host

type Adapters struct {
	SessionResolver             sessionctx.Resolver
	Policy                      PolicyAdapter
	PackageTrustVerifier        PackageTrustVerifier
	ReleaseMetadataVerifier     ReleaseMetadataVerifier
	RevocationVerifier          SourceRevocationEvidenceVerifier
	ReleaseSourcePolicy         ReleaseSourcePolicyResolver
	ReleaseArtifactResolver     ReleaseArtifactResolver
	HostRequirements            HostRequirementPolicy
	CapabilityContractArtifacts CapabilityContractArtifactResolver
	CapabilityContractKeys      CapabilityContractKeyResolver
	Registry                    registry.Store
	Audit                       AuditSink
	Diagnostics                 DiagnosticsSink
	Secrets                     SecretStoreAdapter
	RuntimeArtifactResolver     RuntimeArtifactResolver
	RuntimeSupervisor           runtimeclient.Supervisor
	SurfaceCatalog              SurfaceCatalogSink
	Assets                      pluginpkg.AssetStore
	InstallStages               installstage.Store
	Capabilities                *capability.Registry
	CoreActions                 CoreActionAdapter
	SurfaceTokens               *bridge.SurfaceTokenService
	Storage                     storage.Broker
	Connectivity                connectivity.Broker
	NetworkExecutor             connectivity.NetworkExecutor
	Operations                  operation.Store
	Permissions                 permissions.Store
	SecurityPolicy              security.PolicyStore
	ConfirmationIntents         security.ConfirmationIntentStore
	Cleanup                     cleanup.Orchestrator
	RetainedData                retaineddata.Store
	Settings                    settings.Store
	Streams                     stream.Store
}

type AuditEvent = observability.AuditEvent

type AuditLister = observability.AuditLister

type AuditSink = observability.AuditSink

type BindRetainedDataRequest struct {
	RetainedID             string    `json:"retained_id"`
	TargetPluginInstanceID string    `json:"target_plugin_instance_id"`
	Now                    time.Time `json:"now,omitempty"`
}

type CallMethodRequest struct {
	PluginInstanceID     string         `json:"plugin_instance_id"`
	SurfaceInstanceID    string         `json:"surface_instance_id"`
	SessionChannelIDHash string         `json:"session_channel_id_hash,omitempty"`
	OwnerSessionHash     string         `json:"owner_session_hash,omitempty"`
	OwnerUserHash        string         `json:"owner_user_hash,omitempty"`
	BridgeChannelID      string         `json:"bridge_channel_id"`
	GatewayToken         string         `json:"plugin_gateway_token"`
	ConfirmationID       string         `json:"confirmation_id,omitempty"`
	Method               string         `json:"method"`
	Params               map[string]any `json:"params,omitempty"`
	Now                  time.Time      `json:"now,omitempty"`
	// contains filtered or unexported fields
}

type CallMethodResult struct {
	Data                 any        `json:"data"`
	OperationID          string     `json:"operation_id,omitempty"`
	StreamID             string     `json:"stream_id,omitempty"`
	StreamTicket         string     `json:"stream_ticket,omitempty"`
	StreamTicketID       string     `json:"stream_ticket_id,omitempty"`
	StreamExpiresAt      *time.Time `json:"stream_expires_at,omitempty"`
	ConfirmationRequired bool       `json:"confirmation_required,omitempty"`
	ConfirmationTokenID  string     `json:"confirmation_token_id,omitempty"`
	RequestHash          string     `json:"request_hash,omitempty"`
	PlanHash             string     `json:"plan_hash,omitempty"`
}

type CancelOperationRequest struct {
	OperationID string `json:"operation_id"`
	Reason      string `json:"reason,omitempty"`
	Now         time.Time
}

type CancelSurfaceOperationRequest struct {
	OperationID          string
	SurfaceInstanceID    string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	BridgeChannelID      string
	Reason               string
	Now                  time.Time
}

type CapabilityArtifactFetchHop struct {
	URL        string `json:"url"`
	ResolvedIP string `json:"resolved_ip"`
}

type CapabilityContractArtifactResolver interface {
	ResolveCapabilityContract(ctx context.Context, req CapabilityContractResolveRequest) (ResolvedCapabilityContractArtifact, error)
}

type CapabilityContractArtifactSet interface {
	OpenCapabilityContractArtifact(ctx context.Context, ref string) (ResolvedCapabilityContractFile, error)
}

