externalsource

type AddressResolver ¶

type AddressResolver interface {
	LookupNetIP(ctx context.Context, network, host string) ([]netip.Addr, error)
}

AddressResolver permits host products and tests to supply DNS while keeping address classification and pinning inside ReDevPlugin.

type ArtifactFetchRequest ¶ added in v0.6.21

type ArtifactFetchRequest struct {
	URL            string
	QuotaKey       string
	MaxBytes       int64
	AllowedHosts   []string
	ExpectedSize   int64
	ExpectedSHA256 string
}

ArtifactFetchRequest binds a remote read to exact public hosts, byte length, and content digest. It is intended for signed release documents and package artifacts whose identity was resolved before the download starts.

type ArtifactFetchResult ¶ added in v0.6.21

type ArtifactFetchResult struct {
	Bytes     []byte
	Source    string
	Final     string
	Redirects []RedirectHop
}

type CredentialProvider ¶

type CredentialProvider interface {
	CredentialFor(ctx context.Context, request CredentialRequest) (http.Header, error)
}

CredentialProvider is called independently for every validated hop. A returned header is never forwarded to a different origin.

type CredentialRequest ¶

type CredentialRequest struct {
	SourceID string
	Origin   Origin
}

CredentialRequest scopes credentials to one exact origin and source.

type Error ¶

type Error struct {
	Code       ErrorCode
	Operation  string
	DisplayURL string
	// contains filtered or unexported fields
}

Error intentionally omits the wrapped cause from Error() so URL query credentials and transport headers cannot be copied into user-facing errors.

func (e *Error) Error() string

func (e *Error) Unwrap() error

type ErrorCode ¶

type ErrorCode string

ErrorCode is a stable classification for external-source admission failures.

const (
	ErrorInvalidURL           ErrorCode = "external_source_invalid_url"
	ErrorInvalidSource        ErrorCode = "external_source_invalid_source"
	ErrorTargetBlocked        ErrorCode = "external_source_target_blocked"
	ErrorDNS                  ErrorCode = "external_source_dns_failed"
	ErrorRedirectDenied       ErrorCode = "external_source_redirect_denied"
	ErrorTooManyRedirects     ErrorCode = "external_source_too_many_redirects"
	ErrorCredentialDenied     ErrorCode = "external_source_credential_denied"
	ErrorTransport            ErrorCode = "external_source_transport_failed"
	ErrorHTTPStatus           ErrorCode = "external_source_http_status"
	ErrorUnsupportedEncoding  ErrorCode = "external_source_unsupported_encoding"
	ErrorArtifactTooLarge     ErrorCode = "external_source_artifact_too_large"
	ErrorArtifactEmpty        ErrorCode = "external_source_artifact_empty"
	ErrorGitHubRelease        ErrorCode = "external_source_github_release_failed"
	ErrorGitHubAssetMissing   ErrorCode = "external_source_github_asset_missing"
	ErrorGitHubAssetAmbiguous ErrorCode = "external_source_github_asset_ambiguous"
	ErrorStageInvalid         ErrorCode = "external_source_stage_invalid"
	ErrorStageIntegrity       ErrorCode = "external_source_stage_integrity_failed"
	ErrorQuotaExceeded        ErrorCode = "external_source_quota_exceeded"
)

func CodeOf(err error) ErrorCode

type FetchRequest ¶

type FetchRequest struct {
	URL      string
	QuotaKey string
}

type FetchResult ¶

type FetchResult struct {
	Artifact  StagedArtifact
	Source    string
	Final     string
	Redirects []RedirectHop
}

type Fetcher ¶

type Fetcher struct {
	// contains filtered or unexported fields
}

func NewFetcher(options FetcherOptions) (*Fetcher, error)

func (fetcher *Fetcher) FetchArtifact(ctx context.Context, request ArtifactFetchRequest) (result ArtifactFetchResult, returnErr error)

func (fetcher *Fetcher) FetchPackage(ctx context.Context, request FetchRequest) (FetchResult, error)

type FetcherOptions ¶

type FetcherOptions struct {
	Stage        *StageStore
	Resolver     AddressResolver
	Credentials  CredentialProvider
	SourceID     string
	TotalTimeout time.Duration
}

type GitHubRESTReleaseClient ¶

type GitHubRESTReleaseClient struct {
	// contains filtered or unexported fields
}

GitHubRESTReleaseClient resolves GitHub release and commit identities through the fixed public GitHub REST origin. It never follows redirects or uses an ambient HTTP proxy.

func NewGitHubRESTReleaseClient(options GitHubRESTReleaseClientOptions) (*GitHubRESTReleaseClient, error)

func (client *GitHubRESTReleaseClient) LatestRelease(ctx context.Context, owner, repository string) (GitHubRelease, error)

func (client *GitHubRESTReleaseClient) ReleaseByTag(ctx context.Context, owner, repository, tag string) (GitHubRelease, error)

type GitHubRESTReleaseClientOptions ¶

type GitHubRESTReleaseClientOptions struct {
	Token     string
	UserAgent string
	Transport http.RoundTripper
}

