host

type Adapters struct {
	SessionResolver         sessionctx.Resolver
	Policy                  PolicyAdapter
	PackageTrustVerifier    PackageTrustVerifier
	ReleaseMetadataVerifier ReleaseMetadataVerifier
	RevocationVerifier      SourceRevocationEvidenceVerifier
	ReleaseSourcePolicy     ReleaseSourcePolicyResolver
	ReleaseArtifactResolver ReleaseArtifactResolver
	Registry                registry.Store
	Audit                   AuditSink
	Diagnostics             DiagnosticsSink
	Secrets                 SecretStoreAdapter
	RuntimeArtifactResolver RuntimeArtifactResolver
	RuntimeSupervisor       runtimeclient.Supervisor
	SurfaceCatalog          SurfaceCatalogSink
	Assets                  pluginpkg.AssetStore
	InstallStages           installstage.Store
	Capabilities            *capability.Registry
	CoreActions             CoreActionAdapter
	OperationCanceler       OperationCanceler
	SurfaceTokens           *bridge.SurfaceTokenService
	Storage                 storage.Broker
	Connectivity            connectivity.Broker
	NetworkExecutor         connectivity.NetworkExecutor
	Operations              operation.Store
	Permissions             permissions.Store
	SecurityPolicy          security.PolicyStore
	ConfirmationIntents     security.ConfirmationIntentStore
	Cleanup                 cleanup.Orchestrator
	RetainedData            retaineddata.Store
	Settings                settings.Store
	Streams                 stream.Store
}

type AppendStreamEventRequest struct {
	StreamID string    `json:"stream_id"`
	Kind     string    `json:"kind,omitempty"`
	Data     []byte    `json:"data,omitempty"`
	Error    string    `json:"error,omitempty"`
	Now      time.Time `json:"now,omitempty"`
}

type AuditEvent = observability.AuditEvent

type AuditLister = observability.AuditLister

type AuditSink = observability.AuditSink

type BindRetainedDataRequest struct {
	RetainedID             string    `json:"retained_id"`
	TargetPluginInstanceID string    `json:"target_plugin_instance_id"`
	Now                    time.Time `json:"now,omitempty"`
}

type CallMethodRequest struct {
	PluginInstanceID     string         `json:"plugin_instance_id"`
	SurfaceInstanceID    string         `json:"surface_instance_id"`
	SessionChannelIDHash string         `json:"session_channel_id_hash,omitempty"`
	OwnerSessionHash     string         `json:"owner_session_hash,omitempty"`
	OwnerUserHash        string         `json:"owner_user_hash,omitempty"`
	BridgeChannelID      string         `json:"bridge_channel_id"`
	GatewayToken         string         `json:"plugin_gateway_token"`
	ConfirmationID       string         `json:"confirmation_id,omitempty"`
	Method               string         `json:"method"`
	Params               map[string]any `json:"params,omitempty"`
	Now                  time.Time      `json:"now,omitempty"`
}

type CallMethodResult struct {
	Data                 any        `json:"data,omitempty"`
	OperationID          string     `json:"operation_id,omitempty"`
	StreamID             string     `json:"stream_id,omitempty"`
	StreamTicket         string     `json:"stream_ticket,omitempty"`
	StreamTicketID       string     `json:"stream_ticket_id,omitempty"`
	StreamExpiresAt      *time.Time `json:"stream_expires_at,omitempty"`
	ConfirmationRequired bool       `json:"confirmation_required,omitempty"`
	ConfirmationTokenID  string     `json:"confirmation_token_id,omitempty"`
	RequestHash          string     `json:"request_hash,omitempty"`
	PlanHash             string     `json:"plan_hash,omitempty"`
}

type CancelOperationRequest struct {
	OperationID string `json:"operation_id"`
	Reason      string `json:"reason,omitempty"`
	Now         time.Time
}

type CleanupExpiredRetainedDataRequest struct {
	Now         time.Time `json:"now,omitempty"`
	RetryFailed bool      `json:"retry_failed,omitempty"`
	MaxRecords  int       `json:"max_records,omitempty"`
}

type CloseStreamRequest struct {
	StreamID string        `json:"stream_id"`
	Status   stream.Status `json:"status,omitempty"`
	Reason   string        `json:"reason,omitempty"`
	Now      time.Time     `json:"now,omitempty"`
}

