runner

type Artifact struct {
	ID        string    `json:"id"`
	Name      string    `json:"name"`
	Digest    string    `json:"digest"`
	Length    int64     `json:"length"`
	MediaType string    `json:"mediaType"`
	CreatedAt time.Time `json:"createdAt"`
}

type ArtifactResponse struct {
	Artifact
}

type ArtifactSpec struct {
	Name      string `json:"name"`
	Path      string `json:"path,omitempty"`
	MediaType string `json:"mediaType,omitempty"`
	Digest    string `json:"digest,omitempty"`
}

type CancelRequest struct {
	ProtocolVersion string `json:"protocolVersion,omitempty"`
	RequestID       string `json:"requestID"`
	TaskID          string `json:"taskID"`
	AttemptID       string `json:"attemptID"`
	AttemptEpoch    uint64 `json:"attemptEpoch"`
}

type Capabilities struct {
	ProtocolVersion string              `json:"protocolVersion"`
	RunnerID        string              `json:"runnerID"`
	Version         string              `json:"version"`
	OS              string              `json:"os"`
	Architecture    string              `json:"architecture"`
	Harnesses       []HarnessCapability `json:"harnesses,omitempty"`
	Toolchains      []string            `json:"toolchains,omitempty"`
	Environment     []string            `json:"environment,omitempty"`
	Verification    []string            `json:"verificationCapabilities,omitempty"`
	Capacity        Capacity            `json:"capacity"`
	Ready           bool                `json:"ready"`
	Reasons         []string            `json:"reasons,omitempty"`
}

type Capacity struct {
	Maximum int `json:"maximum"`
	Used    int `json:"used"`
}

type Clarification struct {
	ID   string `json:"id"`
	Text string `json:"text"`
}

type Config struct {
	ProtocolVersion string                      `json:"protocolVersion,omitempty"`
	RunnerID        string                      `json:"runnerID"`
	Version         string                      `json:"version,omitempty"`
	Listen          string                      `json:"listen,omitempty"`
	StateDir        string                      `json:"stateDir"`
	TokenFile       string                      `json:"tokenFile"`
	Token           string                      `json:"-"`
	Toolchains      []string                    `json:"toolchains,omitempty"`
	Environment     []string                    `json:"environment,omitempty"`
	Verification    []string                    `json:"verificationCapabilities,omitempty"`
	MaximumCapacity int                         `json:"maximumCapacity,omitempty"`
	MaxEvents       int                         `json:"maxEvents,omitempty"`
	MaxEventBytes   int                         `json:"maxEventBytes,omitempty"`
	MaxBodyBytes    int                         `json:"maxBodyBytes,omitempty"`
	MaxArtifactSize int64                       `json:"maxArtifactSize,omitempty"`
	Repositories    map[string]RepositoryConfig `json:"repositories,omitempty"`
	Resources       map[string]ResourceConfig   `json:"resources,omitempty"`
}

type Error struct {
	Code             string   `json:"code"`
	Retryable        bool     `json:"retryable"`
	Message          string   `json:"message"`
	Receipt          *Receipt `json:"receipt,omitempty"`
	SnapshotRequired bool     `json:"snapshotRequired,omitempty"`
}

type Event struct {
	Cursor       uint64          `json:"cursor"`
	Timestamp    time.Time       `json:"timestamp"`
	AttemptEpoch uint64          `json:"attemptEpoch"`
	Type         string          `json:"type"`
	Message      string          `json:"message,omitempty"`
	Data         json.RawMessage `json:"data,omitempty"`
}

type ExecutionLimits struct {
	MaxDurationSeconds int `json:"maxDurationSeconds,omitempty"`
	MaxOutputBytes     int `json:"maxOutputBytes,omitempty"`
	MaxTurns           int `json:"maxTurns,omitempty"`
}

type HarnessCapability struct {
	Name    string   `json:"name"`
	Version string   `json:"version"`
	Ready   bool     `json:"ready"`
	Reasons []string `json:"reasons,omitempty"`
}

type HarnessCredential struct {
	// Kind is one of the harness.Credential kinds: claude-oauth,
	// claude-apikey, codex-auth.
	Kind string `json:"kind"`
	// Value is the credential itself. It is never logged, never written to
	// disk by the runner, and never placed on a command line.
	Value string `json:"value"`
}

type PermissionRequest struct {
	ID   string `json:"id"`
	Tool string `json:"tool"`
	// Input is a bounded JSON rendering of the tool's input, and it is what the
	// verdict authorizes: that call, those arguments.
	Input string `json:"input,omitempty"`
}

type Phase string

type Receipt struct {
	ProtocolVersion string         `json:"protocolVersion"`
	TaskID          string         `json:"taskID"`
	AttemptID       string         `json:"attemptID"`
	AttemptEpoch    uint64         `json:"attemptEpoch"`
	Phase           Phase          `json:"phase"`
	SessionID       string         `json:"sessionID,omitempty"`
	Workdir         string         `json:"workdir,omitempty"`
	Cursor          uint64         `json:"cursor"`
	Blocker         string         `json:"blocker,omitempty"`
	Clarification   *Clarification `json:"clarification,omitempty"`
	// Permission is set when the attempt is parked on a permission prompt
	// rather than on a question. At most one of Clarification and Permission is
	// ever set: they are answered differently and a caller has to know which.
	Permission *PermissionRequest `json:"permission,omitempty"`
	Resources  []string           `json:"resources,omitempty"`
	LastError  *Error             `json:"lastError,omitempty"`
	Artifacts  []Artifact         `json:"artifacts,omitempty"`
	AcceptedAt time.Time          `json:"acceptedAt"`
	UpdatedAt  time.Time          `json:"updatedAt"`
}

