registry

type ApplicationContribution struct {
	ID           string           `yaml:"id" json:"id"`
	Title        string           `yaml:"title,omitempty" json:"title,omitempty"`
	Requirements []map[string]any `yaml:"requirements,omitempty" json:"requirements,omitempty"`
}

type Attestation struct {
	Digest    string
	Predicate string
	Evidence  string
}

type AttestationSubject struct {
	Owner  string
	Name   string
	Digest string // lowercase hex sha256 of the downloaded artifact
}

type AttestationVerifier interface {
	Verify(ctx context.Context, subject AttestationSubject) (*Attestation, error)
}

type Compatibility struct {
	Core string `yaml:"core,omitempty" json:"core,omitempty"`
}

type ConnectorContribution struct {
	ID        string `yaml:"id" json:"id"`
	Title     string `yaml:"title,omitempty" json:"title,omitempty"`
	Direction string `yaml:"direction,omitempty" json:"direction,omitempty"`
	Host      string `yaml:"host,omitempty" json:"host,omitempty"`
}

type Contributes struct {
	Drivers      []DriverContribution      `yaml:"drivers,omitempty" json:"drivers,omitempty"`
	Applications []ApplicationContribution `yaml:"applications,omitempty" json:"applications,omitempty"`
	Connectors   []ConnectorContribution   `yaml:"connectors,omitempty" json:"connectors,omitempty"`
}

type DriverContribution struct {
	ID                string `yaml:"id" json:"id"`
	Title             string `yaml:"title,omitempty" json:"title,omitempty"`
	Descriptor        string `yaml:"descriptor,omitempty" json:"descriptor,omitempty"`
	ConfigSchema      string `yaml:"configSchema,omitempty" json:"configSchema,omitempty"`
	Discovery         string `yaml:"discovery,omitempty" json:"discovery,omitempty"`
	CapabilityCatalog string `yaml:"capabilityCatalog,omitempty" json:"capabilityCatalog,omitempty"`
}

type GitHubClient struct {
	HTTPClient   *http.Client
	Token        string
	BaseURL      string // API base URL; defaults to githubAPIBase
	MaxJSONBytes int64  // response body cap for JSON endpoints
	MaxRetries   int    // retries for transient network errors
}

type InstallOptions struct {
	Source string
	Asset  string
	// Digest is an independent, user-supplied sha256 (--digest). It is never
	// derived from a same-origin release response.
	Digest string
	// ConfirmPerms confirms the displayed permissions (fresh installs always
	// require it; upgrades require it only on permission expansion).
	ConfirmPerms bool
	// AllowUnreviewed explicitly permits trust-on-first-use from a same-origin
	// release checksum. The resulting lock entry is recorded as unverified.
	AllowUnreviewed bool
	// Existing is the previously locked plugin during an update. When set,
	// update trust invariants are enforced before any install side effect.
	Existing *LockedPlugin
}

type InstallResult struct {
	Manifest  *Manifest
	PluginDir string
	AssetPath string
	Digest    string
	// Mode records the trust mode used to authenticate the artifact.
	Mode TrustMode
	// Verified is true only when independent evidence authenticated the artifact.
	Verified bool
	// Evidence is a non-secret, human-readable reference to the trust evidence.
	Evidence string
	// SchemaSource 说明 manifest schema 来自哪里（file:<path> 或 embedded），
	// 用于验收时证明校验真的发生过，而不是被跳过。
	SchemaSource  string
	LockEntry     LockedPlugin
	RegistryEntry RegistryEntry
}

type Installer struct {
	Client            *GitHubClient
	PluginsDir        string
	LockPath          string
	SchemaPath        string
	CoreVersion       string
	SupportedProtocol int
	MaxDownloadBytes  int64
	// RegistryIndex, when set, supplies curated verified entries.
	RegistryIndex *RegistryIndex
	// Attestation, when set, authenticates artifacts via build attestations.
	// A nil value means attestation is unavailable and is never treated as
	// verified evidence.
	Attestation AttestationVerifier
}

