externalsource

type AddressResolver ¶

type AddressResolver interface {
	LookupNetIP(ctx context.Context, network, host string) ([]netip.Addr, error)
}

AddressResolver permits host products and tests to supply DNS while keeping address classification and pinning inside ReDevPlugin.

type CredentialProvider ¶

type CredentialProvider interface {
	CredentialFor(ctx context.Context, request CredentialRequest) (http.Header, error)
}

CredentialProvider is called independently for every validated hop. A returned header is never forwarded to a different origin.

type CredentialRequest ¶

type CredentialRequest struct {
	SourceID string
	Origin   Origin
}

CredentialRequest scopes credentials to one exact origin and source.

type Error ¶

type Error struct {
	Code       ErrorCode
	Operation  string
	DisplayURL string
	// contains filtered or unexported fields
}

Error intentionally omits the wrapped cause from Error() so URL query credentials and transport headers cannot be copied into user-facing errors.

func (e *Error) Error() string

func (e *Error) Unwrap() error

type ErrorCode ¶

type ErrorCode string

ErrorCode is a stable classification for external-source admission failures.

const (
	ErrorInvalidURL           ErrorCode = "external_source_invalid_url"
	ErrorInvalidSource        ErrorCode = "external_source_invalid_source"
	ErrorTargetBlocked        ErrorCode = "external_source_target_blocked"
	ErrorDNS                  ErrorCode = "external_source_dns_failed"
	ErrorRedirectDenied       ErrorCode = "external_source_redirect_denied"
	ErrorTooManyRedirects     ErrorCode = "external_source_too_many_redirects"
	ErrorCredentialDenied     ErrorCode = "external_source_credential_denied"
	ErrorTransport            ErrorCode = "external_source_transport_failed"
	ErrorHTTPStatus           ErrorCode = "external_source_http_status"
	ErrorUnsupportedEncoding  ErrorCode = "external_source_unsupported_encoding"
	ErrorArtifactTooLarge     ErrorCode = "external_source_artifact_too_large"
	ErrorArtifactEmpty        ErrorCode = "external_source_artifact_empty"
	ErrorGitHubRelease        ErrorCode = "external_source_github_release_failed"
	ErrorGitHubAssetMissing   ErrorCode = "external_source_github_asset_missing"
	ErrorGitHubAssetAmbiguous ErrorCode = "external_source_github_asset_ambiguous"
	ErrorStageInvalid         ErrorCode = "external_source_stage_invalid"
	ErrorStageIntegrity       ErrorCode = "external_source_stage_integrity_failed"
	ErrorQuotaExceeded        ErrorCode = "external_source_quota_exceeded"
)

func CodeOf(err error) ErrorCode

type FetchRequest ¶

type FetchRequest struct {
	URL      string
	QuotaKey string
}

type FetchResult ¶

type FetchResult struct {
	Artifact  StagedArtifact
	Source    string
	Final     string
	Redirects []RedirectHop
}

type Fetcher ¶

type Fetcher struct {
	// contains filtered or unexported fields
}

func NewFetcher(options FetcherOptions) (*Fetcher, error)

func (fetcher *Fetcher) FetchPackage(ctx context.Context, request FetchRequest) (FetchResult, error)

type FetcherOptions ¶

type FetcherOptions struct {
	Stage        *StageStore
	Resolver     AddressResolver
	Credentials  CredentialProvider
	SourceID     string
	TotalTimeout time.Duration
}

type GitHubRESTReleaseClient ¶

type GitHubRESTReleaseClient struct {
	// contains filtered or unexported fields
}

GitHubRESTReleaseClient resolves GitHub release and commit identities through the fixed public GitHub REST origin. It never follows redirects or uses an ambient HTTP proxy.

func NewGitHubRESTReleaseClient(options GitHubRESTReleaseClientOptions) (*GitHubRESTReleaseClient, error)

func (client *GitHubRESTReleaseClient) LatestRelease(ctx context.Context, owner, repository string) (GitHubRelease, error)

func (client *GitHubRESTReleaseClient) ReleaseByTag(ctx context.Context, owner, repository, tag string) (GitHubRelease, error)

type GitHubRESTReleaseClientOptions ¶

type GitHubRESTReleaseClientOptions struct {
	Token     string
	UserAgent string
	Transport http.RoundTripper
}

