Documentation
¶
Overview ¶
Package api provides primitives to interact with the openapi HTTP API.
Code generated by github.com/oapi-codegen/oapi-codegen/v2 version v2.6.0 DO NOT EDIT.
Index ¶
- Constants
- func GetSwagger() (swagger *openapi3.T, err error)
- func Handler(si ServerInterface) http.Handler
- func HandlerFromMux(si ServerInterface, m ServeMux) http.Handler
- func HandlerFromMuxWithBaseURL(si ServerInterface, m ServeMux, baseURL string) http.Handler
- func HandlerWithOptions(si ServerInterface, options StdHTTPServerOptions) http.Handler
- func PathToRawSpec(pathToFile string) map[string]func() ([]byte, error)
- type Action
- type ActionApprovalDecision
- type ActionApprovalListResponse
- type ActionApprovalPolicy
- type ActionApprovalResult
- type ActionApprovalResultStatus
- type ActionConnectorDep
- type ActionExecuteStep
- type ActionInput
- type ActionInputType
- type ActionIntent
- type ActionListResponse
- type ActionLoadError
- type ActionMatch
- type ActionPreview
- type ActionPreviewSignatureStatus
- type ActionRequires
- type ActionRequiresConnector
- type ActionRunPendingResponse
- type ActionRunPendingResponseStatus
- type ActionRunRequest
- type ActionRunResponse
- type ActionTarget
- type ActionTargetKind
- type ActorRef
- type ActorRefType
- type AnalyticsSummary
- type AnthropicMessage
- type AnthropicMessageRole
- type AnthropicTool
- type AppendEvidenceRequest
- type AppendIntentEvidenceJSONRequestBody
- type Approval
- type ApprovalActionResponse
- type ApprovalActor
- type ApprovalActorStatus
- type ApprovalId
- type ApprovalListResponse
- type ApprovalRequirement
- type ApprovalRequirementMode
- type ApprovalStatus
- type ApproveRequest
- type ApproveRequestJSONRequestBody
- type AttachmentRef
- type AuditEvent
- type AuditListResponse
- type BadRequest
- type Binding
- type BindingListResponse
- type BindingName
- type BindingSetupRequest
- type BindingSetupResponse
- type BindingSource
- type BindingSourceKind
- type BindingStatus
- type CalendarAction
- type CalendarActionConferenceType
- type CalendarActionProvider
- type CalendarActionVisibility
- type CalendarAttendee
- type ChatCompletionChoice
- type ChatCompletionFunctionDef
- type ChatCompletionMessage
- type ChatCompletionMessageRole
- type ChatCompletionRequest
- type ChatCompletionResponse
- type ChatCompletionTool
- type ChatCompletionToolCall
- type ChatCompletionToolCallType
- type ChatCompletionToolType
- type CheckConnectorsParams
- type CloudAction
- type CloudActionProvider
- type CommsMessage
- type Conflict
- type ConnectAccountCallbackParams
- type ConnectAccountParams
- type ConnectedAccount
- type ConnectedAccountProvider
- type ConnectedAccountStatus
- type Connector
- type ConnectorAuth
- type ConnectorAuthMethod
- type ConnectorCheckResult
- type ConnectorId
- type ConnectorInstallFailure
- type ConnectorListResponse
- type ConnectorPreview
- type ConnectorPreviewSignatureStatus
- type ConnectorRef
- type ConnectorStatus
- type ConnectorType
- type ConnectorsCheckResponse
- type CreateConnectorJSONRequestBody
- type CreateConnectorRequest
- type CreateCredentialJSONRequestBody
- type CreateCredentialRequest
- type CreateCredentialRequestType
- type CreateFundingSourceJSONRequestBody
- type CreateFundingSourceRequest
- type CreateFundingSourceRequestType
- type CreateIntentJSONRequestBody
- type CreateIntentRequest
- type CreatePolicyJSONRequestBody
- type CreatePolicyRequest
- type CreateSessionJSONRequestBody
- type CreateSessionRequest
- type CredentialListResponse
- type CredentialReference
- type CredentialReferenceType
- type DecideActionApprovalJSONRequestBody
- type Decision
- type DecisionDisposition
- type DenyRequest
- type DenyRequestJSONRequestBody
- type DeployAction
- type DeployActionProvider
- type DeployActionStrategy
- type DomainAction
- type DraftCommsReplyJSONRequestBody
- type DraftCommsReplyRequest
- type EmailAction
- type EmailActionSendMode
- type EndSessionJSONRequestBody
- type EndSessionRequest
- type Enterprise
- type EnterprisePlan
- type Error
- type EstablishTeeSessionJSONRequestBody
- type EvidenceItem
- type EvidenceItemType
- type Execution
- type ExecutionCallbackJSONRequestBody
- type ExecutionCallbackRequest
- type ExecutionCallbackRequestStatus
- type ExecutionGrant
- type ExecutionGrantEscrowPolicy
- type ExecutionGrantStatus
- type ExecutionId
- type ExecutionRunRequest
- type ExecutionRunResponse
- type ExecutionRunResponseStatus
- type ExecutionStatus
- type Failure
- type FailureBoundary
- type FailureClass
- type FailureEnvelope
- type FinishOAuth2BindingJSONRequestBody
- type Forbidden
- type FundingSource
- type FundingSourceListResponse
- type FundingSourceStatus
- type FundingSourceType
- type GetAnalyticsSummaryParams
- type GetHubConnectorParams
- type GetHubInstallDecisionParams
- type GitAction
- type GitActionProvider
- type GrantId
- type HealthResponse
- type HealthResponseStatus
- type HubConnectorEntry
- type HubConnectorList
- type HubInstallDecision
- type HubTrustState
- type InitOAuth2BindingJSONRequestBody
- type InitiateAttestationJSONRequestBody
- type InstallActionJSONRequestBody
- type InstallActionRequest
- type InstallConnectorJSONRequestBody
- type InstallConnectorRequest
- type InstalledAction
- type InstalledActionRef
- type InstalledConnector
- type IntentContext
- type IntentEnvelope
- type IntentId
- type IntentListResponse
- type IntentStatus
- type InvalidParamFormatError
- type Jwk
- type Jwks
- type LineItem
- type ListApprovalsParams
- type ListAuditParams
- type ListBindingsParams
- type ListConnectorsParams
- type ListCredentialsParams
- type ListFundingSourcesParams
- type ListHubConnectorsParams
- type ListIntentsParams
- type ListPoliciesParams
- type ListSessionsParams
- type ListTracesParams
- type LocalVaultStatusResponse
- type LocalVaultStatusResponseState
- type LocalVaultUnlockRequest
- type MessagesRequest
- type MessagesResponse
- type MessagesResponseRole
- type MessagesResponseType
- type MiddlewareFunc
- type ModifyApprovalRequest
- type ModifyRequestJSONRequestBody
- type Money
- type NotFound
- type OAuth2FinishRequest
- type OAuth2InitRequest
- type OAuth2InitResponse
- type PageSize
- type PageToken
- type Pagination
- type PassphraseSaltResponse
- type PassphraseVerificationResponse
- type PaymentAction
- type PaymentActionPaymentInstrumentPreference
- type PaymentActionRecurringInterval
- type PaymentBeneficiary
- type PendingActionApproval
- type PendingActionApprovalKind
- type Policy
- type PolicyCondition
- type PolicyConditionOperator
- type PolicyConditionValue0
- type PolicyConditionValue1
- type PolicyConditionValue2
- type PolicyConditionValue3
- type PolicyConditionValue4
- type PolicyCondition_Value
- func (t PolicyCondition_Value) AsPolicyConditionValue0() (PolicyConditionValue0, error)
- func (t PolicyCondition_Value) AsPolicyConditionValue1() (PolicyConditionValue1, error)
- func (t PolicyCondition_Value) AsPolicyConditionValue2() (PolicyConditionValue2, error)
- func (t PolicyCondition_Value) AsPolicyConditionValue3() (PolicyConditionValue3, error)
- func (t PolicyCondition_Value) AsPolicyConditionValue4() (PolicyConditionValue4, error)
- func (t *PolicyCondition_Value) FromPolicyConditionValue0(v PolicyConditionValue0) error
- func (t *PolicyCondition_Value) FromPolicyConditionValue1(v PolicyConditionValue1) error
- func (t *PolicyCondition_Value) FromPolicyConditionValue2(v PolicyConditionValue2) error
- func (t *PolicyCondition_Value) FromPolicyConditionValue3(v PolicyConditionValue3) error
- func (t *PolicyCondition_Value) FromPolicyConditionValue4(v PolicyConditionValue4) error
- func (t PolicyCondition_Value) MarshalJSON() ([]byte, error)
- func (t *PolicyCondition_Value) MergePolicyConditionValue0(v PolicyConditionValue0) error
- func (t *PolicyCondition_Value) MergePolicyConditionValue1(v PolicyConditionValue1) error
- func (t *PolicyCondition_Value) MergePolicyConditionValue2(v PolicyConditionValue2) error
- func (t *PolicyCondition_Value) MergePolicyConditionValue3(v PolicyConditionValue3) error
- func (t *PolicyCondition_Value) MergePolicyConditionValue4(v PolicyConditionValue4) error
- func (t *PolicyCondition_Value) UnmarshalJSON(b []byte) error
- type PolicyId
- type PolicyListResponse
- type PolicyMatch
- type PolicyRule
- type PolicyRuleEffect
- type PolicySimulationRequest
- type PolicySimulationResponse
- type PolicyStatus
- type PostChatCompletionsJSONRequestBody
- type PostMessagesJSONRequestBody
- type PreviewActionJSONRequestBody
- type PreviewCapabilities
- type PreviewConnectorJSONRequestBody
- type ProcurementAction
- type ProcurementActionRequestType
- type ReadCommsMessagesParams
- type ReadCommsMessagesResponse
- type RebindBindingJSONRequestBody
- type RebindRequest
- type Recipient
- type RequestCommsHTTPJSONRequestBody
- type RequestCommsHTTPRequest
- type RequiredHeaderError
- type RequiredParamError
- type RiskLevel
- type RunActionJSONRequestBody
- type RunExecutionJSONRequestBody
- type SendCommsMessageJSONRequestBody
- type SendCommsMessageRequest
- type ServeMux
- type ServerInterface
- type ServerInterfaceWrapper
- func (siw *ServerInterfaceWrapper) AppendIntentEvidence(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ApproveRequest(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) CheckConnectors(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ConnectAccount(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ConnectAccountCallback(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) CreateConnector(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) CreateCredential(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) CreateFundingSource(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) CreateIntent(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) CreatePolicy(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) CreateSession(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) DecideActionApproval(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) DeleteConnectedAccount(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) DenyRequest(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) DisconnectAuthProvider(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) DraftCommsReply(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) EndSession(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) EstablishTeeSession(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ExecutionCallback(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) FinishOAuth2Binding(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetAction(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetActionApprovalResult(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetAnalyticsSummary(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetApproval(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetAudit(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetBinding(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetConnectedAccount(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetConnector(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetCurrentEnterprise(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetCurrentUser(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetExecution(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetExecutionGrant(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetHealth(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetHubConnector(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetHubInstallDecision(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetIntent(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetLocalVaultStatus(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetPassphraseSalt(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetPassphraseVerification(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetPolicy(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetSession(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetStatus(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetTeeJwks(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetTeeStatus(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) GetVaultStatus(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) InitOAuth2Binding(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) InitiateAttestation(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) InstallAction(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) InstallConnector(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListActionApprovals(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListActions(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListApprovals(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListAudit(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListBindings(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListConnectedAccounts(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListConnectors(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListCredentials(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListFundingSources(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListHubConnectors(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListIntents(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListPolicies(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListSessions(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ListTraces(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) LockVault(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ModifyRequest(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) PostChatCompletions(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) PostMessages(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) PreviewAction(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) PreviewConnector(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) ReadCommsMessages(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) RebindBinding(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) RequestCommsHTTP(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) RevokeBinding(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) RunAction(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) RunExecution(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) SendCommsMessage(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) SetPassphrase(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) SetupBindings(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) SimulatePolicy(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) Sync(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) UnlockLocalVault(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) UnlockVault(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) UpdateConnector(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) UpdateCurrentEnterprise(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) UpdateCurrentUser(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) UpdatePolicy(w http.ResponseWriter, r *http.Request)
- func (siw *ServerInterfaceWrapper) WatchActionApprovals(w http.ResponseWriter, r *http.Request)
- type Session
- type SessionListResponse
- type SetPassphraseJSONRequestBody
- type SetPassphraseRequest
- type SetupBindingsJSONRequestBody
- type SimulatePolicyJSONRequestBody
- type StatusResponse
- type StatusResponseVaultState
- type StdHTTPServerOptions
- type SyncJSONRequestBody
- type SyncRequest
- type SyncResponse
- type TeeAttestationRequest
- type TeeAttestationResponse
- type TeeSessionRequest
- type TeeSessionResponse
- type TeeStatus
- type TeeStatusProvider
- type TooManyValuesForParamError
- type Trace
- type TraceEvent
- type TraceListResponse
- type Unauthorized
- type UnboundCapability
- type UnescapedCookieParamError
- type UnlockLocalVaultJSONRequestBody
- type UnlockVaultJSONRequestBody
- type UnlockVaultRequest
- type UnmarshalingParamError
- type UpdateConnectorJSONRequestBody
- type UpdateConnectorRequest
- type UpdateConnectorRequestStatus
- type UpdateCurrentEnterpriseJSONRequestBody
- type UpdateCurrentUserJSONRequestBody
- type UpdateEnterpriseRequest
- type UpdatePolicyJSONRequestBody
- type UpdatePolicyRequest
- type UpdateUserRequest
- type User
- type UserAuthProviderLink
- type UserRole
- type UserStatus
- type VaultLocked
- type VaultStatusResponse
Constants ¶
const (
BearerAuthScopes = "bearerAuth.Scopes"
)
Variables ¶
This section is empty.
Functions ¶
func GetSwagger ¶
GetSwagger returns the Swagger specification corresponding to the generated code in this file. The external references of Swagger specification are resolved. The logic of resolving external references is tightly connected to "import-mapping" feature. Externally referenced files must be embedded in the corresponding golang packages. Urls can be supported but this task was out of the scope.
func Handler ¶
func Handler(si ServerInterface) http.Handler
Handler creates http.Handler with routing matching OpenAPI spec.
func HandlerFromMux ¶
func HandlerFromMux(si ServerInterface, m ServeMux) http.Handler
HandlerFromMux creates http.Handler with routing matching OpenAPI spec based on the provided mux.
func HandlerFromMuxWithBaseURL ¶
func HandlerFromMuxWithBaseURL(si ServerInterface, m ServeMux, baseURL string) http.Handler
func HandlerWithOptions ¶
func HandlerWithOptions(si ServerInterface, options StdHTTPServerOptions) http.Handler
HandlerWithOptions creates http.Handler with additional options
Types ¶
type Action ¶
type Action struct {
// Approval Approval gating for an action. When `required` is true, the runtime
// holds the action-run HTTP response open while it queues an approval
// request to the orchestrator; the response unblocks only when the user
// approves (action runs normally) or denies (returns an
// `approval_denied` failure envelope). The agent surfaces the approval
// URL to the user via tool descriptions templated by `aileron-mcp`.
Approval *ActionApprovalPolicy `json:"approval,omitempty"`
// Body Markdown content following the closing `+++` delimiter. The first
// paragraph (or a designated section) is surfaced to the LLM as the
// function description when the action is exposed as a tool.
Body *string `json:"body,omitempty"`
Execute []ActionExecuteStep `json:"execute"`
// Inputs Declared call-time arguments. Per ADR-0003, inputs map directly
// to the JSON Schema `parameters` object the LLM sees when
// Aileron exposes the action as a tool.
Inputs *[]ActionInput `json:"inputs,omitempty"`
Match ActionMatch `json:"match"`
// Name Bare local handle for the action (e.g. "ship-update").
Name string `json:"name"`
// Path Absolute path of the source file on disk.
Path *string `json:"path,omitempty"`
Requires ActionRequires `json:"requires"`
// Source Fully-qualified URI of the template the action was installed from
// (e.g. "hub://aileron/ship-update@1.0.0"). Provenance only — not
// consulted at runtime.
Source string `json:"source"`
// Version Strict SemVer of the action manifest.
Version string `json:"version"`
}
Action A user-installed action manifest. Per ADR-0001 and ADR-0003, an action is a single Markdown file with TOML frontmatter; the parsed frontmatter populates this object's structured fields and the Markdown content following the closing `+++` populates `body`.
type ActionApprovalDecision ¶
type ActionApprovalDecision struct {
// Approved True to allow the action to run; false to deny.
Approved bool `json:"approved"`
// EditedPayload Kind-specific fields the user changed (or chose) before
// approving. Omitted when the user approved without edits or
// the kind doesn't support them. Consumers read kind-specific
// keys:
//
// - `kind=comms_draft` — `body` carries the edited reply
// bytes; the CommsServer dispatcher sends those rather
// than the agent's original draft.
// - `kind=shell` — `save_policy` carries `""` | `"project"`
// | `"user"`; the launch-side approval socket translates
// this into the `allow_once` / `allow_project` /
// `allow_user` wire string aileron-sh writes the new
// allow rule under.
EditedPayload *map[string]interface{} `json:"edited_payload,omitempty"`
// Reason Optional commentary from the user. Surfaced to the agent in
// the deny path so it can recover gracefully (e.g. "wrong
// recipient — I'll redraft").
Reason *string `json:"reason,omitempty"`
}
ActionApprovalDecision defines model for ActionApprovalDecision.
type ActionApprovalListResponse ¶
type ActionApprovalListResponse struct {
Items []PendingActionApproval `json:"items"`
}
ActionApprovalListResponse defines model for ActionApprovalListResponse.
type ActionApprovalPolicy ¶
type ActionApprovalPolicy struct {
// Required When true, `POST /v1/actions/{name}/run` blocks on user approval
// before executing. Default false.
Required *bool `json:"required,omitempty"`
}
ActionApprovalPolicy Approval gating for an action. When `required` is true, the runtime holds the action-run HTTP response open while it queues an approval request to the orchestrator; the response unblocks only when the user approves (action runs normally) or denies (returns an `approval_denied` failure envelope). The agent surfaces the approval URL to the user via tool descriptions templated by `aileron-mcp`.
type ActionApprovalResult ¶
type ActionApprovalResult struct {
// AuditId Audit log id; populated when `status = completed`.
AuditId *string `json:"audit_id,omitempty"`
// Failure Structured failure envelope ratified by [ADR-0010][adr10] for
// errors returned to the calling action and through it to the
// agent. Used on the gateway endpoints (`/v1/chat/completions`,
// `/v1/messages`) and on action / connector install responses.
//
// [adr10]: https://docs.withaileron.ai/adr/0010-failure-handling
Failure *FailureEnvelope `json:"failure,omitempty"`
// Reason User's deny commentary; populated when `status = denied`.
// May be empty if the user denied without a reason.
Reason *string `json:"reason,omitempty"`
// Result Action output payload; populated when `status = completed`.
// Same shape as `ActionRunResponse.result`.
Result *string `json:"result,omitempty"`
// Status - `pending_approval` — the user has not yet decided.
// - `running` — the user approved; the daemon is executing
// the action.
// - `completed` — the action ran successfully; see `audit_id`
// and `result`.
// - `denied` — the user denied the approval; see `reason`.
// - `failed` — the action was approved but its execution
// errored; see `failure`.
Status ActionApprovalResultStatus `json:"status"`
}
ActionApprovalResult Current status and (when available) result of an action approval entry. Returned by `GET /v1/action-approvals/{id}/result`. The shape is discriminated on `status`: terminal statuses (`completed`, `denied`, `failed`) carry the relevant outcome fields; transient statuses (`pending_approval`, `running`) carry only `status`.
type ActionApprovalResultStatus ¶
type ActionApprovalResultStatus string
ActionApprovalResultStatus - `pending_approval` — the user has not yet decided.
- `running` — the user approved; the daemon is executing the action.
- `completed` — the action ran successfully; see `audit_id` and `result`.
- `denied` — the user denied the approval; see `reason`.
- `failed` — the action was approved but its execution errored; see `failure`.
const ( ActionApprovalResultStatusCompleted ActionApprovalResultStatus = "completed" ActionApprovalResultStatusDenied ActionApprovalResultStatus = "denied" ActionApprovalResultStatusFailed ActionApprovalResultStatus = "failed" ActionApprovalResultStatusPendingApproval ActionApprovalResultStatus = "pending_approval" ActionApprovalResultStatusRunning ActionApprovalResultStatus = "running" )
Defines values for ActionApprovalResultStatus.
func (ActionApprovalResultStatus) Valid ¶
func (e ActionApprovalResultStatus) Valid() bool
Valid indicates whether the value is a known member of the ActionApprovalResultStatus enum.
type ActionConnectorDep ¶
type ActionConnectorDep struct {
// AlreadyInstalled True when an entry with this hash is already in the
// cstore. The CLI renders this so the operator sees which
// deps are new (will be installed) versus existing (no
// change).
AlreadyInstalled bool `json:"already_installed"`
// Capabilities Subset of the connector's declared capabilities the
// action will exercise. Empty means the action declared no
// capability subset.
Capabilities *[]string `json:"capabilities,omitempty"`
// Fqn Connector FQN per ADR-0002.
Fqn string `json:"fqn"`
// Hash Connector content hash the action pins (`sha256:<hex>`).
// The runtime verifies this before every connector
// invocation per ADR-0004.
Hash string `json:"hash"`
// Version Strict SemVer pinned by the action.
Version string `json:"version"`
}
ActionConnectorDep defines model for ActionConnectorDep.
type ActionExecuteStep ¶
type ActionExecuteStep struct {
Connector string `json:"connector"`
Id string `json:"id"`
Idempotent *bool `json:"idempotent,omitempty"`
Inputs *map[string]interface{} `json:"inputs,omitempty"`
Op string `json:"op"`
}
ActionExecuteStep defines model for ActionExecuteStep.
type ActionInput ¶
type ActionInput struct {
// Description Field-level prose surfaced to the LLM in the
// `parameters.properties[name].description` slot.
Description string `json:"description"`
// Name Argument identifier matching `^[a-z][a-z0-9_]*$`.
Name string `json:"name"`
// Required Defaults to true when omitted. Set false to mark the argument
// as optional in the LLM-facing parameter schema.
Required *bool `json:"required,omitempty"`
// Type JSON Schema primitive type.
Type ActionInputType `json:"type"`
}
ActionInput defines model for ActionInput.
type ActionInputType ¶
type ActionInputType string
ActionInputType JSON Schema primitive type.
const ( Boolean ActionInputType = "boolean" Integer ActionInputType = "integer" Number ActionInputType = "number" String ActionInputType = "string" )
Defines values for ActionInputType.
func (ActionInputType) Valid ¶
func (e ActionInputType) Valid() bool
Valid indicates whether the value is a known member of the ActionInputType enum.
type ActionIntent ¶
type ActionIntent struct {
// Domain Carries action-type-specific fields. Exactly one field must be populated,
// corresponding to the prefix of ActionIntent.type:
// - git.* → git
// - deploy.* → deploy
// - cloud.* → cloud
// - email.* → email
// - calendar.* → calendar
// - payment.* → payment
// - procurement.* → procurement
// The server rejects requests where the populated domain field does not
// match the action type prefix.
Domain *DomainAction `json:"domain,omitempty"`
Justification *string `json:"justification,omitempty"`
Metadata *map[string]interface{} `json:"metadata,omitempty"`
Summary string `json:"summary"`
Target *ActionTarget `json:"target,omitempty"`
Type string `json:"type"`
}
ActionIntent defines model for ActionIntent.
type ActionListResponse ¶
type ActionListResponse struct {
Items *[]Action `json:"items,omitempty"`
LoadErrors *[]ActionLoadError `json:"load_errors,omitempty"`
}
ActionListResponse defines model for ActionListResponse.
type ActionLoadError ¶
type ActionLoadError struct {
// Boundary Which layer produced the error (always "action" for load failures).
Boundary *string `json:"boundary,omitempty"`
// Class Canonical failure class (e.g. parse_error, validation_error).
Class string `json:"class"`
// File Absolute path of the offending file.
File string `json:"file"`
// Line Line within the file where the error was detected; 0 when unknown.
Line *int `json:"line,omitempty"`
Message string `json:"message"`
}
ActionLoadError A structured error describing a single file in the actions directory that failed to parse or validate, per ADR-0010. Loading is non-fatal — files that load successfully appear in `items`; failed files appear here so callers can surface a precise message.
type ActionMatch ¶
type ActionMatch struct {
// Intent Canonical phrase the runtime matches against agent intent.
Intent string `json:"intent"`
}
ActionMatch defines model for ActionMatch.
type ActionPreview ¶
type ActionPreview struct {
// AlreadyInstalled True when an action with this name is already installed
// and its hash matches. The CLI uses this to short-circuit
// past the consent prompt.
AlreadyInstalled *bool `json:"already_installed,omitempty"`
// ConnectorDeps One entry per `[[requires.connectors]]` in the action's
// manifest, in declaration order.
ConnectorDeps []ActionConnectorDep `json:"connector_deps"`
// Existing Snapshot of an action already on disk at install time. Used in
// the preview response to surface the installed version when its
// bytes differ from the requested install — the CLI renders this
// so the operator can confirm an upgrade.
Existing *InstalledActionRef `json:"existing,omitempty"`
// Fqn Canonical FQN of the previewed action.
Fqn string `json:"fqn"`
// Hash Canonical `sha256:<hex>` of the fetched action manifest.
// Same value the install endpoint will record.
