host

package

Go to main page

Versions in this module

v1

v1.1.4

Aug 15, 2026

Changes in this version

type Host

+ func (h *Host) InspectReleasePackage(ctx context.Context, req InspectReleasePackageRequest) (ReleasePackageInspection, error)

+ type InspectReleasePackageRequest struct

+ Now time.Time

+ PluginInstanceID string

+ ReleaseRef PluginReleaseRef

type InstallInspectedPackageRequest

+ ActivateAfterInstall *bool

+ ApprovedPermissionIDs []string

type InstalledExternalPackage

+ Activation registry.ReleaseInstallActivation

+ type ReleasePackageInspection struct

+ InspectedHashes PackageHashSet

+ PluginInstanceID string

+ Presentation manifest.PresentationCatalog

+ PresentationSHA256 string

+ ReleaseRef PluginReleaseRef

+ SecuritySummary ExternalPackageSecuritySummary

v1.1.3

Aug 14, 2026

v1.1.2

Aug 14, 2026

v1.1.1

Aug 14, 2026

v1.1.0

Aug 14, 2026

v1.0.0

Aug 13, 2026

retracted

Changes in this version

+ const PluginRecoveryFailed

+ const PluginRecoveryReady

+ var ErrControlStoreRequired = errors.New("Host control store is required")

+ var ErrExecutionCancelDispatchFailed = errors.New("execution cancel dispatch failed")

+ var ErrExecutionDeleteBlocked = errors.New("execution blocks data deletion")

+ var ErrExternalPackageInstallBlocked = errors.New("external package install is blocked by integrity assessment")

+ var ErrExternalPackageInstallInProgress = errors.New("external package install is in progress")

+ var ErrPluginRecoveryNotEnabled = errors.New("plugin runtime recovery requires an enabled plugin")

type CallMethodResult

+ ExecutionID string

type Config

+ StateRoot string

type DiagnosticDetails

+ ExecutionID string

+ ExecutionsDeleted int64

type ExternalPackageModule

+ AddressResolver externalsource.AddressResolver

+ Credentials externalsource.CredentialProvider

+ GitHub externalsource.GitHubRESTReleaseClientOptions

+ SourceID string

+ TotalTimeout time.Duration

type Host

+ func (h *Host) CancelExecution(ctx context.Context, id, reason string) (execution.Execution, error)

+ func (h *Host) EventsAfter(ctx context.Context, id string, cursor uint64, limit int) ([]execution.Event, error)

+ func (h *Host) GetExecution(ctx context.Context, id string) (execution.Execution, error)

+ func (h *Host) InspectPluginData(ctx context.Context, req InspectPluginDataRequest) (PluginDataInspection, error)

+ func (h *Host) InstallInspectedPackage(ctx context.Context, req InstallInspectedPackageRequest) (result InstalledExternalPackage, retErr error)

+ func (h *Host) ListExecutions(ctx context.Context, pluginInstanceID string, cursor uint64, limit int) ([]execution.Execution, uint64, error)

+ func (h *Host) ListPluginInventory(ctx context.Context) ([]PluginInventoryRecord, error)

+ func (h *Host) ReadPluginDataFile(ctx context.Context, req ReadPluginDataFileRequest) (storage.FileReadResult, error)

+ func (h *Host) RecoverEnabled(ctx context.Context) (RecoverySnapshot, error)

+ func (h *Host) RetryPluginRecovery(ctx context.Context, pluginInstanceID string) (PluginRecoveryResult, error)

+ func (h *Host) StartReleaseInstallExecution(ctx context.Context, req StartReleaseInstallExecutionRequest) (execution.Execution, error)

+ func (h *Host) WritePluginDataFile(ctx context.Context, req WritePluginDataFileRequest) (storage.FileWriteResult, error)