type RepositoryConfig struct {
	Source         string `json:"source"`
	BaseCommit     string `json:"baseCommit,omitempty"`
	FetchRemoteURL string `json:"fetchRemoteURL,omitempty"`
}

type RepositorySource struct {
	// RemoteURL is the Git URL to clone from. HTTPS and SSH are accepted;
	// the URL itself must never carry embedded credentials.
	RemoteURL string `json:"remoteURL"`
	// Username accompanies Token for HTTPS remotes. Empty means the usual
	// token-bearing placeholder.
	Username string `json:"username,omitempty"`
	// Token is a short-lived read-only credential. It is used for one fetch
	// and is never written to disk, logged, or passed on the command line.
	Token string `json:"token,omitempty"`
}

type ResourceConfig struct {
	Kind     string            `json:"kind,omitempty"`
	Capacity int               `json:"capacity,omitempty"`
	Labels   map[string]string `json:"labels,omitempty"`
}

type ResourceRequest struct {
	Name string `json:"name"`
}

type ResumeRequest struct {
	ProtocolVersion   string             `json:"protocolVersion,omitempty"`
	RequestID         string             `json:"requestID"`
	TaskID            string             `json:"taskID"`
	AttemptID         string             `json:"attemptID"`
	AttemptEpoch      uint64             `json:"attemptEpoch"`
	SessionID         string             `json:"sessionID,omitempty"`
	ClarificationID   string             `json:"clarificationID,omitempty"`
	ApprovedInput     json.RawMessage    `json:"approvedInput,omitempty"`
	Resolution        string             `json:"resolution,omitempty"`
	Instructions      string             `json:"instructions,omitempty"`
	HarnessCredential *HarnessCredential `json:"harnessCredential,omitempty"`
	// PermissionID answers an outstanding Receipt.Permission, and must equal
	// its ID. It is the fence: a verdict that names a different request is
	// refused rather than applied to whatever the harness is waiting on now.
	PermissionID string `json:"permissionID,omitempty"`
	// PermissionDecision is the verdict, PermissionAllow or PermissionDeny. It
	// is required whenever PermissionID is set, and forbidden otherwise.
	//
	// A permission resume does NOT relaunch the harness: the tool call is still
	// open on a child that never stopped, so the verdict is handed to it and
	// the SAME turn continues. Resolution, when present, is the human's own
	// words and is passed to the harness as the reason for a denial.
	PermissionDecision string `json:"permissionDecision,omitempty"`
}

type Runner struct {
	// contains filtered or unexported fields
}

type StartRequest struct {
	ProtocolVersion string `json:"protocolVersion,omitempty"`
	RequestID       string `json:"requestID"`
	TaskID          string `json:"taskID"`
	AttemptID       string `json:"attemptID"`
	AttemptEpoch    uint64 `json:"attemptEpoch"`
	// RepositoryID and BaseCommit are required unless WorkspaceID is set.
	RepositoryID string `json:"repositoryID,omitempty"`
	BaseCommit   string `json:"baseCommit,omitempty"`
	// WorkspaceID names a directory the runner owns and keeps across
	// attempts, under its managed worktree root. Mutually exclusive with
	// RepositoryID: a workspace has no approved commit to verify.
	WorkspaceID string `json:"workspaceID,omitempty"`
	// SessionID continues an existing harness session in a NEW attempt, which
	// is how consecutive turns of one conversation stay one session. Resuming
	// a parked attempt uses ResumeRequest instead.
	SessionID string `json:"sessionID,omitempty"`
	// HarnessCredential is the identity this attempt runs as. Required, and
	// stripped before anything durable is derived from the request.
	HarnessCredential      *HarnessCredential `json:"harnessCredential,omitempty"`
	Instructions           string             `json:"instructions"`
	Model                  string             `json:"model,omitempty"`
	ApprovedInput          json.RawMessage    `json:"approvedInput,omitempty"`
	RequiredCapabilities   []string           `json:"requiredCapabilities,omitempty"`
	RequiredToolchains     []string           `json:"requiredToolchains,omitempty"`
	RequiredEnvironment    []string           `json:"requiredEnvironment,omitempty"`
	RequiredHarness        string             `json:"requiredHarness,omitempty"`
	RequiredHarnessVersion string             `json:"requiredHarnessVersion,omitempty"`
	// AskPermission opts this attempt into the permission round-trip: a tool
	// call the harness's permission mode does not pre-approve becomes a
	// needs_input on the attempt, carrying Receipt.Permission, instead of being
	// denied where nobody can see it. The resume answers it with a verdict.
	//
	// It is opt-in because answering one is work a coordinator has to do. A
	// coordinator that does not send it — or an older one that has never heard
	// of the field — gets exactly the behaviour it had before: anything that
	// would have prompted is denied and the turn carries on.
	AskPermission   bool `json:"askPermission,omitempty"`
	ExportGitResult bool `json:"exportGitResult,omitempty"`
	// CommitMessage is the subject the exported git result's snapshot commit
	// is stamped with: one line of coordinator-authored public text, such as
	// the ticket's title or "Address review on #7". It is the coordinator's
	// to choose and the coordinator's to verify downstream — nothing the model
	// wrote reaches git metadata. Empty keeps the canonical message.
	CommitMessage string                   `json:"commitMessage,omitempty"`
	Limits        ExecutionLimits          `json:"limits,omitempty"`
	Verification  VerificationRequirements `json:"verification,omitempty"`
	Resources     []ResourceRequest        `json:"resources,omitempty"`
	Artifacts     []ArtifactSpec           `json:"artifacts,omitempty"`
	Repository    *RepositorySource        `json:"repository,omitempty"`
}

type VerificationRequirements struct {
	Names    []string `json:"names,omitempty"`
	Commands []string `json:"commands,omitempty"`
}