plugin

type AuditEvent struct {
	Action string
	Actor  string
	Plugin string
	Detail map[string]string
}

type Auditor interface {
	Record(ctx context.Context, e AuditEvent) error
}

type Config struct {
	Namespace string
	DataDir   string
	UID, GID  int

	MemoryBytes int64
	NanoCPUs    int64
	PidsLimit   int64

	CallTimeout       time.Duration
	StartTimeout      time.Duration
	HealthTimeout     time.Duration
	ReconcileInterval time.Duration
	StopTimeout       time.Duration
	BackoffBase       time.Duration
	BackoffMax        time.Duration
	BreakerCooldown   time.Duration

	HealthFailures  int
	BreakerFailures int
	MaxConcurrent   int

	MaxEventBytes    int
	MaxConfigBytes   int
	MaxSecretBytes   int
	MaxResponseBytes int
}

type Containers interface {
	InspectByName(ctx context.Context, name string) (*docker.ContainerState, error)
	ListByPrefix(ctx context.Context, prefix string) ([]docker.ContainerState, error)
	Create(ctx context.Context, spec docker.ContainerSpec) (string, error)
	Start(ctx context.Context, id string) error
	Stop(ctx context.Context, id string, timeout time.Duration) error
	Remove(ctx context.Context, id string, force bool) error
	EnsureNetwork(ctx context.Context, name string) (string, error)
}

type DBTX interface {
	ExecContext(ctx context.Context, query string, args ...any) (sql.Result, error)
	QueryContext(ctx context.Context, query string, args ...any) (*sql.Rows, error)
	QueryRowContext(ctx context.Context, query string, args ...any) *sql.Row
}

type Delivery struct {
	Delivered bool
	Detail    string
	Retryable bool
}

type InstallRequest struct {
	Manifest       []byte
	Signature      string
	KeyID          string
	ExpectedDigest string
	ConfigJSON     string
}

type InvalidError struct{ Msg string }

type Manager struct {
	// contains filtered or unexported fields
}

type Manifest struct {
	APIVersion    int      `yaml:"api_version" json:"api_version"`
	Name          string   `yaml:"name" json:"name"`
	Version       string   `yaml:"version" json:"version"`
	Kind          string   `yaml:"kind" json:"kind"`
	Publisher     string   `yaml:"publisher" json:"publisher"`
	Description   string   `yaml:"description" json:"description"`
	Image         string   `yaml:"image" json:"image"`
	Abilities     []string `yaml:"abilities" json:"abilities"`
	OutboundHosts []string `yaml:"outbound_hosts" json:"outbound_hosts"`
}

type Notification struct {
	ID         string
	Title      string
	Body       string
	Status     string
	Severity   string
	ResourceID string
	Link       string
	At         time.Time
	// SensitiveLines are log excerpts. They reach the plugin only when the
	// operator approved read:sensitive for it.
	SensitiveLines []string
}

type Record struct {
	Name               string   `json:"name"`
	Version            string   `json:"version"`
	Kind               string   `json:"kind"`
	Publisher          string   `json:"publisher"`
	Description        string   `json:"description"`
	Image              string   `json:"image"`
	Digest             string   `json:"digest"`
	Manifest           string   `json:"manifest"`
	Signature          string   `json:"-"`
	KeyID              string   `json:"key_id"`
	RequestedAbilities []string `json:"requested_abilities"`
	ApprovedAbilities  []string `json:"approved_abilities"`
	OutboundHosts      []string `json:"outbound_hosts"`
	ConfigJSON         string   `json:"config_json"`
	State              string   `json:"state"`
	ApprovedAt         string   `json:"approved_at"`
	ApprovedBy         string   `json:"approved_by"`
	InstalledAt        string   `json:"installed_at"`
	InstalledBy        string   `json:"installed_by"`
	UpdatedAt          string   `json:"updated_at"`
	LastError          string   `json:"last_error"`
}

type SQLStore struct {
	// contains filtered or unexported fields
}

type Store interface {
	ListPlugins(ctx context.Context) ([]Record, error)
	GetPlugin(ctx context.Context, name string) (Record, error)
	InsertPlugin(ctx context.Context, r Record) error
	UpdatePlugin(ctx context.Context, r Record) error
	SetLastError(ctx context.Context, name, msg, updatedAt string) error
	DeletePlugin(ctx context.Context, name string) error
	ListKeys(ctx context.Context) ([]TrustedKey, error)
	AddKey(ctx context.Context, k TrustedKey) error
	RemoveKey(ctx context.Context, keyID string) error
}

type TrustedKey struct {
	KeyID     string `json:"key_id"`
	Name      string `json:"name"`
	PublicKey string `json:"public_key"`
	AddedAt   string `json:"added_at"`
	AddedBy   string `json:"added_by"`
}