operator

type Acceptance struct {
	durable.Key
	RequestID     string `json:"request_id"`
	Revision      string `json:"revision"`
	FirstSequence string `json:"first_sequence"`
	LastSequence  string `json:"last_sequence"`
	Status        string `json:"status"`
	Started       bool   `json:"started,omitempty"`
}

type Authorizer interface {
	Authorize(context.Context, security.Principal, string, Resource) error
}

type AuthorizerFunc func(context.Context, security.Principal, string, Resource) error

type BuildInput struct {
	Namespace string `json:"namespace"`
	BuildID   string `json:"build_id"`
}

type BuildLifecycle struct {
	BuildInput
	State                 string            `json:"state"`
	Epoch                 string            `json:"epoch"`
	Version               string            `json:"version"`
	CompatibilityVersion  string            `json:"compatibility_version"`
	ObservedAt            time.Time         `json:"observed_at"`
	HasBlockers           bool              `json:"has_blockers"`
	Blockers              map[string]string `json:"blockers"`
	RetainedExecutions    string            `json:"retained_executions"`
	VerifiedQueryRuntimes string            `json:"verified_query_runtimes"`
}

type BuildRetirementInput struct {
	BuildInput
	RequestID       string `json:"request_id"`
	ExpectedVersion string `json:"expected_version"`
	ExpectedEpoch   string `json:"expected_epoch"`
}

type CallbackHandle struct {
	Version                  int           `json:"version"`
	Key                      durable.Key   `json:"key"`
	BuildID                  string        `json:"build_id"`
	Token                    CallbackToken `json:"token"`
	Secret                   string        `json:"secret"`
	InitialHeartbeatSequence int64         `json:"initial_heartbeat_sequence,string"`
}

type CallbackToken struct {
	TaskID    string                `json:"task_id"`
	Owner     string                `json:"owner"`
	Epoch     int64                 `json:"epoch,string"`
	LeaseKind durable.TaskLeaseKind `json:"lease_kind"`
}

type Capabilities struct {
	Runtime string          `json:"runtime"`
	Actions map[string]bool `json:"actions"`
}

type CapabilitiesInput struct {
	durable.Key
	BuildID      string `json:"build_id"`
	WorkflowType string `json:"workflow_type"`
}

type Chain struct {
	Page[Execution]
	Restricted bool `json:"restricted"`
}

type Children struct {
	Page[Link]
	Restricted bool `json:"restricted"`
}

type Compatibility struct {
	Namespace                      string    `json:"namespace"`
	Enrolled                       bool      `json:"enrolled"`
	SchemaVersion                  string    `json:"schema_version"`
	WriterProtocol                 string    `json:"writer_protocol"`
	QueryRemovalGuardSchemaVersion string    `json:"query_removal_guard_schema_version"`
	QueryRemovalGuardReady         bool      `json:"query_removal_guard_ready"`
	QuerySchemaVersion             string    `json:"query_schema_version"`
	DrainSchemaVersion             string    `json:"drain_schema_version"`
	Version                        string    `json:"version"`
	ObservedAt                     time.Time `json:"observed_at"`
}

type CompletionInput struct {
	Handle    CallbackHandle        `json:"handle"`
	RequestID string                `json:"request_id"`
	Output    []byte                `json:"output,omitempty"`
	Failure   *drt.ApplicationError `json:"failure,omitempty"`
}

type CursorKeys struct {
	Active string
	Keys   map[string][]byte
}

type Deliveries struct {
	Page[Delivery]
	Pending           string `json:"pending"`
	Blocked           string `json:"blocked"`
	RemoteDelivery    string `json:"remote_delivery"`
	ExternalAnchoring string `json:"external_anchoring"`
}

type Delivery struct {
	ID             string     `json:"id"`
	State          string     `json:"state"`
	Attempts       string     `json:"attempts"`
	AcceptedAt     time.Time  `json:"accepted_at"`
	SinkAcceptedAt *time.Time `json:"sink_accepted_at"`
	NextAttemptAt  *time.Time `json:"next_attempt_at"`
}