type ConfirmMethodRequest = CallMethodRequest

type ConfirmMethodResult struct {
	ConfirmationID      string    `json:"confirmation_id"`
	ConfirmationTokenID string    `json:"confirmation_token_id"`
	RequestHash         string    `json:"request_hash"`
	PlanHash            string    `json:"plan_hash"`
	Plan                any       `json:"plan,omitempty"`
	ExpiresAt           time.Time `json:"expires_at"`
}

type CoreActionAdapter interface {
	InvokeCoreAction(ctx context.Context, req capability.Invocation) (capability.Result, error)
}

type DeleteRetainedDataRequest struct {
	RetainedID string    `json:"retained_id"`
	Now        time.Time `json:"now,omitempty"`
}

type DeleteSecurityPolicyRequest struct {
	PluginInstanceID string    `json:"plugin_instance_id"`
	Now              time.Time `json:"now,omitempty"`
}

type DiagnosticEvent = observability.DiagnosticEvent

type DiagnosticLister = observability.DiagnosticLister

type DiagnosticsSink = observability.DiagnosticsSink

type DisableRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	Reason             string
	Now                time.Time
}

type DisposeSurfaceRequest struct {
	SurfaceInstanceID    string
	BridgeNonce          string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type DowngradeRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	Version            string
	PackageHash        string
	Now                time.Time
}

type EnableRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	Now                time.Time
}

type ExchangeAssetTicketRequest struct {
	SurfaceInstanceID    string
	AssetTicket          string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type ExportDataRequest struct {
	PluginInstanceID string
	IncludeSecrets   bool
}

type ExportDataResult struct {
	ArchiveRef         string `json:"archive_ref,omitempty"`
	SettingsArchiveRef string `json:"settings_archive_ref,omitempty"`
}

type FinishOperationRequest struct {
	OperationID string           `json:"operation_id"`
	Status      operation.Status `json:"status"`
	Reason      string           `json:"reason,omitempty"`
	Now         time.Time
}

type GetSecurityPolicyRequest struct {
	PluginInstanceID string `json:"plugin_instance_id"`
}

type GetSettingsRequest struct {
	PluginInstanceID string `json:"plugin_instance_id"`
}

type GrantPermissionRequest struct {
	PluginInstanceID string    `json:"plugin_instance_id"`
	PermissionID     string    `json:"permission_id"`
	GrantedBy        string    `json:"granted_by,omitempty"`
	Now              time.Time `json:"now,omitempty"`
	ExpiresAt        time.Time `json:"expires_at,omitempty"`
}

type Host struct {
	// contains filtered or unexported fields
}

type HostCapabilityContractRef struct {
	ContractID            string `json:"contract_id"`
	ContractVersion       string `json:"contract_version"`
	ArtifactRef           string `json:"artifact_ref"`
	ArtifactSHA256        string `json:"artifact_sha256"`
	ManifestSHA256        string `json:"manifest_sha256"`
	SignatureRef          string `json:"signature_ref"`
	SignatureSHA256       string `json:"signature_sha256"`
	SignatureKeyID        string `json:"signature_key_id"`
	CompatibilitySHA256   string `json:"compatibility_sha256"`
	GeneratedClientSHA256 string `json:"generated_client_sha256"`
	NoticesSHA256         string `json:"notices_sha256"`
}

type HostCapabilityRequirement struct {
	CapabilityID      string                    `json:"capability_id"`
	CapabilityVersion string                    `json:"capability_version"`
	Contract          HostCapabilityContractRef `json:"contract"`
}

type HostRequirement struct {
	HostID                      string                      `json:"host_id"`
	MinHostVersion              string                      `json:"min_host_version,omitempty"`
	RequiredCapabilityContracts []HostCapabilityRequirement `json:"required_capability_contracts,omitempty"`
}

type ImportDataRequest struct {
	PluginInstanceID   string
	ArchiveRef         string
	SettingsArchiveRef string
	DeleteExisting     bool
}

type ImportLocalPackageRequest struct {
	PackageReader      io.ReaderAt
	PackageSize        int64
	PluginInstanceID   string
	PluginStateVersion uint64
	Now                time.Time
}

type InstallReleaseRefRequest struct {
	ReleaseRef         PluginReleaseRef
	PluginInstanceID   string
	PluginStateVersion uint64
	Now                time.Time
}