GitHubRESTReleaseClientOptions configures the public GitHub REST client. Transport is injectable for deterministic testing, but every request URL remains fixed to https://api.github.com. Injected *http.Transport values are cloned with proxy use disabled.

type GitHubRelease ¶

type GitHubRelease struct {
	RepositoryID int64
	ReleaseID    int64
	Tag          string
	// ResolvedCommitSHA is the immutable 40-character commit selected for the
	// release. Clients must resolve branch-like target_commitish values before
	// returning a release.
	ResolvedCommitSHA string
	Assets            []GitHubReleaseAsset
}

type GitHubReleaseAsset ¶

type GitHubReleaseAsset struct {
	AssetID     int64
	Name        string
	DownloadURL string
	Size        int64
}

type GitHubReleaseClient ¶

type GitHubReleaseClient interface {
	LatestRelease(ctx context.Context, owner, repository string) (GitHubRelease, error)
	ReleaseByTag(ctx context.Context, owner, repository, tag string) (GitHubRelease, error)
}

GitHubReleaseClient owns GitHub API authentication and returns stable GitHub identities. The resolver never clones, checks out, builds, or executes source.

type GitHubReleaseResolver ¶

type GitHubReleaseResolver struct {
	// contains filtered or unexported fields
}

func NewGitHubRESTReleaseResolver(options GitHubRESTReleaseClientOptions, fetcher *Fetcher) (*GitHubReleaseResolver, error)

func NewGitHubReleaseResolver(client GitHubReleaseClient, fetcher *Fetcher) (*GitHubReleaseResolver, error)

func (resolver *GitHubReleaseResolver) ResolvePackage(ctx context.Context, source GitHubRepositorySource) (ResolvedGitHubAsset, error)

type GitHubRepositorySource ¶

type GitHubRepositorySource struct {
	RepositoryURL string
	Tag           string
	QuotaKey      string
}

GitHubRepositorySource selects either the latest release or one exact tag. RepositoryURL must be exactly https://github.com/{owner}/{repository}.

type Origin ¶

type Origin struct {
	Scheme string
	Host   string
	Port   uint16
}

Origin identifies the exact credential and transport origin for one hop.

func (origin Origin) String() string

type PackageURL ¶

type PackageURL struct {
	// contains filtered or unexported fields
}

PackageURL is a validated public-HTTPS package locator. DisplayURL never contains userinfo, query, or fragment data.

func ParseDirectPackageURL(raw string) (PackageURL, error)

func (locator PackageURL) DisplayURL() string

func (locator PackageURL) Origin() Origin

type RedirectHop ¶

type RedirectHop struct {
	StatusCode int
	From       string
	To         string
}

type ResolvedGitHubAsset ¶

type ResolvedGitHubAsset struct {
	RepositoryURL     string
	RepositoryID      int64
	ReleaseID         int64
	Tag               string
	ResolvedCommitSHA string
	AssetID           int64
	AssetName         string
	DeclaredSize      int64
	Fetch             FetchResult
}

ResolvedGitHubAsset binds downloaded bytes to immutable GitHub release and asset identities. URLs in this result are safe for logs and persistence.

type StageStore ¶

type StageStore struct {
	// contains filtered or unexported fields
}

StageStore owns external artifacts in a host-selected private directory.

func NewStageStore(directory string) (*StageStore, error)

func NewStageStoreWithOptions(directory string, options StageStoreOptions) (*StageStore, error)

func (store *StageStore) Close() error

func (store *StageStore) Remove(artifact StagedArtifact) error

func (store *StageStore) Stage(ctx context.Context, source io.Reader) (StagedArtifact, error)

func (store *StageStore) StageUpload(ctx context.Context, ownerKey string, source io.Reader, declaredSize int64) (StagedArtifact, error)

func (store *StageStore) VerifyPackage(ctx context.Context, artifact StagedArtifact, limits pluginpkg.ReadLimits) (pluginpkg.Package, error)

type StageStoreOptions ¶

type StageStoreOptions struct {
	MaxConcurrentFetches      int
	MaxOwnerConcurrentFetches int
	MaxStagedBytes            int64
	MaxOwnerStagedBytes       int64
}

StageStoreOptions bounds concurrent external transfers and retained stage bytes. Quota keys are opaque host-derived owner identifiers and are never persisted.

type StagedArtifact ¶

type StagedArtifact struct {
	ID     string
	Size   int64
	SHA256 string
}

StagedArtifact is a path-free handle to exact bytes owned by StageStore.