type DeliveryInput struct {
	durable.Key
	Destination durable.Destination `json:"destination"`
	Cursor      string              `json:"cursor,omitempty"`
	Limit       int                 `json:"limit,omitempty"`
}

type Detail struct {
	Execution
	Links           []Link    `json:"links"`
	LinksRestricted bool      `json:"links_restricted"`
	AsOf            time.Time `json:"as_of"`
}

type EnrollmentInput struct {
	NamespaceLifecycleInput
	RequestID string `json:"request_id"`
}

type Event struct {
	Type     string    `json:"type"`
	Sequence string    `json:"sequence"`
	Time     time.Time `json:"time"`
}

type Execution struct {
	Namespace           string        `json:"namespace"`
	WorkflowID          string        `json:"workflow_id"`
	RunID               string        `json:"run_id"`
	WorkflowType        string        `json:"workflow_type"`
	BuildID             string        `json:"build_id"`
	State               durable.State `json:"state"`
	Revision            string        `json:"revision"`
	LastSequence        string        `json:"last_sequence"`
	RunNumber           string        `json:"run_number"`
	RetryAttempt        string        `json:"retry_attempt"`
	CreatedAt           time.Time     `json:"created_at"`
	UpdatedAt           time.Time     `json:"updated_at"`
	RunDeadlineAt       *time.Time    `json:"run_deadline_at"`
	ExecutionDeadlineAt *time.Time    `json:"execution_deadline_at"`
	RunAvailableAt      time.Time     `json:"run_available_at"`
	Payload             string        `json:"payload"`
	Runtime             string        `json:"runtime"`
}

type HeartbeatInput struct {
	Handle    CallbackHandle `json:"handle"`
	RequestID string         `json:"request_id"`
	Sequence  int64          `json:"sequence,string"`
	Details   []byte         `json:"details,omitempty"`
}

type LifecycleAcceptance struct {
	Namespace  string    `json:"namespace"`
	RequestID  string    `json:"request_id"`
	Operation  string    `json:"operation"`
	Status     string    `json:"status"`
	AcceptedAt time.Time `json:"accepted_at"`
	BuildID    string    `json:"build_id,omitempty"`
	State      string    `json:"state,omitempty"`
	Version    string    `json:"version,omitempty"`
	Epoch      string    `json:"epoch,omitempty"`
}

type LifecycleHost struct {
	QueryRuntime              QueryRuntimeHost
	QueryRegistrationPolicy   QueryRegistrationPolicy
	QueryRemovalGuardVerifier durable.QueryRemovalGuardVerifier
	BuildIdentity             func(context.Context, durable.BuildTarget) (durable.BuildQueryIdentity, error)
	WorkerControl             func(context.Context, durable.QueryRuntimeTarget) (WorkerControl, error)
}

type Link struct {
	Kind       string `json:"kind"`
	Namespace  string `json:"namespace"`
	WorkflowID string `json:"workflow_id"`
	RunID      string `json:"run_id"`
}

type LocalWorkerControl struct{ Worker *drt.Worker }

type Namespace struct {
	Namespace string `json:"namespace"`
	AppID     string `json:"app_id"`
	TenantID  string `json:"tenant_id"`
}

type NamespaceInput struct {
	Cursor string `json:"cursor,omitempty"`
	Limit  int    `json:"limit,omitempty"`
}

type NamespaceLifecycleInput struct {
	Namespace string `json:"namespace"`
}

type Options struct {
	// QueryRejection observes private diagnostics after store locks are released.
	// It must cooperate with caller deadlines; panic cannot change the command result.
	QueryRejection            func(context.Context, durable.QueryRejectionDiagnostic)
	QueryHost                 QueryRuntimeHost
	QueryRegistrationPolicy   QueryRegistrationPolicy
	QueryRemovalGuardVerifier durable.QueryRemovalGuardVerifier
	// WorkerControl resolves an immutable trusted process handle.
	WorkerControl func(context.Context, durable.QueryRuntimeTarget) (WorkerControl, error)
	// BuildIdentity resolves actual deployed artifact evidence at the trusted host.
	BuildIdentity  func(context.Context, durable.BuildTarget) (durable.BuildQueryIdentity, error)
	Store          durable.Store
	Reads          durable.ReadStore
	Catalog        durable.NamespaceStore
	InstallationID string
	Authorizer     Authorizer
	Audit          security.Boundary
	CursorKeys     CursorKeys
	// RuntimeAvailable reports read-only host availability when Runtime is absent.
	// Runtime takes precedence and must resolve the exact namespace and build.
	RuntimeAvailable func(namespace, build string) bool
	// Runtime resolves only the requested immutable namespace/build.
	Runtime func(namespace, build string) (*drt.Worker, error)
}