type IntentRecord struct {
	PluginID          string         `json:"plugin_id"`
	PluginInstanceID  string         `json:"plugin_instance_id"`
	PublisherID       string         `json:"publisher_id"`
	DisplayName       string         `json:"display_name"`
	Version           string         `json:"version"`
	ActiveFingerprint string         `json:"active_fingerprint"`
	IntentID          string         `json:"intent_id"`
	Method            string         `json:"method"`
	Effect            string         `json:"effect"`
	Execution         string         `json:"execution"`
	PayloadSchema     map[string]any `json:"payload_schema,omitempty"`
}

type InvokeIntentRequest struct {
	PluginInstanceID     string         `json:"plugin_instance_id,omitempty"`
	IntentID             string         `json:"intent_id"`
	Params               map[string]any `json:"params,omitempty"`
	OwnerSessionHash     string         `json:"owner_session_hash,omitempty"`
	OwnerUserHash        string         `json:"owner_user_hash,omitempty"`
	SessionChannelIDHash string         `json:"session_channel_id_hash,omitempty"`
	Now                  time.Time      `json:"now,omitempty"`
}

type ListAuditEventsRequest = observability.ListAuditRequest

type ListDiagnosticEventsRequest = observability.ListDiagnosticRequest

type ListIntentsRequest struct {
	IntentID         string `json:"intent_id,omitempty"`
	PluginInstanceID string `json:"plugin_instance_id,omitempty"`
}

type ListOperationsRequest struct {
	PluginInstanceID string `json:"plugin_instance_id,omitempty"`
}

type ListPermissionGrantsRequest struct {
	PluginInstanceID string `json:"plugin_instance_id,omitempty"`
	ActiveOnly       bool   `json:"active_only,omitempty"`
}

type ListRetainedDataRequest = retaineddata.ListRequest

type MintBridgeTokenRequest struct {
	Handshake                 bridge.Handshake
	BridgeChannelID           string
	HandshakeTranscriptSHA256 string
	PreviousGatewayToken      string
	OwnerSessionHash          string
	OwnerUserHash             string
	SessionChannelIDHash      string
	Now                       time.Time
}

type MintConnectionGrantRequest struct {
	PluginInstanceID    string                 `json:"plugin_instance_id"`
	ConnectorID         string                 `json:"connector_id"`
	Transport           connectivity.Transport `json:"transport"`
	Destination         string                 `json:"destination"`
	RuntimeInstanceID   string                 `json:"runtime_instance_id,omitempty"`
	RuntimeGenerationID string                 `json:"runtime_generation_id,omitempty"`
	RuntimeShardID      string                 `json:"runtime_shard_id,omitempty"`
	Now                 time.Time              `json:"now,omitempty"`
	TTL                 time.Duration          `json:"ttl,omitempty"`
}

type MintStorageHandleGrantRequest struct {
	PluginInstanceID    string        `json:"plugin_instance_id"`
	StoreID             string        `json:"store_id"`
	RuntimeInstanceID   string        `json:"runtime_instance_id,omitempty"`
	RuntimeGenerationID string        `json:"runtime_generation_id"`
	RuntimeShardID      string        `json:"runtime_shard_id,omitempty"`
	Now                 time.Time     `json:"now,omitempty"`
	TTL                 time.Duration `json:"ttl,omitempty"`
}

type NetworkHandleGrantResult struct {
	ConnectionGrant connectivity.ConnectionGrant `json:"connection_grant"`
	HandleGrant     bridge.HandleGrantResult     `json:"handle_grant"`
}

type OpenSurfaceRequest struct {
	PluginInstanceID     string
	PluginStateVersion   uint64
	SurfaceID            string
	SurfaceInstanceID    string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type OperationCancelAdapterRequest struct {
	OperationID          string    `json:"operation_id"`
	PluginID             string    `json:"plugin_id"`
	PluginInstanceID     string    `json:"plugin_instance_id"`
	Method               string    `json:"method"`
	Effect               string    `json:"effect,omitempty"`
	Execution            string    `json:"execution"`
	SurfaceInstanceID    string    `json:"surface_instance_id,omitempty"`
	SessionChannelIDHash string    `json:"session_channel_id_hash,omitempty"`
	BridgeChannelID      string    `json:"bridge_channel_id,omitempty"`
	Reason               string    `json:"reason,omitempty"`
	RequestedAt          time.Time `json:"requested_at"`
}