type CapabilityContractKeyRequest struct {
	SourceID             string               `json:"source_id"`
	PublisherID          string               `json:"publisher_id"`
	KeyID                string               `json:"key_id"`
	SourcePolicySnapshot SourcePolicySnapshot `json:"source_policy_snapshot"`
}

type CapabilityContractKeyResolver interface {
	ResolveCapabilityContractKey(ctx context.Context, req CapabilityContractKeyRequest) ([]byte, error)
}

type CapabilityContractResolveRequest struct {
	SourceID             string                 `json:"source_id"`
	PluginPublisherID    string                 `json:"plugin_publisher_id"`
	Pin                  capabilitycontract.Pin `json:"pin"`
	SourcePolicySnapshot SourcePolicySnapshot   `json:"source_policy_snapshot"`
}

type CleanupExpiredRetainedDataRequest struct {
	Now         time.Time `json:"now,omitempty"`
	RetryFailed bool      `json:"retry_failed,omitempty"`
	MaxRecords  int       `json:"max_records,omitempty"`
}

type ConfirmMethodRequest = CallMethodRequest

type ConfirmMethodResult struct {
	ConfirmationID      string    `json:"confirmation_id"`
	ConfirmationTokenID string    `json:"confirmation_token_id"`
	RequestHash         string    `json:"request_hash"`
	PlanHash            string    `json:"plan_hash"`
	Plan                any       `json:"plan,omitempty"`
	ExpiresAt           time.Time `json:"expires_at"`
}

type CoreActionAdapter interface {
	ResolveCoreActionTarget(ctx context.Context, req capability.TargetResolutionRequest) (capability.TargetDescriptor, error)
	InvokeCoreAction(ctx context.Context, req capability.Invocation) (capability.Result, error)
}

type DeleteRetainedDataRequest struct {
	RetainedID string    `json:"retained_id"`
	Now        time.Time `json:"now,omitempty"`
}

type DeleteSecurityPolicyRequest struct {
	PluginInstanceID string    `json:"plugin_instance_id"`
	Now              time.Time `json:"now,omitempty"`
}

type DiagnosticEvent = observability.DiagnosticEvent

type DiagnosticLister = observability.DiagnosticLister

type DiagnosticsSink = observability.DiagnosticsSink

type DisableRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	Reason             string
	Now                time.Time
}

type DisposeSurfaceRequest struct {
	SurfaceInstanceID    string
	BridgeNonce          string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type DowngradeRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	Version            string
	PackageHash        string
	Now                time.Time
}

type EnableRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	Now                time.Time
}

type ExchangeAssetTicketRequest struct {
	SurfaceInstanceID    string
	AssetTicket          string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type ExportDataRequest struct {
	PluginInstanceID string
	IncludeSecrets   bool
}

type ExportDataResult struct {
	ArchiveRef         string `json:"archive_ref,omitempty"`
	SettingsArchiveRef string `json:"settings_archive_ref,omitempty"`
}

type GetSecurityPolicyRequest struct {
	PluginInstanceID string `json:"plugin_instance_id"`
}

type GetSettingsRequest struct {
	PluginInstanceID string `json:"plugin_instance_id"`
}

type GrantPermissionRequest struct {
	PluginInstanceID string    `json:"plugin_instance_id"`
	PermissionID     string    `json:"permission_id"`
	GrantedBy        string    `json:"granted_by,omitempty"`
	Now              time.Time `json:"now,omitempty"`
	ExpiresAt        time.Time `json:"expires_at,omitempty"`
}

type Host struct {
	// contains filtered or unexported fields
}

type HostCapabilityContractRef = capabilitycontract.Pin

type HostCapabilityRequirement struct {
	CapabilityID      string                    `json:"capability_id"`
	CapabilityVersion string                    `json:"capability_version"`
	Contract          HostCapabilityContractRef `json:"contract"`
}

type HostRequirement struct {
	HostID                      string                      `json:"host_id"`
	MinHostVersion              string                      `json:"min_host_version,omitempty"`
	RequiredCapabilityContracts []HostCapabilityRequirement `json:"required_capability_contracts,omitempty"`
}

type HostRequirementPolicy interface {
	SelectHostRequirement(ctx context.Context, req HostRequirementSelectionRequest) (HostRequirementSelection, error)
}

