registry

type AuthorizationDecision struct {
	State              AuthorizationState        `json:"state"`
	Allowed            bool                      `json:"allowed"`
	MissingPermissions []string                  `json:"missing_permissions,omitempty"`
	PolicyEvaluation   security.PolicyEvaluation `json:"policy_evaluation"`
}

type AuthorizationRevisionConflictError struct {
	PluginInstanceID string
	Expected         AuthorizationRevisions
	Actual           AuthorizationRevisions
}

type AuthorizationRevisions struct {
	PolicyRevision     uint64 `json:"policy_revision"`
	ManagementRevision uint64 `json:"management_revision"`
	RevokeEpoch        uint64 `json:"revoke_epoch"`
}

type AuthorizationSnapshot struct {
	Plugin PluginRecord           `json:"plugin"`
	Grants []permissions.Record   `json:"grants"`
	Policy *security.PolicyRecord `json:"policy,omitempty"`
}

type AuthorizationState struct {
	PluginInstanceID  string                 `json:"plugin_instance_id"`
	PluginVersion     string                 `json:"plugin_version"`
	ActiveFingerprint string                 `json:"active_fingerprint"`
	TrustState        TrustState             `json:"trust_state"`
	EnableState       EnableState            `json:"enable_state"`
	Revisions         AuthorizationRevisions `json:"revisions"`
}

type AuthorizationStore interface {
	GrantPermission(ctx context.Context, req permissions.GrantRequest, expected AuthorizationRevisions) (AuthorizationSnapshot, error)
	RevokePermission(ctx context.Context, req permissions.RevokeRequest, expected AuthorizationRevisions) (AuthorizationSnapshot, error)
	PutSecurityPolicy(ctx context.Context, req security.PutPolicyRequest, expected AuthorizationRevisions) (AuthorizationSnapshot, error)
	DeleteSecurityPolicy(ctx context.Context, pluginInstanceID string, now time.Time, expected AuthorizationRevisions) (AuthorizationSnapshot, error)
	GetAuthorization(ctx context.Context, pluginInstanceID string) (AuthorizationSnapshot, error)
	ListAuthorization(ctx context.Context) ([]AuthorizationSnapshot, error)
	Authorize(ctx context.Context, req AuthorizeRequest) (AuthorizationDecision, error)
}

type AuthorizeRequest struct {
	PluginInstanceID string                 `json:"plugin_instance_id"`
	Method           string                 `json:"method"`
	PermissionIDs    []string               `json:"permission_ids,omitempty"`
	Expected         AuthorizationRevisions `json:"expected"`
	Now              time.Time              `json:"-"`
}

type EnableState string

type LocalImportProvenance struct {
	ImportID       string `json:"import_id"`
	Distribution   string `json:"distribution"`
	PolicyEpoch    string `json:"policy_epoch"`
	UnsignedPolicy string `json:"unsigned_policy"`
	AssessedAt     string `json:"assessed_at"`
}

type ManagementRevisionConflictError struct {
	PluginInstanceID string
	Expected         uint64
	Actual           uint64
}

type MemoryStore struct {
	// contains filtered or unexported fields
}

type PluginRecord struct {
	OwnerEnvHash          string                   `json:"-"`
	PluginInstanceID      string                   `json:"plugin_instance_id"`
	PublisherID           string                   `json:"publisher_id"`
	PluginID              string                   `json:"plugin_id"`
	Version               string                   `json:"version"`
	ActiveFingerprint     string                   `json:"active_fingerprint"`
	PackageHash           string                   `json:"package_hash"`
	ManifestHash          string                   `json:"manifest_hash"`
	EntriesHash           string                   `json:"entries_hash"`
	TrustState            TrustState               `json:"trust_state"`
	TrustAssessment       TrustAssessment          `json:"trust_assessment"`
	ReleaseTrustBinding   *ReleaseTrustBinding     `json:"release_trust_binding,omitempty"`
	LocalImportProvenance *LocalImportProvenance   `json:"local_import_provenance,omitempty"`
	CapabilityContracts   []capabilitycontract.Pin `json:"capability_contracts,omitempty"`
	EnableState           EnableState              `json:"enable_state"`
	DisabledReason        string                   `json:"disabled_reason,omitempty"`
	PolicyRevision        uint64                   `json:"policy_revision"`
	ManagementRevision    uint64                   `json:"management_revision"`
	RevokeEpoch           uint64                   `json:"revoke_epoch"`
	Manifest              manifest.Manifest        `json:"manifest"`
	PackageEntries        []pluginpkg.Entry        `json:"package_entries"`
	RuntimeRequirement    *RuntimeRequirement      `json:"runtime_requirement,omitempty"`
	VersionHistory        []PluginVersion          `json:"version_history,omitempty"`
	InstalledAt           time.Time                `json:"installed_at"`
	EnabledAt             *time.Time               `json:"enabled_at,omitempty"`
	UpdatedAt             time.Time                `json:"updated_at"`
	DeletedAt             *time.Time               `json:"deleted_at,omitempty"`
	Metadata              map[string]string        `json:"metadata,omitempty"`
}