type OperationCanceler interface {
	RequestOperationCancel(ctx context.Context, req OperationCancelAdapterRequest) error
}

type PackageDistribution string

type PackageDistributionRef struct {
	Distribution PackageDistribution `json:"distribution"`
	ArtifactRef  string              `json:"artifact_ref,omitempty"`
	ImportID     string              `json:"import_id,omitempty"`
}

type PackageDowngradePolicy string

type PackageHashSet struct {
	PackageSHA256  string `json:"package_sha256"`
	ManifestSHA256 string `json:"manifest_sha256"`
	EntriesSHA256  string `json:"entries_sha256"`
}

type PackageInstallPolicy string

type PackageReleaseSignature struct {
	Algorithm          string `json:"algorithm"`
	KeyID              string `json:"key_id"`
	SignatureBundleRef string `json:"signature_bundle_ref"`
	SourcePolicyEpoch  string `json:"source_policy_epoch"`
	RevocationEpoch    string `json:"revocation_epoch"`
}

type PackageSourceClass string

type PackageSourceType string

type PackageTrustAction string

type PackageTrustVerificationRequest struct {
	Action               PackageTrustAction     `json:"action"`
	Package              pluginpkg.Package      `json:"package"`
	LocalImport          bool                   `json:"local_import,omitempty"`
	ReleaseRef           *PluginReleaseRef      `json:"release_ref,omitempty"`
	Release              *PluginPackageRelease  `json:"release,omitempty"`
	SourcePolicySnapshot *SourcePolicySnapshot  `json:"source_policy_snapshot,omitempty"`
	CurrentRecord        *registry.PluginRecord `json:"current_record,omitempty"`
	PluginInstanceID     string                 `json:"plugin_instance_id,omitempty"`
	Now                  time.Time              `json:"now,omitempty"`
}

type PackageTrustVerificationResult = registry.TrustAssessment

type PackageTrustVerifier interface {
	VerifyPackageTrust(ctx context.Context, req PackageTrustVerificationRequest) (PackageTrustVerificationResult, error)
}

type PackageUnsignedPolicy string

type PatchSettingsRequest struct {
	PluginInstanceID string         `json:"plugin_instance_id"`
	Values           map[string]any `json:"values"`
	Now              time.Time      `json:"now,omitempty"`
}

type PluginPackageRelease struct {
	SourceID                 string                    `json:"source_id"`
	PublisherID              string                    `json:"publisher_id"`
	PluginID                 string                    `json:"plugin_id"`
	Version                  string                    `json:"version"`
	DistributionRef          PackageDistributionRef    `json:"distribution_ref"`
	ReleaseMetadataSHA256    string                    `json:"release_metadata_sha256"`
	ReleaseMetadataSignature *ReleaseMetadataSignature `json:"release_metadata_signature,omitempty"`
	Hashes                   PackageHashSet            `json:"hashes"`
	PackageSignature         *PackageReleaseSignature  `json:"package_signature,omitempty"`
	Compatibility            *ReleaseCompatibility     `json:"compatibility,omitempty"`
	HostRequirements         []HostRequirement         `json:"host_requirements,omitempty"`
	ReleaseEvidence          *ReleaseEvidence          `json:"release_evidence,omitempty"`
	Metadata                 map[string]string         `json:"metadata,omitempty"`
}

type PluginRef struct {
	PluginID          string `json:"plugin_id"`
	PluginInstanceID  string `json:"plugin_instance_id"`
	Version           string `json:"version"`
	ActiveFingerprint string `json:"active_fingerprint"`
}

type PluginReleaseRef struct {
	SourceID              string         `json:"source_id"`
	ReleaseMetadataRef    string         `json:"release_metadata_ref"`
	ReleaseMetadataSHA256 string         `json:"release_metadata_sha256"`
	PublisherID           string         `json:"publisher_id"`
	PluginID              string         `json:"plugin_id"`
	Version               string         `json:"version"`
	ExpectedHashes        PackageHashSet `json:"expected_hashes"`
}

type PolicyAdapter interface {
	EvaluateLocalPolicy(ctx context.Context, session sessionctx.Context, plugin PluginRef, method manifest.MethodSpec) (PolicyDecision, error)
	DeveloperModeEnabled(ctx context.Context, session sessionctx.Context) (bool, error)
	LocalGeneratedPluginsEnabled(ctx context.Context, session sessionctx.Context) (bool, error)
}