type Page[T any] struct {
	Items       []T       `json:"items"`
	Cursor      string    `json:"cursor,omitempty"`
	Complete    bool      `json:"complete"`
	AsOf        time.Time `json:"as_of"`
	Observation string    `json:"observation"`
	Total       *string   `json:"total"`
	Revision    string    `json:"revision,omitempty"`
	HighWater   string    `json:"high_water,omitempty"`
}

type Payload struct {
	State    string `json:"state"`
	Encoding string `json:"encoding"`
	Input    []byte `json:"input"`
	Output   []byte `json:"output"`
	Revision string `json:"revision"`
}

type QueryCommitInput struct {
	QueryGuardInput
	RequestID             string `json:"request_id"`
	PermissionReference   string `json:"permission_reference"`
	ExpectedCurrentDigest string `json:"expected_current_digest"`
	CurrentRequestID      string `json:"current_request_id"`
}

type QueryCommitStatus struct {
	Receipt            QueryGuardAcceptance `json:"receipt"`
	State              string               `json:"state"`
	CurrentRequestID   string               `json:"current_request_id"`
	CurrentProofDigest string               `json:"current_proof_digest"`
	SourceObservedAt   time.Time            `json:"source_observed_at"`
	ObservedAt         time.Time            `json:"observed_at"`
}

type QueryGuardAcceptance struct {
	Kind                  string    `json:"kind"`
	GuardID               string    `json:"guard_id"`
	RootDigest            string    `json:"root_digest"`
	RequestID             string    `json:"request_id"`
	CommandDigest         string    `json:"command_digest"`
	ReceiptDigest         string    `json:"receipt_digest"`
	PermissionID          string    `json:"permission_id"`
	InvocationID          string    `json:"invocation_id"`
	PermissionProofDigest string    `json:"permission_proof_digest"`
	CurrentProofDigest    string    `json:"current_proof_digest"`
	CutoffDigest          string    `json:"cutoff_digest"`
	Disposition           string    `json:"disposition"`
	AcceptedAt            time.Time `json:"accepted_at"`
}

type QueryGuardCloseInput struct {
	QueryGuardInput
	RequestID        string `json:"request_id"`
	ClosureReference string `json:"closure_reference"`
}

type QueryGuardInput struct {
	QueryReservationInput
	GuardID        string `json:"guard_id"`
	RootDigest     string `json:"root_digest"`
	OriginalDigest string `json:"original_digest"`
}

type QueryGuardReadInput struct {
	QueryReservationInput
	RequestID     string `json:"request_id"`
	CommandDigest string `json:"command_digest"`
}

type QueryGuardReceiptInput struct {
	QueryGuardReadInput
	Kind string `json:"kind"`
}

type QueryGuardScope struct {
	AuthorityID             string `json:"authority_id"`
	OperationScopeID        string `json:"operation_scope_id"`
	AttemptID               string `json:"attempt_id"`
	ProviderOperationID     string `json:"provider_operation_id"`
	CoverageDigest          string `json:"coverage_digest"`
	ExcludedInstancesDigest string `json:"excluded_instances_digest"`
	ProducerID              string `json:"producer_id"`
	ProfileID               string `json:"profile_id"`
	ProfileVersion          string `json:"profile_version"`
	VerifierID              string `json:"verifier_id"`
}

type QueryRegistrationPolicy func(context.Context, durable.RegisterQueryRuntimeRequest) error