type PluginVersion struct {
	Version               string                   `json:"version"`
	ActiveFingerprint     string                   `json:"active_fingerprint"`
	PackageHash           string                   `json:"package_hash"`
	ManifestHash          string                   `json:"manifest_hash"`
	EntriesHash           string                   `json:"entries_hash"`
	TrustState            TrustState               `json:"trust_state"`
	TrustAssessment       TrustAssessment          `json:"trust_assessment"`
	ReleaseTrustBinding   *ReleaseTrustBinding     `json:"release_trust_binding,omitempty"`
	LocalImportProvenance *LocalImportProvenance   `json:"local_import_provenance,omitempty"`
	CapabilityContracts   []capabilitycontract.Pin `json:"capability_contracts,omitempty"`
	Manifest              manifest.Manifest        `json:"manifest"`
	PackageEntries        []pluginpkg.Entry        `json:"package_entries"`
	RuntimeRequirement    *RuntimeRequirement      `json:"runtime_requirement,omitempty"`
	ActivatedAt           time.Time                `json:"activated_at"`
	Metadata              map[string]string        `json:"metadata,omitempty"`
}

type PutOptions struct {
	Now time.Time `json:"-"`
}

type ReleaseTrustBinding struct {
	SourceID              string `json:"source_id"`
	Channel               string `json:"channel"`
	ReleaseMetadataRef    string `json:"release_metadata_ref"`
	ReleaseMetadataSHA256 string `json:"release_metadata_sha256"`
	PublisherID           string `json:"publisher_id"`
	PluginID              string `json:"plugin_id"`
	Version               string `json:"version"`
	VerifiedStateSHA256   string `json:"verified_state_sha256"`
	RootEpoch             string `json:"root_epoch"`
	PolicyEpoch           string `json:"policy_epoch"`
	RevocationEpoch       string `json:"revocation_epoch"`
}

type RuntimeRequirement struct {
	MinVersion       string                 `json:"min_version"`
	SupportedTargets []runtimetarget.Target `json:"supported_targets,omitempty"`
}

type SQLiteStore struct {
	// contains filtered or unexported fields
}

type Store interface {
	Durable() bool
	AuthorizationStore
	plugindata.Catalog
	PutPlugin(ctx context.Context, record PluginRecord, opts PutOptions) (PluginRecord, error)
	GetPlugin(ctx context.Context, pluginInstanceID string) (PluginRecord, error)
	ListPlugins(ctx context.Context) ([]PluginRecord, error)
	SetEnableState(ctx context.Context, pluginInstanceID string, state EnableState, reason string, now time.Time) (PluginRecord, error)
	CommitUninstall(ctx context.Context, req plugindata.CommitUninstallRequest) (plugindata.CommitUninstallResult, error)
	AbortInstall(ctx context.Context, pluginInstanceID string) error
}

type TrustAssessment struct {
	TrustState           TrustState         `json:"trust_state"`
	ReasonCodes          []string           `json:"reason_codes,omitempty"`
	VerifiedHashes       TrustHashSet       `json:"verified_hashes"`
	VerifiedSignature    *VerifiedSignature `json:"verified_signature,omitempty"`
	TrustAssessmentEpoch string             `json:"trust_assessment_epoch,omitempty"`
	PolicyEpoch          string             `json:"policy_epoch,omitempty"`
	RevocationEpoch      string             `json:"revocation_epoch,omitempty"`
	Metadata             map[string]string  `json:"metadata,omitempty"`
}

type TrustHashSet struct {
	PackageSHA256  string `json:"package_sha256"`
	ManifestSHA256 string `json:"manifest_sha256"`
	EntriesSHA256  string `json:"entries_sha256"`
}

type TrustState string

type VerifiedSignature struct {
	Algorithm string `json:"algorithm"`
	KeyID     string `json:"key_id"`
}