type PolicyDecision string

type PrepareSurfaceResult struct {
	bridge.AssetSessionResult
	Document pluginpkg.OpaqueSurfaceDocument `json:"document"`
}

type PutSecurityPolicyRequest struct {
	PluginInstanceID   string    `json:"plugin_instance_id"`
	AllowedPermissions []string  `json:"allowed_permissions,omitempty"`
	DeniedMethods      []string  `json:"denied_methods,omitempty"`
	Now                time.Time `json:"now,omitempty"`
}

type ReadStreamRequest struct {
	StreamID             string `json:"stream_id"`
	StreamTicket         string `json:"stream_ticket,omitempty"`
	SurfaceInstanceID    string `json:"surface_instance_id,omitempty"`
	OwnerSessionHash     string `json:"owner_session_hash,omitempty"`
	OwnerUserHash        string `json:"owner_user_hash,omitempty"`
	SessionChannelIDHash string `json:"session_channel_id_hash,omitempty"`
	MaxEvents            int    `json:"max_events,omitempty"`
	MaxBytes             int64  `json:"max_bytes,omitempty"`
	Now                  time.Time
}

type ReadStreamResult struct {
	Record stream.Record  `json:"record"`
	Events []stream.Event `json:"events,omitempty"`
}

type ReadSurfaceAssetRequest struct {
	AssetSession         string
	AssetSessionID       string
	BindingID            string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type ReadSurfaceAssetResult struct {
	Entry   pluginpkg.Entry
	Content []byte
	Session bridge.SurfaceSession
}

type ReleaseArtifactResolveRequest struct {
	Action               PackageTrustAction     `json:"action"`
	ReleaseRef           PluginReleaseRef       `json:"release_ref"`
	SourcePolicySnapshot SourcePolicySnapshot   `json:"source_policy_snapshot"`
	CurrentRecord        *registry.PluginRecord `json:"current_record,omitempty"`
	PluginInstanceID     string                 `json:"plugin_instance_id,omitempty"`
	Now                  time.Time              `json:"now,omitempty"`
}

type ReleaseArtifactResolver interface {
	ResolveReleaseArtifact(ctx context.Context, req ReleaseArtifactResolveRequest) (ResolvedPackageArtifact, error)
}

type ReleaseCompatibility struct {
	MinReDevPluginVersion string   `json:"min_redevplugin_version,omitempty"`
	MinRuntimeVersion     string   `json:"min_runtime_version,omitempty"`
	UIProtocolVersion     string   `json:"ui_protocol_version,omitempty"`
	SupportedTargets      []string `json:"supported_targets,omitempty"`
}

type ReleaseEvidence struct {
	NoticesSHA256    string `json:"notices_sha256,omitempty"`
	ProvenanceSHA256 string `json:"provenance_sha256,omitempty"`
	GeneratedAt      string `json:"generated_at,omitempty"`
}

type ReleaseMetadataSignature struct {
	Algorithm         string `json:"algorithm"`
	KeyID             string `json:"key_id"`
	SignatureRef      string `json:"signature_ref"`
	SourcePolicyEpoch string `json:"source_policy_epoch"`
	RevocationEpoch   string `json:"revocation_epoch"`
}

type ReleaseMetadataVerificationRequest struct {
	Action                   PackageTrustAction     `json:"action"`
	ReleaseRef               PluginReleaseRef       `json:"release_ref"`
	Release                  PluginPackageRelease   `json:"release"`
	SourcePolicySnapshot     SourcePolicySnapshot   `json:"source_policy_snapshot"`
	ReleaseMetadataBytes     []byte                 `json:"-"`
	ReleaseMetadataSignature []byte                 `json:"-"`
	CurrentRecord            *registry.PluginRecord `json:"current_record,omitempty"`
	PluginInstanceID         string                 `json:"plugin_instance_id,omitempty"`
	Now                      time.Time              `json:"now,omitempty"`
}

type ReleaseMetadataVerificationResult struct {
	Metadata map[string]string `json:"metadata,omitempty"`
}

type ReleaseMetadataVerifier interface {
	VerifyReleaseMetadata(ctx context.Context, req ReleaseMetadataVerificationRequest) (ReleaseMetadataVerificationResult, error)
}