Hash string `json:"hash"`
// Intent Action's `[match] intent` — the canonical natural-language
// phrase the runtime matches against agent requests. Used in
// the consent prompt so the operator knows when this action
// will fire. Optional.
Intent *string `json:"intent,omitempty"`
// Name Action name from the manifest's `name = "<name>"` field —
// the slug under `~/.aileron/actions/<name>.md`.
Name string `json:"name"`
// SignatureStatus Action signatures are optional in v1 — manifests without a
// signature surface as `unsigned` rather than as an error.
// Operators see this in the consent prompt and decide
// whether to proceed.
SignatureStatus *ActionPreviewSignatureStatus `json:"signature_status,omitempty"`
// Version Strict SemVer.
Version string `json:"version"`
}
ActionPreview defines model for ActionPreview.
type ActionPreviewSignatureStatus ¶
type ActionPreviewSignatureStatus string
ActionPreviewSignatureStatus Action signatures are optional in v1 — manifests without a signature surface as `unsigned` rather than as an error. Operators see this in the consent prompt and decide whether to proceed.
const ( ActionPreviewSignatureStatusUnsigned ActionPreviewSignatureStatus = "unsigned" ActionPreviewSignatureStatusVerified ActionPreviewSignatureStatus = "verified" )
Defines values for ActionPreviewSignatureStatus.
func (ActionPreviewSignatureStatus) Valid ¶
func (e ActionPreviewSignatureStatus) Valid() bool
Valid indicates whether the value is a known member of the ActionPreviewSignatureStatus enum.
type ActionRequires ¶
type ActionRequires struct {
Connectors *[]ActionRequiresConnector `json:"connectors,omitempty"`
}
ActionRequires defines model for ActionRequires.
type ActionRequiresConnector ¶
type ActionRequiresConnector struct {
// Capabilities The action's declared subset of operations on the connector. Per
// ADR-0003, calls outside this subset are denied at the action
// boundary even when the connector permits the operation.
Capabilities []string `json:"capabilities"`
// Hash Content hash of the connector binary plus its manifest.
Hash string `json:"hash"`
// Name Connector FQN per ADR-0002 (e.g. "github://aileron/slack").
Name string `json:"name"`
// Version Pinned SemVer of the connector.
Version string `json:"version"`
}
ActionRequiresConnector defines model for ActionRequiresConnector.
type ActionRunPendingResponse ¶
type ActionRunPendingResponse struct {
// ApprovalId Opaque server-minted id for the pending approval entry.
// The agent passes this to the `check_action_status` MCP
// tool (or to `GET /v1/action-approvals/{id}/result`) to
// learn the outcome.
ApprovalId string `json:"approval_id"`
// Message Human-readable instruction the agent should surface to the
// user verbatim. Names the approval, the review URL, and the
// `aileron open approval <id>` shell command alternative.
Message string `json:"message"`
// ReviewUrl Deep link to the webapp's approvals page anchored at this
// approval (`<webapp>/approvals?focus=<id>`). Empty when the
// daemon has no webapp URL configured.
ReviewUrl *string `json:"review_url,omitempty"`
// Status Discriminator. Always `pending_approval` for this shape;
// included so the agent's MCP wrapper can branch without
// inspecting the HTTP status code.
Status ActionRunPendingResponseStatus `json:"status"`
}
ActionRunPendingResponse Response body for the 202 case of `POST /v1/actions/{name}/run`: the action's manifest declared `[approval] required = true`, so the daemon registered a pending approval and a background executor instead of running the action inline. The agent is expected to surface `message` to the user verbatim so they learn where to approve.
type ActionRunPendingResponseStatus ¶
type ActionRunPendingResponseStatus string
ActionRunPendingResponseStatus Discriminator. Always `pending_approval` for this shape; included so the agent's MCP wrapper can branch without inspecting the HTTP status code.
const (
ActionRunPendingResponseStatusPendingApproval ActionRunPendingResponseStatus = "pending_approval"
)
Defines values for ActionRunPendingResponseStatus.
func (ActionRunPendingResponseStatus) Valid ¶
func (e ActionRunPendingResponseStatus) Valid() bool
Valid indicates whether the value is a known member of the ActionRunPendingResponseStatus enum.
type ActionRunRequest ¶
type ActionRunRequest struct {
// Args Per-call arguments matching the action's declared inputs.
Args *map[string]interface{} `json:"args,omitempty"`
}
ActionRunRequest Arguments for synchronously executing an installed action. The `args` map is passed to the action's executor after validation against the action's declared `inputs`.
type ActionRunResponse ¶
type ActionRunResponse struct {
// AuditId Audit log ID for this execution per ADR-0010. Always present
// so callers can cross-reference into the audit log.
AuditId string `json:"audit_id"`
// Result Action output payload — the same Content the LLM observes
// as a tool result when the action runs through the gateway's
// intercept path. Typically a JSON document; may be plain
// prose for actions whose output is naturally a sentence.
Result *string `json:"result,omitempty"`
}
ActionRunResponse Successful result from synchronously executing an action. Action-side failures are returned as a 4xx/5xx FailureEnvelope instead of this shape, so a 200 response always carries a successful payload.
type ActionTarget ¶
type ActionTarget struct {
DisplayName *string `json:"display_name,omitempty"`
Id *string `json:"id,omitempty"`
Kind ActionTargetKind `json:"kind"`
}
ActionTarget defines model for ActionTarget.
type ActionTargetKind ¶
type ActionTargetKind string
ActionTargetKind defines model for ActionTarget.Kind.
const ( ActionTargetKindApi ActionTargetKind = "api" ActionTargetKindCalendar ActionTargetKind = "calendar" ActionTargetKindCloudResource ActionTargetKind = "cloud_resource" ActionTargetKindCustom ActionTargetKind = "custom" ActionTargetKindEmailRecipient ActionTargetKind = "email_recipient" ActionTargetKindEnvironment ActionTargetKind = "environment" ActionTargetKindRepository ActionTargetKind = "repository" ActionTargetKindSecret ActionTargetKind = "secret" ActionTargetKindTicket ActionTargetKind = "ticket" ActionTargetKindVendor ActionTargetKind = "vendor" )
Defines values for ActionTargetKind.
func (ActionTargetKind) Valid ¶
func (e ActionTargetKind) Valid() bool
Valid indicates whether the value is a known member of the ActionTargetKind enum.
type ActorRef ¶
type ActorRef struct {
DisplayName *string `json:"display_name,omitempty"`
Id string `json:"id"`
Type ActorRefType `json:"type"`
}
ActorRef defines model for ActorRef.
type ActorRefType ¶
type ActorRefType string
ActorRefType defines model for ActorRef.Type.
const ( Agent ActorRefType = "agent" ConnectorRuntime ActorRefType = "connector_runtime" Human ActorRefType = "human" Service ActorRefType = "service" )
Defines values for ActorRefType.
func (ActorRefType) Valid ¶
func (e ActorRefType) Valid() bool
Valid indicates whether the value is a known member of the ActorRefType enum.
type AnalyticsSummary ¶
type AnalyticsSummary struct {
ApprovalLatencyMs *struct {
P50 *int `json:"p50,omitempty"`
P95 *int `json:"p95,omitempty"`
} `json:"approval_latency_ms,omitempty"`
ByRiskLevel *map[string]int `json:"by_risk_level,omitempty"`
Spend *struct {
Currency *string `json:"currency,omitempty"`
TotalMinorUnits *int `json:"total_minor_units,omitempty"`
} `json:"spend,omitempty"`
Totals *struct {
ApprovalsGranted *int `json:"approvals_granted,omitempty"`
ApprovalsRequested *int `json:"approvals_requested,omitempty"`
Denials *int `json:"denials,omitempty"`
ExecutionsFailed *int `json:"executions_failed,omitempty"`
ExecutionsSucceeded *int `json:"executions_succeeded,omitempty"`
Intents *int `json:"intents,omitempty"`
} `json:"totals,omitempty"`
}
AnalyticsSummary defines model for AnalyticsSummary.
type AnthropicMessage ¶
type AnthropicMessage struct {
// Content String or array of content blocks (`text`, `tool_use`,
// `tool_result`, `image`, ...). Shape follows Anthropic's
// Messages contract.
Content interface{} `json:"content"`
Role AnthropicMessageRole `json:"role"`
AdditionalProperties map[string]interface{} `json:"-"`
}
AnthropicMessage defines model for AnthropicMessage.
func (AnthropicMessage) Get ¶
func (a AnthropicMessage) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for AnthropicMessage. Returns the specified element and whether it was found
func (AnthropicMessage) MarshalJSON ¶
func (a AnthropicMessage) MarshalJSON() ([]byte, error)
Override default JSON handling for AnthropicMessage to handle AdditionalProperties
func (*AnthropicMessage) Set ¶
func (a *AnthropicMessage) Set(fieldName string, value interface{})
Setter for additional properties for AnthropicMessage
func (*AnthropicMessage) UnmarshalJSON ¶
func (a *AnthropicMessage) UnmarshalJSON(b []byte) error
Override default JSON handling for AnthropicMessage to handle AdditionalProperties
type AnthropicMessageRole ¶
type AnthropicMessageRole string
AnthropicMessageRole defines model for AnthropicMessage.Role.
const ( AnthropicMessageRoleAssistant AnthropicMessageRole = "assistant" AnthropicMessageRoleUser AnthropicMessageRole = "user" )
Defines values for AnthropicMessageRole.
func (AnthropicMessageRole) Valid ¶
func (e AnthropicMessageRole) Valid() bool
Valid indicates whether the value is a known member of the AnthropicMessageRole enum.
type AnthropicTool ¶
type AnthropicTool struct {
Description *string `json:"description,omitempty"`
// InputSchema JSON Schema for the tool's input.
InputSchema *map[string]interface{} `json:"input_schema,omitempty"`
Name string `json:"name"`
AdditionalProperties map[string]interface{} `json:"-"`
}
AnthropicTool defines model for AnthropicTool.
func (AnthropicTool) Get ¶
func (a AnthropicTool) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for AnthropicTool. Returns the specified element and whether it was found
func (AnthropicTool) MarshalJSON ¶
func (a AnthropicTool) MarshalJSON() ([]byte, error)
Override default JSON handling for AnthropicTool to handle AdditionalProperties
func (*AnthropicTool) Set ¶
func (a *AnthropicTool) Set(fieldName string, value interface{})
Setter for additional properties for AnthropicTool
func (*AnthropicTool) UnmarshalJSON ¶
func (a *AnthropicTool) UnmarshalJSON(b []byte) error
Override default JSON handling for AnthropicTool to handle AdditionalProperties
type AppendEvidenceRequest ¶
type AppendEvidenceRequest struct {
Evidence []EvidenceItem `json:"evidence"`
}
AppendEvidenceRequest defines model for AppendEvidenceRequest.
type AppendIntentEvidenceJSONRequestBody ¶
type AppendIntentEvidenceJSONRequestBody = AppendEvidenceRequest
AppendIntentEvidenceJSONRequestBody defines body for AppendIntentEvidence for application/json ContentType.
type Approval ¶
type Approval struct {
ApprovalId string `json:"approval_id"`
Approvers []ApprovalActor `json:"approvers"`
EditableBounds *map[string]interface{} `json:"editable_bounds,omitempty"`
ExpiresAt *time.Time `json:"expires_at,omitempty"`
IntentId string `json:"intent_id"`
Rationale *string `json:"rationale,omitempty"`
RequestedAt time.Time `json:"requested_at"`
ResolvedAt *time.Time `json:"resolved_at,omitempty"`
Status ApprovalStatus `json:"status"`
WorkspaceId *string `json:"workspace_id,omitempty"`
}
Approval defines model for Approval.
type ApprovalActionResponse ¶
type ApprovalActionResponse struct {
ApprovalId string `json:"approval_id"`
ExecutionGrantId *string `json:"execution_grant_id,omitempty"`
IntentStatus *IntentStatus `json:"intent_status,omitempty"`
Status ApprovalStatus `json:"status"`
}
ApprovalActionResponse defines model for ApprovalActionResponse.
type ApprovalActor ¶
type ApprovalActor struct {
DisplayName *string `json:"display_name,omitempty"`
PrincipalId string `json:"principal_id"`
Role *string `json:"role,omitempty"`
Status *ApprovalActorStatus `json:"status,omitempty"`
}
ApprovalActor defines model for ApprovalActor.
type ApprovalActorStatus ¶
type ApprovalActorStatus string
ApprovalActorStatus defines model for ApprovalActor.Status.
const ( ApprovalActorStatusApproved ApprovalActorStatus = "approved" ApprovalActorStatusDelegated ApprovalActorStatus = "delegated" ApprovalActorStatusDenied ApprovalActorStatus = "denied" ApprovalActorStatusPending ApprovalActorStatus = "pending" )
Defines values for ApprovalActorStatus.
func (ApprovalActorStatus) Valid ¶
func (e ApprovalActorStatus) Valid() bool
Valid indicates whether the value is a known member of the ApprovalActorStatus enum.
type ApprovalListResponse ¶
type ApprovalListResponse struct {
Items *[]Approval `json:"items,omitempty"`
Pagination *Pagination `json:"pagination,omitempty"`
}
ApprovalListResponse defines model for ApprovalListResponse.
type ApprovalRequirement ¶
type ApprovalRequirement struct {
ApproverGroupId *string `json:"approver_group_id,omitempty"`
Mode *ApprovalRequirementMode `json:"mode,omitempty"`
QuorumCount *int `json:"quorum_count,omitempty"`
}
ApprovalRequirement defines model for ApprovalRequirement.
type ApprovalRequirementMode ¶
type ApprovalRequirementMode string
ApprovalRequirementMode defines model for ApprovalRequirement.Mode.
const ( AllOfGroup ApprovalRequirementMode = "all_of_group" AnyOfGroup ApprovalRequirementMode = "any_of_group" Quorum ApprovalRequirementMode = "quorum" Single ApprovalRequirementMode = "single" )
Defines values for ApprovalRequirementMode.
func (ApprovalRequirementMode) Valid ¶
func (e ApprovalRequirementMode) Valid() bool
Valid indicates whether the value is a known member of the ApprovalRequirementMode enum.
type ApprovalStatus ¶
type ApprovalStatus string
ApprovalStatus defines model for ApprovalStatus.
const ( ApprovalStatusApproved ApprovalStatus = "approved" ApprovalStatusCancelled ApprovalStatus = "cancelled" ApprovalStatusDelegated ApprovalStatus = "delegated" ApprovalStatusDenied ApprovalStatus = "denied" ApprovalStatusExpired ApprovalStatus = "expired" ApprovalStatusModified ApprovalStatus = "modified" ApprovalStatusPending ApprovalStatus = "pending" )
Defines values for ApprovalStatus.
func (ApprovalStatus) Valid ¶
func (e ApprovalStatus) Valid() bool
Valid indicates whether the value is a known member of the ApprovalStatus enum.
type ApproveRequest ¶
type ApproveRequest struct {
ApproveOnce *bool `json:"approve_once,omitempty"`
Comment *string `json:"comment,omitempty"`
StepUpAuthAssertion *string `json:"step_up_auth_assertion,omitempty"`
}
ApproveRequest defines model for ApproveRequest.
type ApproveRequestJSONRequestBody ¶
type ApproveRequestJSONRequestBody = ApproveRequest
ApproveRequestJSONRequestBody defines body for ApproveRequest for application/json ContentType.
type AttachmentRef ¶
type AttachmentRef struct {
MimeType *string `json:"mime_type,omitempty"`
Name *string `json:"name,omitempty"`
StorageRef *string `json:"storage_ref,omitempty"`
Url *string `json:"url,omitempty"`
}
AttachmentRef defines model for AttachmentRef.
type AuditEvent ¶
type AuditEvent struct {
Actor struct {
// Id Stable identifier within the actor type.
Id string `json:"id"`
// Type Actor kind (`human`, `agent`, `connector_runtime`, etc.)
Type string `json:"type"`
} `json:"actor"`
// AuditId Stable id minted by the recorder. For failures, also
// stamped onto the `FailureEnvelope.error.audit_id` so the
// envelope returned to the caller is a working back-reference.
AuditId string `json:"audit_id"`
// EventType Discriminator for the payload shape (e.g.
// `execution.failed`, `action.installed`, `binding.created`).
EventType string `json:"event_type"`
// Payload Event-shaped payload. For failures, contains
// `class`/`boundary`/`retriable`/`message`/`details`. For
// success events, contains the event-specific fields the
// recorder set (e.g. `name`, `connector_fqn`, `kind` for a
// binding event).
Payload map[string]interface{} `json:"payload"`
// Timestamp When the event was recorded; RFC 3339, UTC.
Timestamp time.Time `json:"timestamp"`
}
AuditEvent A single audit-log entry. Shape is stable across the events the ADR-0010 recorder emits (failures, action installs, binding lifecycle). Specific keys inside `payload` depend on `event_type` and are documented in the recorder.
type AuditListResponse ¶
type AuditListResponse struct {
Events []AuditEvent `json:"events"`
}
AuditListResponse Response shape for `GET /v1/audit`. `events` is ordered newest-first; truncation to `limit` is applied after filtering.
type BadRequest ¶
type BadRequest = Error
BadRequest Generic error envelope used by CRUD endpoints (intents, approvals, policies, accounts, auth). Action-execution and gateway endpoints use the structured `FailureEnvelope` instead, per ADR-0010.
type Binding ¶
type Binding struct {
// Account Human-readable account label derived from credential metadata when available.
Account *string `json:"account,omitempty"`
// ConnectorFqn FQN of the connector this binding was created for.
ConnectorFqn string `json:"connector_fqn"`
CreatedAt time.Time `json:"created_at"`
// Identity User-chosen handle distinguishing variants of the same kind+service (e.g. `work`, `personal`).
Identity string `json:"identity"`
// Kind Credential kind (e.g. `api_key`, `oauth2`). Matches the connector manifest's `[capabilities.credential].kind`.
Kind string `json:"kind"`
// LastRefreshedAt Reserved for OAuth refresh tracking (#388); always null for `api_key`.
LastRefreshedAt *time.Time `json:"last_refreshed_at,omitempty"`
// LastUsedAt Last time the runtime resolved this binding for an action invocation.
LastUsedAt *time.Time `json:"last_used_at,omitempty"`
// Name Full binding name in `<kind>/<service>/<identity>` form.
Name string `json:"name"`
// RefreshTokenPresent Reserved for OAuth refresh tracking (#388); always false for `api_key`.
RefreshTokenPresent *bool `json:"refresh_token_present,omitempty"`
// Scope Optional scope string copied from the connector manifest at setup time.
Scope *string `json:"scope,omitempty"`
// Service Service identifier (e.g. `slack`, `linear`).
Service string `json:"service"`
// Status Coarse health flag. v1 always reports `active` for present bindings.
Status *BindingStatus `json:"status,omitempty"`
}
Binding A capability binding mapping a connector's declared credential capability to a concrete vault entry, per ADR-0006. The same `name` string is the vault path the runtime resolves at credential-mediation time.
type BindingListResponse ¶
type BindingListResponse struct {
Items []Binding `json:"items"`
}
BindingListResponse defines model for BindingListResponse.
type BindingSetupRequest ¶
type BindingSetupRequest struct {
Bindings []struct {
// Account Optional human-readable account label.
Account *string `json:"account,omitempty"`
// Identity User-chosen handle for this binding. Combined with the
// connector's declared kind and service to form the
// full binding name `<kind>/<service>/<identity>`.
Identity string `json:"identity"`
// Service Optional service override. Defaults to the service
// segment derived from the connector FQN's host.
Service *string `json:"service,omitempty"`
// Source Per-binding credential source. v1 supports only `api_key`. Setting
// `kind: oauth2` returns a structured `400` referencing #388.
Source BindingSource `json:"source"`
} `json:"bindings"`
// ConnectorFqn Fully-qualified connector name (e.g. `github://aileron/slack`).
// The connector must already be installed.
ConnectorFqn string `json:"connector_fqn"`
// SkipExisting When true (default), bindings whose name already exists are
// skipped silently and reported in the response's `skipped`
// list. When false, the entire request fails with `409 Conflict`
// on the first existing binding.
SkipExisting *bool `json:"skip_existing,omitempty"`
}
BindingSetupRequest defines model for BindingSetupRequest.
type BindingSetupResponse ¶
type BindingSetupResponse struct {
Created []Binding `json:"created"`
// Skipped Names of bindings that already existed (only populated when `skip_existing` was true).
Skipped *[]string `json:"skipped,omitempty"`
}
BindingSetupResponse defines model for BindingSetupResponse.
type BindingSource ¶
type BindingSource struct {
// Kind Credential kind. Must match the connector manifest's declared
// `[capabilities.credential].kind` for the requested capability.
Kind BindingSourceKind `json:"kind"`
// Value Raw credential bytes (e.g. the API key). Required when `kind`
// is `api_key`. The runtime stores this encrypted in the vault.
Value *string `json:"value,omitempty"`
}
BindingSource Per-binding credential source. v1 supports only `api_key`. Setting `kind: oauth2` returns a structured `400` referencing #388.
type BindingSourceKind ¶
type BindingSourceKind string
BindingSourceKind Credential kind. Must match the connector manifest's declared `[capabilities.credential].kind` for the requested capability.
const ( BindingSourceKindApiKey BindingSourceKind = "api_key" BindingSourceKindOauth2 BindingSourceKind = "oauth2" )
Defines values for BindingSourceKind.
func (BindingSourceKind) Valid ¶
func (e BindingSourceKind) Valid() bool
Valid indicates whether the value is a known member of the BindingSourceKind enum.
type BindingStatus ¶
type BindingStatus string
BindingStatus Coarse health flag. v1 always reports `active` for present bindings.
const ( BindingStatusActive BindingStatus = "active" BindingStatusRevoked BindingStatus = "revoked" BindingStatusStale BindingStatus = "stale" )
Defines values for BindingStatus.
func (BindingStatus) Valid ¶
func (e BindingStatus) Valid() bool
Valid indicates whether the value is a known member of the BindingStatus enum.
type CalendarAction ¶
type CalendarAction struct {
Attendees *[]CalendarAttendee `json:"attendees,omitempty"`
CalendarId *string `json:"calendar_id,omitempty"`
ConferenceType *CalendarActionConferenceType `json:"conference_type,omitempty"`
Description *string `json:"description,omitempty"`
EndTime *time.Time `json:"end_time,omitempty"`
Location *string `json:"location,omitempty"`
Provider *CalendarActionProvider `json:"provider,omitempty"`
StartTime *time.Time `json:"start_time,omitempty"`
Timezone *string `json:"timezone,omitempty"`
Title *string `json:"title,omitempty"`
Visibility *CalendarActionVisibility `json:"visibility,omitempty"`
}
CalendarAction defines model for CalendarAction.
type CalendarActionConferenceType ¶
type CalendarActionConferenceType string
CalendarActionConferenceType defines model for CalendarAction.ConferenceType.
const ( CalendarActionConferenceTypeCustom CalendarActionConferenceType = "custom" CalendarActionConferenceTypeGoogleMeet CalendarActionConferenceType = "google_meet" CalendarActionConferenceTypeNone CalendarActionConferenceType = "none" CalendarActionConferenceTypeTeams CalendarActionConferenceType = "teams" CalendarActionConferenceTypeZoom CalendarActionConferenceType = "zoom" )
Defines values for CalendarActionConferenceType.
func (CalendarActionConferenceType) Valid ¶
func (e CalendarActionConferenceType) Valid() bool
Valid indicates whether the value is a known member of the CalendarActionConferenceType enum.
type CalendarActionProvider ¶
type CalendarActionProvider string
CalendarActionProvider defines model for CalendarAction.Provider.
const ( CalendarActionProviderCustom CalendarActionProvider = "custom" CalendarActionProviderGoogleCalendar CalendarActionProvider = "google_calendar" CalendarActionProviderOutlook CalendarActionProvider = "outlook" )
Defines values for CalendarActionProvider.
func (CalendarActionProvider) Valid ¶
func (e CalendarActionProvider) Valid() bool
Valid indicates whether the value is a known member of the CalendarActionProvider enum.
type CalendarActionVisibility ¶
type CalendarActionVisibility string
CalendarActionVisibility defines model for CalendarAction.Visibility.
const ( Default CalendarActionVisibility = "default" Private CalendarActionVisibility = "private" Public CalendarActionVisibility = "public" )
Defines values for CalendarActionVisibility.
func (CalendarActionVisibility) Valid ¶
func (e CalendarActionVisibility) Valid() bool
Valid indicates whether the value is a known member of the CalendarActionVisibility enum.
type CalendarAttendee ¶
type CalendarAttendee struct {
Email openapi_types.Email `json:"email"`
Name *string `json:"name,omitempty"`
Optional *bool `json:"optional,omitempty"`
}
CalendarAttendee defines model for CalendarAttendee.
type ChatCompletionChoice ¶
type ChatCompletionChoice struct {
FinishReason string `json:"finish_reason"`
Index int `json:"index"`
Message ChatCompletionMessage `json:"message"`
AdditionalProperties map[string]interface{} `json:"-"`
}
ChatCompletionChoice defines model for ChatCompletionChoice.
func (ChatCompletionChoice) Get ¶
func (a ChatCompletionChoice) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for ChatCompletionChoice. Returns the specified element and whether it was found
func (ChatCompletionChoice) MarshalJSON ¶
func (a ChatCompletionChoice) MarshalJSON() ([]byte, error)
Override default JSON handling for ChatCompletionChoice to handle AdditionalProperties
func (*ChatCompletionChoice) Set ¶
func (a *ChatCompletionChoice) Set(fieldName string, value interface{})
Setter for additional properties for ChatCompletionChoice
func (*ChatCompletionChoice) UnmarshalJSON ¶
func (a *ChatCompletionChoice) UnmarshalJSON(b []byte) error
Override default JSON handling for ChatCompletionChoice to handle AdditionalProperties
type ChatCompletionFunctionDef ¶
type ChatCompletionFunctionDef struct {
Description *string `json:"description,omitempty"`
Name string `json:"name"`
// Parameters JSON Schema for the function's parameters.