type QueryRemovalAcceptance struct {
	QueryRuntimeAcceptance
	Fence QueryRemovalFence `json:"fence"`
}

type QueryRemovalCheck struct {
	Fence     QueryRemovalFence `json:"fence"`
	CheckedAt time.Time         `json:"checked_at"`
}

type QueryRemovalCompletionVerifier interface {
	VerifyRemoved(context.Context, durable.QueryRemovalFence) error
}

type QueryRemovalFence struct {
	QueryRuntimeInput
	InstanceID         string    `json:"instance_id"`
	CandidateVersion   string    `json:"candidate_version"`
	SurvivorRuntimeID  string    `json:"survivor_runtime_id,omitempty"`
	SurvivorInstanceID string    `json:"survivor_instance_id,omitempty"`
	SurvivorVersion    string    `json:"survivor_version"`
	BuildEpoch         string    `json:"build_epoch"`
	BuildVersion       string    `json:"build_version"`
	BuildState         string    `json:"build_state"`
	RemovalEpoch       string    `json:"removal_epoch"`
	RequestID          string    `json:"request_id"`
	Digest             string    `json:"digest"`
	AcceptedAt         time.Time `json:"accepted_at"`
	ValidUntil         time.Time `json:"valid_until"`
}

type QueryRemovalInput struct {
	QueryReservationInput
	RequestID string `json:"request_id"`
}

type QueryReservationInput struct {
	QueryRuntimeInput
	ReservationRequestID string `json:"reservation_request_id"`
	ReservationVersion   string `json:"reservation_version"`
}

type QueryResult struct {
	durable.Key
	State        durable.State `json:"state"`
	Revision     string        `json:"revision"`
	LastSequence string        `json:"last_sequence"`
	Encoding     string        `json:"encoding"`
	Output       []byte        `json:"output"`
}

type QueryRevalidationInput struct {
	QueryReservationInput
	RequestID             string          `json:"request_id"`
	Scope                 QueryGuardScope `json:"scope"`
	ExpectedCurrentDigest string          `json:"expected_current_digest"`
	EvidenceReference     string          `json:"evidence_reference"`
	SurvivorRuntimeID     string          `json:"survivor_runtime_id"`
	SurvivorVersion       string          `json:"survivor_version"`
}

type QueryRuntime struct {
	QueryRuntimeInput
	InstanceID         string    `json:"instance_id"`
	IdentityVersion    string    `json:"identity_version"`
	State              string    `json:"state"`
	Version            string    `json:"version"`
	RemovalEpoch       string    `json:"removal_epoch"`
	ProofID            string    `json:"proof_id,omitempty"`
	ProbePolicyID      string    `json:"probe_policy_id"`
	ProbePolicyVersion string    `json:"probe_policy_version"`
	VerifiedAt         time.Time `json:"verified_at"`
	ValidUntil         time.Time `json:"valid_until"`
}

type QueryRuntimeAcceptance struct {
	LifecycleAcceptance
	Binding QueryRuntime `json:"binding"`
}

type QueryRuntimeCommand struct {
	QueryRuntimeInput
	RequestID       string `json:"request_id"`
	ExpectedVersion string `json:"expected_version"`
}

type QueryRuntimeHost interface {
	ResolveBinding(context.Context, durable.QueryRuntimeTarget) (durable.QueryRuntimeIdentity, error)
	Verify(context.Context, durable.QueryRuntimeBinding) (durable.QueryRuntimeVerification, error)
}

type QueryRuntimeInput struct {
	BuildInput
	RuntimeID string `json:"runtime_id"`
}

type RegisterBuildInput struct {
	BuildInput
	RequestID       string `json:"request_id"`
	ExpectedVersion string `json:"expected_version"`
}

type Resource struct{ InstallationID, Namespace, AppID, TenantID, WorkflowID, RunID, WorkflowType, BuildID, RuntimeID, InstanceID, Queue string }

type RunInput struct {
	durable.Key
	Cursor string `json:"cursor,omitempty"`
	Limit  int    `json:"limit,omitempty"`
}

