registry

type AuthorizationDecision struct {
	State              AuthorizationState        `json:"state"`
	Allowed            bool                      `json:"allowed"`
	MissingPermissions []string                  `json:"missing_permissions,omitempty"`
	PolicyEvaluation   security.PolicyEvaluation `json:"policy_evaluation"`
}

type AuthorizationRevisionConflictError struct {
	PluginInstanceID string
	Expected         AuthorizationRevisions
	Actual           AuthorizationRevisions
}

type AuthorizationRevisions struct {
	PolicyRevision     uint64 `json:"policy_revision"`
	ManagementRevision uint64 `json:"management_revision"`
	RevokeEpoch        uint64 `json:"revoke_epoch"`
}

type AuthorizationSnapshot struct {
	Plugin PluginRecord           `json:"plugin"`
	Grants []permissions.Record   `json:"grants"`
	Policy *security.PolicyRecord `json:"policy,omitempty"`
}

type AuthorizationState struct {
	PluginInstanceID  string                 `json:"plugin_instance_id"`
	PluginVersion     string                 `json:"plugin_version"`
	ActiveFingerprint string                 `json:"active_fingerprint"`
	TrustState        TrustState             `json:"trust_state"`
	EnableState       EnableState            `json:"enable_state"`
	Revisions         AuthorizationRevisions `json:"revisions"`
}

type AuthorizationStore interface {
	GrantPermission(ctx context.Context, req permissions.GrantRequest, expected AuthorizationRevisions) (AuthorizationSnapshot, error)
	RevokePermission(ctx context.Context, req permissions.RevokeRequest, expected AuthorizationRevisions) (AuthorizationSnapshot, error)
	PutSecurityPolicy(ctx context.Context, req security.PutPolicyRequest, expected AuthorizationRevisions) (AuthorizationSnapshot, error)
	DeleteSecurityPolicy(ctx context.Context, pluginInstanceID string, now time.Time, expected AuthorizationRevisions) (AuthorizationSnapshot, error)
	GetAuthorization(ctx context.Context, pluginInstanceID string) (AuthorizationSnapshot, error)
	ListAuthorization(ctx context.Context) ([]AuthorizationSnapshot, error)
	Authorize(ctx context.Context, req AuthorizeRequest) (AuthorizationDecision, error)
}

type AuthorizeRequest struct {
	PluginInstanceID string                 `json:"plugin_instance_id"`
	Method           string                 `json:"method"`
	PermissionIDs    []string               `json:"permission_ids,omitempty"`
	Expected         AuthorizationRevisions `json:"expected"`
	Now              time.Time              `json:"-"`
}

type EnableState string

type LocalImportProvenance struct {
	ImportID       string `json:"import_id"`
	Distribution   string `json:"distribution"`
	PolicyEpoch    string `json:"policy_epoch"`
	UnsignedPolicy string `json:"unsigned_policy"`
	AssessedAt     string `json:"assessed_at"`
}

type ManagementRevisionConflictError struct {
	PluginInstanceID string
	Expected         uint64
	Actual           uint64
}

type MemoryStore struct {
	// contains filtered or unexported fields
}

type PluginRecord struct {
	OwnerEnvHash             string                   `json:"-"`
	PluginInstanceID         string                   `json:"plugin_instance_id"`
	PublisherID              string                   `json:"publisher_id"`
	PluginID                 string                   `json:"plugin_id"`
	Version                  string                   `json:"version"`
	ActiveFingerprint        string                   `json:"active_fingerprint"`
	PackageHash              string                   `json:"package_hash"`
	ManifestHash             string                   `json:"manifest_hash"`
	EntriesHash              string                   `json:"entries_hash"`
	TrustState               TrustState               `json:"trust_state"`
	TrustAssessment          TrustAssessment          `json:"trust_assessment"`
	SourcePolicySnapshotHash string                   `json:"source_policy_snapshot_hash,omitempty"`
	SourcePolicySnapshot     map[string]any           `json:"source_policy_snapshot,omitempty"`
	LocalImportProvenance    *LocalImportProvenance   `json:"local_import_provenance,omitempty"`
	CapabilityContracts      []capabilitycontract.Pin `json:"capability_contracts,omitempty"`
	EnableState              EnableState              `json:"enable_state"`
	DisabledReason           string                   `json:"disabled_reason,omitempty"`
	PolicyRevision           uint64                   `json:"policy_revision"`
	ManagementRevision       uint64                   `json:"management_revision"`
	RevokeEpoch              uint64                   `json:"revoke_epoch"`
	Manifest                 manifest.Manifest        `json:"manifest"`
	PackageEntries           []pluginpkg.Entry        `json:"package_entries"`
	RuntimeRequirement       *RuntimeRequirement      `json:"runtime_requirement,omitempty"`
	VersionHistory           []PluginVersion          `json:"version_history,omitempty"`
	InstalledAt              time.Time                `json:"installed_at"`
	EnabledAt                *time.Time               `json:"enabled_at,omitempty"`
	UpdatedAt                time.Time                `json:"updated_at"`
	DeletedAt                *time.Time               `json:"deleted_at,omitempty"`
	Metadata                 map[string]string        `json:"metadata,omitempty"`
}