Parameters *map[string]interface{} `json:"parameters,omitempty"`
AdditionalProperties map[string]interface{} `json:"-"`
}
ChatCompletionFunctionDef defines model for ChatCompletionFunctionDef.
func (ChatCompletionFunctionDef) Get ¶
func (a ChatCompletionFunctionDef) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for ChatCompletionFunctionDef. Returns the specified element and whether it was found
func (ChatCompletionFunctionDef) MarshalJSON ¶
func (a ChatCompletionFunctionDef) MarshalJSON() ([]byte, error)
Override default JSON handling for ChatCompletionFunctionDef to handle AdditionalProperties
func (*ChatCompletionFunctionDef) Set ¶
func (a *ChatCompletionFunctionDef) Set(fieldName string, value interface{})
Setter for additional properties for ChatCompletionFunctionDef
func (*ChatCompletionFunctionDef) UnmarshalJSON ¶
func (a *ChatCompletionFunctionDef) UnmarshalJSON(b []byte) error
Override default JSON handling for ChatCompletionFunctionDef to handle AdditionalProperties
type ChatCompletionMessage ¶
type ChatCompletionMessage struct {
// Content String or array of content parts; shape follows the upstream
// provider's contract. Aileron does not require parsing.
Content interface{} `json:"content,omitempty"`
Name *string `json:"name,omitempty"`
Role ChatCompletionMessageRole `json:"role"`
// ToolCallId Required on `tool` role messages.
ToolCallId *string `json:"tool_call_id,omitempty"`
ToolCalls *[]ChatCompletionToolCall `json:"tool_calls,omitempty"`
AdditionalProperties map[string]interface{} `json:"-"`
}
ChatCompletionMessage defines model for ChatCompletionMessage.
func (ChatCompletionMessage) Get ¶
func (a ChatCompletionMessage) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for ChatCompletionMessage. Returns the specified element and whether it was found
func (ChatCompletionMessage) MarshalJSON ¶
func (a ChatCompletionMessage) MarshalJSON() ([]byte, error)
Override default JSON handling for ChatCompletionMessage to handle AdditionalProperties
func (*ChatCompletionMessage) Set ¶
func (a *ChatCompletionMessage) Set(fieldName string, value interface{})
Setter for additional properties for ChatCompletionMessage
func (*ChatCompletionMessage) UnmarshalJSON ¶
func (a *ChatCompletionMessage) UnmarshalJSON(b []byte) error
Override default JSON handling for ChatCompletionMessage to handle AdditionalProperties
type ChatCompletionMessageRole ¶
type ChatCompletionMessageRole string
ChatCompletionMessageRole defines model for ChatCompletionMessage.Role.
const ( ChatCompletionMessageRoleAssistant ChatCompletionMessageRole = "assistant" ChatCompletionMessageRoleDeveloper ChatCompletionMessageRole = "developer" ChatCompletionMessageRoleSystem ChatCompletionMessageRole = "system" ChatCompletionMessageRoleTool ChatCompletionMessageRole = "tool" ChatCompletionMessageRoleUser ChatCompletionMessageRole = "user" )
Defines values for ChatCompletionMessageRole.
func (ChatCompletionMessageRole) Valid ¶
func (e ChatCompletionMessageRole) Valid() bool
Valid indicates whether the value is a known member of the ChatCompletionMessageRole enum.
type ChatCompletionRequest ¶
type ChatCompletionRequest struct {
Messages []ChatCompletionMessage `json:"messages"`
// Model Model identifier passed to the upstream provider.
Model string `json:"model"`
// Stream When true, the response is `text/event-stream`. Aileron
// buffers tool-call deltas for augmented actions until the call
// is structurally complete.
Stream *bool `json:"stream,omitempty"`
// ToolChoice Passed through to the upstream provider unchanged.
ToolChoice interface{} `json:"tool_choice,omitempty"`
// Tools Agent-declared tools. Aileron preserves these unchanged and
// appends installed actions to the array before forwarding
// upstream.
Tools *[]ChatCompletionTool `json:"tools,omitempty"`
AdditionalProperties map[string]interface{} `json:"-"`
}
ChatCompletionRequest defines model for ChatCompletionRequest.
func (ChatCompletionRequest) Get ¶
func (a ChatCompletionRequest) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for ChatCompletionRequest. Returns the specified element and whether it was found
func (ChatCompletionRequest) MarshalJSON ¶
func (a ChatCompletionRequest) MarshalJSON() ([]byte, error)
Override default JSON handling for ChatCompletionRequest to handle AdditionalProperties
func (*ChatCompletionRequest) Set ¶
func (a *ChatCompletionRequest) Set(fieldName string, value interface{})
Setter for additional properties for ChatCompletionRequest
func (*ChatCompletionRequest) UnmarshalJSON ¶
func (a *ChatCompletionRequest) UnmarshalJSON(b []byte) error
Override default JSON handling for ChatCompletionRequest to handle AdditionalProperties
type ChatCompletionResponse ¶
type ChatCompletionResponse struct {
Choices []ChatCompletionChoice `json:"choices"`
Created *int `json:"created,omitempty"`
Id string `json:"id"`
Model string `json:"model"`
Object string `json:"object"`
Usage *map[string]interface{} `json:"usage,omitempty"`
AdditionalProperties map[string]interface{} `json:"-"`
}
ChatCompletionResponse defines model for ChatCompletionResponse.
func (ChatCompletionResponse) Get ¶
func (a ChatCompletionResponse) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for ChatCompletionResponse. Returns the specified element and whether it was found
func (ChatCompletionResponse) MarshalJSON ¶
func (a ChatCompletionResponse) MarshalJSON() ([]byte, error)
Override default JSON handling for ChatCompletionResponse to handle AdditionalProperties
func (*ChatCompletionResponse) Set ¶
func (a *ChatCompletionResponse) Set(fieldName string, value interface{})
Setter for additional properties for ChatCompletionResponse
func (*ChatCompletionResponse) UnmarshalJSON ¶
func (a *ChatCompletionResponse) UnmarshalJSON(b []byte) error
Override default JSON handling for ChatCompletionResponse to handle AdditionalProperties
type ChatCompletionTool ¶
type ChatCompletionTool struct {
Function *ChatCompletionFunctionDef `json:"function,omitempty"`
Type ChatCompletionToolType `json:"type"`
AdditionalProperties map[string]interface{} `json:"-"`
}
ChatCompletionTool defines model for ChatCompletionTool.
func (ChatCompletionTool) Get ¶
func (a ChatCompletionTool) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for ChatCompletionTool. Returns the specified element and whether it was found
func (ChatCompletionTool) MarshalJSON ¶
func (a ChatCompletionTool) MarshalJSON() ([]byte, error)
Override default JSON handling for ChatCompletionTool to handle AdditionalProperties
func (*ChatCompletionTool) Set ¶
func (a *ChatCompletionTool) Set(fieldName string, value interface{})
Setter for additional properties for ChatCompletionTool
func (*ChatCompletionTool) UnmarshalJSON ¶
func (a *ChatCompletionTool) UnmarshalJSON(b []byte) error
Override default JSON handling for ChatCompletionTool to handle AdditionalProperties
type ChatCompletionToolCall ¶
type ChatCompletionToolCall struct {
Function struct {
// Arguments JSON-encoded argument object.
Arguments string `json:"arguments"`
Name string `json:"name"`
} `json:"function"`
Id string `json:"id"`
Type ChatCompletionToolCallType `json:"type"`
AdditionalProperties map[string]interface{} `json:"-"`
}
ChatCompletionToolCall defines model for ChatCompletionToolCall.
func (ChatCompletionToolCall) Get ¶
func (a ChatCompletionToolCall) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for ChatCompletionToolCall. Returns the specified element and whether it was found
func (ChatCompletionToolCall) MarshalJSON ¶
func (a ChatCompletionToolCall) MarshalJSON() ([]byte, error)
Override default JSON handling for ChatCompletionToolCall to handle AdditionalProperties
func (*ChatCompletionToolCall) Set ¶
func (a *ChatCompletionToolCall) Set(fieldName string, value interface{})
Setter for additional properties for ChatCompletionToolCall
func (*ChatCompletionToolCall) UnmarshalJSON ¶
func (a *ChatCompletionToolCall) UnmarshalJSON(b []byte) error
Override default JSON handling for ChatCompletionToolCall to handle AdditionalProperties
type ChatCompletionToolCallType ¶
type ChatCompletionToolCallType string
ChatCompletionToolCallType defines model for ChatCompletionToolCall.Type.
const (
ChatCompletionToolCallTypeFunction ChatCompletionToolCallType = "function"
)
Defines values for ChatCompletionToolCallType.
func (ChatCompletionToolCallType) Valid ¶
func (e ChatCompletionToolCallType) Valid() bool
Valid indicates whether the value is a known member of the ChatCompletionToolCallType enum.
type ChatCompletionToolType ¶
type ChatCompletionToolType string
ChatCompletionToolType defines model for ChatCompletionTool.Type.
const (
ChatCompletionToolTypeFunction ChatCompletionToolType = "function"
)
Defines values for ChatCompletionToolType.
func (ChatCompletionToolType) Valid ¶
func (e ChatCompletionToolType) Valid() bool
Valid indicates whether the value is a known member of the ChatCompletionToolType enum.
type CheckConnectorsParams ¶
type CheckConnectorsParams struct {
// IncludePrerelease Include pre-release versions when computing the latest version.
IncludePrerelease *bool `form:"include_prerelease,omitempty" json:"include_prerelease,omitempty"`
}
CheckConnectorsParams defines parameters for CheckConnectors.
type CloudAction ¶
type CloudAction struct {
AccountId *string `json:"account_id,omitempty"`
EstimatedCost *Money `json:"estimated_cost,omitempty"`
Operation *string `json:"operation,omitempty"`
Provider *CloudActionProvider `json:"provider,omitempty"`
Region *string `json:"region,omitempty"`
ResourceId *string `json:"resource_id,omitempty"`
ResourceType *string `json:"resource_type,omitempty"`
Tags *map[string]string `json:"tags,omitempty"`
}
CloudAction defines model for CloudAction.
type CloudActionProvider ¶
type CloudActionProvider string
CloudActionProvider defines model for CloudAction.Provider.
const ( CloudActionProviderAws CloudActionProvider = "aws" CloudActionProviderAzure CloudActionProvider = "azure" CloudActionProviderCloudflare CloudActionProvider = "cloudflare" CloudActionProviderCustom CloudActionProvider = "custom" CloudActionProviderGcp CloudActionProvider = "gcp" )
Defines values for CloudActionProvider.
func (CloudActionProvider) Valid ¶
func (e CloudActionProvider) Valid() bool
Valid indicates whether the value is a known member of the CloudActionProvider enum.
type CommsMessage ¶
type CommsMessage struct {
// Author Sender's display name.
Author string `json:"author"`
// Body Full message text.
Body string `json:"body"`
// Channel Channel name or ID the message arrived on.
Channel string `json:"channel"`
// DraftRequest True when the message arrived on a channel configured for
// auto-draft and no reply has been drafted yet — the agent
// should call `draft_reply` with this message's id.
DraftRequest *bool `json:"draft_request,omitempty"`
// Id Stable per-message identifier (set by the inbound listener).
Id string `json:"id"`
// Service Source service ("slack", "discord", ...).
Service string `json:"service"`
// Timestamp When the listener received the message (RFC3339).
Timestamp time.Time `json:"timestamp"`
}
CommsMessage A single message read from the daemon's notify queue. Mirrors the wire shape `aileron-mcp`'s `read_messages` tool surfaces to the agent so the agent can decide whether to draft a reply.
type Conflict ¶
type Conflict = Error
Conflict Generic error envelope used by CRUD endpoints (intents, approvals, policies, accounts, auth). Action-execution and gateway endpoints use the structured `FailureEnvelope` instead, per ADR-0010.
type ConnectAccountCallbackParams ¶
type ConnectAccountCallbackParams struct {
Code string `form:"code" json:"code"`
State *string `form:"state,omitempty" json:"state,omitempty"`
}
ConnectAccountCallbackParams defines parameters for ConnectAccountCallback.
type ConnectAccountParams ¶
type ConnectAccountParams struct {
// ReturnTo URL to redirect to after the account is connected. Must be a same-site absolute URL or a relative path. Defaults to /settings/connected-accounts.
ReturnTo *string `form:"return_to,omitempty" json:"return_to,omitempty"`
}
ConnectAccountParams defines parameters for ConnectAccount.
type ConnectedAccount ¶
type ConnectedAccount struct {
CreatedAt *time.Time `json:"created_at,omitempty"`
// ExternalUserId Provider-specific user identifier (e.g. email for Gmail, username for GitHub, user ID for Slack)
ExternalUserId *string `json:"external_user_id,omitempty"`
Id *string `json:"id,omitempty"`
Provider *ConnectedAccountProvider `json:"provider,omitempty"`
// Scopes OAuth scopes granted to Aileron
Scopes *[]string `json:"scopes,omitempty"`
Status *ConnectedAccountStatus `json:"status,omitempty"`
UpdatedAt *time.Time `json:"updated_at,omitempty"`
UserId *string `json:"user_id,omitempty"`
}
ConnectedAccount defines model for ConnectedAccount.
type ConnectedAccountProvider ¶
type ConnectedAccountProvider string
ConnectedAccountProvider defines model for ConnectedAccount.Provider.
const ( Gmail ConnectedAccountProvider = "gmail" GoogleCalendar ConnectedAccountProvider = "google_calendar" MicrosoftCalendar ConnectedAccountProvider = "microsoft_calendar" Outlook ConnectedAccountProvider = "outlook" )
Defines values for ConnectedAccountProvider.
func (ConnectedAccountProvider) Valid ¶
func (e ConnectedAccountProvider) Valid() bool
Valid indicates whether the value is a known member of the ConnectedAccountProvider enum.
type ConnectedAccountStatus ¶
type ConnectedAccountStatus string
ConnectedAccountStatus defines model for ConnectedAccount.Status.
const ( ConnectedAccountStatusActive ConnectedAccountStatus = "active" ConnectedAccountStatusExpired ConnectedAccountStatus = "expired" ConnectedAccountStatusRevoked ConnectedAccountStatus = "revoked" )
Defines values for ConnectedAccountStatus.
func (ConnectedAccountStatus) Valid ¶
func (e ConnectedAccountStatus) Valid() bool
Valid indicates whether the value is a known member of the ConnectedAccountStatus enum.
type Connector ¶
type Connector struct {
Auth *ConnectorAuth `json:"auth,omitempty"`
ConnectorId string `json:"connector_id"`
Environment *string `json:"environment,omitempty"`
Metadata *map[string]interface{} `json:"metadata,omitempty"`
Name string `json:"name"`
PolicyIds *[]string `json:"policy_ids,omitempty"`
Provider *string `json:"provider,omitempty"`
Status ConnectorStatus `json:"status"`
Type ConnectorType `json:"type"`
WorkspaceId string `json:"workspace_id"`
}
Connector defines model for Connector.
type ConnectorAuth ¶
type ConnectorAuth struct {
Method ConnectorAuthMethod `json:"method"`
ReferenceId *string `json:"reference_id,omitempty"`
Scopes *[]string `json:"scopes,omitempty"`
}
ConnectorAuth defines model for ConnectorAuth.
type ConnectorAuthMethod ¶
type ConnectorAuthMethod string
ConnectorAuthMethod defines model for ConnectorAuth.Method.
const ( ConnectorAuthMethodApiKeyRef ConnectorAuthMethod = "api_key_ref" ConnectorAuthMethodCustom ConnectorAuthMethod = "custom" ConnectorAuthMethodOauth2 ConnectorAuthMethod = "oauth2" ConnectorAuthMethodServiceAccountRef ConnectorAuthMethod = "service_account_ref" ConnectorAuthMethodWebhookSecretRef ConnectorAuthMethod = "webhook_secret_ref" )
Defines values for ConnectorAuthMethod.
func (ConnectorAuthMethod) Valid ¶
func (e ConnectorAuthMethod) Valid() bool
Valid indicates whether the value is a known member of the ConnectorAuthMethod enum.
type ConnectorCheckResult ¶
type ConnectorCheckResult struct {
// AvailableVersions Versions strictly newer than `current_version`, sorted descending.
// Omitted when `error` is present. Excludes pre-releases unless
// the request set `include_prerelease=true`.
AvailableVersions *[]string `json:"available_versions,omitempty"`
// CurrentVersion Currently installed SemVer.
CurrentVersion string `json:"current_version"`
// Error Per-connector check error (network failure, source removed,
// unknown scheme, scheme not yet implemented). When present,
// `latest_version` and `available_versions` may be omitted —
// the check failed for this connector but did not abort the
// sweep.
Error *string `json:"error,omitempty"`
// Fqn Canonical FQN of the installed connector (per ADR-0002).
Fqn string `json:"fqn"`
// LatestVersion Latest available version after applying the prerelease filter.
// Omitted when `error` is present or when no released versions
// were found at the source.
LatestVersion *string `json:"latest_version,omitempty"`
// UpdateAvailable True when `latest_version` is strictly newer than `current_version`
// under SemVer 2.0 ordering. False when this connector is up to date,
// and false when `error` is present (we couldn't tell).
UpdateAvailable bool `json:"update_available"`
}
ConnectorCheckResult defines model for ConnectorCheckResult.
type ConnectorInstallFailure ¶
type ConnectorInstallFailure struct {
// Error Human-readable error from the install pipeline.
Error string `json:"error"`
Fqn string `json:"fqn"`
Version string `json:"version"`
}
ConnectorInstallFailure defines model for ConnectorInstallFailure.
type ConnectorListResponse ¶
type ConnectorListResponse struct {
Items *[]Connector `json:"items,omitempty"`
Pagination *Pagination `json:"pagination,omitempty"`
}
ConnectorListResponse defines model for ConnectorListResponse.
type ConnectorPreview ¶
type ConnectorPreview struct {
// AlreadyInstalled True when an entry with this hash is already in the
// cstore. The CLI uses this to skip the consent prompt and
// short-circuit to a "already installed" message — operators
// running install twice in a row should not see the prompt
// twice.
AlreadyInstalled bool `json:"already_installed"`
// Capabilities Flattened view of the connector manifest's `[capabilities.*]`
// blocks. Optional sub-tables that are absent in the manifest
// are absent here too — the CLI renders only what the connector
// actually declares.
Capabilities PreviewCapabilities `json:"capabilities"`
// Description Human-readable description from the connector manifest.
// May be empty.
Description *string `json:"description,omitempty"`
// Fqn Canonical FQN of the previewed connector.
Fqn string `json:"fqn"`
// Hash Canonical `sha256:<hex>` of the fetched tarball's
// (binary || manifest) bytes. Same value the install
// endpoint will produce.
Hash string `json:"hash"`
// Publisher FQN authority — the entity that signed the connector. For
// `github://owner/repo` this is `owner`. The CLI surfaces
// this so the operator knows whose key trust is being
// consumed for this install.
Publisher string `json:"publisher"`
// SignatureStatus Always `verified` when this preview is returned: a
// signature failure short-circuits earlier in the pipeline
// and surfaces as a 422 error per ADR-0007. The field
// exists on the wire so future verification states (e.g.
// `experimental_unsigned` for a trusted-but-unsigned dev
// mode) can be added without breaking the response shape.
SignatureStatus ConnectorPreviewSignatureStatus `json:"signature_status"`
// Version Strict SemVer.
Version string `json:"version"`
}
ConnectorPreview defines model for ConnectorPreview.
type ConnectorPreviewSignatureStatus ¶
type ConnectorPreviewSignatureStatus string
ConnectorPreviewSignatureStatus Always `verified` when this preview is returned: a signature failure short-circuits earlier in the pipeline and surfaces as a 422 error per ADR-0007. The field exists on the wire so future verification states (e.g. `experimental_unsigned` for a trusted-but-unsigned dev mode) can be added without breaking the response shape.
const (
ConnectorPreviewSignatureStatusVerified ConnectorPreviewSignatureStatus = "verified"
)
Defines values for ConnectorPreviewSignatureStatus.
func (ConnectorPreviewSignatureStatus) Valid ¶
func (e ConnectorPreviewSignatureStatus) Valid() bool
Valid indicates whether the value is a known member of the ConnectorPreviewSignatureStatus enum.
type ConnectorRef ¶
type ConnectorRef struct {
// Fqn Fully-qualified URI per ADR-0002.
Fqn string `json:"fqn"`
// Version Strict SemVer.
Version string `json:"version"`
}
ConnectorRef defines model for ConnectorRef.
type ConnectorStatus ¶
type ConnectorStatus string
ConnectorStatus defines model for Connector.Status.
const ( ConnectorStatusActive ConnectorStatus = "active" ConnectorStatusDisabled ConnectorStatus = "disabled" ConnectorStatusError ConnectorStatus = "error" )
Defines values for ConnectorStatus.
func (ConnectorStatus) Valid ¶
func (e ConnectorStatus) Valid() bool
Valid indicates whether the value is a known member of the ConnectorStatus enum.
type ConnectorType ¶
type ConnectorType string
ConnectorType defines model for ConnectorType.
const ( ConnectorTypeCalendar ConnectorType = "calendar" ConnectorTypeCloud ConnectorType = "cloud" ConnectorTypeCrm ConnectorType = "crm" ConnectorTypeCustom ConnectorType = "custom" ConnectorTypeDeployment ConnectorType = "deployment" ConnectorTypeEmail ConnectorType = "email" ConnectorTypeErp ConnectorType = "erp" ConnectorTypeInternalApi ConnectorType = "internal_api" ConnectorTypePayments ConnectorType = "payments" ConnectorTypeSecretManager ConnectorType = "secret_manager" ConnectorTypeSourceControl ConnectorType = "source_control" ConnectorTypeTicketing ConnectorType = "ticketing" )
Defines values for ConnectorType.
func (ConnectorType) Valid ¶
func (e ConnectorType) Valid() bool
Valid indicates whether the value is a known member of the ConnectorType enum.
type ConnectorsCheckResponse ¶
type ConnectorsCheckResponse struct {
// Results One entry per installed (FQN, version) pair. Order matches
// the cstore index's deterministic sort (ascending canonical
// key); operators rendering this should not assume a
// different order.
Results []ConnectorCheckResult `json:"results"`
}
ConnectorsCheckResponse defines model for ConnectorsCheckResponse.
type CreateConnectorJSONRequestBody ¶
type CreateConnectorJSONRequestBody = CreateConnectorRequest
CreateConnectorJSONRequestBody defines body for CreateConnector for application/json ContentType.
type CreateConnectorRequest ¶
type CreateConnectorRequest struct {
Auth ConnectorAuth `json:"auth"`
Environment *string `json:"environment,omitempty"`
Metadata *map[string]interface{} `json:"metadata,omitempty"`
Name string `json:"name"`
Provider *string `json:"provider,omitempty"`
Type ConnectorType `json:"type"`
WorkspaceId string `json:"workspace_id"`
}
CreateConnectorRequest defines model for CreateConnectorRequest.
type CreateCredentialJSONRequestBody ¶
type CreateCredentialJSONRequestBody = CreateCredentialRequest
CreateCredentialJSONRequestBody defines body for CreateCredential for application/json ContentType.
type CreateCredentialRequest ¶
type CreateCredentialRequest struct {
Environment *string `json:"environment,omitempty"`
Metadata *map[string]interface{} `json:"metadata,omitempty"`
Name string `json:"name"`
Type CreateCredentialRequestType `json:"type"`
VaultPath string `json:"vault_path"`
WorkspaceId string `json:"workspace_id"`
}
CreateCredentialRequest defines model for CreateCredentialRequest.
type CreateCredentialRequestType ¶
type CreateCredentialRequestType string
CreateCredentialRequestType defines model for CreateCredentialRequest.Type.
const ( CreateCredentialRequestTypeApiKey CreateCredentialRequestType = "api_key" CreateCredentialRequestTypeCustom CreateCredentialRequestType = "custom" CreateCredentialRequestTypeOauthRefreshToken CreateCredentialRequestType = "oauth_refresh_token" CreateCredentialRequestTypeServiceAccount CreateCredentialRequestType = "service_account" CreateCredentialRequestTypeWebhookSecret CreateCredentialRequestType = "webhook_secret" )
Defines values for CreateCredentialRequestType.
func (CreateCredentialRequestType) Valid ¶
func (e CreateCredentialRequestType) Valid() bool
Valid indicates whether the value is a known member of the CreateCredentialRequestType enum.
type CreateFundingSourceJSONRequestBody ¶
type CreateFundingSourceJSONRequestBody = CreateFundingSourceRequest
CreateFundingSourceJSONRequestBody defines body for CreateFundingSource for application/json ContentType.
type CreateFundingSourceRequest ¶
type CreateFundingSourceRequest struct {
Currency *string `json:"currency,omitempty"`
Metadata *map[string]interface{} `json:"metadata,omitempty"`
Name string `json:"name"`
SpendingControls *map[string]interface{} `json:"spending_controls,omitempty"`
Type CreateFundingSourceRequestType `json:"type"`
WorkspaceId string `json:"workspace_id"`
}
CreateFundingSourceRequest defines model for CreateFundingSourceRequest.
type CreateFundingSourceRequestType ¶
type CreateFundingSourceRequestType string
CreateFundingSourceRequestType defines model for CreateFundingSourceRequest.Type.
const ( CreateFundingSourceRequestTypeBtcWalletRef CreateFundingSourceRequestType = "btc_wallet_ref" CreateFundingSourceRequestTypeBudget CreateFundingSourceRequestType = "budget" CreateFundingSourceRequestTypeFiatAccountRef CreateFundingSourceRequestType = "fiat_account_ref" CreateFundingSourceRequestTypeLightningWalletRef CreateFundingSourceRequestType = "lightning_wallet_ref" CreateFundingSourceRequestTypeStoredBalance CreateFundingSourceRequestType = "stored_balance" CreateFundingSourceRequestTypeVirtualCardPool CreateFundingSourceRequestType = "virtual_card_pool" )
Defines values for CreateFundingSourceRequestType.
func (CreateFundingSourceRequestType) Valid ¶
func (e CreateFundingSourceRequestType) Valid() bool
Valid indicates whether the value is a known member of the CreateFundingSourceRequestType enum.
type CreateIntentJSONRequestBody ¶
type CreateIntentJSONRequestBody = CreateIntentRequest
CreateIntentJSONRequestBody defines body for CreateIntent for application/json ContentType.
type CreateIntentRequest ¶
type CreateIntentRequest struct {
Action ActionIntent `json:"action"`
AgentId string `json:"agent_id"`
// CallbackUrl Optional webhook URL. The control plane will POST status updates
// to this URL as the intent progresses through the lifecycle
// (policy evaluated, approval requested, approved/denied, execution
// started, execution completed). This avoids the need for agents
// to poll the GET /v1/intents/{id} endpoint.