type Service struct {
	// contains filtered or unexported fields
}

type SignalStartInput struct {
	Start StartInput `json:"start"`
	Name  string     `json:"name"`
	Input []byte     `json:"input,omitempty"`
}

type StartInput struct {
	durable.Key
	RequestID    string `json:"request_id"`
	WorkflowType string `json:"workflow_type"`
	BuildID      string `json:"build_id"`
	Queue        string `json:"queue"`
	Input        []byte `json:"input,omitempty"`
}

type Task struct {
	Deferral    *TaskDeferral    `json:"deferral"`
	ID          string           `json:"id"`
	Kind        durable.TaskKind `json:"kind"`
	State       string           `json:"state"`
	Attempt     string           `json:"attempt"`
	Version     string           `json:"version"`
	AvailableAt time.Time        `json:"available_at"`
	LeaseUntil  *time.Time       `json:"lease_until"`
	DeadlineAt  *time.Time       `json:"deadline_at"`
	HeartbeatAt *time.Time       `json:"heartbeat_at"`
}

type TaskDeferral struct {
	Active                bool                          `json:"active"`
	Reason                string                        `json:"reason"`
	TargetBuildID         string                        `json:"target_build_id"`
	TargetState           durable.DeferralTargetState   `json:"target_state"`
	TargetRetirementEpoch string                        `json:"target_retirement_epoch"`
	SourceEpoch           string                        `json:"source_epoch"`
	SourceRevision        string                        `json:"source_revision"`
	TaskVersion           string                        `json:"task_version"`
	Count                 string                        `json:"count"`
	ReferenceKind         durable.DeferralReferenceKind `json:"reference_kind"`
	CommandID             string                        `json:"command_id"`
	RecordedAt            time.Time                     `json:"recorded_at"`
	RetryAt               time.Time                     `json:"retry_at"`
	PolicyVersion         string                        `json:"policy_version"`
}

type WardenAuthorizer struct {
	Engine func() (*warden.Engine, error)
}

type WorkerClaimObservation struct {
	Kind       string `json:"kind"`
	Claiming   string `json:"claiming"`
	Processing string `json:"processing"`
}

type WorkerControl interface {
	Status(context.Context) (drt.WorkerStatus, error)
	Readiness(context.Context) (drt.WorkerReadiness, error)
	BeginDrain(context.Context, drt.DrainRequest) (drt.DrainHandle, error)
	WaitDrain(context.Context, drt.DrainHandle) (drt.DrainResult, error)
}

type WorkerDrainAcceptance struct {
	LifecycleAcceptance
	RuntimeID       string    `json:"runtime_id"`
	InstanceID      string    `json:"instance_id"`
	Queue           string    `json:"queue"`
	OperationID     string    `json:"operation_id"`
	Deadline        time.Time `json:"deadline"`
	Process         string    `json:"process"`
	Complete        bool      `json:"complete"`
	Quiescent       bool      `json:"quiescent"`
	DeadlineExpired bool      `json:"deadline_expired"`
	InFlight        string    `json:"in_flight"`
	UnknownClaims   string    `json:"unknown_claims"`
}

type WorkerDrainInput struct {
	WorkerInput
	RequestID   string    `json:"request_id"`
	OperationID string    `json:"operation_id"`
	Deadline    time.Time `json:"deadline"`
}

type WorkerInput struct {
	BuildInput
	RuntimeID string `json:"runtime_id"`
}

type WorkerObservation struct {
	WorkerInput
	InstanceID        string                   `json:"instance_id"`
	Queue             string                   `json:"queue"`
	State             string                   `json:"state"`
	Ready             bool                     `json:"ready"`
	AdmissionClosed   bool                     `json:"admission_closed"`
	InFlight          string                   `json:"in_flight"`
	UnknownClaims     string                   `json:"unknown_claims"`
	Failure           string                   `json:"failure,omitempty"`
	HostQualification string                   `json:"host_qualification"`
	Claims            []WorkerClaimObservation `json:"claims"`
	RetirementStatus  string                   `json:"retirement_status"`
	Compatibility     Compatibility            `json:"compatibility"`
	ObservedAt        time.Time                `json:"observed_at"`
}