copilotvscodeevent

type Binding ¶

type Binding struct {
	InstallationID, BindingID, ProfileIdentity, Product string
	Generation                                          uint64
}

Binding comes exclusively from trusted host installation state. Event data never chooses any of these identities, generation or product authority.

type Channel ¶

type Channel string

const (
	DesktopChannel Channel = "desktop"
	WebhookChannel Channel = "webhook"
)

type Channels ¶

type Channels struct{ Desktop, Webhook bool }

type Consumer ¶

type Consumer struct {
	Binding     Binding
	Gate        Gate
	Config      *config.Config
	Desktop     notification.DeliveryPort
	SendWebhook WebhookSender
	Clock       observation.Clock
	Cache       *observation.RecentCache
}

Desktop is likewise an effect owner; macOS already owns its helper lease. Consumer never wraps either effect owner in a second lease.

func (c Consumer) Consume(parent context.Context, f source.Facts, d notification.Deadline) (out Receipt)

type Gate ¶

type Gate interface {
	Channels(context.Context, Binding) Channels
	Recheck(context.Context, Binding, Channel) bool
}

Gate denies unknown/missing policy. Effect owners independently Recheck under their single retained lease; it must not acquire another lease recursively.

type Receipt ¶

type Receipt struct {
	Status  string `json:"status"`
	Reason  string `json:"reason,omitempty"`
	Desktop string `json:"desktop,omitempty"`
	Webhook string `json:"webhook,omitempty"`
}

Receipt reports boundary acceptance, never visibility. Causes/IDs stay private.

type WebhookSender ¶

type WebhookSender func(context.Context, *config.Config, webhook.SendContext) error

WebhookSender is an effect-owner seam: acquire its retained installation/policy lease and Recheck before NewWithContext(ctx). Consumer supplies the no-redirect context. No retry/fallback/legacy route.