CallbackUrl *string `json:"callback_url,omitempty"`
Context *IntentContext `json:"context,omitempty"`
IdempotencyKey string `json:"idempotency_key"`
WorkspaceId string `json:"workspace_id"`
}
CreateIntentRequest defines model for CreateIntentRequest.
type CreatePolicyJSONRequestBody ¶
type CreatePolicyJSONRequestBody = CreatePolicyRequest
CreatePolicyJSONRequestBody defines body for CreatePolicy for application/json ContentType.
type CreatePolicyRequest ¶
type CreatePolicyRequest struct {
Description *string `json:"description,omitempty"`
Environment *string `json:"environment,omitempty"`
Name string `json:"name"`
Rules []PolicyRule `json:"rules"`
Status *PolicyStatus `json:"status,omitempty"`
WorkspaceId string `json:"workspace_id"`
}
CreatePolicyRequest defines model for CreatePolicyRequest.
type CreateSessionJSONRequestBody ¶
type CreateSessionJSONRequestBody = CreateSessionRequest
CreateSessionJSONRequestBody defines body for CreateSession for application/json ContentType.
type CreateSessionRequest ¶
type CreateSessionRequest struct {
Agent string `json:"agent"`
WorkingDir *string `json:"working_dir,omitempty"`
}
CreateSessionRequest defines model for CreateSessionRequest.
type CredentialListResponse ¶
type CredentialListResponse struct {
Items *[]CredentialReference `json:"items,omitempty"`
Pagination *Pagination `json:"pagination,omitempty"`
}
CredentialListResponse defines model for CredentialListResponse.
type CredentialReference ¶
type CredentialReference struct {
CredentialId string `json:"credential_id"`
Environment *string `json:"environment,omitempty"`
Metadata *map[string]interface{} `json:"metadata,omitempty"`
Name string `json:"name"`
Type CredentialReferenceType `json:"type"`
VaultPath string `json:"vault_path"`
WorkspaceId string `json:"workspace_id"`
}
CredentialReference defines model for CredentialReference.
type CredentialReferenceType ¶
type CredentialReferenceType string
CredentialReferenceType defines model for CredentialReference.Type.
const ( CredentialReferenceTypeApiKey CredentialReferenceType = "api_key" CredentialReferenceTypeCustom CredentialReferenceType = "custom" CredentialReferenceTypeOauthRefreshToken CredentialReferenceType = "oauth_refresh_token" CredentialReferenceTypeServiceAccount CredentialReferenceType = "service_account" CredentialReferenceTypeWebhookSecret CredentialReferenceType = "webhook_secret" )
Defines values for CredentialReferenceType.
func (CredentialReferenceType) Valid ¶
func (e CredentialReferenceType) Valid() bool
Valid indicates whether the value is a known member of the CredentialReferenceType enum.
type DecideActionApprovalJSONRequestBody ¶
type DecideActionApprovalJSONRequestBody = ActionApprovalDecision
DecideActionApprovalJSONRequestBody defines body for DecideActionApproval for application/json ContentType.
type Decision ¶
type Decision struct {
ApprovalId *string `json:"approval_id,omitempty"`
DenialReason *string `json:"denial_reason,omitempty"`
Disposition DecisionDisposition `json:"disposition"`
ExecutionGrantId *string `json:"execution_grant_id,omitempty"`
MatchedPolicies *[]PolicyMatch `json:"matched_policies,omitempty"`
RequiresApproval *bool `json:"requires_approval,omitempty"`
RiskLevel RiskLevel `json:"risk_level"`
}
Decision defines model for Decision.
type DecisionDisposition ¶
type DecisionDisposition string
DecisionDisposition defines model for DecisionDisposition.
const ( DecisionDispositionAllow DecisionDisposition = "allow" DecisionDispositionAllowModified DecisionDisposition = "allow_modified" DecisionDispositionDeny DecisionDisposition = "deny" DecisionDispositionRequireApproval DecisionDisposition = "require_approval" DecisionDispositionRequireMoreEvidence DecisionDisposition = "require_more_evidence" )
Defines values for DecisionDisposition.
func (DecisionDisposition) Valid ¶
func (e DecisionDisposition) Valid() bool
Valid indicates whether the value is a known member of the DecisionDisposition enum.
type DenyRequest ¶
type DenyRequest struct {
Comment *string `json:"comment,omitempty"`
Reason string `json:"reason"`
}
DenyRequest defines model for DenyRequest.
type DenyRequestJSONRequestBody ¶
type DenyRequestJSONRequestBody = DenyRequest
DenyRequestJSONRequestBody defines body for DenyRequest for application/json ContentType.
type DeployAction ¶
type DeployAction struct {
ArtifactRef *string `json:"artifact_ref,omitempty"`
ChangeTicketId *string `json:"change_ticket_id,omitempty"`
Cluster *string `json:"cluster,omitempty"`
Environment *string `json:"environment,omitempty"`
ImageRef *string `json:"image_ref,omitempty"`
MaintenanceWindowId *string `json:"maintenance_window_id,omitempty"`
Namespace *string `json:"namespace,omitempty"`
Provider *DeployActionProvider `json:"provider,omitempty"`
RollbackSupported *bool `json:"rollback_supported,omitempty"`
Service *string `json:"service,omitempty"`
Strategy *DeployActionStrategy `json:"strategy,omitempty"`
}
DeployAction defines model for DeployAction.
type DeployActionProvider ¶
type DeployActionProvider string
DeployActionProvider defines model for DeployAction.Provider.
const ( DeployActionProviderAws DeployActionProvider = "aws" DeployActionProviderAzure DeployActionProvider = "azure" DeployActionProviderCustom DeployActionProvider = "custom" DeployActionProviderFlyio DeployActionProvider = "flyio" DeployActionProviderGcp DeployActionProvider = "gcp" DeployActionProviderKubernetes DeployActionProvider = "kubernetes" DeployActionProviderNetlify DeployActionProvider = "netlify" DeployActionProviderVercel DeployActionProvider = "vercel" )
Defines values for DeployActionProvider.
func (DeployActionProvider) Valid ¶
func (e DeployActionProvider) Valid() bool
Valid indicates whether the value is a known member of the DeployActionProvider enum.
type DeployActionStrategy ¶
type DeployActionStrategy string
DeployActionStrategy defines model for DeployAction.Strategy.
const ( DeployActionStrategyBlueGreen DeployActionStrategy = "blue_green" DeployActionStrategyCanary DeployActionStrategy = "canary" DeployActionStrategyCustom DeployActionStrategy = "custom" DeployActionStrategyReplace DeployActionStrategy = "replace" DeployActionStrategyRolling DeployActionStrategy = "rolling" )
Defines values for DeployActionStrategy.
func (DeployActionStrategy) Valid ¶
func (e DeployActionStrategy) Valid() bool
Valid indicates whether the value is a known member of the DeployActionStrategy enum.
type DomainAction ¶
type DomainAction struct {
Calendar *CalendarAction `json:"calendar,omitempty"`
Cloud *CloudAction `json:"cloud,omitempty"`
Deploy *DeployAction `json:"deploy,omitempty"`
Email *EmailAction `json:"email,omitempty"`
Git *GitAction `json:"git,omitempty"`
Payment *PaymentAction `json:"payment,omitempty"`
Procurement *ProcurementAction `json:"procurement,omitempty"`
}
DomainAction Carries action-type-specific fields. Exactly one field must be populated, corresponding to the prefix of ActionIntent.type:
- git.* → git
- deploy.* → deploy
- cloud.* → cloud
- email.* → email
- calendar.* → calendar
- payment.* → payment
- procurement.* → procurement
The server rejects requests where the populated domain field does not match the action type prefix.
type DraftCommsReplyJSONRequestBody ¶
type DraftCommsReplyJSONRequestBody = DraftCommsReplyRequest
DraftCommsReplyJSONRequestBody defines body for DraftCommsReply for application/json ContentType.
type DraftCommsReplyRequest ¶
type DraftCommsReplyRequest struct {
// Body Suggested reply text the agent drafted.
Body string `json:"body"`
// ReplyTo ID of the original incoming message (from `read_messages`).
ReplyTo string `json:"reply_to"`
}
DraftCommsReplyRequest Request body for `POST /v1/sessions/{id}/comms/draft`. The daemon looks up the original message in the notify queue by `reply_to` and surfaces it alongside the draft body for the user to approve / edit / discard.
type EmailAction ¶
type EmailAction struct {
Attachments *[]AttachmentRef `json:"attachments,omitempty"`
Bcc *[]Recipient `json:"bcc,omitempty"`
BodyHtml *string `json:"body_html,omitempty"`
BodyText *string `json:"body_text,omitempty"`
Cc *[]Recipient `json:"cc,omitempty"`
From *Recipient `json:"from,omitempty"`
SendMode *EmailActionSendMode `json:"send_mode,omitempty"`
Subject *string `json:"subject,omitempty"`
ThreadRef *string `json:"thread_ref,omitempty"`
To *[]Recipient `json:"to,omitempty"`
}
EmailAction defines model for EmailAction.
type EmailActionSendMode ¶
type EmailActionSendMode string
EmailActionSendMode defines model for EmailAction.SendMode.
const ( DraftOnly EmailActionSendMode = "draft_only" SendNow EmailActionSendMode = "send_now" )
Defines values for EmailActionSendMode.
func (EmailActionSendMode) Valid ¶
func (e EmailActionSendMode) Valid() bool
Valid indicates whether the value is a known member of the EmailActionSendMode enum.
type EndSessionJSONRequestBody ¶
type EndSessionJSONRequestBody = EndSessionRequest
EndSessionJSONRequestBody defines body for EndSession for application/json ContentType.
type EndSessionRequest ¶
type EndSessionRequest struct {
// ExitCode Agent process exit code. Omit or send null to mark the
// session as ended-with-unknown-status (same shape the
// orphan-reaper produces on daemon restart).
ExitCode *int `json:"exit_code,omitempty"`
}
EndSessionRequest defines model for EndSessionRequest.
type Enterprise ¶
type Enterprise struct {
// AllowedAuthProviders Restrict sign-in to these providers. Empty means all allowed.
AllowedAuthProviders *[]string `json:"allowed_auth_providers,omitempty"`
// AllowedEmailDomains Restrict sign-in to these email domains. Empty means all allowed.
AllowedEmailDomains *[]string `json:"allowed_email_domains,omitempty"`
BillingEmail openapi_types.Email `json:"billing_email"`
CreatedAt time.Time `json:"created_at"`
Id string `json:"id"`
Name string `json:"name"`
// Personal True for single-user personal accounts (e.g. Gmail sign-in)
Personal *bool `json:"personal,omitempty"`
Plan EnterprisePlan `json:"plan"`
// Slug URL-friendly unique identifier
Slug string `json:"slug"`
SsoRequired *bool `json:"sso_required,omitempty"`
UpdatedAt time.Time `json:"updated_at"`
}
Enterprise defines model for Enterprise.
type EnterprisePlan ¶
type EnterprisePlan string
EnterprisePlan defines model for Enterprise.Plan.
const ( EnterprisePlanEnterprise EnterprisePlan = "enterprise" EnterprisePlanFree EnterprisePlan = "free" EnterprisePlanPro EnterprisePlan = "pro" )
Defines values for EnterprisePlan.
func (EnterprisePlan) Valid ¶
func (e EnterprisePlan) Valid() bool
Valid indicates whether the value is a known member of the EnterprisePlan enum.
type Error ¶
type Error struct {
Error struct {
Code string `json:"code"`
Details *[]map[string]interface{} `json:"details,omitempty"`
Message string `json:"message"`
RequestId *string `json:"request_id,omitempty"`
} `json:"error"`
}
Error Generic error envelope used by CRUD endpoints (intents, approvals, policies, accounts, auth). Action-execution and gateway endpoints use the structured `FailureEnvelope` instead, per ADR-0010.
type EstablishTeeSessionJSONRequestBody ¶
type EstablishTeeSessionJSONRequestBody = TeeSessionRequest
EstablishTeeSessionJSONRequestBody defines body for EstablishTeeSession for application/json ContentType.
type EvidenceItem ¶
type EvidenceItem struct {
Label *string `json:"label,omitempty"`
Type EvidenceItemType `json:"type"`
Value string `json:"value"`
}
EvidenceItem defines model for EvidenceItem.
type EvidenceItemType ¶
type EvidenceItemType string
EvidenceItemType defines model for EvidenceItem.Type.
const ( EvidenceItemTypeArtifactRef EvidenceItemType = "artifact_ref" EvidenceItemTypeChangeTicket EvidenceItemType = "change_ticket" EvidenceItemTypeCustom EvidenceItemType = "custom" EvidenceItemTypeDiffSummary EvidenceItemType = "diff_summary" EvidenceItemTypeLink EvidenceItemType = "link" EvidenceItemTypeReceiptRef EvidenceItemType = "receipt_ref" EvidenceItemTypeScreenshotRef EvidenceItemType = "screenshot_ref" EvidenceItemTypeTestResult EvidenceItemType = "test_result" EvidenceItemTypeText EvidenceItemType = "text" )
Defines values for EvidenceItemType.
func (EvidenceItemType) Valid ¶
func (e EvidenceItemType) Valid() bool
Valid indicates whether the value is a known member of the EvidenceItemType enum.
type Execution ¶
type Execution struct {
ConnectorId *string `json:"connector_id,omitempty"`
ExecutionId string `json:"execution_id"`
FinishedAt *time.Time `json:"finished_at,omitempty"`
IntentId string `json:"intent_id"`
Output *map[string]interface{} `json:"output,omitempty"`
ReceiptRef *string `json:"receipt_ref,omitempty"`
StartedAt time.Time `json:"started_at"`
Status ExecutionStatus `json:"status"`
}
Execution defines model for Execution.
type ExecutionCallbackJSONRequestBody ¶
type ExecutionCallbackJSONRequestBody = ExecutionCallbackRequest
ExecutionCallbackJSONRequestBody defines body for ExecutionCallback for application/json ContentType.
type ExecutionCallbackRequest ¶
type ExecutionCallbackRequest struct {
ErrorMessage *string `json:"error_message,omitempty"`
Output *map[string]interface{} `json:"output,omitempty"`
ReceiptRef *string `json:"receipt_ref,omitempty"`
Status ExecutionCallbackRequestStatus `json:"status"`
}
ExecutionCallbackRequest defines model for ExecutionCallbackRequest.
type ExecutionCallbackRequestStatus ¶
type ExecutionCallbackRequestStatus string
ExecutionCallbackRequestStatus defines model for ExecutionCallbackRequest.Status.
const ( ExecutionCallbackRequestStatusCancelled ExecutionCallbackRequestStatus = "cancelled" ExecutionCallbackRequestStatusFailed ExecutionCallbackRequestStatus = "failed" ExecutionCallbackRequestStatusRunning ExecutionCallbackRequestStatus = "running" ExecutionCallbackRequestStatusSucceeded ExecutionCallbackRequestStatus = "succeeded" )
Defines values for ExecutionCallbackRequestStatus.
func (ExecutionCallbackRequestStatus) Valid ¶
func (e ExecutionCallbackRequestStatus) Valid() bool
Valid indicates whether the value is a known member of the ExecutionCallbackRequestStatus enum.
type ExecutionGrant ¶
type ExecutionGrant struct {
BoundedParameters *map[string]interface{} `json:"bounded_parameters,omitempty"`
// Capability Durable signed grant capability issued from the approved grant scope.
Capability *map[string]interface{} `json:"capability,omitempty"`
ConnectorId *string `json:"connector_id,omitempty"`
// EscrowPolicy How credentials are managed for this grant.
// - none: no TEE (credentials decrypted in host process)
// - session: credentials sent to TEE per-execution (real-time only)
// - escrowed: credentials escrowed inside TEE for async/scheduled use
EscrowPolicy *ExecutionGrantEscrowPolicy `json:"escrow_policy,omitempty"`
ExpiresAt time.Time `json:"expires_at"`
GrantId string `json:"grant_id"`
IntentId string `json:"intent_id"`
Status ExecutionGrantStatus `json:"status"`
}
ExecutionGrant defines model for ExecutionGrant.
type ExecutionGrantEscrowPolicy ¶
type ExecutionGrantEscrowPolicy string
ExecutionGrantEscrowPolicy How credentials are managed for this grant. - none: no TEE (credentials decrypted in host process) - session: credentials sent to TEE per-execution (real-time only) - escrowed: credentials escrowed inside TEE for async/scheduled use
const ( ExecutionGrantEscrowPolicyEscrowed ExecutionGrantEscrowPolicy = "escrowed" ExecutionGrantEscrowPolicyNone ExecutionGrantEscrowPolicy = "none" ExecutionGrantEscrowPolicySession ExecutionGrantEscrowPolicy = "session" )
Defines values for ExecutionGrantEscrowPolicy.
func (ExecutionGrantEscrowPolicy) Valid ¶
func (e ExecutionGrantEscrowPolicy) Valid() bool
Valid indicates whether the value is a known member of the ExecutionGrantEscrowPolicy enum.
type ExecutionGrantStatus ¶
type ExecutionGrantStatus string
ExecutionGrantStatus defines model for ExecutionGrant.Status.
const ( ExecutionGrantStatusActive ExecutionGrantStatus = "active" ExecutionGrantStatusConsumed ExecutionGrantStatus = "consumed" ExecutionGrantStatusExpired ExecutionGrantStatus = "expired" ExecutionGrantStatusRevoked ExecutionGrantStatus = "revoked" )
Defines values for ExecutionGrantStatus.
func (ExecutionGrantStatus) Valid ¶
func (e ExecutionGrantStatus) Valid() bool
Valid indicates whether the value is a known member of the ExecutionGrantStatus enum.
type ExecutionRunRequest ¶
type ExecutionRunRequest struct {
GrantId string `json:"grant_id"`
OverrideParameters *map[string]interface{} `json:"override_parameters,omitempty"`
}
ExecutionRunRequest defines model for ExecutionRunRequest.
type ExecutionRunResponse ¶
type ExecutionRunResponse struct {
AcceptedAt *time.Time `json:"accepted_at,omitempty"`
ExecutionId string `json:"execution_id"`
Status ExecutionRunResponseStatus `json:"status"`
}
ExecutionRunResponse defines model for ExecutionRunResponse.
type ExecutionRunResponseStatus ¶
type ExecutionRunResponseStatus string
ExecutionRunResponseStatus defines model for ExecutionRunResponse.Status.
const ( Accepted ExecutionRunResponseStatus = "accepted" Running ExecutionRunResponseStatus = "running" )
Defines values for ExecutionRunResponseStatus.
func (ExecutionRunResponseStatus) Valid ¶
func (e ExecutionRunResponseStatus) Valid() bool
Valid indicates whether the value is a known member of the ExecutionRunResponseStatus enum.
type ExecutionStatus ¶
type ExecutionStatus string
ExecutionStatus defines model for Execution.Status.
const ( ExecutionStatusAccepted ExecutionStatus = "accepted" ExecutionStatusCancelled ExecutionStatus = "cancelled" ExecutionStatusFailed ExecutionStatus = "failed" ExecutionStatusRunning ExecutionStatus = "running" ExecutionStatusSucceeded ExecutionStatus = "succeeded" )
Defines values for ExecutionStatus.
func (ExecutionStatus) Valid ¶
func (e ExecutionStatus) Valid() bool
Valid indicates whether the value is a known member of the ExecutionStatus enum.
type Failure ¶
type Failure = FailureEnvelope
Failure Structured failure envelope ratified by [ADR-0010]adr10 for errors returned to the calling action and through it to the agent. Used on the gateway endpoints (`/v1/chat/completions`, `/v1/messages`) and on action / connector install responses.
type FailureBoundary ¶
type FailureBoundary string
FailureBoundary Layer that produced the failure. The closed set excludes `user` which is reserved for post-MVP per-invocation approval flows.
const ( FailureBoundaryAction FailureBoundary = "action" FailureBoundaryConnectorManifest FailureBoundary = "connector_manifest" FailureBoundaryExternal FailureBoundary = "external" FailureBoundaryRuntime FailureBoundary = "runtime" FailureBoundarySandbox FailureBoundary = "sandbox" )
Defines values for FailureBoundary.
func (FailureBoundary) Valid ¶
func (e FailureBoundary) Valid() bool
Valid indicates whether the value is a known member of the FailureBoundary enum.
type FailureClass ¶
type FailureClass string
FailureClass Closed taxonomy of failure classes per ADR-0010. Adding a value requires an ADR amendment.
const ( BindingFailed FailureClass = "binding_failed" BindingRequired FailureClass = "binding_required" CapabilityDenied FailureClass = "capability_denied" ConnectorRuntimeError FailureClass = "connector_runtime_error" ExternalApiError FailureClass = "external_api_error" HashMismatch FailureClass = "hash_mismatch" NetworkError FailureClass = "network_error" ResourceLimitExceeded FailureClass = "resource_limit_exceeded" SignatureFailure FailureClass = "signature_failure" )
Defines values for FailureClass.
func (FailureClass) Valid ¶
func (e FailureClass) Valid() bool
Valid indicates whether the value is a known member of the FailureClass enum.
type FailureEnvelope ¶
type FailureEnvelope struct {
Error struct {
// AuditId Reference into the audit log for full context. Stamped
// by the audit recorder before the response is written.
AuditId *string `json:"audit_id,omitempty"`
// Boundary Layer that produced the failure. The closed set excludes `user`
// which is reserved for post-MVP per-invocation approval flows.
Boundary FailureBoundary `json:"boundary"`
// Class Closed taxonomy of failure classes per ADR-0010. Adding a value
// requires an ADR amendment.
Class FailureClass `json:"class"`
// Details Class-specific additional fields.
Details *map[string]interface{} `json:"details,omitempty"`
// Message Human-readable description; safe to show end users. Does
// not contain credentials or sensitive payload.
Message string `json:"message"`
// Retriable Whether the failure is safe to retry.
Retriable bool `json:"retriable"`
} `json:"error"`
}
FailureEnvelope Structured failure envelope ratified by [ADR-0010]adr10 for errors returned to the calling action and through it to the agent. Used on the gateway endpoints (`/v1/chat/completions`, `/v1/messages`) and on action / connector install responses.
type FinishOAuth2BindingJSONRequestBody ¶
type FinishOAuth2BindingJSONRequestBody = OAuth2FinishRequest
FinishOAuth2BindingJSONRequestBody defines body for FinishOAuth2Binding for application/json ContentType.
type Forbidden ¶
type Forbidden = Error
Forbidden Generic error envelope used by CRUD endpoints (intents, approvals, policies, accounts, auth). Action-execution and gateway endpoints use the structured `FailureEnvelope` instead, per ADR-0010.
type FundingSource ¶
type FundingSource struct {
Currency *string `json:"currency,omitempty"`
FundingSourceId string `json:"funding_source_id"`
Metadata *map[string]interface{} `json:"metadata,omitempty"`
Name string `json:"name"`
SpendingControls *struct {
AllowedCategories *[]string `json:"allowed_categories,omitempty"`
AllowedMerchants *[]string `json:"allowed_merchants,omitempty"`
MaxSingleTransaction *Money `json:"max_single_transaction,omitempty"`
} `json:"spending_controls,omitempty"`
Status FundingSourceStatus `json:"status"`
Type FundingSourceType `json:"type"`
WorkspaceId string `json:"workspace_id"`
}
FundingSource defines model for FundingSource.
type FundingSourceListResponse ¶
type FundingSourceListResponse struct {
Items *[]FundingSource `json:"items,omitempty"`
Pagination *Pagination `json:"pagination,omitempty"`
}
FundingSourceListResponse defines model for FundingSourceListResponse.
type FundingSourceStatus ¶
type FundingSourceStatus string
FundingSourceStatus defines model for FundingSource.Status.
const ( FundingSourceStatusActive FundingSourceStatus = "active" FundingSourceStatusDisabled FundingSourceStatus = "disabled" )
Defines values for FundingSourceStatus.
func (FundingSourceStatus) Valid ¶
func (e FundingSourceStatus) Valid() bool
Valid indicates whether the value is a known member of the FundingSourceStatus enum.
type FundingSourceType ¶
type FundingSourceType string
FundingSourceType defines model for FundingSource.Type.
const ( FundingSourceTypeBtcWalletRef FundingSourceType = "btc_wallet_ref" FundingSourceTypeBudget FundingSourceType = "budget" FundingSourceTypeFiatAccountRef FundingSourceType = "fiat_account_ref" FundingSourceTypeLightningWalletRef FundingSourceType = "lightning_wallet_ref" FundingSourceTypeStoredBalance FundingSourceType = "stored_balance" FundingSourceTypeVirtualCardPool FundingSourceType = "virtual_card_pool" )
Defines values for FundingSourceType.
func (FundingSourceType) Valid ¶
func (e FundingSourceType) Valid() bool
Valid indicates whether the value is a known member of the FundingSourceType enum.
type GetAnalyticsSummaryParams ¶
type GetAnalyticsSummaryParams struct {
WorkspaceId string `form:"workspace_id" json:"workspace_id"`
From time.Time `form:"from" json:"from"`
To time.Time `form:"to" json:"to"`
}
GetAnalyticsSummaryParams defines parameters for GetAnalyticsSummary.
type GetHubConnectorParams ¶
type GetHubConnectorParams struct {
// Fqn Connector FQN, e.g. `github://ALRubinger/aileron-connector-google`.