type ReleaseSourcePolicyRequest struct {
	Action           PackageTrustAction     `json:"action"`
	ReleaseRef       PluginReleaseRef       `json:"release_ref"`
	CurrentRecord    *registry.PluginRecord `json:"current_record,omitempty"`
	PluginInstanceID string                 `json:"plugin_instance_id,omitempty"`
	Now              time.Time              `json:"now,omitempty"`
}

type ReleaseSourcePolicyResolver interface {
	ResolveReleaseSourcePolicy(ctx context.Context, req ReleaseSourcePolicyRequest) (SourcePolicySnapshot, error)
}

type ResolvedPackageArtifact struct {
	ReleaseMetadataBytes     []byte      `json:"-"`
	ReleaseMetadataSignature []byte      `json:"-"`
	Reader                   io.ReaderAt `json:"-"`
	Size                     int64       `json:"size"`
}

type RetainedDataCleanupResult struct {
	Deleted []retaineddata.Record `json:"deleted,omitempty"`
	Failed  []retaineddata.Record `json:"failed,omitempty"`
}

type RevokePermissionRequest struct {
	PluginInstanceID string    `json:"plugin_instance_id"`
	PermissionID     string    `json:"permission_id"`
	RevokedBy        string    `json:"revoked_by,omitempty"`
	Reason           string    `json:"reason,omitempty"`
	Now              time.Time `json:"now,omitempty"`
}

type RevokeSurfaceScopeRequest struct {
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type RuntimeArtifactResolver interface {
	RuntimePath(ctx context.Context, target RuntimeTarget) (string, error)
}

type RuntimeTarget struct {
	OS   string `json:"os"`
	Arch string `json:"arch"`
}

type SecretBindRequest = secrets.BindRequest

type SecretDeleteRequest = secrets.DeleteRequest

type SecretStoreAdapter = secrets.Store

type SecretTestRequest = secrets.TestRequest

type SettingsResult struct {
	PluginInstanceID string         `json:"plugin_instance_id"`
	SchemaVersion    int            `json:"schema_version"`
	SettingsRevision uint64         `json:"settings_revision"`
	Values           map[string]any `json:"values"`
	UpdatedAt        time.Time      `json:"updated_at"`
}

type SettingsSchemaResult struct {
	PluginInstanceID string                      `json:"plugin_instance_id"`
	SchemaVersion    int                         `json:"schema_version"`
	Migration        manifest.MigrationSpec      `json:"migration"`
	Fields           []manifest.SettingFieldSpec `json:"fields"`
	SettingsRevision uint64                      `json:"settings_revision"`
}

type SourcePolicyRevocationEvidence struct {
	MetadataRef      string `json:"metadata_ref"`
	MetadataSHA256   string `json:"metadata_sha256"`
	SignatureRef     string `json:"signature_ref"`
	SignatureKeyID   string `json:"signature_key_id"`
	VerifiedAt       string `json:"verified_at"`
	ExpiresAt        string `json:"expires_at"`
	HighestSeenEpoch string `json:"highest_seen_epoch"`
	MetadataBytes    []byte `json:"-"`
	SignatureBytes   []byte `json:"-"`
}

type SourcePolicySnapshot struct {
	SchemaVersion      string                          `json:"schema_version"`
	SourceID           string                          `json:"source_id"`
	SourceType         PackageSourceType               `json:"source_type"`
	SourceClass        PackageSourceClass              `json:"source_class,omitempty"`
	AllowedPublishers  []string                        `json:"allowed_publishers,omitempty"`
	TrustedKeyIDs      []string                        `json:"trusted_key_ids,omitempty"`
	TrustedKeys        []SourcePolicyTrustedKey        `json:"trusted_keys,omitempty"`
	RevocationEvidence *SourcePolicyRevocationEvidence `json:"revocation_evidence,omitempty"`
	RequireSignature   bool                            `json:"require_signature,omitempty"`
	InstallPolicy      PackageInstallPolicy            `json:"install_policy,omitempty"`
	UnsignedPolicy     PackageUnsignedPolicy           `json:"unsigned_policy,omitempty"`
	DowngradePolicy    PackageDowngradePolicy          `json:"downgrade_policy,omitempty"`
	PolicyEpoch        string                          `json:"policy_epoch,omitempty"`
	KeyRotationEpoch   string                          `json:"key_rotation_epoch,omitempty"`
	RevocationEpoch    string                          `json:"revocation_epoch,omitempty"`
	AssessedAt         string                          `json:"assessed_at,omitempty"`
	Metadata           map[string]string               `json:"metadata,omitempty"`
}

