model

type APIKey struct {
	ID        APIKeyID   `json:"id" yaml:"id"`
	Hash      string     `json:"hash" yaml:"hash"`
	Role      APIKeyRole `json:"role" yaml:"role"`
	Name      string     `json:"name,omitempty" yaml:"name,omitempty"`
	CreatedAt time.Time  `json:"created_at" yaml:"created_at"`
	ExpiresAt *time.Time `json:"expires_at,omitempty" yaml:"expires_at,omitempty"`
	RevokedAt *time.Time `json:"revoked_at,omitempty" yaml:"revoked_at,omitempty"`
}

type APIKeyID string

type APIKeyRole string

type AgentIdentity struct {
	AgentID    string    `json:"agent_id" yaml:"agent_id"`
	CertSerial string    `json:"cert_serial" yaml:"cert_serial"`
	IssuedAt   time.Time `json:"issued_at" yaml:"issued_at"`
}

type AgentIdentityID string

type AgentRegistrationToken struct {
	ID        AgentTokenID `json:"id" yaml:"id"`
	TokenHash string       `json:"token_hash" yaml:"token_hash"`
	CreatedAt time.Time    `json:"created_at" yaml:"created_at"`
	ExpiresAt time.Time    `json:"expires_at" yaml:"expires_at"`
	UsedAt    *time.Time   `json:"used_at,omitempty" yaml:"used_at,omitempty"`
	Label     string       `json:"label,omitempty" yaml:"label,omitempty"`
}

type AgentTokenID string

type Pool struct {
	Name PoolName `json:"name" yaml:"name"`

	// Policies are pool-level behavioral controls (preheating, limits, etc).
	Policies PoolPolicies `json:"policies,omitempty" yaml:"policies,omitempty"`

	// Drain records desired drain state for unused pool inventory.
	Drain PoolDrainState `json:"drain,omitempty" yaml:"drain,omitempty"`

	// Inventory is the current contents of the pool.
	Inventory ResourceCollection `json:"inventory" yaml:"inventory"`
}

type PoolDrainState struct {
	// ConfigDeclared is true when config declares the pool drained.
	ConfigDeclared bool `json:"config_declared,omitempty" yaml:"config_declared,omitempty"`

	// Operator is a persisted operator/debug override.
	Operator bool `json:"operator,omitempty" yaml:"operator,omitempty"`
}

type PoolName string

type PoolPolicies struct {
	// Preheat controls keeping resources ready ahead of time.
	Preheat PreheatPolicy `json:"preheat,omitempty" yaml:"preheat,omitempty"`

	// Recycle controls periodic replacement of unused pool inventory.
	//
	// This does NOT mean resources are returned to the pool after sandbox use.
	// Resources remain single-use; recycle applies only to unused inventory.
	Recycle RecyclePolicy `json:"recycle,omitempty" yaml:"recycle,omitempty"`
}

type PreheatPolicy struct {
	// MinReady is the number of ready units the pool should try to keep available.
	MinReady int `json:"min_ready,omitempty" yaml:"min_ready,omitempty"`

	// MaxTotal is the maximum total units that may exist for the pool.
	MaxTotal int `json:"max_total,omitempty" yaml:"max_total,omitempty"`
}

type Profile struct {
	Type ResourceType    `json:"type" yaml:"type"`
	Name ResourceProfile `json:"name" yaml:"name"`
}

type ProfileRegistry struct {
	// contains filtered or unexported fields
}

type ProviderRef struct {
	Name string `json:"name" yaml:"name"`

	// AgentID is the specific agent instance (embedded or remote) that
	// provisioned this resource, stamped once at creation time. It is
	// deliberately distinct from Name (the provider type/instance): once
	// more than one agent can advertise the same provider type, any
	// lifecycle call on an existing resource (Destroy, Allocate) must
	// route back to this exact agent rather than re-resolving by type,
	// or it risks silently misrouting to a different agent that knows
	// nothing about the resource. See docs/adr/0005-remote-agent-transport-and-registration.md.
	AgentID string `json:"agent_id,omitempty" yaml:"agent_id,omitempty"`
}

type RecyclePolicy struct {
	// MaxAge is an optional upper bound on how long an unused resource may sit in
	// a pool before it should be recycled (destroy + replace).
	// Example values: "30m", "8h", "24h".
	MaxAge string `json:"max_age,omitempty" yaml:"max_age,omitempty"`
}

type Resource struct {
	ID ResourceID `json:"id,omitempty" yaml:"id,omitempty"`

	// Type is intrinsic to the resource, independent of which container holds it.
	Type ResourceType `json:"type,omitempty" yaml:"type,omitempty"`