Fqn string `form:"fqn" json:"fqn"`
}
GetHubConnectorParams defines parameters for GetHubConnector.
type GetHubInstallDecisionParams ¶
type GetHubInstallDecisionParams struct {
// Fqn Connector FQN, e.g. `github://ALRubinger/aileron-connector-google`.
Fqn string `form:"fqn" json:"fqn"`
}
GetHubInstallDecisionParams defines parameters for GetHubInstallDecision.
type GitAction ¶
type GitAction struct {
BaseBranch *string `json:"base_branch,omitempty"`
Branch *string `json:"branch,omitempty"`
ChecksRequired *[]string `json:"checks_required,omitempty"`
CommitShas *[]string `json:"commit_shas,omitempty"`
FilesChanged *[]string `json:"files_changed,omitempty"`
IssueAssignees *[]string `json:"issue_assignees,omitempty"`
IssueBody *string `json:"issue_body,omitempty"`
IssueLabels *[]string `json:"issue_labels,omitempty"`
IssueTitle *string `json:"issue_title,omitempty"`
Labels *[]string `json:"labels,omitempty"`
PrBody *string `json:"pr_body,omitempty"`
PrTitle *string `json:"pr_title,omitempty"`
Provider *GitActionProvider `json:"provider,omitempty"`
Repository *string `json:"repository,omitempty"`
Reviewers *[]string `json:"reviewers,omitempty"`
}
GitAction defines model for GitAction.
type GitActionProvider ¶
type GitActionProvider string
GitActionProvider defines model for GitAction.Provider.
const ( Bitbucket GitActionProvider = "bitbucket" Custom GitActionProvider = "custom" Github GitActionProvider = "github" Gitlab GitActionProvider = "gitlab" )
Defines values for GitActionProvider.
func (GitActionProvider) Valid ¶
func (e GitActionProvider) Valid() bool
Valid indicates whether the value is a known member of the GitActionProvider enum.
type HealthResponse ¶
type HealthResponse struct {
Service string `json:"service"`
Status HealthResponseStatus `json:"status"`
Timestamp time.Time `json:"timestamp"`
Version string `json:"version"`
}
HealthResponse defines model for HealthResponse.
type HealthResponseStatus ¶
type HealthResponseStatus string
HealthResponseStatus defines model for HealthResponse.Status.
const ( Degraded HealthResponseStatus = "degraded" Down HealthResponseStatus = "down" Ok HealthResponseStatus = "ok" )
Defines values for HealthResponseStatus.
func (HealthResponseStatus) Valid ¶
func (e HealthResponseStatus) Valid() bool
Valid indicates whether the value is a known member of the HealthResponseStatus enum.
type HubConnectorEntry ¶
type HubConnectorEntry struct {
// Description One-line description of what the connector does.
Description string `json:"description"`
// Fqn Canonical FQN, e.g. `github://OWNER/REPO`.
Fqn string `json:"fqn"`
// KeyUrl Public URL of the publisher's ed25519 signing key.
// Typically `https://raw.githubusercontent.com/OWNER/REPO/main/keys/publisher.pub`.
KeyUrl string `json:"key_url"`
// PublisherGithub GitHub user or org name that owns the connector repo.
PublisherGithub string `json:"publisher_github"`
// ReleasePattern Glob matching the release tags Aileron should consider.
ReleasePattern string `json:"release_pattern"`
}
HubConnectorEntry A single Hub entry. Matches the YAML files committed to the `aileron-connectors-hub` repo under `connectors/`. Pointer to a connector hosted at the canonical FQN; the Hub does not host the binary.
type HubConnectorList ¶
type HubConnectorList struct {
Connectors []HubConnectorEntry `json:"connectors"`
}
HubConnectorList defines model for HubConnectorList.
type HubInstallDecision ¶
type HubInstallDecision struct {
Description string `json:"description"`
// Fingerprint SHA-256 fingerprint of the publisher's signing key, formatted
// as `sha256:<base64-without-padding>` to match
// `aileron keyring trust` output.
Fingerprint string `json:"fingerprint"`
// Fqn Canonical FQN.
Fqn string `json:"fqn"`
// PublisherFootprint FQNs of the publisher's other connectors listed in the Hub
// (informational context for the user's decision).
PublisherFootprint []string `json:"publisher_footprint"`
PublisherGithub string `json:"publisher_github"`
// RiskIndicators Human-readable risk strings derived from the trust state and
// keyring contents, e.g. "First connector by this publisher
// you've installed" (informational, yellow) or "Key fingerprint
// differs from one you trust for a sibling repo" (conflict,
// red).
RiskIndicators []string `json:"risk_indicators"`
// TrustState Trust state for the connector's FQN against the local keyring.
// `already_trusted`: the keyring has the publisher's key for this
// FQN. `unknown`: no keyring entry for this FQN.
// `conflict`: keyring has a key for the same publisher under a
// sibling FQN, and that key differs from the one declared by the
// Hub entry — surface as a risk indicator.
TrustState HubTrustState `json:"trust_state"`
}
HubInstallDecision Pre-computed payload for the install-time prompt (CLI y/N and webapp modal). Shape resolved in #487. Publisher info is informational context, NOT a trust target: v0.x trust is strictly per-repo (per-FQN).
type HubTrustState ¶
type HubTrustState string
HubTrustState Trust state for the connector's FQN against the local keyring. `already_trusted`: the keyring has the publisher's key for this FQN. `unknown`: no keyring entry for this FQN. `conflict`: keyring has a key for the same publisher under a sibling FQN, and that key differs from the one declared by the Hub entry — surface as a risk indicator.
const ( HubTrustStateAlreadyTrusted HubTrustState = "already_trusted" HubTrustStateConflict HubTrustState = "conflict" HubTrustStateUnknown HubTrustState = "unknown" )
Defines values for HubTrustState.
func (HubTrustState) Valid ¶
func (e HubTrustState) Valid() bool
Valid indicates whether the value is a known member of the HubTrustState enum.
type InitOAuth2BindingJSONRequestBody ¶
type InitOAuth2BindingJSONRequestBody = OAuth2InitRequest
InitOAuth2BindingJSONRequestBody defines body for InitOAuth2Binding for application/json ContentType.
type InitiateAttestationJSONRequestBody ¶
type InitiateAttestationJSONRequestBody = TeeAttestationRequest
InitiateAttestationJSONRequestBody defines body for InitiateAttestation for application/json ContentType.
type InstallActionJSONRequestBody ¶
type InstallActionJSONRequestBody = InstallActionRequest
InstallActionJSONRequestBody defines body for InstallAction for application/json ContentType.
type InstallActionRequest ¶
type InstallActionRequest struct {
// AutoInstallConnectors When true, the server transparently installs any
// `[[requires.connectors]]` whose pinned hash is not already in
// the local content-addressed store, using the connector's
// declared version and hash from the action manifest. Each
// implicit install runs the full connector pipeline (resolve →
// fetch → verify signature → match `expected_hash`) and any
// failure aborts the action install with the connector's
// structured error.
//
// When false (default), missing connector deps abort the
// install with a `422` carrying `error.code = connectors_missing`
// and `error.details[]` listing each missing connector's
// `name`, `version`, and `hash` so the CLI can prompt the user
// for confirmation before retrying with the flag set.
AutoInstallConnectors *bool `json:"auto_install_connectors,omitempty"`
// Force When true, overwrite an existing action with the same name.
// When false (default), refuse with `409 Conflict` if an action
// of the same name already exists.
Force *bool `json:"force,omitempty"`
// Fqn Fully-qualified URI of the action template per ADR-0002 / ADR-0003
// (e.g. `github://ALRubinger/aileron-connector-github/actions/list-recent-prs`).
// Subpath references are supported for actions published alongside
// their connector.
Fqn string `json:"fqn"`
// Version Strict SemVer (e.g. `0.1.0`).
Version string `json:"version"`
}
InstallActionRequest defines model for InstallActionRequest.
type InstallConnectorJSONRequestBody ¶
type InstallConnectorJSONRequestBody = InstallConnectorRequest
InstallConnectorJSONRequestBody defines body for InstallConnector for application/json ContentType.
type InstallConnectorRequest ¶
type InstallConnectorRequest struct {
// ConfirmedFingerprint Optional publisher-key fingerprint the operator confirmed at
// the install prompt (terminal y/N/d or webapp install modal),
// per ADR-0013 / #487. Format matches `aileron keyring trust`
// output: `sha256:<22 base64-no-padding chars>`.
//
// When supplied, the daemon looks up the FQN in the Hub, fetches
// the publisher's current key, verifies its fingerprint matches
// this value (anti-tampering — the client and daemon must agree
// on what the operator saw), then writes the key to the keyring
// at the FQN authority before running the install pipeline.
// Trust persists even if the install later fails, matching the
// #487 Q4 resolution.
//
// When omitted, the install requires the publisher key to be
// pre-established in the keyring (typical for non-TTY installs
// and connectors not listed in the Hub). Mismatch returns
// `fingerprint_mismatch`; an FQN with no Hub entry returns
// `not_found`.
ConfirmedFingerprint *string `json:"confirmed_fingerprint,omitempty"`
// ExpectedHash Optional canonical hash (`sha256:<hex>`) the install must match.
// When supplied (typical when the install is driven by an action
// file's `[[requires.connectors]] hash`), a computed hash that
// does not match aborts the install with `hash_mismatch` and
// nothing is written to the store. When omitted (typical for
// first install), the pipeline records whatever hash the bytes
// produce.
ExpectedHash *string `json:"expected_hash,omitempty"`
// Fqn Fully-qualified URI per ADR-0002 (e.g. `github://aileron/slack`).
// Scheme must be one of `github`, `gitlab`, `hub` in v1.
Fqn string `json:"fqn"`
// Version Strict SemVer (e.g. `1.2.0`). No ranges, no `latest`.
Version string `json:"version"`
}
InstallConnectorRequest defines model for InstallConnectorRequest.
type InstalledAction ¶
type InstalledAction struct {
// AlreadyInstalled True when the action was already present and the install was a no-op
// (the file on disk matched the bytes that would have been written).
AlreadyInstalled *bool `json:"already_installed,omitempty"`
// Fqn FQN the action was installed from.
Fqn string `json:"fqn"`
// Name Bare local handle of the installed action (the action manifest's `name`).
Name string `json:"name"`
// Path Absolute path of the installed action file on disk.
Path string `json:"path"`
// Source Provenance URI recorded on the installed manifest's `source` field.
Source string `json:"source"`
// UnboundCapabilities Credential capabilities the action's connectors declare that
// do not yet have a binding in the user's vault. The CLI uses
// this list to prompt the user to drop into `aileron binding
// setup` immediately after install — the user stays in the CLI
// and avoids hitting `binding_required` later.
UnboundCapabilities *[]UnboundCapability `json:"unbound_capabilities,omitempty"`
Version string `json:"version"`
}
InstalledAction defines model for InstalledAction.
type InstalledActionRef ¶
type InstalledActionRef struct {
// Hash `sha256:<hex>` of the installed manifest's bytes on disk.
// Differs from the previewed `hash` whenever this object is
// populated.
Hash string `json:"hash"`
// Path Absolute path of the installed action file on disk.
Path string `json:"path"`
// Source Provenance URI recorded on the installed manifest's `source` field.
Source string `json:"source"`
// Version Version field from the installed manifest's frontmatter.
Version string `json:"version"`
}
InstalledActionRef Snapshot of an action already on disk at install time. Used in the preview response to surface the installed version when its bytes differ from the requested install — the CLI renders this so the operator can confirm an upgrade.
type InstalledConnector ¶
type InstalledConnector struct {
// AlreadyInstalled True when the install was a no-op because an entry with the
// matching hash already existed (offline reinstall path per
// ADR-0004).
AlreadyInstalled *bool `json:"already_installed,omitempty"`
// EntryDir Absolute path of the store entry on disk.
EntryDir string `json:"entry_dir"`
Fqn string `json:"fqn"`
// Hash Canonical `sha256:<hex>` of the installed bytes.
Hash string `json:"hash"`
Version string `json:"version"`
}
InstalledConnector defines model for InstalledConnector.
type IntentContext ¶
type IntentContext struct {
Environment *string `json:"environment,omitempty"`
IpAddress *string `json:"ip_address,omitempty"`
RiskHints *[]string `json:"risk_hints,omitempty"`
SourcePlatform *string `json:"source_platform,omitempty"`
SourceSessionId *string `json:"source_session_id,omitempty"`
SourceTraceId *string `json:"source_trace_id,omitempty"`
TemporaryGrantId *string `json:"temporary_grant_id,omitempty"`
UserPresent *bool `json:"user_present,omitempty"`
}
IntentContext defines model for IntentContext.
type IntentEnvelope ¶
type IntentEnvelope struct {
Action ActionIntent `json:"action"`
Agent ActorRef `json:"agent"`
Context *IntentContext `json:"context,omitempty"`
CreatedAt time.Time `json:"created_at"`
Decision Decision `json:"decision"`
Evidence *[]EvidenceItem `json:"evidence,omitempty"`
IntentId string `json:"intent_id"`
Status IntentStatus `json:"status"`
UpdatedAt time.Time `json:"updated_at"`
WorkspaceId string `json:"workspace_id"`
}
IntentEnvelope defines model for IntentEnvelope.
type IntentListResponse ¶
type IntentListResponse struct {
Items *[]IntentEnvelope `json:"items,omitempty"`
Pagination *Pagination `json:"pagination,omitempty"`
}
IntentListResponse defines model for IntentListResponse.
type IntentStatus ¶
type IntentStatus string
IntentStatus defines model for IntentStatus.
const ( Approved IntentStatus = "approved" Cancelled IntentStatus = "cancelled" Denied IntentStatus = "denied" Executing IntentStatus = "executing" Expired IntentStatus = "expired" Failed IntentStatus = "failed" PendingApproval IntentStatus = "pending_approval" PendingPolicy IntentStatus = "pending_policy" Succeeded IntentStatus = "succeeded" )
Defines values for IntentStatus.
func (IntentStatus) Valid ¶
func (e IntentStatus) Valid() bool
Valid indicates whether the value is a known member of the IntentStatus enum.
type InvalidParamFormatError ¶
func (*InvalidParamFormatError) Error ¶
func (e *InvalidParamFormatError) Error() string
func (*InvalidParamFormatError) Unwrap ¶
func (e *InvalidParamFormatError) Unwrap() error
type Jwk ¶
type Jwk struct {
Alg *string `json:"alg,omitempty"`
Crv *string `json:"crv,omitempty"`
E *string `json:"e,omitempty"`
Kid string `json:"kid"`
Kty string `json:"kty"`
N *string `json:"n,omitempty"`
Use *string `json:"use,omitempty"`
X *string `json:"x,omitempty"`
Y *string `json:"y,omitempty"`
}
Jwk defines model for Jwk.
type LineItem ¶
type LineItem struct {
Description string `json:"description"`
Quantity int `json:"quantity"`
Sku *string `json:"sku,omitempty"`
UnitAmount Money `json:"unit_amount"`
}
LineItem defines model for LineItem.
type ListApprovalsParams ¶
type ListApprovalsParams struct {
PageSize *PageSize `form:"page_size,omitempty" json:"page_size,omitempty"`
PageToken *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
WorkspaceId string `form:"workspace_id" json:"workspace_id"`
Assignee *string `form:"assignee,omitempty" json:"assignee,omitempty"`
}
ListApprovalsParams defines parameters for ListApprovals.
type ListAuditParams ¶
type ListAuditParams struct {
// Since Lower-bound (inclusive) on event timestamp; RFC 3339.
Since *time.Time `form:"since,omitempty" json:"since,omitempty"`
// AuditId Match events with this exact `audit_id`.
AuditId *string `form:"audit_id,omitempty" json:"audit_id,omitempty"`
// ConnectorFqn Match events that reference this connector FQN.
ConnectorFqn *string `form:"connector_fqn,omitempty" json:"connector_fqn,omitempty"`
// Class Match failure events with this `class` (e.g. `binding_required`).
Class *string `form:"class,omitempty" json:"class,omitempty"`
// Limit Maximum events to return; newest first.
Limit *int `form:"limit,omitempty" json:"limit,omitempty"`
}
ListAuditParams defines parameters for ListAudit.
type ListBindingsParams ¶
type ListBindingsParams struct {
// ConnectorFqn Restrict to bindings created for the given connector FQN.
ConnectorFqn *string `form:"connector_fqn,omitempty" json:"connector_fqn,omitempty"`
// Kind Restrict to bindings of the given credential kind (e.g. `api_key`).
Kind *string `form:"kind,omitempty" json:"kind,omitempty"`
}
ListBindingsParams defines parameters for ListBindings.
type ListConnectorsParams ¶
type ListConnectorsParams struct {
PageSize *PageSize `form:"page_size,omitempty" json:"page_size,omitempty"`
PageToken *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
WorkspaceId string `form:"workspace_id" json:"workspace_id"`
}
ListConnectorsParams defines parameters for ListConnectors.
type ListCredentialsParams ¶
type ListCredentialsParams struct {
PageSize *PageSize `form:"page_size,omitempty" json:"page_size,omitempty"`
PageToken *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
WorkspaceId string `form:"workspace_id" json:"workspace_id"`
}
ListCredentialsParams defines parameters for ListCredentials.
type ListFundingSourcesParams ¶
type ListFundingSourcesParams struct {
PageSize *PageSize `form:"page_size,omitempty" json:"page_size,omitempty"`
PageToken *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
WorkspaceId string `form:"workspace_id" json:"workspace_id"`
}
ListFundingSourcesParams defines parameters for ListFundingSources.
type ListHubConnectorsParams ¶
type ListHubConnectorsParams struct {
// Q Optional keyword filter applied to FQN and description.
Q *string `form:"q,omitempty" json:"q,omitempty"`
}
ListHubConnectorsParams defines parameters for ListHubConnectors.
type ListIntentsParams ¶
type ListIntentsParams struct {
PageSize *PageSize `form:"page_size,omitempty" json:"page_size,omitempty"`
PageToken *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
WorkspaceId *string `form:"workspace_id,omitempty" json:"workspace_id,omitempty"`
Status *IntentStatus `form:"status,omitempty" json:"status,omitempty"`
ActionType *string `form:"action_type,omitempty" json:"action_type,omitempty"`
AgentId *string `form:"agent_id,omitempty" json:"agent_id,omitempty"`
}
ListIntentsParams defines parameters for ListIntents.
type ListPoliciesParams ¶
type ListPoliciesParams struct {
PageSize *PageSize `form:"page_size,omitempty" json:"page_size,omitempty"`
PageToken *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
WorkspaceId string `form:"workspace_id" json:"workspace_id"`
}
ListPoliciesParams defines parameters for ListPolicies.
type ListSessionsParams ¶
type ListSessionsParams struct {
ActiveOnly *bool `form:"active_only,omitempty" json:"active_only,omitempty"`
Agent *string `form:"agent,omitempty" json:"agent,omitempty"`
// Since RFC3339 timestamp; only sessions with StartedAt >= since are returned.
Since *time.Time `form:"since,omitempty" json:"since,omitempty"`
Limit *int `form:"limit,omitempty" json:"limit,omitempty"`
}
ListSessionsParams defines parameters for ListSessions.
type ListTracesParams ¶
type ListTracesParams struct {
PageSize *PageSize `form:"page_size,omitempty" json:"page_size,omitempty"`
PageToken *PageToken `form:"page_token,omitempty" json:"page_token,omitempty"`
WorkspaceId string `form:"workspace_id" json:"workspace_id"`
}
ListTracesParams defines parameters for ListTraces.
type LocalVaultStatusResponse ¶
type LocalVaultStatusResponse struct {
// Locked Convenience boolean — true when state is `missing` or `locked`,
// false when `unlocked`. The webapp uses this to drive the modal.
Locked bool `json:"locked"`
// State Lifecycle state of the local vault file.
// - `missing` — no vault file at the canonical path
// - `locked` — vault file present, awaiting passphrase
// - `unlocked` — passphrase accepted; the daemon holds the KEK
State LocalVaultStatusResponseState `json:"state"`
}
LocalVaultStatusResponse defines model for LocalVaultStatusResponse.
type LocalVaultStatusResponseState ¶
type LocalVaultStatusResponseState string
LocalVaultStatusResponseState Lifecycle state of the local vault file.
- `missing` — no vault file at the canonical path
- `locked` — vault file present, awaiting passphrase
- `unlocked` — passphrase accepted; the daemon holds the KEK
const ( LocalVaultStatusResponseStateLocked LocalVaultStatusResponseState = "locked" LocalVaultStatusResponseStateMissing LocalVaultStatusResponseState = "missing" LocalVaultStatusResponseStateUnlocked LocalVaultStatusResponseState = "unlocked" )
Defines values for LocalVaultStatusResponseState.
func (LocalVaultStatusResponseState) Valid ¶
func (e LocalVaultStatusResponseState) Valid() bool
Valid indicates whether the value is a known member of the LocalVaultStatusResponseState enum.
type LocalVaultUnlockRequest ¶
type LocalVaultUnlockRequest struct {
// Passphrase The vault passphrase. Sent in plaintext over the loopback
// connection — the daemon derives the KEK locally via Argon2id.
// Distinct from `UnlockVaultRequest`, which carries a
// client-derived KEK for the cloud-tier multi-tenant flow.
Passphrase string `json:"passphrase"`
}
LocalVaultUnlockRequest defines model for LocalVaultUnlockRequest.
type MessagesRequest ¶
type MessagesRequest struct {
MaxTokens int `json:"max_tokens"`
Messages []AnthropicMessage `json:"messages"`
Model string `json:"model"`
Stream *bool `json:"stream,omitempty"`
// System System prompt; string or array of content blocks (Anthropic
// shape).
System interface{} `json:"system,omitempty"`
// ToolChoice Passed through to the upstream provider unchanged.
ToolChoice interface{} `json:"tool_choice,omitempty"`
// Tools Agent-declared tools. Aileron preserves these unchanged and
// appends installed actions to the array before forwarding
// upstream (Anthropic shape).
Tools *[]AnthropicTool `json:"tools,omitempty"`
AdditionalProperties map[string]interface{} `json:"-"`
}
MessagesRequest defines model for MessagesRequest.
func (MessagesRequest) Get ¶
func (a MessagesRequest) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for MessagesRequest. Returns the specified element and whether it was found
func (MessagesRequest) MarshalJSON ¶
func (a MessagesRequest) MarshalJSON() ([]byte, error)
Override default JSON handling for MessagesRequest to handle AdditionalProperties
func (*MessagesRequest) Set ¶
func (a *MessagesRequest) Set(fieldName string, value interface{})
Setter for additional properties for MessagesRequest
func (*MessagesRequest) UnmarshalJSON ¶
func (a *MessagesRequest) UnmarshalJSON(b []byte) error
Override default JSON handling for MessagesRequest to handle AdditionalProperties
type MessagesResponse ¶
type MessagesResponse struct {
Content []map[string]interface{} `json:"content"`
Id string `json:"id"`
Model string `json:"model"`
Role MessagesResponseRole `json:"role"`
StopReason *string `json:"stop_reason,omitempty"`
StopSequence *string `json:"stop_sequence,omitempty"`
Type MessagesResponseType `json:"type"`
Usage *map[string]interface{} `json:"usage,omitempty"`
AdditionalProperties map[string]interface{} `json:"-"`
}
MessagesResponse defines model for MessagesResponse.
func (MessagesResponse) Get ¶
func (a MessagesResponse) Get(fieldName string) (value interface{}, found bool)
Getter for additional properties for MessagesResponse. Returns the specified element and whether it was found
func (MessagesResponse) MarshalJSON ¶
func (a MessagesResponse) MarshalJSON() ([]byte, error)
Override default JSON handling for MessagesResponse to handle AdditionalProperties
func (*MessagesResponse) Set ¶
func (a *MessagesResponse) Set(fieldName string, value interface{})
Setter for additional properties for MessagesResponse
func (*MessagesResponse) UnmarshalJSON ¶
func (a *MessagesResponse) UnmarshalJSON(b []byte) error
Override default JSON handling for MessagesResponse to handle AdditionalProperties
type MessagesResponseRole ¶
type MessagesResponseRole string
MessagesResponseRole defines model for MessagesResponse.Role.
const (
Assistant MessagesResponseRole = "assistant"
)
Defines values for MessagesResponseRole.
func (MessagesResponseRole) Valid ¶
func (e MessagesResponseRole) Valid() bool
Valid indicates whether the value is a known member of the MessagesResponseRole enum.
type MessagesResponseType ¶
type MessagesResponseType string
MessagesResponseType defines model for MessagesResponse.Type.
const (
Message MessagesResponseType = "message"
)
Defines values for MessagesResponseType.
func (MessagesResponseType) Valid ¶
func (e MessagesResponseType) Valid() bool
Valid indicates whether the value is a known member of the MessagesResponseType enum.
type ModifyApprovalRequest ¶
type ModifyApprovalRequest struct {
Comment *string `json:"comment,omitempty"`
Modifications map[string]interface{} `json:"modifications"`
}
ModifyApprovalRequest defines model for ModifyApprovalRequest.
type ModifyRequestJSONRequestBody ¶
type ModifyRequestJSONRequestBody = ModifyApprovalRequest
ModifyRequestJSONRequestBody defines body for ModifyRequest for application/json ContentType.
type Money ¶
type Money struct {
// Amount Amount in minor units
Amount int `json:"amount"`
Currency string `json:"currency"`
}
Money defines model for Money.
type NotFound ¶
type NotFound = Error
NotFound Generic error envelope used by CRUD endpoints (intents, approvals, policies, accounts, auth). Action-execution and gateway endpoints use the structured `FailureEnvelope` instead, per ADR-0010.
type OAuth2FinishRequest ¶
type OAuth2FinishRequest struct {
// Code Authorization code captured from the OAuth callback.