type PluginVersion struct {
	Version                  string                   `json:"version"`
	ActiveFingerprint        string                   `json:"active_fingerprint"`
	PackageHash              string                   `json:"package_hash"`
	ManifestHash             string                   `json:"manifest_hash"`
	EntriesHash              string                   `json:"entries_hash"`
	TrustState               TrustState               `json:"trust_state"`
	TrustAssessment          TrustAssessment          `json:"trust_assessment"`
	SourcePolicySnapshotHash string                   `json:"source_policy_snapshot_hash,omitempty"`
	SourcePolicySnapshot     map[string]any           `json:"source_policy_snapshot,omitempty"`
	LocalImportProvenance    *LocalImportProvenance   `json:"local_import_provenance,omitempty"`
	CapabilityContracts      []capabilitycontract.Pin `json:"capability_contracts,omitempty"`
	Manifest                 manifest.Manifest        `json:"manifest"`
	PackageEntries           []pluginpkg.Entry        `json:"package_entries"`
	RuntimeRequirement       *RuntimeRequirement      `json:"runtime_requirement,omitempty"`
	ActivatedAt              time.Time                `json:"activated_at"`
	Metadata                 map[string]string        `json:"metadata,omitempty"`
}

type PutOptions struct {
	Now time.Time `json:"-"`
}

type RuntimeRequirement struct {
	MinVersion       string                 `json:"min_version"`
	SupportedTargets []runtimetarget.Target `json:"supported_targets,omitempty"`
}

type SQLiteStore struct {
	// contains filtered or unexported fields
}

type SourceSecurityFloor struct {
	SourceID                 string    `json:"source_id"`
	PolicyEpoch              string    `json:"policy_epoch"`
	KeyRotationEpoch         string    `json:"key_rotation_epoch"`
	RevocationEpoch          string    `json:"revocation_epoch"`
	SourcePolicySnapshotHash string    `json:"source_policy_snapshot_hash"`
	RevocationMetadataSHA256 string    `json:"revocation_metadata_sha256"`
	UpdatedAt                time.Time `json:"updated_at"`
}

type Store interface {
	AuthorizationStore
	plugindata.Catalog
	PutPlugin(ctx context.Context, record PluginRecord, opts PutOptions) (PluginRecord, error)
	GetPlugin(ctx context.Context, pluginInstanceID string) (PluginRecord, error)
	ListPlugins(ctx context.Context) ([]PluginRecord, error)
	SetEnableState(ctx context.Context, pluginInstanceID string, state EnableState, reason string, now time.Time) (PluginRecord, error)
	CommitUninstall(ctx context.Context, req plugindata.CommitUninstallRequest) (plugindata.CommitUninstallResult, error)
	AbortInstall(ctx context.Context, pluginInstanceID string) error
	PutSourceSecurityFloor(ctx context.Context, floor SourceSecurityFloor, opts PutOptions) (SourceSecurityFloor, error)
	GetSourceSecurityFloor(ctx context.Context, sourceID string) (SourceSecurityFloor, error)
}

type TrustAssessment struct {
	TrustState           TrustState         `json:"trust_state"`
	ReasonCodes          []string           `json:"reason_codes,omitempty"`
	VerifiedHashes       TrustHashSet       `json:"verified_hashes"`
	VerifiedSignature    *VerifiedSignature `json:"verified_signature,omitempty"`
	TrustAssessmentEpoch string             `json:"trust_assessment_epoch,omitempty"`
	PolicyEpoch          string             `json:"policy_epoch,omitempty"`
	RevocationEpoch      string             `json:"revocation_epoch,omitempty"`
	Metadata             map[string]string  `json:"metadata,omitempty"`
}

type TrustHashSet struct {
	PackageSHA256  string `json:"package_sha256"`
	ManifestSHA256 string `json:"manifest_sha256"`
	EntriesSHA256  string `json:"entries_sha256"`
}

type TrustState string

type VerifiedSignature struct {
	Algorithm string `json:"algorithm"`
	KeyID     string `json:"key_id"`
}