type HostRequirementSelection struct {
	HostID string `json:"host_id"`
}

type HostRequirementSelectionRequest struct {
	SourceID      string            `json:"source_id"`
	PublisherID   string            `json:"publisher_id"`
	PluginID      string            `json:"plugin_id"`
	PluginVersion string            `json:"plugin_version"`
	Requirements  []HostRequirement `json:"requirements"`
}

type ImportDataRequest struct {
	PluginInstanceID   string
	ArchiveRef         string
	SettingsArchiveRef string
	DeleteExisting     bool
}

type ImportLocalPackageRequest struct {
	PackageReader      io.ReaderAt
	PackageSize        int64
	PluginInstanceID   string
	PluginStateVersion uint64
	Now                time.Time
}

type InstallReleaseRefRequest struct {
	ReleaseRef         PluginReleaseRef
	PluginInstanceID   string
	PluginStateVersion uint64
	Now                time.Time
}

type IntentRecord struct {
	PluginID          string         `json:"plugin_id"`
	PluginInstanceID  string         `json:"plugin_instance_id"`
	PublisherID       string         `json:"publisher_id"`
	DisplayName       string         `json:"display_name"`
	Version           string         `json:"version"`
	ActiveFingerprint string         `json:"active_fingerprint"`
	IntentID          string         `json:"intent_id"`
	Method            string         `json:"method"`
	Effect            string         `json:"effect"`
	Execution         string         `json:"execution"`
	PayloadSchema     map[string]any `json:"payload_schema,omitempty"`
}

type InvokeIntentRequest struct {
	PluginInstanceID     string         `json:"plugin_instance_id,omitempty"`
	IntentID             string         `json:"intent_id"`
	Params               map[string]any `json:"params,omitempty"`
	OwnerSessionHash     string         `json:"owner_session_hash,omitempty"`
	OwnerUserHash        string         `json:"owner_user_hash,omitempty"`
	SessionChannelIDHash string         `json:"session_channel_id_hash,omitempty"`
	Now                  time.Time      `json:"now,omitempty"`
}

type ListAuditEventsRequest = observability.ListAuditRequest

type ListDiagnosticEventsRequest = observability.ListDiagnosticRequest

type ListIntentsRequest struct {
	IntentID         string `json:"intent_id,omitempty"`
	PluginInstanceID string `json:"plugin_instance_id,omitempty"`
}

type ListOperationsRequest struct {
	PluginInstanceID string `json:"plugin_instance_id,omitempty"`
}

type ListPermissionGrantsRequest struct {
	PluginInstanceID string `json:"plugin_instance_id,omitempty"`
	ActiveOnly       bool   `json:"active_only,omitempty"`
}

type ListRetainedDataRequest = retaineddata.ListRequest

type MintBridgeTokenRequest struct {
	Handshake                 bridge.Handshake
	BridgeChannelID           string
	HandshakeTranscriptSHA256 string
	PreviousGatewayToken      string
	OwnerSessionHash          string
	OwnerUserHash             string
	SessionChannelIDHash      string
	Now                       time.Time
}

type MintConnectionGrantRequest struct {
	PluginInstanceID    string                 `json:"plugin_instance_id"`
	ConnectorID         string                 `json:"connector_id"`
	Transport           connectivity.Transport `json:"transport"`
	Destination         string                 `json:"destination"`
	RuntimeInstanceID   string                 `json:"runtime_instance_id,omitempty"`
	RuntimeGenerationID string                 `json:"runtime_generation_id,omitempty"`
	RuntimeShardID      string                 `json:"runtime_shard_id,omitempty"`
	Now                 time.Time              `json:"now,omitempty"`
	TTL                 time.Duration          `json:"ttl,omitempty"`
}

type MintStorageHandleGrantRequest struct {
	PluginInstanceID    string        `json:"plugin_instance_id"`
	StoreID             string        `json:"store_id"`
	RuntimeInstanceID   string        `json:"runtime_instance_id,omitempty"`
	RuntimeGenerationID string        `json:"runtime_generation_id"`
	RuntimeShardID      string        `json:"runtime_shard_id,omitempty"`
	Now                 time.Time     `json:"now,omitempty"`
	TTL                 time.Duration `json:"ttl,omitempty"`
}

type NetworkHandleGrantResult struct {
	ConnectionGrant connectivity.ConnectionGrant `json:"connection_grant"`
	HandleGrant     bridge.HandleGrantResult     `json:"handle_grant"`
}