Code string `json:"code"`
// SessionId The session id returned by oauth2/init.
SessionId string `json:"session_id"`
// State State token captured from the OAuth callback. Server
// compares against the session's stored state and rejects
// on mismatch (CSRF protection).
State string `json:"state"`
}
OAuth2FinishRequest defines model for OAuth2FinishRequest.
type OAuth2InitRequest ¶
type OAuth2InitRequest struct {
// Account Optional human-readable account label.
Account *string `json:"account,omitempty"`
// ConnectorFqn Fully-qualified connector name. Connector must be installed
// and must declare `[capabilities.credential] kind = "oauth2"`.
ConnectorFqn string `json:"connector_fqn"`
// Identity User-chosen handle for the new binding (e.g. `work`,
// `personal`). Combined with the connector's declared kind
// and service to form the full binding name.
Identity string `json:"identity"`
// Service Optional service override. Defaults to the service segment
// derived from the connector FQN's repo segment.
Service *string `json:"service,omitempty"`
}
OAuth2InitRequest defines model for OAuth2InitRequest.
type OAuth2InitResponse ¶
type OAuth2InitResponse struct {
// AuthorizeUrl URL the caller should direct the user's browser to. Already
// includes client_id, redirect_uri, response_type=code,
// scope, state, code_challenge, and code_challenge_method=S256.
AuthorizeUrl string `json:"authorize_url"`
// RedirectUri Loopback URL the caller must serve to capture the OAuth
// callback (e.g. `http://localhost:54321/callback`). The
// server has already chosen a free port and embedded the
// URI in `authorize_url`.
RedirectUri string `json:"redirect_uri"`
// SessionId Opaque token the caller passes back to oauth2/finish.
// Server-side state (PKCE verifier, expected state value)
// is keyed by this id; TTL is 10 minutes.
SessionId string `json:"session_id"`
}
OAuth2InitResponse defines model for OAuth2InitResponse.
type Pagination ¶
type Pagination struct {
NextPageToken *string `json:"next_page_token,omitempty"`
}
Pagination defines model for Pagination.
type PassphraseSaltResponse ¶
type PassphraseSaltResponse struct {
// HasPassphrase Whether the user has set a vault passphrase
HasPassphrase bool `json:"has_passphrase"`
// Salt Base64-encoded Argon2id salt (omitted when no passphrase is set)
Salt *[]byte `json:"salt,omitempty"`
}
PassphraseSaltResponse defines model for PassphraseSaltResponse.
type PassphraseVerificationResponse ¶
type PassphraseVerificationResponse struct {
// HasPassphrase Whether the user has set a vault passphrase
HasPassphrase bool `json:"has_passphrase"`
// KekVerification Encrypted verification blob for client-side decryption (omitted when no passphrase is set)
KekVerification *[]byte `json:"kek_verification,omitempty"`
}
PassphraseVerificationResponse defines model for PassphraseVerificationResponse.
type PaymentAction ¶
type PaymentAction struct {
Amount *Money `json:"amount,omitempty"`
Beneficiary *PaymentBeneficiary `json:"beneficiary,omitempty"`
BudgetCode *string `json:"budget_code,omitempty"`
ContractTerm *string `json:"contract_term,omitempty"`
FundingSourceId *string `json:"funding_source_id,omitempty"`
LineItems *[]LineItem `json:"line_items,omitempty"`
MerchantCategory *string `json:"merchant_category,omitempty"`
MerchantReference *string `json:"merchant_reference,omitempty"`
PaymentInstrumentPreference *PaymentActionPaymentInstrumentPreference `json:"payment_instrument_preference,omitempty"`
RecurringInterval *PaymentActionRecurringInterval `json:"recurring_interval,omitempty"`
Renewal *bool `json:"renewal,omitempty"`
VendorId *string `json:"vendor_id,omitempty"`
VendorName *string `json:"vendor_name,omitempty"`
}
PaymentAction defines model for PaymentAction.
type PaymentActionPaymentInstrumentPreference ¶
type PaymentActionPaymentInstrumentPreference string
PaymentActionPaymentInstrumentPreference defines model for PaymentAction.PaymentInstrumentPreference.
const ( Ach PaymentActionPaymentInstrumentPreference = "ach" NetworkProxy PaymentActionPaymentInstrumentPreference = "network_proxy" Unspecified PaymentActionPaymentInstrumentPreference = "unspecified" VirtualCard PaymentActionPaymentInstrumentPreference = "virtual_card" Wallet PaymentActionPaymentInstrumentPreference = "wallet" )
Defines values for PaymentActionPaymentInstrumentPreference.
func (PaymentActionPaymentInstrumentPreference) Valid ¶
func (e PaymentActionPaymentInstrumentPreference) Valid() bool
Valid indicates whether the value is a known member of the PaymentActionPaymentInstrumentPreference enum.
type PaymentActionRecurringInterval ¶
type PaymentActionRecurringInterval string
PaymentActionRecurringInterval defines model for PaymentAction.RecurringInterval.
const ( PaymentActionRecurringIntervalAnnual PaymentActionRecurringInterval = "annual" PaymentActionRecurringIntervalMonthly PaymentActionRecurringInterval = "monthly" PaymentActionRecurringIntervalNone PaymentActionRecurringInterval = "none" PaymentActionRecurringIntervalQuarterly PaymentActionRecurringInterval = "quarterly" )
Defines values for PaymentActionRecurringInterval.
func (PaymentActionRecurringInterval) Valid ¶
func (e PaymentActionRecurringInterval) Valid() bool
Valid indicates whether the value is a known member of the PaymentActionRecurringInterval enum.
type PaymentBeneficiary ¶
type PaymentBeneficiary struct {
Department *string `json:"department,omitempty"`
Email *openapi_types.Email `json:"email,omitempty"`
Name *string `json:"name,omitempty"`
}
PaymentBeneficiary defines model for PaymentBeneficiary.
type PendingActionApproval ¶
type PendingActionApproval struct {
// ActionName For `kind=action`, the manifest name of the gated action
// (e.g. "send-email"). For non-action kinds, a short label
// describing what's being approved ("send_message",
// "draft_reply", "http_request").
ActionName string `json:"action_name"`
// Args Kind-specific arguments. For `action`, the call-time
// arguments the agent passed in. For comms / HTTP kinds,
// see the `kind` enum description above.
Args *map[string]interface{} `json:"args,omitempty"`
// ConnectorFqn Connector FQN the action's first execute step targets, surfaced
// so the user can see which integration would actually run.
// Empty for non-action kinds.
ConnectorFqn *string `json:"connector_fqn,omitempty"`
// Id Opaque server-minted identifier for this request.
Id string `json:"id"`
// Kind Discriminates the user-facing card layout the webapp
// should render.
//
// - `action` — historic action-manifest gate (default).
// - `comms_send` — `aileron-mcp`'s `send_message` tool;
// args carry `service`, `channel`, `body`.
// - `comms_draft` — `aileron-mcp`'s `draft_reply` tool;
// args carry `service`, `channel`, `original_author`,
// `original_body`, `draft_body`, `reply_to`. The
// webapp surfaces `draft_body` as an editable field
// and ships the edited bytes back via
// `ActionApprovalDecision.edited_payload.body`.
// - `http_request` — `aileron-mcp`'s `http_request` tool;
// args carry `method`, `url`, `body`, `secret_name`
// (the matched binding name; the value is never
// surfaced to the webapp).
Kind PendingActionApprovalKind `json:"kind"`
// RequestedAt When the queue minted this request.
RequestedAt time.Time `json:"requested_at"`
// SessionId Launch session that initiated the request, when one is in
// scope; empty for daemon-direct callers.
SessionId *string `json:"session_id,omitempty"`
}
PendingActionApproval One pending action-level approval request. Surfaced to the webapp / CLI for user decision. The runtime is blocked on the corresponding action-run HTTP response and will resume the moment a decision is posted to `/v1/action-approvals/{id}/decide`.
type PendingActionApprovalKind ¶
type PendingActionApprovalKind string
PendingActionApprovalKind Discriminates the user-facing card layout the webapp should render.
- `action` — historic action-manifest gate (default).
- `comms_send` — `aileron-mcp`'s `send_message` tool; args carry `service`, `channel`, `body`.
- `comms_draft` — `aileron-mcp`'s `draft_reply` tool; args carry `service`, `channel`, `original_author`, `original_body`, `draft_body`, `reply_to`. The webapp surfaces `draft_body` as an editable field and ships the edited bytes back via `ActionApprovalDecision.edited_payload.body`.
- `http_request` — `aileron-mcp`'s `http_request` tool; args carry `method`, `url`, `body`, `secret_name` (the matched binding name; the value is never surfaced to the webapp).
const ( PendingActionApprovalKindAction PendingActionApprovalKind = "action" PendingActionApprovalKindCommsDraft PendingActionApprovalKind = "comms_draft" PendingActionApprovalKindCommsSend PendingActionApprovalKind = "comms_send" PendingActionApprovalKindHttpRequest PendingActionApprovalKind = "http_request" )
Defines values for PendingActionApprovalKind.
func (PendingActionApprovalKind) Valid ¶
func (e PendingActionApprovalKind) Valid() bool
Valid indicates whether the value is a known member of the PendingActionApprovalKind enum.
type Policy ¶
type Policy struct {
CreatedAt *time.Time `json:"created_at,omitempty"`
Description *string `json:"description,omitempty"`
Environment *string `json:"environment,omitempty"`
Name string `json:"name"`
PolicyId string `json:"policy_id"`
Rules []PolicyRule `json:"rules"`
Status PolicyStatus `json:"status"`
UpdatedAt *time.Time `json:"updated_at,omitempty"`
Version int `json:"version"`
WorkspaceId string `json:"workspace_id"`
}
Policy defines model for Policy.
type PolicyCondition ¶
type PolicyCondition struct {
Field *string `json:"field,omitempty"`
Operator *PolicyConditionOperator `json:"operator,omitempty"`
Value *PolicyCondition_Value `json:"value,omitempty"`
}
PolicyCondition defines model for PolicyCondition.
type PolicyConditionOperator ¶
type PolicyConditionOperator string
PolicyConditionOperator defines model for PolicyCondition.Operator.
const ( Contains PolicyConditionOperator = "contains" Eq PolicyConditionOperator = "eq" Gt PolicyConditionOperator = "gt" Gte PolicyConditionOperator = "gte" In PolicyConditionOperator = "in" Lt PolicyConditionOperator = "lt" Lte PolicyConditionOperator = "lte" Matches PolicyConditionOperator = "matches" Neq PolicyConditionOperator = "neq" NotIn PolicyConditionOperator = "not_in" )
Defines values for PolicyConditionOperator.
func (PolicyConditionOperator) Valid ¶
func (e PolicyConditionOperator) Valid() bool
Valid indicates whether the value is a known member of the PolicyConditionOperator enum.
type PolicyConditionValue0 ¶
type PolicyConditionValue0 = string
PolicyConditionValue0 defines model for .
type PolicyConditionValue1 ¶
type PolicyConditionValue1 = float32
PolicyConditionValue1 defines model for .
type PolicyConditionValue2 ¶
type PolicyConditionValue2 = int
PolicyConditionValue2 defines model for .
type PolicyConditionValue3 ¶
type PolicyConditionValue3 = bool
PolicyConditionValue3 defines model for .
type PolicyConditionValue4 ¶
type PolicyConditionValue4 = []interface{}
PolicyConditionValue4 defines model for .
type PolicyCondition_Value ¶
type PolicyCondition_Value struct {
// contains filtered or unexported fields
}
PolicyCondition_Value defines model for PolicyCondition.Value.
func (PolicyCondition_Value) AsPolicyConditionValue0 ¶
func (t PolicyCondition_Value) AsPolicyConditionValue0() (PolicyConditionValue0, error)
AsPolicyConditionValue0 returns the union data inside the PolicyCondition_Value as a PolicyConditionValue0
func (PolicyCondition_Value) AsPolicyConditionValue1 ¶
func (t PolicyCondition_Value) AsPolicyConditionValue1() (PolicyConditionValue1, error)
AsPolicyConditionValue1 returns the union data inside the PolicyCondition_Value as a PolicyConditionValue1
func (PolicyCondition_Value) AsPolicyConditionValue2 ¶
func (t PolicyCondition_Value) AsPolicyConditionValue2() (PolicyConditionValue2, error)
AsPolicyConditionValue2 returns the union data inside the PolicyCondition_Value as a PolicyConditionValue2
func (PolicyCondition_Value) AsPolicyConditionValue3 ¶
func (t PolicyCondition_Value) AsPolicyConditionValue3() (PolicyConditionValue3, error)
AsPolicyConditionValue3 returns the union data inside the PolicyCondition_Value as a PolicyConditionValue3
func (PolicyCondition_Value) AsPolicyConditionValue4 ¶
func (t PolicyCondition_Value) AsPolicyConditionValue4() (PolicyConditionValue4, error)
AsPolicyConditionValue4 returns the union data inside the PolicyCondition_Value as a PolicyConditionValue4
func (*PolicyCondition_Value) FromPolicyConditionValue0 ¶
func (t *PolicyCondition_Value) FromPolicyConditionValue0(v PolicyConditionValue0) error
FromPolicyConditionValue0 overwrites any union data inside the PolicyCondition_Value as the provided PolicyConditionValue0
func (*PolicyCondition_Value) FromPolicyConditionValue1 ¶
func (t *PolicyCondition_Value) FromPolicyConditionValue1(v PolicyConditionValue1) error
FromPolicyConditionValue1 overwrites any union data inside the PolicyCondition_Value as the provided PolicyConditionValue1
func (*PolicyCondition_Value) FromPolicyConditionValue2 ¶
func (t *PolicyCondition_Value) FromPolicyConditionValue2(v PolicyConditionValue2) error
FromPolicyConditionValue2 overwrites any union data inside the PolicyCondition_Value as the provided PolicyConditionValue2
func (*PolicyCondition_Value) FromPolicyConditionValue3 ¶
func (t *PolicyCondition_Value) FromPolicyConditionValue3(v PolicyConditionValue3) error
FromPolicyConditionValue3 overwrites any union data inside the PolicyCondition_Value as the provided PolicyConditionValue3
func (*PolicyCondition_Value) FromPolicyConditionValue4 ¶
func (t *PolicyCondition_Value) FromPolicyConditionValue4(v PolicyConditionValue4) error
FromPolicyConditionValue4 overwrites any union data inside the PolicyCondition_Value as the provided PolicyConditionValue4
func (PolicyCondition_Value) MarshalJSON ¶
func (t PolicyCondition_Value) MarshalJSON() ([]byte, error)
func (*PolicyCondition_Value) MergePolicyConditionValue0 ¶
func (t *PolicyCondition_Value) MergePolicyConditionValue0(v PolicyConditionValue0) error
MergePolicyConditionValue0 performs a merge with any union data inside the PolicyCondition_Value, using the provided PolicyConditionValue0
func (*PolicyCondition_Value) MergePolicyConditionValue1 ¶
func (t *PolicyCondition_Value) MergePolicyConditionValue1(v PolicyConditionValue1) error
MergePolicyConditionValue1 performs a merge with any union data inside the PolicyCondition_Value, using the provided PolicyConditionValue1
func (*PolicyCondition_Value) MergePolicyConditionValue2 ¶
func (t *PolicyCondition_Value) MergePolicyConditionValue2(v PolicyConditionValue2) error
MergePolicyConditionValue2 performs a merge with any union data inside the PolicyCondition_Value, using the provided PolicyConditionValue2
func (*PolicyCondition_Value) MergePolicyConditionValue3 ¶
func (t *PolicyCondition_Value) MergePolicyConditionValue3(v PolicyConditionValue3) error
MergePolicyConditionValue3 performs a merge with any union data inside the PolicyCondition_Value, using the provided PolicyConditionValue3
func (*PolicyCondition_Value) MergePolicyConditionValue4 ¶
func (t *PolicyCondition_Value) MergePolicyConditionValue4(v PolicyConditionValue4) error
MergePolicyConditionValue4 performs a merge with any union data inside the PolicyCondition_Value, using the provided PolicyConditionValue4
func (*PolicyCondition_Value) UnmarshalJSON ¶
func (t *PolicyCondition_Value) UnmarshalJSON(b []byte) error
type PolicyListResponse ¶
type PolicyListResponse struct {
Items *[]Policy `json:"items,omitempty"`
Pagination *Pagination `json:"pagination,omitempty"`
}
PolicyListResponse defines model for PolicyListResponse.
type PolicyMatch ¶
type PolicyMatch struct {
Explanation *string `json:"explanation,omitempty"`
PolicyId *string `json:"policy_id,omitempty"`
PolicyVersion *int `json:"policy_version,omitempty"`
RuleId *string `json:"rule_id,omitempty"`
}
PolicyMatch defines model for PolicyMatch.
type PolicyRule ¶
type PolicyRule struct {
ApprovalRequirement *ApprovalRequirement `json:"approval_requirement,omitempty"`
Conditions *[]PolicyCondition `json:"conditions,omitempty"`
Description *string `json:"description,omitempty"`
Effect PolicyRuleEffect `json:"effect"`
ModificationsTemplate *map[string]interface{} `json:"modifications_template,omitempty"`
Priority *int `json:"priority,omitempty"`
RuleId string `json:"rule_id"`
}
PolicyRule defines model for PolicyRule.
type PolicyRuleEffect ¶
type PolicyRuleEffect string
PolicyRuleEffect defines model for PolicyRule.Effect.
const ( PolicyRuleEffectAllow PolicyRuleEffect = "allow" PolicyRuleEffectAllowWithModification PolicyRuleEffect = "allow_with_modification" PolicyRuleEffectDeny PolicyRuleEffect = "deny" PolicyRuleEffectRequireApproval PolicyRuleEffect = "require_approval" )
Defines values for PolicyRuleEffect.
func (PolicyRuleEffect) Valid ¶
func (e PolicyRuleEffect) Valid() bool
Valid indicates whether the value is a known member of the PolicyRuleEffect enum.
type PolicySimulationRequest ¶
type PolicySimulationRequest struct {
Action ActionIntent `json:"action"`
Context *IntentContext `json:"context,omitempty"`
WorkspaceId string `json:"workspace_id"`
}
PolicySimulationRequest defines model for PolicySimulationRequest.
type PolicySimulationResponse ¶
type PolicySimulationResponse struct {
Decision Decision `json:"decision"`
}
PolicySimulationResponse defines model for PolicySimulationResponse.
type PolicyStatus ¶
type PolicyStatus string
PolicyStatus defines model for PolicyStatus.
const ( PolicyStatusActive PolicyStatus = "active" PolicyStatusArchived PolicyStatus = "archived" PolicyStatusDraft PolicyStatus = "draft" )
Defines values for PolicyStatus.
func (PolicyStatus) Valid ¶
func (e PolicyStatus) Valid() bool
Valid indicates whether the value is a known member of the PolicyStatus enum.
type PostChatCompletionsJSONRequestBody ¶
type PostChatCompletionsJSONRequestBody = ChatCompletionRequest
PostChatCompletionsJSONRequestBody defines body for PostChatCompletions for application/json ContentType.
type PostMessagesJSONRequestBody ¶
type PostMessagesJSONRequestBody = MessagesRequest
PostMessagesJSONRequestBody defines body for PostMessages for application/json ContentType.
type PreviewActionJSONRequestBody ¶
type PreviewActionJSONRequestBody = InstallActionRequest
PreviewActionJSONRequestBody defines body for PreviewAction for application/json ContentType.
type PreviewCapabilities ¶
type PreviewCapabilities struct {
Credential *struct {
// Kind Credential kind (`api_key`, `oauth2`).
Kind string `json:"kind"`
// Scope Human-readable scope from `[capabilities.credential]
// scope`. Useful for the CLI's "what does this connector
// want?" prompt.
Scope *string `json:"scope,omitempty"`
} `json:"credential,omitempty"`
// NetworkHosts `[capabilities.network] hosts`: pinned `host:port` pairs
// the connector will reach. Order matches the manifest.
NetworkHosts *[]string `json:"network_hosts,omitempty"`
}
PreviewCapabilities Flattened view of the connector manifest's `[capabilities.*]` blocks. Optional sub-tables that are absent in the manifest are absent here too — the CLI renders only what the connector actually declares.
type PreviewConnectorJSONRequestBody ¶
type PreviewConnectorJSONRequestBody = InstallConnectorRequest
PreviewConnectorJSONRequestBody defines body for PreviewConnector for application/json ContentType.
type ProcurementAction ¶
type ProcurementAction struct {
AmountEstimate *Money `json:"amount_estimate,omitempty"`
CostCenter *string `json:"cost_center,omitempty"`
Justification *string `json:"justification,omitempty"`
LegalReviewRequired *bool `json:"legal_review_required,omitempty"`
LineItems *[]LineItem `json:"line_items,omitempty"`
RequestType *ProcurementActionRequestType `json:"request_type,omitempty"`
Requestor *string `json:"requestor,omitempty"`
SecurityReviewRequired *bool `json:"security_review_required,omitempty"`
VendorName *string `json:"vendor_name,omitempty"`
}
ProcurementAction defines model for ProcurementAction.
type ProcurementActionRequestType ¶
type ProcurementActionRequestType string
ProcurementActionRequestType defines model for ProcurementAction.RequestType.
const ( Contractor ProcurementActionRequestType = "contractor" Equipment ProcurementActionRequestType = "equipment" Other ProcurementActionRequestType = "other" Services ProcurementActionRequestType = "services" Software ProcurementActionRequestType = "software" Travel ProcurementActionRequestType = "travel" )
Defines values for ProcurementActionRequestType.
func (ProcurementActionRequestType) Valid ¶
func (e ProcurementActionRequestType) Valid() bool
Valid indicates whether the value is a known member of the ProcurementActionRequestType enum.
type ReadCommsMessagesParams ¶
type ReadCommsMessagesParams struct {
// Service Filter by service ("slack", "discord", or empty for all).
Service *string `form:"service,omitempty" json:"service,omitempty"`
// Channel Filter by channel name, or empty for all channels.
Channel *string `form:"channel,omitempty" json:"channel,omitempty"`
}
ReadCommsMessagesParams defines parameters for ReadCommsMessages.
type ReadCommsMessagesResponse ¶
type ReadCommsMessagesResponse struct {
Messages []CommsMessage `json:"messages"`
}
ReadCommsMessagesResponse Snapshot of unread messages from the daemon's notify queue. Calling this endpoint marks the surfaced messages as read.
type RebindBindingJSONRequestBody ¶
type RebindBindingJSONRequestBody = RebindRequest
RebindBindingJSONRequestBody defines body for RebindBinding for application/json ContentType.
type RebindRequest ¶
type RebindRequest struct {
// Source Per-binding credential source. v1 supports only `api_key`. Setting
// `kind: oauth2` returns a structured `400` referencing #388.
Source BindingSource `json:"source"`
}
RebindRequest defines model for RebindRequest.
type Recipient ¶
type Recipient struct {
Email openapi_types.Email `json:"email"`
Name *string `json:"name,omitempty"`
}
Recipient defines model for Recipient.
type RequestCommsHTTPJSONRequestBody ¶
type RequestCommsHTTPJSONRequestBody = RequestCommsHTTPRequest
RequestCommsHTTPJSONRequestBody defines body for RequestCommsHTTP for application/json ContentType.
type RequestCommsHTTPRequest ¶
type RequestCommsHTTPRequest struct {
// Body Request body string. Optional.
Body *string `json:"body,omitempty"`
// Headers Additional request headers as a JSON object string, e.g.
// `{"X-Foo":"bar"}`. Optional.
Headers *string `json:"headers,omitempty"`
// Method HTTP method (GET, POST, PUT, DELETE, PATCH).
Method string `json:"method"`
// Url Target URL.
Url string `json:"url"`
}
RequestCommsHTTPRequest Request body for `POST /v1/sessions/{id}/comms/http`. The daemon matches `url` against api_key vault entries and injects the matched secret as a Bearer token after the user approves.
type RequiredHeaderError ¶
func (*RequiredHeaderError) Error ¶
func (e *RequiredHeaderError) Error() string
func (*RequiredHeaderError) Unwrap ¶
func (e *RequiredHeaderError) Unwrap() error
type RequiredParamError ¶
type RequiredParamError struct {
ParamName string
}
func (*RequiredParamError) Error ¶
func (e *RequiredParamError) Error() string
type RiskLevel ¶
type RiskLevel string
RiskLevel defines model for RiskLevel.
type RunActionJSONRequestBody ¶
type RunActionJSONRequestBody = ActionRunRequest
RunActionJSONRequestBody defines body for RunAction for application/json ContentType.
type RunExecutionJSONRequestBody ¶
type RunExecutionJSONRequestBody = ExecutionRunRequest
RunExecutionJSONRequestBody defines body for RunExecution for application/json ContentType.
type SendCommsMessageJSONRequestBody ¶
type SendCommsMessageJSONRequestBody = SendCommsMessageRequest
SendCommsMessageJSONRequestBody defines body for SendCommsMessage for application/json ContentType.
type SendCommsMessageRequest ¶
type SendCommsMessageRequest struct {
// Body Message text to send.