	// Profile is a Boxy-defined variant identifier for this resource's Type.
	// Example: vm "win-2022", container "ubuntu-2204".
	Profile ResourceProfile `json:"profile,omitempty" yaml:"profile,omitempty"`

	// OriginPool is the immutable pool that originally provisioned this resource.
	// It is used for pool-level capacity accounting even after allocation removes
	// the resource from ready inventory.
	OriginPool PoolName `json:"origin_pool,omitempty" yaml:"origin_pool,omitempty"`

	// Provider identifies the external system instance this resource belongs to.
	Provider ProviderRef `json:"provider" yaml:"provider"`

	State ResourceState `json:"state,omitempty" yaml:"state,omitempty"`

	// Properties holds provider-specific data that Boxy core should not interpret.
	Properties map[string]any `json:"properties,omitempty" yaml:"properties,omitempty"`

	CreatedAt time.Time `json:"created_at,omitempty" yaml:"created_at,omitempty"`
	UpdatedAt time.Time `json:"updated_at,omitempty" yaml:"updated_at,omitempty"`
}

type ResourceCollection struct {
	// ExpectedType is a constraint: all Resources must have Resource.Type == ExpectedType.
	ExpectedType ResourceType `json:"expected_type" yaml:"expected_type"`

	// ExpectedProfile is a constraint: all Resources must have Resource.Profile == ExpectedProfile.
	ExpectedProfile ResourceProfile `json:"expected_profile" yaml:"expected_profile"`

	Resources []Resource `json:"resources,omitempty" yaml:"resources,omitempty"`
}

type ResourceID string

type ResourceProfile string

type ResourceRequest struct {
	Type    ResourceType    `json:"type" yaml:"type"`
	Profile ResourceProfile `json:"profile" yaml:"profile"`
	Count   int             `json:"count" yaml:"count"`
}

type ResourceState string

type ResourceType string

type RevokedAgentIdentity struct {
	ID         AgentIdentityID `json:"id" yaml:"id"`
	AgentID    string          `json:"agent_id" yaml:"agent_id"`
	CertSerial string          `json:"cert_serial" yaml:"cert_serial"`
	RevokedAt  time.Time       `json:"revoked_at" yaml:"revoked_at"`
	Reason     string          `json:"reason,omitempty" yaml:"reason,omitempty"`
}

type Sandbox struct {
	ID      SandboxID `json:"id" yaml:"id"`
	Name    string    `json:"name,omitempty" yaml:"name,omitempty"`
	OwnerID string    `json:"owner_id,omitempty" yaml:"owner_id,omitempty"`

	// Policies are sandbox-level behavioral controls (security, retention, etc).
	Policies SandboxPolicies `json:"policies,omitzero" yaml:"policies,omitempty"`

	// Status is the async lifecycle state of the sandbox request.
	Status SandboxStatus `json:"status,omitempty" yaml:"status,omitempty"`

	// Requests are the desired resources for this sandbox.
	Requests []ResourceRequest `json:"requests,omitempty" yaml:"requests,omitempty"`

	// Error is a human-readable failure detail when Status=failed.
	Error string `json:"error,omitempty" yaml:"error,omitempty"`

	// Resources are the resources that make up this sandbox.
	Resources []ResourceID `json:"resources,omitempty" yaml:"resources,omitempty"`

	// ExpiresAt is the absolute time this sandbox should be automatically
	// destroyed, computed from Policies.AutoDestroyAfter at creation time.
	// Nil means no automatic expiry.
	ExpiresAt *time.Time `json:"expires_at,omitempty" yaml:"expires_at,omitempty"`
}

type SandboxID string

type SandboxPolicies struct {
	// AutoDestroyAfter is an optional retention setting (e.g. "30m", "8h").
	// Empty means "no policy set here".
	AutoDestroyAfter string `json:"auto_destroy_after,omitempty" yaml:"auto_destroy_after,omitempty"`

	// SecurityProfile is an optional label for sandbox hardening posture.
	// Examples: "default", "lab", "pentest", "vdi".
	SecurityProfile string `json:"security_profile,omitempty" yaml:"security_profile,omitempty"`
}

type SandboxStatus string