"limits"`
	Worker        driver.RunWorkerSpec `json:"worker"`
}

type Timestamps struct {
	Accepted *time.Time `json:"accepted,omitempty"`
	Running  *time.Time `json:"running,omitempty"`
	Revoked  *time.Time `json:"revoked,omitempty"`
	Stopped  *time.Time `json:"stopped,omitempty"`
}

type WorkerLister interface {
	RunWorkers(ctx context.Context, podNS string) ([]Container, error)
}