type OpenSurfaceRequest struct {
	PluginInstanceID     string
	PluginStateVersion   uint64
	SurfaceID            string
	SurfaceInstanceID    string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type PackageDistribution string

type PackageDistributionRef struct {
	Distribution PackageDistribution `json:"distribution"`
	ArtifactRef  string              `json:"artifact_ref,omitempty"`
	ImportID     string              `json:"import_id,omitempty"`
}

type PackageDowngradePolicy string

type PackageHashSet struct {
	PackageSHA256  string `json:"package_sha256"`
	ManifestSHA256 string `json:"manifest_sha256"`
	EntriesSHA256  string `json:"entries_sha256"`
}

type PackageInstallPolicy string

type PackageReleaseSignature struct {
	Algorithm          string `json:"algorithm"`
	KeyID              string `json:"key_id"`
	SignatureBundleRef string `json:"signature_bundle_ref"`
	SourcePolicyEpoch  string `json:"source_policy_epoch"`
	RevocationEpoch    string `json:"revocation_epoch"`
}

type PackageSourceClass string

type PackageSourceType string

type PackageTrustAction string

type PackageTrustVerificationRequest struct {
	Action               PackageTrustAction     `json:"action"`
	Package              pluginpkg.Package      `json:"package"`
	LocalImport          bool                   `json:"local_import,omitempty"`
	ReleaseRef           *PluginReleaseRef      `json:"release_ref,omitempty"`
	Release              *PluginPackageRelease  `json:"release,omitempty"`
	SourcePolicySnapshot *SourcePolicySnapshot  `json:"source_policy_snapshot,omitempty"`
	CurrentRecord        *registry.PluginRecord `json:"current_record,omitempty"`
	PluginInstanceID     string                 `json:"plugin_instance_id,omitempty"`
	Now                  time.Time              `json:"now,omitempty"`
}

type PackageTrustVerificationResult = registry.TrustAssessment

type PackageTrustVerifier interface {
	VerifyPackageTrust(ctx context.Context, req PackageTrustVerificationRequest) (PackageTrustVerificationResult, error)
}

type PackageUnsignedPolicy string

type PatchSettingsRequest struct {
	PluginInstanceID string         `json:"plugin_instance_id"`
	Values           map[string]any `json:"values"`
	Now              time.Time      `json:"now,omitempty"`
}

type PluginPackageRelease struct {
	SourceID                 string                    `json:"source_id"`
	PublisherID              string                    `json:"publisher_id"`
	PluginID                 string                    `json:"plugin_id"`
	Version                  string                    `json:"version"`
	DistributionRef          PackageDistributionRef    `json:"distribution_ref"`
	ReleaseMetadataSHA256    string                    `json:"release_metadata_sha256"`
	ReleaseMetadataSignature *ReleaseMetadataSignature `json:"release_metadata_signature,omitempty"`
	Hashes                   PackageHashSet            `json:"hashes"`
	PackageSignature         *PackageReleaseSignature  `json:"package_signature,omitempty"`
	Compatibility            *ReleaseCompatibility     `json:"compatibility,omitempty"`
	HostRequirements         []HostRequirement         `json:"host_requirements,omitempty"`
	ReleaseEvidence          *ReleaseEvidence          `json:"release_evidence,omitempty"`
	Metadata                 map[string]string         `json:"metadata,omitempty"`
}

type PluginRef struct {
	PluginID          string `json:"plugin_id"`
	PluginInstanceID  string `json:"plugin_instance_id"`
	Version           string `json:"version"`
	ActiveFingerprint string `json:"active_fingerprint"`
}

type PluginReleaseRef struct {
	SourceID              string         `json:"source_id"`
	ReleaseMetadataRef    string         `json:"release_metadata_ref"`
	ReleaseMetadataSHA256 string         `json:"release_metadata_sha256"`
	PublisherID           string         `json:"publisher_id"`
	PluginID              string         `json:"plugin_id"`
	Version               string         `json:"version"`
	ExpectedHashes        PackageHashSet `json:"expected_hashes"`
}

type PolicyAdapter interface {
	EvaluateLocalPolicy(ctx context.Context, session sessionctx.Context, plugin PluginRef, method manifest.MethodSpec) (PolicyDecision, error)
	DeveloperModeEnabled(ctx context.Context, session sessionctx.Context) (bool, error)
	LocalGeneratedPluginsEnabled(ctx context.Context, session sessionctx.Context) (bool, error)
}