type SourcePolicyTrustedKey struct {
	Algorithm       string   `json:"algorithm"`
	KeyID           string   `json:"key_id"`
	PublicKeySHA256 string   `json:"public_key_sha256"`
	Usage           []string `json:"usage"`
	ValidFrom       string   `json:"valid_from,omitempty"`
	ValidUntil      string   `json:"valid_until,omitempty"`
	RevocationEpoch string   `json:"revocation_epoch,omitempty"`
}

type SourceRevocationEvidenceVerificationRequest struct {
	ReleaseRef                  PluginReleaseRef               `json:"release_ref"`
	SourcePolicySnapshot        SourcePolicySnapshot           `json:"source_policy_snapshot"`
	RevocationEvidence          SourcePolicyRevocationEvidence `json:"revocation_evidence"`
	RevocationMetadata          SourceRevocationMetadata       `json:"revocation_metadata"`
	RevocationMetadataBytes     []byte                         `json:"-"`
	RevocationMetadataSignature []byte                         `json:"-"`
	Now                         time.Time                      `json:"now,omitempty"`
}

type SourceRevocationEvidenceVerificationResult struct {
	Metadata map[string]string `json:"metadata,omitempty"`
}

type SourceRevocationEvidenceVerifier interface {
	VerifySourceRevocationEvidence(ctx context.Context, req SourceRevocationEvidenceVerificationRequest) (SourceRevocationEvidenceVerificationResult, error)
}

type SourceRevocationMetadata struct {
	SchemaVersion    string   `json:"schema_version"`
	SourceID         string   `json:"source_id"`
	HighestSeenEpoch string   `json:"highest_seen_epoch"`
	GeneratedAt      string   `json:"generated_at"`
	ExpiresAt        string   `json:"expires_at"`
	RevokedKeyIDs    []string `json:"revoked_key_ids,omitempty"`
}

type StartRuntimeRequest struct {
	Target RuntimeTarget `json:"target,omitempty"`
}

type StorageHandleGrantResult struct {
	Namespace   storage.Namespace        `json:"namespace"`
	HandleGrant bridge.HandleGrantResult `json:"handle_grant"`
}

type SurfaceCatalogSink interface {
	PublishSurfaces(ctx context.Context, snapshot SurfaceSnapshot) error
}

type SurfaceSnapshot struct {
	PluginInstanceID  string                 `json:"plugin_instance_id"`
	ActiveFingerprint string                 `json:"active_fingerprint"`
	Surfaces          []manifest.SurfaceSpec `json:"surfaces"`
}

type UninstallRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	DeleteData         bool
	Now                time.Time
}

type UpdateLocalPackageRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	PackageReader      io.ReaderAt
	PackageSize        int64
	Now                time.Time
}

type UpdateReleaseRefRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	ReleaseRef         PluginReleaseRef
	Now                time.Time
}

type WorkerInvocationPayload struct {
	PluginID             string         `json:"plugin_id"`
	PluginInstanceID     string         `json:"plugin_instance_id"`
	ActiveFingerprint    string         `json:"active_fingerprint"`
	RuntimeInstanceID    string         `json:"runtime_instance_id"`
	RuntimeGenerationID  string         `json:"runtime_generation_id"`
	PackageHash          string         `json:"package_hash"`
	WorkerID             string         `json:"worker_id"`
	WorkerMode           string         `json:"worker_mode"`
	WorkerScope          string         `json:"worker_scope"`
	Artifact             string         `json:"artifact"`
	ArtifactSHA256       string         `json:"artifact_sha256"`
	ABI                  string         `json:"abi"`
	Method               string         `json:"method"`
	Export               string         `json:"export"`
	Effect               string         `json:"effect"`
	Execution            string         `json:"execution"`
	SurfaceInstanceID    string         `json:"surface_instance_id,omitempty"`
	OwnerSessionHash     string         `json:"owner_session_hash,omitempty"`
	OwnerUserHash        string         `json:"owner_user_hash,omitempty"`
	SessionChannelIDHash string         `json:"session_channel_id_hash,omitempty"`
	BridgeChannelID      string         `json:"bridge_channel_id,omitempty"`
	Params               map[string]any `json:"params"`
}