runs

type APIError struct {
	Status  int    `json:"-"`
	Code    string `json:"code"`
	Message string `json:"message"`
}

type Callbacks struct {
	Start         string     `json:"start,omitempty"`
	End           string     `json:"end,omitempty"`
	LastHeartbeat *time.Time `json:"last_heartbeat,omitempty"`
}

type Client struct {
	// contains filtered or unexported fields
}

type CllamaRevoker struct {
	PodDir string
	Client *http.Client
}

type Config struct {
	PodDir            string
	Executor          Executor
	Revoker           Revoker
	Notifier          Notifier // nil disables credential custody
	HeartbeatInterval time.Duration
	Now               func() time.Time
	Logf              func(format string, args ...any)
}

type Container struct {
	ID       string
	Running  bool
	Exited   bool
	ExitCode int
	ImageID  string
	Labels   map[string]string
}

type ContentMount struct {
	Source string `json:"source"`
	Target string `json:"target"`
}

type ContextTemplate struct {
	Input cllama.AgentContextInput `json:"input"`
}

type DockerExecutor struct {
	Logf func(format string, args ...any)
	// Hold, when set, is the pod lock file. Every lifecycle subprocess
	// inherits it, so a SIGKILLed supervisor's in-flight compose command keeps
	// writer authority until it exits.
	Hold *os.File
	// contains filtered or unexported fields
}

type Executor interface {
	Up(ctx context.Context, project, file string, env map[string]string) error
	Down(ctx context.Context, project, file string) error
	Containers(ctx context.Context, keyHash string) ([]Container, error)
	// Stdout returns at most limit bytes of stdout, and whether more existed.
	Stdout(ctx context.Context, containerID string, limit int) ([]byte, bool, error)
}

type ExitInfo struct {
	Code int       `json:"code"`
	At   time.Time `json:"at"`
	// RunnerCode is the exit code of the runner inside a task-home worker,
	// when the worker's wrapper reported that the runner itself failed.
	RunnerCode *int `json:"runner_code,omitempty"`
}

type HTTPNotifier struct {
	Origin       *url.URL
	PathTemplate string
	Client       *http.Client
	MaxSummary   int
}

type HomeMeta struct {
	Installation string    `json:"installation"`
	Home         string    `json:"home"`
	CreatedAt    time.Time `json:"created_at"`
	LastRunID    string    `json:"last_run_id,omitempty"`
}

type HomeStatus struct {
	Installation string     `json:"installation"`
	Home         string     `json:"home"`
	Exists       bool       `json:"exists"`
	CreatedAt    *time.Time `json:"created_at,omitempty"`
	LastRunID    string     `json:"last_run_id,omitempty"`
	ReservedBy   string     `json:"reserved_by,omitempty"`
}

type HomeSweeper interface {
	SweepDir(ctx context.Context, project, image, dir string) error
}

type Key struct {
	Installation string `json:"installation"`
	RunID        string `json:"run_id"`
}

type LaunchRequest struct {
	Key                Key
	Generation         uint64
	SpecDigest         string
	Spec               json.RawMessage
	Credential         string
	AuthorityExpiresAt time.Time
}

type Ledger struct {
	// contains filtered or unexported fields
}

type Limits struct {
	MaxRuntimeSeconds   int64  `json:"max_runtime_seconds"`
	MaxAuthoritySeconds int64  `json:"max_authority_seconds"`
	MaxTaskBytes        int    `json:"max_task_bytes"`
	MaxResultBytes      int    `json:"max_result_bytes"`
	Memory              string `json:"memory"`
	Pids                int    `json:"pids"`
}

type Notifier interface {
	Started(ctx context.Context, rec *Record, credential string) error
	Heartbeat(ctx context.Context, rec *Record, credential string) error
	Ended(ctx context.Context, rec *Record, credential string, outcome, reason string, summary []byte) error
}

type PodLock struct {
	// contains filtered or unexported fields
}

type Record struct {
	Version    int    `json:"version"`
	Key        Key    `json:"key"`
	Generation uint64 `json:"generation"`
	SpecDigest string `json:"spec_digest,omitempty"`
	Spec       *Spec  `json:"spec,omitempty"`
	TemplateID string `json:"template_id,omitempty"`
	ImageID    string `json:"image_id,omitempty"`
	RunAgentID string `json:"run_agent_id,omitempty"`
	RunKey     string `json:"run_key,omitempty"` // pod-scoped container label value
	Project    string `json:"project,omitempty"`
	// HomeHash names the task home this run reserves, from accept until the
	// run is terminal. Empty for a stateless run.
	HomeHash           string      `json:"home_hash,omitempty"`
	State              State       `json:"state"`
	Cancelled          bool        `json:"cancelled"`
	Revoked            bool        `json:"revoked"`
	RevocationProof    string      `json:"revocation_proof,omitempty"`
	SpawnAttempted     bool        `json:"spawn_attempted"`
	Exit               *ExitInfo   `json:"exit_observed,omitempty"`
	Failure            string      `json:"failure,omitempty"`
	AuthorityExpiresAt time.Time   `json:"authority_expires_at"`
	Deadline           *time.Time  `json:"deadline,omitempty"`
	Credential         string      `json:"credential"`
	Callbacks          Callbacks   `json:"callbacks"`
	Result             *ResultInfo `json:"result,omitempty"`
	Timestamps         Timestamps  `json:"timestamps"`
	LastError          string      `json:"last_error,omitempty"`

	// The trace capture epoch cllama had last written when the worker was
	// started. Observed once at spawn; it does not prove the live process.
	CaptureEpoch           string     `json:"capture_epoch,omitempty"`
	CaptureEpochObservedAt *time.Time `json:"capture_epoch_observed_at,omitempty"`