GitHubRESTReleaseClientOptions configures the public GitHub REST client. Transport is injectable for deterministic testing, but every request URL remains fixed to https://api.github.com. Injected *http.Transport values are cloned with proxy use disabled.

type GitHubRelease ¶

type GitHubRelease struct {
	RepositoryID int64
	ReleaseID    int64
	Tag          string
	// ResolvedCommitSHA is the immutable 40-character commit selected for the
	// release. Clients must resolve branch-like target_commitish values before
	// returning a release.
	ResolvedCommitSHA string
	Assets            []GitHubReleaseAsset
}

type GitHubReleaseAsset ¶

type GitHubReleaseAsset struct {
	AssetID     int64
	Name        string
	DownloadURL string
	Size        int64
}

type GitHubReleaseClient ¶

type GitHubReleaseClient interface {
	LatestRelease(ctx context.Context, owner, repository string) (GitHubRelease, error)
	ReleaseByTag(ctx context.Context, owner, repository, tag string) (GitHubRelease, error)
}

GitHubReleaseClient owns GitHub API authentication and returns stable GitHub identities. The resolver never clones, checks out, builds, or executes source.

type GitHubReleaseResolver ¶

type GitHubReleaseResolver struct {
	// contains filtered or unexported fields
}

func NewGitHubRESTReleaseResolver(options GitHubRESTReleaseClientOptions, fetcher *Fetcher) (*GitHubReleaseResolver, error)

func NewGitHubReleaseResolver(client GitHubReleaseClient, fetcher *Fetcher) (*GitHubReleaseResolver, error)

func (resolver *GitHubReleaseResolver) ResolvePackage(ctx context.Context, source GitHubRepositorySource) (ResolvedGitHubAsset, error)

type GitHubRepositorySource ¶

type GitHubRepositorySource struct {
	RepositoryURL string
	Tag           string
	QuotaKey      string
}

GitHubRepositorySource selects either the latest release or one exact tag. RepositoryURL must be exactly https://github.com/{owner}/{repository}.

type Origin ¶

type Origin struct {
	Scheme string
	Host   string
	Port   uint16
}

Origin identifies the exact credential and transport origin for one hop.

func (origin Origin) String() string

type PackageURL ¶

type PackageURL struct {
	// contains filtered or unexported fields
}

PackageURL is a validated public-HTTPS package locator. DisplayURL never contains userinfo, query, or fragment data.

func ParseDirectPackageURL(raw string) (PackageURL, error)

func (locator PackageURL) DisplayURL() string

func (locator PackageURL) Origin() Origin

type RedirectHop ¶

type RedirectHop struct {
	StatusCode int
	From       string
	To         string
}

type ResolvedGitHubAsset ¶

type ResolvedGitHubAsset struct {
	RepositoryURL     string
	RepositoryID      int64
	ReleaseID         int64
	Tag               string
	ResolvedCommitSHA string
	AssetID           int64
	AssetName         string
	DeclaredSize      int64
	Fetch             FetchResult
}

ResolvedGitHubAsset binds downloaded bytes to immutable GitHub release and asset identities. URLs in this result are safe for logs and persistence.

type StageStore ¶

type StageStore struct {
	// contains filtered or unexported fields
}

StageStore owns external artifacts in a host-selected private directory.

func NewStageStore(directory string) (*StageStore, error)

func NewStageStoreWithOptions(directory string, options StageStoreOptions) (*StageStore, error)

func (store *StageStore) Close() error

func (store *StageStore) ReadArtifact(ctx context.Context, artifact StagedArtifact, maxBytes int64) ([]byte, error)

func (store *StageStore) Remove(artifact StagedArtifact) error

func (store *StageStore) Stage(ctx context.Context, source io.Reader) (StagedArtifact, error)

func (store *StageStore) StageUpload(ctx context.Context, ownerKey string, source io.Reader, declaredSize int64) (StagedArtifact, error)

func (store *StageStore) VerifyPackage(ctx context.Context, artifact StagedArtifact, limits pluginpkg.ReadLimits) (pluginpkg.Package, error)

type StageStoreOptions ¶

type StageStoreOptions struct {
	MaxConcurrentFetches      int
	MaxOwnerConcurrentFetches int
	MaxStagedBytes            int64
	MaxOwnerStagedBytes       int64
}

StageStoreOptions bounds concurrent external transfers and retained stage bytes. Quota keys are opaque host-derived owner identifiers and are never persisted.

type StagedArtifact ¶

type StagedArtifact struct {
	ID     string
	Size   int64
	SHA256 string
}

StagedArtifact is a path-free handle to exact bytes owned by StageStore.