cli

type ConnectorOpts struct {
	TokenSource        oauth2.TokenSource
	SelectedAuthMethod string

	// SyncResourceTypeIDs is the set of resource type IDs the user has requested
	// to sync. An empty slice means "sync everything the connector advertises"
	// (subject to OptInRequired{} annotations on resource types). A non-empty
	// slice means "sync only these types; skip everything else." Connectors
	// should prefer the helper methods (WillSyncResourceType,
	// SyncFilterIsExplicit, SyncResourceTypeSet) over reading this slice
	// directly.
	SyncResourceTypeIDs []string

	// EgressPolicy carries the server-computed egress policy delivered on the
	// connector-config response, when one is present. It is nil for connectors
	// served without a policy envelope; the connector decides how (and whether)
	// to enforce it.
	EgressPolicy *EgressPolicy
	// contains filtered or unexported fields
}

type ContrainstSetter func(*cobra.Command, field.Configuration) error

type EgressPolicy struct {
	// AllowedHosts is the effective per-instance egress allowlist (canonical
	// hostnames). A non-nil *EgressPolicy with empty AllowedHosts is a valid
	// deny-all policy.
	AllowedHosts []string
	// HTTPSOnly reports whether the runtime must refuse non-https egress.
	HTTPSOnly bool
	// Enforce reports whether AllowedHosts is a deny-gate rather than an
	// observed-and-reported allowlist. The wire carries an enum; narrowing it to
	// a bool here keeps an unrecognized future posture from reaching a runtime
	// that would have to guess at it — anything but an explicit enforce observes.
	Enforce bool
}

type GetConnectorFunc[T field.Configurable] func(ctx context.Context, cfg T) (types.ConnectorServer, error)

type GetConnectorFunc2[T field.Configurable] func(ctx context.Context, cfg T, runTimeOpts RunTimeOpts) (types.ConnectorServer, error)

type NewConnector[T field.Configurable] func(ctx context.Context, cfg T, opts *ConnectorOpts) (connectorbuilder.ConnectorBuilderV2, []connectorbuilder.Opt, error)

type OtterAdjuster func(otterOptions *otter.Options[string, []byte])

type RunTimeOpts struct {
	SessionStore        sessions.SessionStore
	TokenSource         oauth2.TokenSource
	SelectedAuthMethod  string
	SyncResourceTypeIDs []string
	// EgressPolicy carries the server-computed egress policy delivered on the
	// connector-config response, when one is present. It is nil for connectors
	// served without a policy envelope; the connector decides how (and whether)
	// to enforce it.
	EgressPolicy *EgressPolicy
}