credentials

type Credential struct {
	Context  string            `json:"context"`
	ToolName string            `json:"toolName"`
	Type     CredentialType    `json:"type"`
	Env      map[string]string `json:"env"`
	// If the CheckParam that is stored is different from the param on the tool,
	// then the credential will be re-authed as if it does not exist.
	CheckParam   string     `json:"checkParam"`
	Ephemeral    bool       `json:"ephemeral,omitempty"`
	ExpiresAt    *time.Time `json:"expiresAt"`
	RefreshToken string     `json:"refreshToken"`
}

type CredentialContextPin struct {
	// Contexts are searched first, in order, for this credential.
	Contexts []string `json:"contexts"`
	// Exclusive makes Contexts the credential's only home: it is resolved from
	// them alone, with no fallback, and a newly created one is stored in
	// Contexts[0]. Use it only for a context that belongs to whoever is
	// running, since that is where their answer to a prompt ends up.
	//
	// Without it the pin is lookup-only: Contexts take precedence, the run's
	// own contexts are searched after them, and a newly created credential is
	// stored where an unpinned one would be — never in the pin. That is the
	// right kind for a context shared between users, which a run must not be
	// able to write a user's secret into.
	Exclusive bool `json:"exclusive,omitempty"`
}

type CredentialStore interface {
	Get(ctx context.Context, toolName string) (*Credential, bool, error)
	Add(ctx context.Context, cred Credential) error
	Refresh(ctx context.Context, cred Credential) error
	Remove(ctx context.Context, toolName string) error
	List(ctx context.Context) ([]Credential, error)
	RecreateAll(ctx context.Context) error
}

type CredentialType string

type NoopStore struct{}

type ProgramLoaderRunner interface {
	Load(ctx context.Context, toolName string) (prg types.Program, err error)
	Run(ctx context.Context, prg types.Program, input string) (output string, err error)
}

type Store struct {
	// contains filtered or unexported fields
}

type StoreFactory struct {
	// contains filtered or unexported fields
}