Body string `json:"body"`
// Channel Channel name or ID to send to.
Channel string `json:"channel"`
// Service Target service ("slack", "discord").
Service string `json:"service"`
}
SendCommsMessageRequest Request body for `POST /v1/sessions/{id}/comms/send`. session_id rides in the URL path; the daemon stamps it on the action-approval entry.
type ServeMux ¶
type ServeMux interface {
HandleFunc(pattern string, handler func(http.ResponseWriter, *http.Request))
ServeHTTP(w http.ResponseWriter, r *http.Request)
}
ServeMux is an abstraction of http.ServeMux.
type ServerInterface ¶
type ServerInterface interface {
// List pending action-level approval requests
// (GET /v1/action-approvals)
ListActionApprovals(w http.ResponseWriter, r *http.Request)
// Stream action-level approval queue events (Server-Sent Events)
// (GET /v1/action-approvals/watch)
WatchActionApprovals(w http.ResponseWriter, r *http.Request)
// Approve or deny a pending action-level approval
// (POST /v1/action-approvals/{approval_id}/decide)
DecideActionApproval(w http.ResponseWriter, r *http.Request, approvalId string)
// Poll an action approval's status and result
// (GET /v1/action-approvals/{approval_id}/result)
GetActionApprovalResult(w http.ResponseWriter, r *http.Request, approvalId string)
// List installed actions
// (GET /v1/actions)
ListActions(w http.ResponseWriter, r *http.Request)
// Install an action template into the user's actions directory
// (POST /v1/actions/install)
InstallAction(w http.ResponseWriter, r *http.Request)
// Preview an action install without committing
// (POST /v1/actions/preview)
PreviewAction(w http.ResponseWriter, r *http.Request)
// Get an installed action by name
// (GET /v1/actions/{name})
GetAction(w http.ResponseWriter, r *http.Request, name string)
// Execute an installed action
// (POST /v1/actions/{name}/run)
RunAction(w http.ResponseWriter, r *http.Request, name string)
// Get analytics summary
// (GET /v1/analytics/summary)
GetAnalyticsSummary(w http.ResponseWriter, r *http.Request, params GetAnalyticsSummaryParams)
// List approval requests
// (GET /v1/approvals)
ListApprovals(w http.ResponseWriter, r *http.Request, params ListApprovalsParams)
// Get an approval request
// (GET /v1/approvals/{approval_id})
GetApproval(w http.ResponseWriter, r *http.Request, approvalId ApprovalId)
// Approve an action
// (POST /v1/approvals/{approval_id}/approve)
ApproveRequest(w http.ResponseWriter, r *http.Request, approvalId ApprovalId)
// Deny an action
// (POST /v1/approvals/{approval_id}/deny)
DenyRequest(w http.ResponseWriter, r *http.Request, approvalId ApprovalId)
// Approve with modifications
// (POST /v1/approvals/{approval_id}/modify)
ModifyRequest(w http.ResponseWriter, r *http.Request, approvalId ApprovalId)
// List audit events
// (GET /v1/audit)
ListAudit(w http.ResponseWriter, r *http.Request, params ListAuditParams)
// Get a single audit event by id
// (GET /v1/audit/{audit_id})
GetAudit(w http.ResponseWriter, r *http.Request, auditId string)
// List capability bindings
// (GET /v1/bindings)
ListBindings(w http.ResponseWriter, r *http.Request, params ListBindingsParams)
// Create one or more bindings for a connector
// (POST /v1/bindings/setup)
SetupBindings(w http.ResponseWriter, r *http.Request)
// Complete an OAuth2 binding flow
// (POST /v1/bindings/setup/oauth2/finish)
FinishOAuth2Binding(w http.ResponseWriter, r *http.Request)
// Begin an OAuth2 binding flow
// (POST /v1/bindings/setup/oauth2/init)
InitOAuth2Binding(w http.ResponseWriter, r *http.Request)
// Revoke a binding
// (DELETE /v1/bindings/{name})
RevokeBinding(w http.ResponseWriter, r *http.Request, name BindingName)
// Inspect a single binding
// (GET /v1/bindings/{name})
GetBinding(w http.ResponseWriter, r *http.Request, name BindingName)
// Replace the credential value of an existing binding
// (POST /v1/bindings/{name}/rebind)
RebindBinding(w http.ResponseWriter, r *http.Request, name BindingName)
// OpenAI-compatible chat completions endpoint
// (POST /v1/chat/completions)
PostChatCompletions(w http.ResponseWriter, r *http.Request)
// Initiate OAuth flow to connect an external account
// (GET /v1/connect/{provider})
ConnectAccount(w http.ResponseWriter, r *http.Request, provider string, params ConnectAccountParams)
// Handle OAuth callback for account connection
// (GET /v1/connect/{provider}/callback)
ConnectAccountCallback(w http.ResponseWriter, r *http.Request, provider string, params ConnectAccountCallbackParams)
// List the current user's connected external accounts
// (GET /v1/connected-accounts)
ListConnectedAccounts(w http.ResponseWriter, r *http.Request)
// Disconnect an external account
// (DELETE /v1/connected-accounts/{id})
DeleteConnectedAccount(w http.ResponseWriter, r *http.Request, id string)
// Get a connected account
// (GET /v1/connected-accounts/{id})
GetConnectedAccount(w http.ResponseWriter, r *http.Request, id string)
// List connectors
// (GET /v1/connectors)
ListConnectors(w http.ResponseWriter, r *http.Request, params ListConnectorsParams)
// Register a connector
// (POST /v1/connectors)
CreateConnector(w http.ResponseWriter, r *http.Request)
// Check installed connectors for newer versions
// (GET /v1/connectors/check)
CheckConnectors(w http.ResponseWriter, r *http.Request, params CheckConnectorsParams)
// Install a connector into the content-addressed store
// (POST /v1/connectors/install)
InstallConnector(w http.ResponseWriter, r *http.Request)
// Preview a connector install without committing
// (POST /v1/connectors/preview)
PreviewConnector(w http.ResponseWriter, r *http.Request)
// Get a connector
// (GET /v1/connectors/{connector_id})
GetConnector(w http.ResponseWriter, r *http.Request, connectorId ConnectorId)
// Update a connector
// (PATCH /v1/connectors/{connector_id})
UpdateConnector(w http.ResponseWriter, r *http.Request, connectorId ConnectorId)
// List credential references
// (GET /v1/credentials)
ListCredentials(w http.ResponseWriter, r *http.Request, params ListCredentialsParams)
// Register a credential reference
// (POST /v1/credentials)
CreateCredential(w http.ResponseWriter, r *http.Request)
// Get current enterprise
// (GET /v1/enterprises/me)
GetCurrentEnterprise(w http.ResponseWriter, r *http.Request)
// Update current enterprise
// (PATCH /v1/enterprises/me)
UpdateCurrentEnterprise(w http.ResponseWriter, r *http.Request)
// Get an execution grant
// (GET /v1/execution-grants/{grant_id})
GetExecutionGrant(w http.ResponseWriter, r *http.Request, grantId GrantId)
// Execute an approved action
// (POST /v1/executions/run)
RunExecution(w http.ResponseWriter, r *http.Request)
// Get execution status
// (GET /v1/executions/{execution_id})
GetExecution(w http.ResponseWriter, r *http.Request, executionId ExecutionId)
// Post execution callback
// (POST /v1/executions/{execution_id}/callback)
ExecutionCallback(w http.ResponseWriter, r *http.Request, executionId ExecutionId)
// List funding sources
// (GET /v1/funding-sources)
ListFundingSources(w http.ResponseWriter, r *http.Request, params ListFundingSourcesParams)
// Create a funding source
// (POST /v1/funding-sources)
CreateFundingSource(w http.ResponseWriter, r *http.Request)
// Get service health
// (GET /v1/health)
GetHealth(w http.ResponseWriter, r *http.Request)
// Look up a single Hub connector entry by FQN
// (GET /v1/hub/connector)
GetHubConnector(w http.ResponseWriter, r *http.Request, params GetHubConnectorParams)
// List Hub connector entries
// (GET /v1/hub/connectors)
ListHubConnectors(w http.ResponseWriter, r *http.Request, params ListHubConnectorsParams)
// Pre-computed install-decision payload for a Hub connector
// (GET /v1/hub/install-decision)
GetHubInstallDecision(w http.ResponseWriter, r *http.Request, params GetHubInstallDecisionParams)
// List intents
// (GET /v1/intents)
ListIntents(w http.ResponseWriter, r *http.Request, params ListIntentsParams)
// Submit a new action intent
// (POST /v1/intents)
CreateIntent(w http.ResponseWriter, r *http.Request)
// Get an intent
// (GET /v1/intents/{intent_id})
GetIntent(w http.ResponseWriter, r *http.Request, intentId IntentId)
// Attach evidence to an intent
// (POST /v1/intents/{intent_id}/evidence)
AppendIntentEvidence(w http.ResponseWriter, r *http.Request, intentId IntentId)
// Anthropic-compatible messages endpoint
// (POST /v1/messages)
PostMessages(w http.ResponseWriter, r *http.Request)
// List policies
// (GET /v1/policies)
ListPolicies(w http.ResponseWriter, r *http.Request, params ListPoliciesParams)
// Create a policy
// (POST /v1/policies)
CreatePolicy(w http.ResponseWriter, r *http.Request)
// Simulate policy evaluation
// (POST /v1/policies/simulate)
SimulatePolicy(w http.ResponseWriter, r *http.Request)
// Get a policy
// (GET /v1/policies/{policy_id})
GetPolicy(w http.ResponseWriter, r *http.Request, policyId PolicyId)
// Update a policy
// (PATCH /v1/policies/{policy_id})
UpdatePolicy(w http.ResponseWriter, r *http.Request, policyId PolicyId)
// List launch sessions
// (GET /v1/sessions)
ListSessions(w http.ResponseWriter, r *http.Request, params ListSessionsParams)
// Register a new launch session
// (POST /v1/sessions)
CreateSession(w http.ResponseWriter, r *http.Request)
// Get a launch session by id
// (GET /v1/sessions/{session_id})
GetSession(w http.ResponseWriter, r *http.Request, sessionId string)
// Submit a draft reply for user review
// (POST /v1/sessions/{session_id}/comms/draft)
DraftCommsReply(w http.ResponseWriter, r *http.Request, sessionId string)
// Issue an authenticated HTTP request with user approval
// (POST /v1/sessions/{session_id}/comms/http)
RequestCommsHTTP(w http.ResponseWriter, r *http.Request, sessionId string)
// Read pending messages from communication channels
// (GET /v1/sessions/{session_id}/comms/messages)
ReadCommsMessages(w http.ResponseWriter, r *http.Request, sessionId string, params ReadCommsMessagesParams)
// Request user approval to send a message
// (POST /v1/sessions/{session_id}/comms/send)
SendCommsMessage(w http.ResponseWriter, r *http.Request, sessionId string)
// Mark a launch session ended
// (POST /v1/sessions/{session_id}/end)
EndSession(w http.ResponseWriter, r *http.Request, sessionId string)
// Get runtime status (version, listen address, action / connector / binding counts, vault state)
// (GET /v1/status)
GetStatus(w http.ResponseWriter, r *http.Request)
// Reconcile installed actions with their declared connector dependencies
// (POST /v1/sync)
Sync(w http.ResponseWriter, r *http.Request)
// Initiate remote attestation
// (POST /v1/tee/attestation)
InitiateAttestation(w http.ResponseWriter, r *http.Request)
// Get JWKS for attestation token verification
// (GET /v1/tee/jwks)
GetTeeJwks(w http.ResponseWriter, r *http.Request)
// Establish TEE session and transmit KEK
// (POST /v1/tee/session)
EstablishTeeSession(w http.ResponseWriter, r *http.Request)
// Get TEE status
// (GET /v1/tee/status)
GetTeeStatus(w http.ResponseWriter, r *http.Request)
// List traces
// (GET /v1/traces)
ListTraces(w http.ResponseWriter, r *http.Request, params ListTracesParams)
// Get current user
// (GET /v1/users/me)
GetCurrentUser(w http.ResponseWriter, r *http.Request)
// Update current user
// (PATCH /v1/users/me)
UpdateCurrentUser(w http.ResponseWriter, r *http.Request)
// Disconnect an auth provider
// (DELETE /v1/users/me/auth-providers/{provider})
DisconnectAuthProvider(w http.ResponseWriter, r *http.Request, provider string)
// Set or rotate vault passphrase
// (POST /v1/users/me/passphrase)
SetPassphrase(w http.ResponseWriter, r *http.Request)
// Lock vault and clear cached KEK
// (POST /v1/users/me/passphrase/lock)
LockVault(w http.ResponseWriter, r *http.Request)
// Get passphrase salt
// (GET /v1/users/me/passphrase/salt)
GetPassphraseSalt(w http.ResponseWriter, r *http.Request)
// Unlock vault with passphrase-derived KEK
// (POST /v1/users/me/passphrase/unlock)
UnlockVault(w http.ResponseWriter, r *http.Request)
// Get KEK verification blob
// (GET /v1/users/me/passphrase/verification)
GetPassphraseVerification(w http.ResponseWriter, r *http.Request)
// Get vault lock status
// (GET /v1/users/me/vault/status)
GetVaultStatus(w http.ResponseWriter, r *http.Request)
// Get local vault lock status
// (GET /v1/vault/status)
GetLocalVaultStatus(w http.ResponseWriter, r *http.Request)
// Unlock the local vault with a passphrase
// (POST /v1/vault/unlock)
UnlockLocalVault(w http.ResponseWriter, r *http.Request)
}
ServerInterface represents all server handlers.
type ServerInterfaceWrapper ¶
type ServerInterfaceWrapper struct {
Handler ServerInterface
HandlerMiddlewares []MiddlewareFunc
ErrorHandlerFunc func(w http.ResponseWriter, r *http.Request, err error)
}
ServerInterfaceWrapper converts contexts to parameters.
func (*ServerInterfaceWrapper) AppendIntentEvidence ¶
func (siw *ServerInterfaceWrapper) AppendIntentEvidence(w http.ResponseWriter, r *http.Request)
AppendIntentEvidence operation middleware
func (*ServerInterfaceWrapper) ApproveRequest ¶
func (siw *ServerInterfaceWrapper) ApproveRequest(w http.ResponseWriter, r *http.Request)
ApproveRequest operation middleware
func (*ServerInterfaceWrapper) CheckConnectors ¶
func (siw *ServerInterfaceWrapper) CheckConnectors(w http.ResponseWriter, r *http.Request)
CheckConnectors operation middleware
func (*ServerInterfaceWrapper) ConnectAccount ¶
func (siw *ServerInterfaceWrapper) ConnectAccount(w http.ResponseWriter, r *http.Request)
ConnectAccount operation middleware
func (*ServerInterfaceWrapper) ConnectAccountCallback ¶
func (siw *ServerInterfaceWrapper) ConnectAccountCallback(w http.ResponseWriter, r *http.Request)
ConnectAccountCallback operation middleware
func (*ServerInterfaceWrapper) CreateConnector ¶
func (siw *ServerInterfaceWrapper) CreateConnector(w http.ResponseWriter, r *http.Request)
CreateConnector operation middleware
func (*ServerInterfaceWrapper) CreateCredential ¶
func (siw *ServerInterfaceWrapper) CreateCredential(w http.ResponseWriter, r *http.Request)
CreateCredential operation middleware
func (*ServerInterfaceWrapper) CreateFundingSource ¶
func (siw *ServerInterfaceWrapper) CreateFundingSource(w http.ResponseWriter, r *http.Request)
CreateFundingSource operation middleware
func (*ServerInterfaceWrapper) CreateIntent ¶
func (siw *ServerInterfaceWrapper) CreateIntent(w http.ResponseWriter, r *http.Request)
CreateIntent operation middleware
func (*ServerInterfaceWrapper) CreatePolicy ¶
func (siw *ServerInterfaceWrapper) CreatePolicy(w http.ResponseWriter, r *http.Request)
CreatePolicy operation middleware
func (*ServerInterfaceWrapper) CreateSession ¶
func (siw *ServerInterfaceWrapper) CreateSession(w http.ResponseWriter, r *http.Request)
CreateSession operation middleware
func (*ServerInterfaceWrapper) DecideActionApproval ¶
func (siw *ServerInterfaceWrapper) DecideActionApproval(w http.ResponseWriter, r *http.Request)
DecideActionApproval operation middleware
func (*ServerInterfaceWrapper) DeleteConnectedAccount ¶
func (siw *ServerInterfaceWrapper) DeleteConnectedAccount(w http.ResponseWriter, r *http.Request)
DeleteConnectedAccount operation middleware
func (*ServerInterfaceWrapper) DenyRequest ¶
func (siw *ServerInterfaceWrapper) DenyRequest(w http.ResponseWriter, r *http.Request)
DenyRequest operation middleware
func (*ServerInterfaceWrapper) DisconnectAuthProvider ¶
func (siw *ServerInterfaceWrapper) DisconnectAuthProvider(w http.ResponseWriter, r *http.Request)
DisconnectAuthProvider operation middleware
func (*ServerInterfaceWrapper) DraftCommsReply ¶
func (siw *ServerInterfaceWrapper) DraftCommsReply(w http.ResponseWriter, r *http.Request)
DraftCommsReply operation middleware
func (*ServerInterfaceWrapper) EndSession ¶
func (siw *ServerInterfaceWrapper) EndSession(w http.ResponseWriter, r *http.Request)
EndSession operation middleware
func (*ServerInterfaceWrapper) EstablishTeeSession ¶
func (siw *ServerInterfaceWrapper) EstablishTeeSession(w http.ResponseWriter, r *http.Request)
EstablishTeeSession operation middleware
func (*ServerInterfaceWrapper) ExecutionCallback ¶
func (siw *ServerInterfaceWrapper) ExecutionCallback(w http.ResponseWriter, r *http.Request)
ExecutionCallback operation middleware
func (*ServerInterfaceWrapper) FinishOAuth2Binding ¶
func (siw *ServerInterfaceWrapper) FinishOAuth2Binding(w http.ResponseWriter, r *http.Request)
FinishOAuth2Binding operation middleware
func (*ServerInterfaceWrapper) GetAction ¶
func (siw *ServerInterfaceWrapper) GetAction(w http.ResponseWriter, r *http.Request)
GetAction operation middleware
func (*ServerInterfaceWrapper) GetActionApprovalResult ¶
func (siw *ServerInterfaceWrapper) GetActionApprovalResult(w http.ResponseWriter, r *http.Request)
GetActionApprovalResult operation middleware
func (*ServerInterfaceWrapper) GetAnalyticsSummary ¶
func (siw *ServerInterfaceWrapper) GetAnalyticsSummary(w http.ResponseWriter, r *http.Request)
GetAnalyticsSummary operation middleware
func (*ServerInterfaceWrapper) GetApproval ¶
func (siw *ServerInterfaceWrapper) GetApproval(w http.ResponseWriter, r *http.Request)
GetApproval operation middleware
func (*ServerInterfaceWrapper) GetAudit ¶
func (siw *ServerInterfaceWrapper) GetAudit(w http.ResponseWriter, r *http.Request)
GetAudit operation middleware
func (*ServerInterfaceWrapper) GetBinding ¶
func (siw *ServerInterfaceWrapper) GetBinding(w http.ResponseWriter, r *http.Request)
GetBinding operation middleware
func (*ServerInterfaceWrapper) GetConnectedAccount ¶
func (siw *ServerInterfaceWrapper) GetConnectedAccount(w http.ResponseWriter, r *http.Request)
GetConnectedAccount operation middleware
func (*ServerInterfaceWrapper) GetConnector ¶
func (siw *ServerInterfaceWrapper) GetConnector(w http.ResponseWriter, r *http.Request)
GetConnector operation middleware
func (*ServerInterfaceWrapper) GetCurrentEnterprise ¶
func (siw *ServerInterfaceWrapper) GetCurrentEnterprise(w http.ResponseWriter, r *http.Request)
GetCurrentEnterprise operation middleware
func (*ServerInterfaceWrapper) GetCurrentUser ¶
func (siw *ServerInterfaceWrapper) GetCurrentUser(w http.ResponseWriter, r *http.Request)
GetCurrentUser operation middleware
func (*ServerInterfaceWrapper) GetExecution ¶
func (siw *ServerInterfaceWrapper) GetExecution(w http.ResponseWriter, r *http.Request)
GetExecution operation middleware
func (*ServerInterfaceWrapper) GetExecutionGrant ¶
func (siw *ServerInterfaceWrapper) GetExecutionGrant(w http.ResponseWriter, r *http.Request)
GetExecutionGrant operation middleware
func (*ServerInterfaceWrapper) GetHealth ¶
func (siw *ServerInterfaceWrapper) GetHealth(w http.ResponseWriter, r *http.Request)
GetHealth operation middleware
func (*ServerInterfaceWrapper) GetHubConnector ¶
func (siw *ServerInterfaceWrapper) GetHubConnector(w http.ResponseWriter, r *http.Request)
GetHubConnector operation middleware
func (*ServerInterfaceWrapper) GetHubInstallDecision ¶
func (siw *ServerInterfaceWrapper) GetHubInstallDecision(w http.ResponseWriter, r *http.Request)
GetHubInstallDecision operation middleware
func (*ServerInterfaceWrapper) GetIntent ¶
func (siw *ServerInterfaceWrapper) GetIntent(w http.ResponseWriter, r *http.Request)
GetIntent operation middleware
func (*ServerInterfaceWrapper) GetLocalVaultStatus ¶
func (siw *ServerInterfaceWrapper) GetLocalVaultStatus(w http.ResponseWriter, r *http.Request)
GetLocalVaultStatus operation middleware
func (*ServerInterfaceWrapper) GetPassphraseSalt ¶
func (siw *ServerInterfaceWrapper) GetPassphraseSalt(w http.ResponseWriter, r *http.Request)
GetPassphraseSalt operation middleware
func (*ServerInterfaceWrapper) GetPassphraseVerification ¶
func (siw *ServerInterfaceWrapper) GetPassphraseVerification(w http.ResponseWriter, r *http.Request)
GetPassphraseVerification operation middleware
func (*ServerInterfaceWrapper) GetPolicy ¶
func (siw *ServerInterfaceWrapper) GetPolicy(w http.ResponseWriter, r *http.Request)
GetPolicy operation middleware
func (*ServerInterfaceWrapper) GetSession ¶
func (siw *ServerInterfaceWrapper) GetSession(w http.ResponseWriter, r *http.Request)
GetSession operation middleware
func (*ServerInterfaceWrapper) GetStatus ¶
func (siw *ServerInterfaceWrapper) GetStatus(w http.ResponseWriter, r *http.Request)
GetStatus operation middleware
func (*ServerInterfaceWrapper) GetTeeJwks ¶
func (siw *ServerInterfaceWrapper) GetTeeJwks(w http.ResponseWriter, r *http.Request)
GetTeeJwks operation middleware
func (*ServerInterfaceWrapper) GetTeeStatus ¶
func (siw *ServerInterfaceWrapper) GetTeeStatus(w http.ResponseWriter, r *http.Request)
GetTeeStatus operation middleware
func (*ServerInterfaceWrapper) GetVaultStatus ¶
func (siw *ServerInterfaceWrapper) GetVaultStatus(w http.ResponseWriter, r *http.Request)
GetVaultStatus operation middleware
func (*ServerInterfaceWrapper) InitOAuth2Binding ¶
func (siw *ServerInterfaceWrapper) InitOAuth2Binding(w http.ResponseWriter, r *http.Request)
InitOAuth2Binding operation middleware
func (*ServerInterfaceWrapper) InitiateAttestation ¶
func (siw *ServerInterfaceWrapper) InitiateAttestation(w http.ResponseWriter, r *http.Request)
InitiateAttestation operation middleware
func (*ServerInterfaceWrapper) InstallAction ¶
func (siw *ServerInterfaceWrapper) InstallAction(w http.ResponseWriter, r *http.Request)
InstallAction operation middleware
func (*ServerInterfaceWrapper) InstallConnector ¶
func (siw *ServerInterfaceWrapper) InstallConnector(w http.ResponseWriter, r *http.Request)
InstallConnector operation middleware
func (*ServerInterfaceWrapper) ListActionApprovals ¶
func (siw *ServerInterfaceWrapper) ListActionApprovals(w http.ResponseWriter, r *http.Request)
ListActionApprovals operation middleware
func (*ServerInterfaceWrapper) ListActions ¶
func (siw *ServerInterfaceWrapper) ListActions(w http.ResponseWriter, r *http.Request)
ListActions operation middleware
func (*ServerInterfaceWrapper) ListApprovals ¶
func (siw *ServerInterfaceWrapper) ListApprovals(w http.ResponseWriter, r *http.Request)
ListApprovals operation middleware
func (*ServerInterfaceWrapper) ListAudit ¶
func (siw *ServerInterfaceWrapper) ListAudit(w http.ResponseWriter, r *http.Request)
ListAudit operation middleware
func (*ServerInterfaceWrapper) ListBindings ¶
func (siw *ServerInterfaceWrapper) ListBindings(w http.ResponseWriter, r *http.Request)
ListBindings operation middleware
func (*ServerInterfaceWrapper) ListConnectedAccounts ¶
func (siw *ServerInterfaceWrapper) ListConnectedAccounts(w http.ResponseWriter, r *http.Request)
ListConnectedAccounts operation middleware
func (*ServerInterfaceWrapper) ListConnectors ¶
func (siw *ServerInterfaceWrapper) ListConnectors(w http.ResponseWriter, r *http.Request)
ListConnectors operation middleware
func (*ServerInterfaceWrapper) ListCredentials ¶
func (siw *ServerInterfaceWrapper) ListCredentials(w http.ResponseWriter, r *http.Request)
ListCredentials operation middleware
func (*ServerInterfaceWrapper) ListFundingSources ¶
func (siw *ServerInterfaceWrapper) ListFundingSources(w http.ResponseWriter, r *http.Request)
ListFundingSources operation middleware
func (*ServerInterfaceWrapper) ListHubConnectors ¶
func (siw *ServerInterfaceWrapper) ListHubConnectors(w http.ResponseWriter, r *http.Request)
ListHubConnectors operation middleware
func (*ServerInterfaceWrapper) ListIntents ¶
func (siw *ServerInterfaceWrapper) ListIntents(w http.ResponseWriter, r *http.Request)
ListIntents operation middleware
func (*ServerInterfaceWrapper) ListPolicies ¶
func (siw *ServerInterfaceWrapper) ListPolicies(w http.ResponseWriter, r *http.Request)
ListPolicies operation middleware
func (*ServerInterfaceWrapper) ListSessions ¶
func (siw *ServerInterfaceWrapper) ListSessions(w http.ResponseWriter, r *http.Request)
ListSessions operation middleware
func (*ServerInterfaceWrapper) ListTraces ¶
func (siw *ServerInterfaceWrapper) ListTraces(w http.ResponseWriter, r *http.Request)
ListTraces operation middleware
func (*ServerInterfaceWrapper) LockVault ¶
func (siw *ServerInterfaceWrapper) LockVault(w http.ResponseWriter, r *http.Request)
LockVault operation middleware
func (*ServerInterfaceWrapper) ModifyRequest ¶
func (siw *ServerInterfaceWrapper) ModifyRequest(w http.ResponseWriter, r *http.Request)
ModifyRequest operation middleware
func (*ServerInterfaceWrapper) PostChatCompletions ¶
func (siw *ServerInterfaceWrapper) PostChatCompletions(w http.ResponseWriter, r *http.Request)
PostChatCompletions operation middleware
func (*ServerInterfaceWrapper) PostMessages ¶
func (siw *ServerInterfaceWrapper) PostMessages(w http.ResponseWriter, r *http.Request)
PostMessages operation middleware
func (*ServerInterfaceWrapper) PreviewAction ¶
func (siw *ServerInterfaceWrapper) PreviewAction(w http.ResponseWriter, r *http.Request)
PreviewAction operation middleware
func (*ServerInterfaceWrapper) PreviewConnector ¶
func (siw *ServerInterfaceWrapper) PreviewConnector(w http.ResponseWriter, r *http.Request)
PreviewConnector operation middleware
func (*ServerInterfaceWrapper) ReadCommsMessages ¶
func (siw *ServerInterfaceWrapper) ReadCommsMessages(w http.ResponseWriter, r *http.Request)
ReadCommsMessages operation middleware
func (*ServerInterfaceWrapper) RebindBinding ¶
func (siw *ServerInterfaceWrapper) RebindBinding(w http.ResponseWriter, r *http.Request)
RebindBinding operation middleware
func (*ServerInterfaceWrapper) RequestCommsHTTP ¶
func (siw *ServerInterfaceWrapper) RequestCommsHTTP(w http.ResponseWriter, r *http.Request)
RequestCommsHTTP operation middleware
func (*ServerInterfaceWrapper) RevokeBinding ¶
func (siw *ServerInterfaceWrapper) RevokeBinding(w http.ResponseWriter, r *http.Request)
RevokeBinding operation middleware
func (*ServerInterfaceWrapper) RunAction ¶
func (siw *ServerInterfaceWrapper) RunAction(w http.ResponseWriter, r *http.Request)
RunAction operation middleware
func (*ServerInterfaceWrapper) RunExecution ¶
func (siw *ServerInterfaceWrapper) RunExecution(w http.ResponseWriter, r *http.Request)
RunExecution operation middleware
func (*ServerInterfaceWrapper) SendCommsMessage ¶
func (siw *ServerInterfaceWrapper) SendCommsMessage(w http.ResponseWriter, r *http.Request)
SendCommsMessage operation middleware
func (*ServerInterfaceWrapper) SetPassphrase ¶
func (siw *ServerInterfaceWrapper) SetPassphrase(w http.ResponseWriter, r *http.Request)
SetPassphrase operation middleware
func (*ServerInterfaceWrapper) SetupBindings ¶
func (siw *ServerInterfaceWrapper) SetupBindings(w http.ResponseWriter, r *http.Request)
SetupBindings operation middleware
func (*ServerInterfaceWrapper) SimulatePolicy ¶
func (siw *ServerInterfaceWrapper) SimulatePolicy(w http.ResponseWriter, r *http.Request)
SimulatePolicy operation middleware
func (*ServerInterfaceWrapper) Sync ¶
func (siw *ServerInterfaceWrapper) Sync(w http.ResponseWriter, r *http.Request)
Sync operation middleware
func (*ServerInterfaceWrapper) UnlockLocalVault ¶
func (siw *ServerInterfaceWrapper) UnlockLocalVault(w http.ResponseWriter, r *http.Request)
UnlockLocalVault operation middleware
func (*ServerInterfaceWrapper) UnlockVault ¶
func (siw *ServerInterfaceWrapper) UnlockVault(w http.ResponseWriter, r *http.Request)
UnlockVault operation middleware
func (*ServerInterfaceWrapper) UpdateConnector ¶
func (siw *ServerInterfaceWrapper) UpdateConnector(w http.ResponseWriter, r *http.Request)
UpdateConnector operation middleware
func (*ServerInterfaceWrapper) UpdateCurrentEnterprise ¶
func (siw *ServerInterfaceWrapper) UpdateCurrentEnterprise(w http.ResponseWriter, r *http.Request)
UpdateCurrentEnterprise operation middleware
func (*ServerInterfaceWrapper) UpdateCurrentUser ¶
func (siw *ServerInterfaceWrapper) UpdateCurrentUser(w http.ResponseWriter, r *http.Request)
UpdateCurrentUser operation middleware
func (*ServerInterfaceWrapper) UpdatePolicy ¶
func (siw *ServerInterfaceWrapper) UpdatePolicy(w http.ResponseWriter, r *http.Request)
UpdatePolicy operation middleware
func (*ServerInterfaceWrapper) WatchActionApprovals ¶
func (siw *ServerInterfaceWrapper) WatchActionApprovals(w http.ResponseWriter, r *http.Request)
WatchActionApprovals operation middleware
type Session ¶
type Session struct {
// Agent Agent name (e.g. "claude", "pi").
