answers

type Answer struct {
	Plugin   string `json:"plugin"`
	Version  string `json:"version"`
	Official bool   `json:"official"`
	Result   *int   `json:"result"`
	Error    string `json:"error,omitempty"`
	Warning  string `json:"warning,omitempty"`
}

type AuditEntry struct {
	Plugin       string
	Version      string
	BinarySHA256 string
	Result       *int
	Cause        pluginspec.FailureCause
	Report       sandbox.Report
	ConsoleError string
	// Fetch is set on the entry that records a plan's fetch.
	Fetch *FetchAudit
}

type Code string

type Deps struct {
	Sources        map[string]source.Source
	MaxObjectBytes func(profile string) int64
	WS             *workspace.Manager
	Runner         *Runner
	Quantum        time.Duration
	Now            func() time.Time
}

type FetchAudit struct {
	Profile string
	Key     string
	Size    int64
	SHA256  string
	Cause   string
}

type Pin struct {
	Version        string
	ManifestSHA256 string
	BinarySHA256   string
	Official       bool
}

type Plan struct {
	Profile string
	Key     string
	Handle  workspace.Handle
	Plugins []string
	// Pins, when set, are the approved versions and hashes per plugin: a
	// plugin whose opened lock entry differs (updated or reinstalled since
	// the plan was approved) does not run and answers plugin_tampered.
	Pins map[string]Pin
	// SHA256, when set, is the hex sha256 of the bytes the plan was
	// approved on. The fetch spools the object into the workspace and
	// hashes the bytes it writes; when they differ the spool is released
	// before any plugin runs, and the plan is refused stale. The plugins
	// read only the spool: the bytes they answer on are the hashed ones.
	// A follow-up on a handle is not checked: its spool does not change.
	SHA256 string
}

type Refusal struct {
	Code Code `json:"refusal"`
}

type Result struct {
	Handle  string   `json:"handle"`
	Answers []Answer `json:"answers"`
}

type Runner struct {
	WS           *workspace.Manager
	Store        plugin.Store
	Run          func(context.Context, sandbox.Spec) (pluginspec.Outcome, sandbox.Report, error)
	MaxPerHandle int
	// contains filtered or unexported fields
}