	// ProxyBoot names the cllama process that answered the revocation
	// self-test just before the worker was started.
	ProxyBoot string `json:"proxy_boot,omitempty"`
	// Served is what cllama reported about the run's model access when it
	// acknowledged the revocation.
	Served *ServedInfo `json:"served,omitempty"`
}

type ReportingRevoker interface {
	RevokeWithReport(ctx context.Context, agentID string, generation uint64) (*RevokeReport, error)
}

type ResultInfo struct {
	Bytes     int  `json:"bytes"`
	Truncated bool `json:"truncated"`
	// Outcome and Session come from a task-home worker's result header.
	Outcome string `json:"outcome,omitempty"`
	Session string `json:"session,omitempty"`
}

type RevokeReport struct {
	// BootID names the proxy process that answered.
	BootID string
	// ServedBy counts the identity's served requests by credential class
	// ("subscription", "api_key"), as held in memory by that process.
	ServedBy map[string]int
	// PlanFailure is the identity's most recent plan-route failure reason.
	PlanFailure string
	// Partial is set when any part of the report was malformed and dropped.
	// What remains is then a subset and must not be presented as complete.
	Partial bool
}

type Revoker interface {
	Revoke(ctx context.Context, agentID string, generation uint64) error
}

type ServedInfo struct {
	// By counts served requests by credential class.
	By map[string]int `json:"by,omitempty"`
	// Complete is true when the proxy process that reported the counts is
	// the one that was running when the worker started. Otherwise the proxy
	// restarted during the run and the counts are partial.
	Complete bool `json:"complete"`
	// PlanFailure is the run's most recent plan-route failure reason. It can
	// be set on a run that a later entry of the chain then served.
	PlanFailure string `json:"plan_failure,omitempty"`
}

type Server struct {
	Sup        *Supervisor
	Pod        string
	AllowedUID []uint32
	Logf       func(string, ...any)
}

type Spec struct {
	Template          string   `json:"template"`
	Task              string   `json:"task"`
	Tools             []string `json:"tools"`
	MaxRuntimeSeconds int64    `json:"max_runtime_seconds,omitempty"`
	// Home is the opaque task-home ID. It is required by a task-home template
	// and refused by a stateless one.
	Home string `json:"home,omitempty"`
}

type State string

type StatusView struct {
	Installation       string      `json:"installation"`
	RunID              string      `json:"run_id"`
	Generation         uint64      `json:"generation"`
	SpecDigest         string      `json:"spec_digest,omitempty"`
	Template           string      `json:"template,omitempty"`
	RunAgentID         string      `json:"run_agent_id,omitempty"`
	State              State       `json:"state"`
	Cancelled          bool        `json:"cancelled"`
	Revoked            bool        `json:"revoked"`
	RevocationProof    string      `json:"revocation_proof,omitempty"`
	ExitCode           *int        `json:"exit_code"`
	Failure            string      `json:"failure,omitempty"`
	Result             *ResultInfo `json:"result,omitempty"`
	Credential         string      `json:"credential"`
	Callbacks          Callbacks   `json:"callbacks"`
	AuthorityExpiresAt *time.Time  `json:"authority_expires_at,omitempty"`
	Deadline           *time.Time  `json:"deadline,omitempty"`
	Timestamps         Timestamps  `json:"timestamps"`
	Pending            string      `json:"pending,omitempty"`

	CaptureEpoch           string     `json:"capture_epoch,omitempty"`
	CaptureEpochObservedAt *time.Time `json:"capture_epoch_observed_at,omitempty"`

	Served *ServedInfo `json:"served,omitempty"`
}

type SubscriptionReporter interface {
	Subscriptions(ctx context.Context) ([]SubscriptionStatus, error)
}

type SubscriptionStatus struct {
	Provider     string `json:"provider"`
	State        string `json:"state"`
	Account      string `json:"account,omitempty"`
	Reason       string `json:"reason,omitempty"`
	LimitedUntil string `json:"limited_until,omitempty"`
}

type Supervisor struct {
	// contains filtered or unexported fields
}

type Template struct {
	Version  int    `json:"version"`
	ID       string `json:"template_id"`
	Name     string `json:"template"`
	Pod      string `json:"pod"`
	ClawType string `json:"claw_type"`
	// ImageRef is the reference declared in the pod; ImageID pins the exact
	// image resolved at claw up.
	ImageRef     string `json:"image_ref"`
	ImageID      string `json:"image_id"`
	RunNetwork   string `json:"run_network"`
	CllamaURL    string `json:"cllama_url"`
	CllamaAPIURL string `json:"cllama_api_url"`
	// ToolsGrant is the sorted set of managed tool names a run may enable.
	ToolsGrant []string `json:"tools_grant"`
	// ContextDigest binds the cllama context (tools, models, policy, rules,
	// with credentials redacted) into the template identity.
	ContextDigest string               `json:"context_digest"`
	Limits        Limits               `json:"limits"`
	Worker        driver.RunWorkerSpec `json:"worker"`
	// Content lists read-only mounts compiled for a task-home template. It is
	// omitted when empty so a stateless template's identity does not change.
	Content []ContentMount `json:"content,omitempty"`
}

type Timestamps struct {
	Accepted *time.Time `json:"accepted,omitempty"`
	Running  *time.Time `json:"running,omitempty"`
	Revoked  *time.Time `json:"revoked,omitempty"`
	Stopped  *time.Time `json:"stopped,omitempty"`
}

type WorkerLister interface {
	RunWorkers(ctx context.Context, podNS string) ([]Container, error)
}