type PolicyDecision string

type PrepareSurfaceResult struct {
	bridge.AssetSessionResult
	Document pluginpkg.OpaqueSurfaceDocument `json:"document"`
}

type PutSecurityPolicyRequest struct {
	PluginInstanceID   string    `json:"plugin_instance_id"`
	AllowedPermissions []string  `json:"allowed_permissions,omitempty"`
	DeniedMethods      []string  `json:"denied_methods,omitempty"`
	Now                time.Time `json:"now,omitempty"`
}

type ReadStreamRequest struct {
	StreamID             string        `json:"stream_id"`
	StreamTicket         string        `json:"stream_ticket,omitempty"`
	SurfaceInstanceID    string        `json:"surface_instance_id,omitempty"`
	OwnerSessionHash     string        `json:"owner_session_hash,omitempty"`
	OwnerUserHash        string        `json:"owner_user_hash,omitempty"`
	SessionChannelIDHash string        `json:"session_channel_id_hash,omitempty"`
	MaxEvents            int           `json:"max_events,omitempty"`
	MaxBytes             int64         `json:"max_bytes,omitempty"`
	WaitTimeout          time.Duration `json:"-"`
	Now                  time.Time
}

type ReadStreamResult struct {
	Record              stream.Record  `json:"record"`
	Events              []stream.Event `json:"events,omitempty"`
	Done                bool           `json:"done"`
	TerminalStatus      stream.Status  `json:"terminal_status,omitempty"`
	NextStreamTicket    string         `json:"next_stream_ticket,omitempty"`
	NextStreamTicketID  string         `json:"next_stream_ticket_id,omitempty"`
	NextStreamExpiresAt *time.Time     `json:"next_stream_expires_at,omitempty"`
}

type ReadSurfaceAssetRequest struct {
	AssetSession         string
	AssetSessionID       string
	BindingID            string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type ReadSurfaceAssetResult struct {
	Entry   pluginpkg.Entry
	Content []byte
	Session bridge.SurfaceSession
}

type RejectMethodConfirmationRequest struct {
	PluginInstanceID     string
	SurfaceInstanceID    string
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	BridgeChannelID      string
	GatewayToken         string
	ConfirmationID       string
	Now                  time.Time
}

type RejectMethodConfirmationResult struct {
	Rejected bool `json:"rejected"`
}

type ReleaseArtifactResolveRequest struct {
	Action               PackageTrustAction     `json:"action"`
	ReleaseRef           PluginReleaseRef       `json:"release_ref"`
	SourcePolicySnapshot SourcePolicySnapshot   `json:"source_policy_snapshot"`
	CurrentRecord        *registry.PluginRecord `json:"current_record,omitempty"`
	PluginInstanceID     string                 `json:"plugin_instance_id,omitempty"`
	Now                  time.Time              `json:"now,omitempty"`
}

type ReleaseArtifactResolver interface {
	ResolveReleaseArtifact(ctx context.Context, req ReleaseArtifactResolveRequest) (ResolvedPackageArtifact, error)
}

type ReleaseCompatibility struct {
	MinReDevPluginVersion string   `json:"min_redevplugin_version,omitempty"`
	MinRuntimeVersion     string   `json:"min_runtime_version,omitempty"`
	UIProtocolVersion     string   `json:"ui_protocol_version,omitempty"`
	SupportedTargets      []string `json:"supported_targets,omitempty"`
}

type ReleaseEvidence struct {
	NoticesSHA256    string `json:"notices_sha256,omitempty"`
	ProvenanceSHA256 string `json:"provenance_sha256,omitempty"`
	GeneratedAt      string `json:"generated_at,omitempty"`
}

type ReleaseMetadataSignature struct {
	Algorithm         string `json:"algorithm"`
	KeyID             string `json:"key_id"`
	SignatureRef      string `json:"signature_ref"`
	SourcePolicyEpoch string `json:"source_policy_epoch"`
	RevocationEpoch   string `json:"revocation_epoch"`
}

type ReleaseMetadataVerificationRequest struct {
	Action                   PackageTrustAction     `json:"action"`
	ReleaseRef               PluginReleaseRef       `json:"release_ref"`
	Release                  PluginPackageRelease   `json:"release"`
	SourcePolicySnapshot     SourcePolicySnapshot   `json:"source_policy_snapshot"`
	ReleaseMetadataBytes     []byte                 `json:"-"`
	ReleaseMetadataSignature []byte                 `json:"-"`
	CurrentRecord            *registry.PluginRecord `json:"current_record,omitempty"`
	PluginInstanceID         string                 `json:"plugin_instance_id,omitempty"`
	Now                      time.Time              `json:"now,omitempty"`
}