+ type InspectPluginDataRequest struct

+ PluginInstanceID string

+ type InstallInspectedPackageRequest struct

+ ExpectedPackageSHA256 string

+ InspectionID string

+ Now time.Time

+ type InstalledExternalPackage struct

+ ExecutionApproval *ExternalPackageExecutionApproval

+ Plugin *registry.PluginRecord

+ SecuritySummary *ExternalPackageSecuritySummary

+ SignatureAssessment *ExternalPackageSignatureAssessment

+ SourceProvenance *ExternalPackageSourceProvenance

+ UpdateEligibility *ExternalPackageUpdateEligibility

type ManagementAction

+ const ManagementActionCancelExecution

+ const ManagementActionGetExecution

+ const ManagementActionInspectPluginData

+ const ManagementActionInstallInspectedPackage

+ const ManagementActionListExecutionEvents

+ const ManagementActionListExecutions

+ const ManagementActionReadPluginDataFile

+ const ManagementActionRecoverEnabledPlugins

+ const ManagementActionWritePluginDataFile

+ type PluginActionBlockedReason string

+ const PluginActionBlockedDisabled

+ const PluginActionBlockedIncompatible

+ const PluginActionBlockedPackageInvalid

+ const PluginActionBlockedPermission

+ const PluginActionBlockedPolicy

+ const PluginActionBlockedRuntimeUnavailable

+ const PluginActionBlockedSignatureInvalid

+ const PluginActionBlockedSignatureRevoked

+ type PluginActionState struct

+ BlockedReason PluginActionBlockedReason

+ CanDisable bool

+ CanEnable bool

+ CanOpen bool

+ CanUninstall bool

+ RecoveryAction string

+ type PluginDataInspection struct

+ Bindings []plugindata.Binding

+ Namespaces []storage.NamespaceRecord

+ Objects []PluginDataObjectInspection

+ TotalUsageBytes int64

+ TotalUsageFiles int64

+ type PluginDataObjectInspection struct

+ Object plugindata.Object

+ Scope sessionctx.ScopeKind

+ type PluginInventoryRecord struct

+ ActionState PluginActionState

+ Plugin registry.PluginRecord

+ type PluginRecoveryResult struct

+ Action string

+ PluginInstanceID string

+ Reason string

+ Status string

+ type ReadPluginDataFileRequest struct

+ MaxBytes int64

+ Path string

+ PluginInstanceID string

+ Scope sessionctx.ScopeKind

+ StoreID string

+ type RecoverySnapshot struct

+ Complete bool

+ Results []PluginRecoveryResult

+ Revision int64

type ResourceRef

+ const ResourceExecution

+ type StartReleaseInstallExecutionRequest struct

+ ActivateAfterInstall *bool

+ ApprovedPermissionIDs []string

+ Now time.Time

+ PluginInstanceID string

+ ReleaseRef PluginReleaseRef

+ RequestID string

+ type WritePluginDataFileRequest struct

+ Data []byte

+ Path string

+ PluginInstanceID string

+ Scope sessionctx.ScopeKind

+ StoreID string

v0

v0.7.27

Aug 13, 2026

Changes in this version

type Host

+ func (h *Host) ReadPluginIcon(ctx context.Context, req ReadPluginIconRequest) (ReadPluginIconResult, error)

