addons

type Addon interface {
	// Type is the AddonType this implementation serves.
	Type() string
	// Reconcile converges the host to spec and reports what it observed. It
	// must be idempotent: the manager calls it on every change and on a
	// periodic resync.
	Reconcile(ctx context.Context, spec Spec) (Status, error)
	// Stop tears down the supervised process. It keeps the add-on's state
	// directory and NEVER touches enrolled repositories: pausing or deleting an
	// Addon must not destroy a developer's checkouts.
	Stop(ctx context.Context) error
}

type Claude struct {
	Binary        string     `json:"binary,omitempty"`
	VersionPin    string     `json:"versionPin,omitempty"`
	Model         string     `json:"model,omitempty"`
	AuthSecretRef *SecretRef `json:"authSecretRef,omitempty"`
	// PermissionMode and AllowedTools are passed through to the runner; the
	// harness validates the mode and the API restricts it to two values.
	PermissionMode string   `json:"permissionMode,omitempty"`
	AllowedTools   []string `json:"allowedTools,omitempty"`
}

type Codex struct {
	Binary        string     `json:"binary,omitempty"`
	VersionPin    string     `json:"versionPin,omitempty"`
	AuthSecretRef *SecretRef `json:"authSecretRef,omitempty"`
}

type Condition struct {
	Type    string
	Status  metav1.ConditionStatus
	Reason  string
	Message string
}

type EdgeRef struct {
	Kind string `json:"kind,omitempty"`
	Name string `json:"name"`
}

type Factory func(name string) (Addon, error)

type HarnessStatus struct {
	Name    string
	Version string
	Ready   bool
	Reasons []string
}

type Manager struct {
	// contains filtered or unexported fields
}

type Options struct {
	// EdgeKind and EdgeName identify this edge. An Addon whose spec.edgeRef
	// names anything else is ignored entirely — not even its status is touched.
	EdgeKind string
	EdgeName string
	// Allowed are the add-on types the machine owner opted this host into with
	// --allow-addon. Empty (the default) means this edge materializes nothing.
	Allowed []string
	// Resync is how often every Addon is reconciled without a watch event.
	Resync time.Duration
}

type Repository struct {
	Source         string `json:"source"`
	FetchRemoteURL string `json:"fetchRemoteURL,omitempty"`
}

type RunAsAccount struct {
	// Home is the account's home directory; the add-on's state lives under it.
	Home string
	// UID/GID are the account's ids, or supervisor.InheritUID when the agent is
	// already non-root and the child runs as the agent's own account.
	UID int
	GID int
}

type RunnerOptions struct {
	// EdgeName is this edge's name; it is half of the runner's identity.
	EdgeName string
	// Executable is the agent's own binary, supervised as `<exe> runner run`.
	Executable string
	// Account is the non-root account the runner runs as.
	Account RunAsAccount
	// Kube is a clientset scoped to the tenant workspace, used to read the
	// Codex auth Secret and to publish the runner's token Secret.
	Kube kubernetes.Interface
	// ProbeDeadline bounds how long a reconcile waits for a freshly started
	// runner to answer its capabilities probe before reporting Installing.
	ProbeDeadline time.Duration
	// ProbeTimeout bounds a single probe request.
	ProbeTimeout time.Duration
	// InitialBackoff is handed to the supervisor; tests shorten it.
	InitialBackoff time.Duration
	// HTTPClient probes the loopback runner; nil builds a loopback-only client.
	HTTPClient *http.Client
}

type RunnerSpec struct {
	Port                     int32                 `json:"port,omitempty"`
	MaximumCapacity          int32                 `json:"maximumCapacity,omitempty"`
	Toolchains               []string              `json:"toolchains,omitempty"`
	VerificationCapabilities []string              `json:"verificationCapabilities,omitempty"`
	Repositories             map[string]Repository `json:"repositories,omitempty"`
	Harness                  string                `json:"harness,omitempty"`
	Codex                    *Codex                `json:"codex,omitempty"`
	Claude                   *Claude               `json:"claude,omitempty"`
}

type SecretRef struct {
	Name      string `json:"name,omitempty"`
	Namespace string `json:"namespace,omitempty"`
}

type Spec struct {
	// Name is the Addon's metadata.name. It names the add-on's state directory
	// and the Secret it publishes, so it is validated before use.
	Name string
	// UID and Generation come from metadata; UID goes into the ownerReference
	// of anything the add-on publishes, Generation into status.observedGeneration.
	UID        types.UID
	Generation int64
	// EdgeRef, Type, Paused and Runner are the decoded spec.
	EdgeRef EdgeRef
	Type    string
	Paused  bool
	Runner  *RunnerSpec
}

type Status struct {
	Phase      string
	Version    string
	Message    string
	Harness    *HarnessStatus
	Conditions []Condition
}