Agent string `json:"agent"`
EndedAt *time.Time `json:"ended_at,omitempty"`
// ExitCode Agent process exit code, or null when ended_at is set but the daemon never observed a clean exit (orphaned).
ExitCode *int `json:"exit_code,omitempty"`
// Id ULID-based session identifier; time-sortable lexicographically.
Id string `json:"id"`
StartedAt time.Time `json:"started_at"`
// WorkingDir The directory aileron launch was invoked from.
WorkingDir string `json:"working_dir"`
}
Session One record of an `aileron launch` agent invocation, owned by the daemon under ADR-0012. (started_at, ended_at, exit_code) encode three states:
- running: ended_at == null
- ended cleanly: ended_at != null && exit_code != null
- orphaned: ended_at != null && exit_code == null (daemon restart while session was running)
type SessionListResponse ¶
type SessionListResponse struct {
Items []Session `json:"items"`
}
SessionListResponse defines model for SessionListResponse.
type SetPassphraseJSONRequestBody ¶
type SetPassphraseJSONRequestBody = SetPassphraseRequest
SetPassphraseJSONRequestBody defines body for SetPassphrase for application/json ContentType.
type SetPassphraseRequest ¶
type SetPassphraseRequest struct {
// KekVerification Verification constant encrypted with the client-derived KEK (base64)
KekVerification []byte `json:"kek_verification"`
// Salt Base64-encoded 16-byte Argon2id salt generated by the client
Salt []byte `json:"salt"`
}
SetPassphraseRequest defines model for SetPassphraseRequest.
type SetupBindingsJSONRequestBody ¶
type SetupBindingsJSONRequestBody = BindingSetupRequest
SetupBindingsJSONRequestBody defines body for SetupBindings for application/json ContentType.
type SimulatePolicyJSONRequestBody ¶
type SimulatePolicyJSONRequestBody = PolicySimulationRequest
SimulatePolicyJSONRequestBody defines body for SimulatePolicy for application/json ContentType.
type StatusResponse ¶
type StatusResponse struct {
// ActionCount Number of installed actions in `~/.aileron/actions/`.
ActionCount int `json:"action_count"`
// BindingCount Number of credential bindings in the vault. Surfaced as
// metadata-only — the vault doesn't have to be unlocked
// to count them.
BindingCount int `json:"binding_count"`
// Commit Short git commit the daemon was built from. May be empty for unstamped builds.
Commit *string `json:"commit,omitempty"`
// ConnectorCount Number of connector tarballs in the content-addressed
// store (`~/.aileron/store/connectors/sha256/`).
ConnectorCount int `json:"connector_count"`
// GatewayUrl URL of the embedded gateway, when running under
// `aileron launch`. Empty for standalone-server invocations.
GatewayUrl *string `json:"gateway_url,omitempty"`
// ListenAddr Address the daemon is listening on (e.g. `127.0.0.1:54321`).
// Best-effort; empty when the runtime can't introspect its
// own listener (most embedded contexts).
ListenAddr *string `json:"listen_addr,omitempty"`
// SessionId Launch session id when the daemon is part of an
// `aileron launch` session. Empty otherwise.
SessionId *string `json:"session_id,omitempty"`
// VaultState `missing` — no vault file at the canonical path.
// `locked` — file exists but the daemon hasn't unlocked it.
// `unlocked` — daemon holds the KEK; bindings are resolvable.
// `dev` — daemon is using the in-memory dev-mode vault
// (random per-process KEK; not the persistent file).
VaultState StatusResponseVaultState `json:"vault_state"`
// Version Daemon version string (matches `aileron version`).
Version string `json:"version"`
}
StatusResponse Operational snapshot returned by `GET /v1/status`. Surfaced through the `aileron status` CLI and the `/aileron status` agent slash-command. Read-only; safe to poll.
type StatusResponseVaultState ¶
type StatusResponseVaultState string
StatusResponseVaultState `missing` — no vault file at the canonical path. `locked` — file exists but the daemon hasn't unlocked it. `unlocked` — daemon holds the KEK; bindings are resolvable. `dev` — daemon is using the in-memory dev-mode vault (random per-process KEK; not the persistent file).
const ( StatusResponseVaultStateDev StatusResponseVaultState = "dev" StatusResponseVaultStateLocked StatusResponseVaultState = "locked" StatusResponseVaultStateMissing StatusResponseVaultState = "missing" StatusResponseVaultStateUnlocked StatusResponseVaultState = "unlocked" )
Defines values for StatusResponseVaultState.
func (StatusResponseVaultState) Valid ¶
func (e StatusResponseVaultState) Valid() bool
Valid indicates whether the value is a known member of the StatusResponseVaultState enum.
type StdHTTPServerOptions ¶
type StdHTTPServerOptions struct {
BaseURL string
BaseRouter ServeMux
Middlewares []MiddlewareFunc
ErrorHandlerFunc func(w http.ResponseWriter, r *http.Request, err error)
}
type SyncJSONRequestBody ¶
type SyncJSONRequestBody = SyncRequest
SyncJSONRequestBody defines body for Sync for application/json ContentType.
type SyncRequest ¶
type SyncRequest struct {
// AutoInstall Auto-approve install consent for missing connectors. v1
// has no consent prompt — install is unconditional — so this
// flag is accepted as a no-op for forward compatibility with
// the planned consent flow. Maps to the CLI's `--yes` flag.
AutoInstall *bool `json:"auto_install,omitempty"`
}
SyncRequest defines model for SyncRequest.
type SyncResponse ¶
type SyncResponse struct {
// ActionsSeen Count of action manifests in `~/.aileron/actions/` walked this run.
ActionsSeen int `json:"actions_seen"`
// AlreadyInstalled Connectors that were already present in the cstore (no
// install necessary). The idempotent path.
AlreadyInstalled []ConnectorRef `json:"already_installed"`
// InstallFailures Connectors whose install pipeline failed (resolver,
// fetcher, verifier, hash mismatch, etc.). Sweep continues
// past per-connector failures.
InstallFailures []ConnectorInstallFailure `json:"install_failures"`
// Installed Connectors actually installed by this sweep — i.e. those
// absent from the cstore at the start of the run.
Installed []InstalledConnector `json:"installed"`
// Required Deduplicated set of (FQN, version) connector references
// collected across every action's `[[requires.connectors]]`.
Required []ConnectorRef `json:"required"`
// Unbound Capabilities (`[capabilities.credential]` blocks) declared
// by installed connectors for which no binding exists.
// Sorted by `connector_fqn` then `kind` for deterministic
// output. Operators bind these manually with
// `aileron binding setup <FQN>`.
Unbound []UnboundCapability `json:"unbound"`
}
SyncResponse defines model for SyncResponse.
type TeeAttestationRequest ¶
type TeeAttestationRequest struct {
// Audience Expected audience for the attestation token
Audience *string `json:"audience,omitempty"`
}
TeeAttestationRequest defines model for TeeAttestationRequest.
type TeeAttestationResponse ¶
type TeeAttestationResponse struct {
// Nonce Random nonce used for attestation freshness
Nonce []byte `json:"nonce"`
// PublicKey Enclave's ephemeral ECDH public key (base64)
PublicKey []byte `json:"public_key"`
// Token Attestation evidence (OIDC JWT for Confidential Space, "dev-ok" for local)
Token string `json:"token"`
}
TeeAttestationResponse defines model for TeeAttestationResponse.
type TeeSessionRequest ¶
type TeeSessionRequest struct {
// ClientPublicKey Client's ephemeral ECDH public key for enclave key exchange
ClientPublicKey []byte `json:"client_public_key"`
// EncryptedKek KEK encrypted with the ECDH-derived shared secret (opaque to server)
EncryptedKek []byte `json:"encrypted_kek"`
}
TeeSessionRequest defines model for TeeSessionRequest.
type TeeSessionResponse ¶
type TeeSessionResponse struct {
// EscrowedCount Number of credentials auto-escrowed into TEE
EscrowedCount *int `json:"escrowed_count,omitempty"`
// ExpiresAt When the session expires
ExpiresAt *time.Time `json:"expires_at,omitempty"`
// SessionId Session identifier
SessionId string `json:"session_id"`
}
TeeSessionResponse defines model for TeeSessionResponse.
type TeeStatus ¶
type TeeStatus struct {
// AttestationClaims Verified attestation claims from the TEE (present only when attested)
AttestationClaims *struct {
// ExpiresAt When the attestation token expires
ExpiresAt *time.Time `json:"expires_at,omitempty"`
// Hwmodel Hardware security model (e.g. "GCP_AMD_SEV")
Hwmodel *string `json:"hwmodel,omitempty"`
// ImageDigest Container image digest (e.g. "sha256:abc...")
ImageDigest *string `json:"image_digest,omitempty"`
// IssuedAt When the attestation token was issued
IssuedAt *time.Time `json:"issued_at,omitempty"`
// Issuer Token issuer (e.g. "https://accounts.google.com")
Issuer *string `json:"issuer,omitempty"`
// ProjectId GCP project ID that owns the enclave workload
ProjectId *string `json:"project_id,omitempty"`
} `json:"attestation_claims,omitempty"`
// Attested Whether the enclave has been attested
Attested *bool `json:"attested,omitempty"`
// Enabled Whether a TEE provider is configured
Enabled bool `json:"enabled"`
// ExpectedIdentity Expected enclave identity pins configured by the server and intended for browser/client verification
ExpectedIdentity *struct {
// ImageDigest Expected container image digest (e.g. "sha256:abc...")
ImageDigest *string `json:"image_digest,omitempty"`
// ProjectId Expected GCP project ID that owns the enclave workload
ProjectId *string `json:"project_id,omitempty"`
} `json:"expected_identity,omitempty"`
// Provider The active TEE provider
Provider TeeStatusProvider `json:"provider"`
// SessionActive Whether an active session exists with the enclave
SessionActive *bool `json:"session_active,omitempty"`
// SessionExpiresAt When the current session expires
SessionExpiresAt *time.Time `json:"session_expires_at,omitempty"`
}
TeeStatus defines model for TeeStatus.
type TeeStatusProvider ¶
type TeeStatusProvider string
TeeStatusProvider The active TEE provider
const ( ConfidentialSpace TeeStatusProvider = "confidential-space" Local TeeStatusProvider = "local" None TeeStatusProvider = "none" )
Defines values for TeeStatusProvider.
func (TeeStatusProvider) Valid ¶
func (e TeeStatusProvider) Valid() bool
Valid indicates whether the value is a known member of the TeeStatusProvider enum.
type TooManyValuesForParamError ¶
func (*TooManyValuesForParamError) Error ¶
func (e *TooManyValuesForParamError) Error() string
type Trace ¶
type Trace struct {
Events []TraceEvent `json:"events"`
IntentId string `json:"intent_id"`
TraceId string `json:"trace_id"`
WorkspaceId *string `json:"workspace_id,omitempty"`
}
Trace defines model for Trace.
type TraceEvent ¶
type TraceEvent struct {
Actor ActorRef `json:"actor"`
EventId string `json:"event_id"`
EventType string `json:"event_type"`
Payload *map[string]interface{} `json:"payload,omitempty"`
Timestamp time.Time `json:"timestamp"`
}
TraceEvent defines model for TraceEvent.
type TraceListResponse ¶
type TraceListResponse struct {
Items *[]Trace `json:"items,omitempty"`
Pagination *Pagination `json:"pagination,omitempty"`
}
TraceListResponse defines model for TraceListResponse.
type Unauthorized ¶
type Unauthorized = Error
Unauthorized Generic error envelope used by CRUD endpoints (intents, approvals, policies, accounts, auth). Action-execution and gateway endpoints use the structured `FailureEnvelope` instead, per ADR-0010.
type UnboundCapability ¶
type UnboundCapability struct {
// ConnectorFqn FQN of the connector that needs a binding.
ConnectorFqn string `json:"connector_fqn"`
// Kind Declared credential kind (`api_key`, `oauth2`).
Kind string `json:"kind"`
// Scope Human-readable scope description from the connector manifest.
Scope *string `json:"scope,omitempty"`
}
UnboundCapability defines model for UnboundCapability.
type UnescapedCookieParamError ¶
func (*UnescapedCookieParamError) Error ¶
func (e *UnescapedCookieParamError) Error() string
func (*UnescapedCookieParamError) Unwrap ¶
func (e *UnescapedCookieParamError) Unwrap() error
type UnlockLocalVaultJSONRequestBody ¶
type UnlockLocalVaultJSONRequestBody = LocalVaultUnlockRequest
UnlockLocalVaultJSONRequestBody defines body for UnlockLocalVault for application/json ContentType.
type UnlockVaultJSONRequestBody ¶
type UnlockVaultJSONRequestBody = UnlockVaultRequest
UnlockVaultJSONRequestBody defines body for UnlockVault for application/json ContentType.
type UnlockVaultRequest ¶
type UnlockVaultRequest struct {
// Kek Base64-encoded 32-byte KEK derived from passphrase via Argon2id
Kek []byte `json:"kek"`
}
UnlockVaultRequest defines model for UnlockVaultRequest.
type UnmarshalingParamError ¶
func (*UnmarshalingParamError) Error ¶
func (e *UnmarshalingParamError) Error() string
func (*UnmarshalingParamError) Unwrap ¶
func (e *UnmarshalingParamError) Unwrap() error
type UpdateConnectorJSONRequestBody ¶
type UpdateConnectorJSONRequestBody = UpdateConnectorRequest
UpdateConnectorJSONRequestBody defines body for UpdateConnector for application/json ContentType.
type UpdateConnectorRequest ¶
type UpdateConnectorRequest struct {
Auth *ConnectorAuth `json:"auth,omitempty"`
Metadata *map[string]interface{} `json:"metadata,omitempty"`
Name *string `json:"name,omitempty"`
Status *UpdateConnectorRequestStatus `json:"status,omitempty"`
}
UpdateConnectorRequest defines model for UpdateConnectorRequest.
type UpdateConnectorRequestStatus ¶
type UpdateConnectorRequestStatus string
UpdateConnectorRequestStatus defines model for UpdateConnectorRequest.Status.
const ( UpdateConnectorRequestStatusActive UpdateConnectorRequestStatus = "active" UpdateConnectorRequestStatusDisabled UpdateConnectorRequestStatus = "disabled" )
Defines values for UpdateConnectorRequestStatus.
func (UpdateConnectorRequestStatus) Valid ¶
func (e UpdateConnectorRequestStatus) Valid() bool
Valid indicates whether the value is a known member of the UpdateConnectorRequestStatus enum.
type UpdateCurrentEnterpriseJSONRequestBody ¶
type UpdateCurrentEnterpriseJSONRequestBody = UpdateEnterpriseRequest
UpdateCurrentEnterpriseJSONRequestBody defines body for UpdateCurrentEnterprise for application/json ContentType.
type UpdateCurrentUserJSONRequestBody ¶
type UpdateCurrentUserJSONRequestBody = UpdateUserRequest
UpdateCurrentUserJSONRequestBody defines body for UpdateCurrentUser for application/json ContentType.
type UpdateEnterpriseRequest ¶
type UpdateEnterpriseRequest struct {
// AllowedAuthProviders Restrict sign-in to these providers. Empty array means all allowed.
AllowedAuthProviders *[]string `json:"allowed_auth_providers,omitempty"`
// AllowedEmailDomains Restrict sign-in to these email domains. Empty array means all allowed.
AllowedEmailDomains *[]string `json:"allowed_email_domains,omitempty"`
BillingEmail *openapi_types.Email `json:"billing_email,omitempty"`
Name *string `json:"name,omitempty"`
SsoRequired *bool `json:"sso_required,omitempty"`
}
UpdateEnterpriseRequest defines model for UpdateEnterpriseRequest.
type UpdatePolicyJSONRequestBody ¶
type UpdatePolicyJSONRequestBody = UpdatePolicyRequest
UpdatePolicyJSONRequestBody defines body for UpdatePolicy for application/json ContentType.
type UpdatePolicyRequest ¶
type UpdatePolicyRequest struct {
Description *string `json:"description,omitempty"`
Name *string `json:"name,omitempty"`
Rules *[]PolicyRule `json:"rules,omitempty"`
Status *PolicyStatus `json:"status,omitempty"`
}
UpdatePolicyRequest defines model for UpdatePolicyRequest.
type UpdateUserRequest ¶
type UpdateUserRequest struct {
DisplayName *string `json:"display_name,omitempty"`
}
UpdateUserRequest defines model for UpdateUserRequest.
type User ¶
type User struct {
// AuthProviders Connected identity providers for this user
AuthProviders []UserAuthProviderLink `json:"auth_providers"`
AvatarUrl *string `json:"avatar_url,omitempty"`
CreatedAt time.Time `json:"created_at"`
DisplayName string `json:"display_name"`
// Email Unique email — the stable identity across OAuth providers
Email openapi_types.Email `json:"email"`
EnterpriseId string `json:"enterprise_id"`
// HasPassword Whether the user has a password set for email/password login
HasPassword bool `json:"has_password"`
// Id Opaque surrogate key — immutable, never changes
Id string `json:"id"`
LastLoginAt *time.Time `json:"last_login_at,omitempty"`
Role UserRole `json:"role"`
Status UserStatus `json:"status"`
UpdatedAt time.Time `json:"updated_at"`
}
User A user account. The id is an opaque surrogate key (usr_ + UUID). Email is the stable logical identity used to deduplicate across OAuth providers.
type UserAuthProviderLink ¶
type UserAuthProviderLink struct {
ConnectedAt time.Time `json:"connected_at"`
// Provider Auth provider name (google, github, okta, saml, etc.)
Provider string `json:"provider"`
}
UserAuthProviderLink defines model for UserAuthProviderLink.
type UserRole ¶
type UserRole string
UserRole defines model for User.Role.
Defines values for UserRole.
type UserStatus ¶
type UserStatus string
UserStatus defines model for User.Status.
const ( UserStatusActive UserStatus = "active" UserStatusInvited UserStatus = "invited" UserStatusPendingVerification UserStatus = "pending_verification" UserStatusSuspended UserStatus = "suspended" )
Defines values for UserStatus.
func (UserStatus) Valid ¶
func (e UserStatus) Valid() bool
Valid indicates whether the value is a known member of the UserStatus enum.
type VaultLocked ¶
type VaultLocked = Error
VaultLocked Generic error envelope used by CRUD endpoints (intents, approvals, policies, accounts, auth). Action-execution and gateway endpoints use the structured `FailureEnvelope` instead, per ADR-0010.
type VaultStatusResponse ¶
type VaultStatusResponse struct {
// ExpiresAt When the current KEK session expires (omitted when locked)
ExpiresAt *time.Time `json:"expires_at,omitempty"`
// HasPassphrase Whether the user has set a vault passphrase
HasPassphrase bool `json:"has_passphrase"`
// Locked Whether the vault is currently locked (no active KEK session)
Locked bool `json:"locked"`
}
VaultStatusResponse defines model for VaultStatusResponse.