type ReleaseMetadataVerificationResult struct {
	Metadata map[string]string `json:"metadata,omitempty"`
}

type ReleaseMetadataVerifier interface {
	VerifyReleaseMetadata(ctx context.Context, req ReleaseMetadataVerificationRequest) (ReleaseMetadataVerificationResult, error)
}

type ReleaseSourcePolicyRequest struct {
	Action           PackageTrustAction     `json:"action"`
	ReleaseRef       PluginReleaseRef       `json:"release_ref"`
	CurrentRecord    *registry.PluginRecord `json:"current_record,omitempty"`
	PluginInstanceID string                 `json:"plugin_instance_id,omitempty"`
	Now              time.Time              `json:"now,omitempty"`
}

type ReleaseSourcePolicyResolver interface {
	ResolveReleaseSourcePolicy(ctx context.Context, req ReleaseSourcePolicyRequest) (SourcePolicySnapshot, error)
}

type ResolvedCapabilityContractArtifact struct {
	Artifacts CapabilityContractArtifactSet `json:"-"`
}

type ResolvedCapabilityContractFile struct {
	Reader     io.ReadCloser                `json:"-"`
	Size       int64                        `json:"size"`
	MediaType  string                       `json:"media_type"`
	FetchChain []CapabilityArtifactFetchHop `json:"fetch_chain"`
}

type ResolvedPackageArtifact struct {
	ReleaseMetadataBytes     []byte      `json:"-"`
	ReleaseMetadataSignature []byte      `json:"-"`
	Reader                   io.ReaderAt `json:"-"`
	Size                     int64       `json:"size"`
}

type RetainedDataCleanupResult struct {
	Deleted []retaineddata.Record `json:"deleted,omitempty"`
	Failed  []retaineddata.Record `json:"failed,omitempty"`
}

type RevokePermissionRequest struct {
	PluginInstanceID string    `json:"plugin_instance_id"`
	PermissionID     string    `json:"permission_id"`
	RevokedBy        string    `json:"revoked_by,omitempty"`
	Reason           string    `json:"reason,omitempty"`
	Now              time.Time `json:"now,omitempty"`
}

type RevokeSurfaceScopeRequest struct {
	OwnerSessionHash     string
	OwnerUserHash        string
	SessionChannelIDHash string
	Now                  time.Time
}

type RuntimeArtifactResolver interface {
	RuntimePath(ctx context.Context, target RuntimeTarget) (string, error)
}

type RuntimeTarget struct {
	OS   string `json:"os"`
	Arch string `json:"arch"`
}

type SecretBindRequest = secrets.BindRequest

type SecretDeleteRequest = secrets.DeleteRequest

type SecretStoreAdapter = secrets.Store

type SecretTestRequest = secrets.TestRequest

type SettingsResult struct {
	PluginInstanceID string         `json:"plugin_instance_id"`
	SchemaVersion    int            `json:"schema_version"`
	SettingsRevision uint64         `json:"settings_revision"`
	Values           map[string]any `json:"values"`
	UpdatedAt        time.Time      `json:"updated_at"`
}

type SettingsSchemaResult struct {
	PluginInstanceID string                      `json:"plugin_instance_id"`
	SchemaVersion    int                         `json:"schema_version"`
	Migration        manifest.MigrationSpec      `json:"migration"`
	Fields           []manifest.SettingFieldSpec `json:"fields"`
	SettingsRevision uint64                      `json:"settings_revision"`
}

type SourcePolicyRevocationEvidence struct {
	MetadataRef      string `json:"metadata_ref"`
	MetadataSHA256   string `json:"metadata_sha256"`
	SignatureRef     string `json:"signature_ref"`
	SignatureKeyID   string `json:"signature_key_id"`
	VerifiedAt       string `json:"verified_at"`
	ExpiresAt        string `json:"expires_at"`
	HighestSeenEpoch string `json:"highest_seen_epoch"`
	MetadataBytes    []byte `json:"-"`
	SignatureBytes   []byte `json:"-"`
}