type LockFile struct {
	FormatVersion int            `yaml:"format_version" json:"formatVersion"`
	Plugins       []LockedPlugin `yaml:"plugins" json:"plugins"`
}

type LockedPlugin struct {
	ID                string    `yaml:"id" json:"id"`
	Version           string    `yaml:"version" json:"version"`
	Digest            string    `yaml:"digest" json:"digest"`
	Source            string    `yaml:"source" json:"source"`
	Verified          bool      `yaml:"verified" json:"verified"`
	Mode              TrustMode `yaml:"mode,omitempty" json:"mode,omitempty"`
	Evidence          string    `yaml:"evidence,omitempty" json:"evidence,omitempty"`
	VerifiedPublisher string    `yaml:"verifiedPublisher,omitempty" json:"verifiedPublisher,omitempty"`
	Protocol          int       `yaml:"protocol,omitempty" json:"protocol,omitempty"`
	Compatibility     string    `yaml:"compatibility,omitempty" json:"compatibility,omitempty"`
}

type Manifest struct {
	APIVersion    string           `yaml:"apiVersion" json:"apiVersion"`
	Kind          string           `yaml:"kind" json:"kind"`
	ID            string           `yaml:"id" json:"id"`
	Version       string           `yaml:"version" json:"version"`
	Protocol      int              `yaml:"protocol" json:"protocol"`
	Entrypoint    string           `yaml:"entrypoint" json:"entrypoint"`
	Compatibility Compatibility    `yaml:"compatibility,omitempty" json:"compatibility,omitempty"`
	Permissions   Permissions      `yaml:"permissions,omitempty" json:"permissions,omitempty"`
	Capabilities  []string         `yaml:"capabilities,omitempty" json:"capabilities,omitempty"`
	Requirements  []map[string]any `yaml:"requirements,omitempty" json:"requirements,omitempty"`
	Contributes   *Contributes     `yaml:"contributes,omitempty" json:"contributes,omitempty"`
}

type ManifestSource struct {
	Data []byte
	Path string
}

type Permissions struct {
	Hardware   []string `yaml:"hardware,omitempty" json:"hardware,omitempty"`
	Network    []string `yaml:"network,omitempty" json:"network,omitempty"`
	Filesystem []string `yaml:"filesystem,omitempty" json:"filesystem,omitempty"`
	Secrets    []string `yaml:"secrets,omitempty" json:"secrets,omitempty"`
}

type RegistryEntry struct {
	ID                string `yaml:"id" json:"id"`
	Version           string `yaml:"version" json:"version"`
	Kind              string `yaml:"kind" json:"kind"`
	Source            string `yaml:"source" json:"source"`
	Digest            string `yaml:"digest" json:"digest"`
	VerifiedPublisher string `yaml:"verifiedPublisher,omitempty" json:"verifiedPublisher,omitempty"`
	Protocol          int    `yaml:"protocol" json:"protocol"`
	Compatibility     string `yaml:"compatibility" json:"compatibility"`
}

type RegistryIndex struct {
	Version int             `yaml:"version" json:"version"`
	Plugins []RegistryEntry `yaml:"plugins" json:"plugins"`
}

type Release struct {
	TagName string         `json:"tag_name"`
	Name    string         `json:"name"`
	URL     string         `json:"html_url"`
	Assets  []ReleaseAsset `json:"assets"`
}

type ReleaseAsset struct {
	Name string `json:"name"`
	URL  string `json:"browser_download_url"`
	Size int64  `json:"size"`
}

type Repo struct {
	Owner string
	Name  string
	URL   string
}

type SchemaValidator struct {
	// contains filtered or unexported fields
}

type SearchResult struct {
	FullName    string `json:"full_name"`
	Name        string `json:"name"`
	Description string `json:"description"`
	Stars       int    `json:"stargazers_count"`
	URL         string `json:"html_url"`
}

type TrustMode string