guard

type AuthInput struct {
	Identity   string   `json:"identity"`
	Provider   string   `json:"provider"`
	Identities []string `json:"identities"`
}

type FunctionInput struct {
	Name   string `json:"name"`
	Engine string `json:"engine"`
	Origin
}

type Origin struct {
	Provenance string `json:"provenance"`
	SourceFile string `json:"source_file"`
}

type PluginInput struct {
	Operation    string   `json:"operation"`
	Phase        string   `json:"phase"`
	Origin       string   `json:"origin"`
	Source       string   `json:"source"`
	Registry     string   `json:"registry"`
	Repository   string   `json:"repository"`
	Name         string   `json:"name"`
	Version      string   `json:"version"`
	Digest       string   `json:"digest"`
	Runtime      string   `json:"runtime"`
	Capabilities []string `json:"capabilities"`
	Development  bool     `json:"development"`
	// Path is the plugin directory of a local build (origin development): a forward-slash path
	// relative to the project directory when it lies inside it, otherwise absolute. It never contains
	// `..`, so a relative allow-root cannot match a directory outside the project. Empty for every
	// other origin and for a build whose directory is unknown.
	Path string `json:"path"`
	// Profiles lists the active profile names exactly as typed, without duplicates, in activation
	// order; it is an empty list when none is active. Names are chosen by the developer and a rule
	// keyed on one can be avoided by renaming the profile, so gate trust on origin and path instead.
	Profiles []string `json:"profiles"`
}

type SourceInput struct {
	Operation    string `json:"operation"`
	Scheme       string `json:"scheme"`
	Host         string `json:"host"`
	Path         string `json:"path"`
	Remote       bool   `json:"remote"`
	PathResolved bool   `json:"path_resolved"`
	Origin
}