type SourcePolicySnapshot struct {
	SchemaVersion        string                          `json:"schema_version"`
	SourceID             string                          `json:"source_id"`
	SourceType           PackageSourceType               `json:"source_type"`
	SourceClass          PackageSourceClass              `json:"source_class,omitempty"`
	AllowedPublishers    []string                        `json:"allowed_publishers,omitempty"`
	AllowedArtifactHosts []string                        `json:"allowed_artifact_hosts,omitempty"`
	TrustedKeyIDs        []string                        `json:"trusted_key_ids,omitempty"`
	TrustedKeys          []SourcePolicyTrustedKey        `json:"trusted_keys,omitempty"`
	RevocationEvidence   *SourcePolicyRevocationEvidence `json:"revocation_evidence,omitempty"`
	RequireSignature     bool                            `json:"require_signature,omitempty"`
	InstallPolicy        PackageInstallPolicy            `json:"install_policy,omitempty"`
	UnsignedPolicy       PackageUnsignedPolicy           `json:"unsigned_policy,omitempty"`
	DowngradePolicy      PackageDowngradePolicy          `json:"downgrade_policy,omitempty"`
	PolicyEpoch          string                          `json:"policy_epoch,omitempty"`
	KeyRotationEpoch     string                          `json:"key_rotation_epoch,omitempty"`
	RevocationEpoch      string                          `json:"revocation_epoch,omitempty"`
	AssessedAt           string                          `json:"assessed_at,omitempty"`
	Metadata             map[string]string               `json:"metadata,omitempty"`
}

type SourcePolicyTrustedKey struct {
	Algorithm                   string   `json:"algorithm"`
	KeyID                       string   `json:"key_id"`
	PublicKeySHA256             string   `json:"public_key_sha256"`
	Usage                       []string `json:"usage"`
	AllowedCapabilityPublishers []string `json:"allowed_capability_publishers,omitempty"`
	ValidFrom                   string   `json:"valid_from,omitempty"`
	ValidUntil                  string   `json:"valid_until,omitempty"`
	RevocationEpoch             string   `json:"revocation_epoch,omitempty"`
}

type SourceRevocationEvidenceVerificationRequest struct {
	ReleaseRef                  PluginReleaseRef               `json:"release_ref"`
	SourcePolicySnapshot        SourcePolicySnapshot           `json:"source_policy_snapshot"`
	RevocationEvidence          SourcePolicyRevocationEvidence `json:"revocation_evidence"`
	RevocationMetadata          SourceRevocationMetadata       `json:"revocation_metadata"`
	RevocationMetadataBytes     []byte                         `json:"-"`
	RevocationMetadataSignature []byte                         `json:"-"`
	Now                         time.Time                      `json:"now,omitempty"`
}

type SourceRevocationEvidenceVerificationResult struct {
	Metadata map[string]string `json:"metadata,omitempty"`
}

type SourceRevocationEvidenceVerifier interface {
	VerifySourceRevocationEvidence(ctx context.Context, req SourceRevocationEvidenceVerificationRequest) (SourceRevocationEvidenceVerificationResult, error)
}

type SourceRevocationMetadata struct {
	SchemaVersion    string   `json:"schema_version"`
	SourceID         string   `json:"source_id"`
	HighestSeenEpoch string   `json:"highest_seen_epoch"`
	GeneratedAt      string   `json:"generated_at"`
	ExpiresAt        string   `json:"expires_at"`
	RevokedKeyIDs    []string `json:"revoked_key_ids,omitempty"`
}

type StartRuntimeRequest struct {
	Target RuntimeTarget `json:"target,omitempty"`
}

type StorageHandleGrantResult struct {
	Namespace   storage.Namespace        `json:"namespace"`
	HandleGrant bridge.HandleGrantResult `json:"handle_grant"`
}

type SurfaceCatalogSink interface {
	PublishSurfaces(ctx context.Context, snapshot SurfaceSnapshot) error
}

type SurfaceSnapshot struct {
	PluginInstanceID  string                 `json:"plugin_instance_id"`
	ActiveFingerprint string                 `json:"active_fingerprint"`
	Surfaces          []manifest.SurfaceSpec `json:"surfaces"`
}

type UninstallRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	DeleteData         bool
	Now                time.Time
}

type UpdateLocalPackageRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	PackageReader      io.ReaderAt
	PackageSize        int64
	Now                time.Time
}

type UpdateReleaseRefRequest struct {
	PluginInstanceID   string
	PluginStateVersion uint64
	ReleaseRef         PluginReleaseRef
	Now                time.Time
}