+ type ReadPluginIconRequest struct

+ ExpectedSHA256 string

+ PluginInstanceID string

+ type ReadPluginIconResult struct

+ Content []byte

+ Entry pluginpkg.Entry

v0.7.26

Aug 12, 2026

v0.7.25

Aug 12, 2026

Changes in this version

type RefreshEnabledPluginFailureReason

+ const RefreshFailureReasonRecoveryTimeout

v0.7.24

Aug 11, 2026

v0.7.23

Aug 11, 2026

v0.7.22

Aug 10, 2026

v0.7.21

Aug 10, 2026

Changes in this version

+ type RefreshEnabledPluginFailureAction string

+ const RefreshFailureActionContactAdmin

+ const RefreshFailureActionReinstall

+ const RefreshFailureActionRetry

+ type RefreshEnabledPluginFailureReason string

+ const RefreshFailureReasonActivationEvidenceInvalid

+ const RefreshFailureReasonActivationLeaseExpired

+ const RefreshFailureReasonRecoveryCanceled

+ const RefreshFailureReasonTrustEpochMismatch

+ const RefreshFailureReasonTrustFenced

+ const RefreshFailureReasonTrustRevoked

+ const RefreshFailureReasonTrustStateAdvanced

+ const RefreshFailureReasonUnknown

type RefreshEnabledPluginPublicError

+ Action RefreshEnabledPluginFailureAction

+ Reason RefreshEnabledPluginFailureReason

v0.7.20

Aug 10, 2026

v0.7.19

Aug 9, 2026

v0.7.18

Aug 8, 2026

v0.7.17

Aug 7, 2026

Changes in this version

type ReleaseArtifactProgress

+ CacheHit bool

type StartReleaseInstallOperationRequest

+ ActivateAfterInstall *bool

+ ApprovedPermissionIDs []string

v0.7.16

Aug 7, 2026

v0.7.15

Aug 7, 2026

v0.7.14

Aug 7, 2026

v0.7.13

Aug 6, 2026

v0.7.12

Aug 6, 2026

v0.7.11

Aug 6, 2026

v0.7.10

Aug 6, 2026

v0.7.9

Aug 6, 2026

v0.7.8

Aug 6, 2026

v0.7.7

Aug 5, 2026

v0.7.6

Aug 5, 2026

Changes in this version

+ type CapabilityArtifactOrigin string

+ const CapabilityArtifactOriginHost

+ const CapabilityArtifactOriginRegistry

type ResolvedCapabilityContractFile

+ Origin CapabilityArtifactOrigin

v0.7.5

Aug 5, 2026

v0.7.4

Aug 5, 2026

v0.7.3

Aug 5, 2026

v0.7.2

Aug 5, 2026

Changes in this version

type Host

+ func (h *Host) GetReleaseInstallOperation(ctx context.Context, operationID string) (registry.ReleaseInstallOperation, error)

+ func (h *Host) GetReleaseInstallOperationByRequest(ctx context.Context, requestID string) (registry.ReleaseInstallOperation, error)

+ func (h *Host) ListReleaseInstallOperations(ctx context.Context) ([]registry.ReleaseInstallOperation, error)

+ func (h *Host) StartReleaseInstallOperation(ctx context.Context, req StartReleaseInstallOperationRequest) (registry.ReleaseInstallOperation, error)

type ManagementAction

+ const ManagementActionGetReleaseInstall

+ const ManagementActionListReleaseInstalls

+ const ManagementActionStartReleaseInstall

+ type ReleaseArtifactFailure struct

+ ArtifactRole string

+ Attempts int

+ LocatorSHA256 string

+ Phase string

+ Retryable bool

+ type ReleaseArtifactFailureProvider interface

+ ReleaseArtifactFailure func() ReleaseArtifactFailure

+ type ReleaseArtifactProgress struct

+ ArtifactRole string

+ Attempt int

+ Completed int64

+ Phase string

+ RetryAfter time.Duration

+ Total int64

type ReleaseArtifactResolveRequest

+ Observe func(ReleaseArtifactProgress)

+ type StartReleaseInstallOperationRequest struct

+ Now time.Time

+ PluginInstanceID string

+ ReleaseRef PluginReleaseRef

+ RequestID string

v0.7.1

Aug 3, 2026

v0.7.0

Aug 2, 2026

Changes in this version

type ExternalPackageInspection

+ Presentation manifest.PresentationCatalog

+ PresentationSHA256 string

v0.6.24

Aug 2, 2026

v0.6.23

Aug 1, 2026

v0.6.22

Aug 1, 2026

v0.6.21

Aug 1, 2026

v0.6.20

Jul 27, 2026

Changes in this version

type PluginOperationSnapshot

+ Progress *capability.OperationProgress

v0.6.19

Jul 26, 2026

v0.6.18

Jul 26, 2026

Changes in this version

+ const SurfaceOperationSnapshotPerOperationBurst

+ const SurfaceOperationSnapshotPerOperationRate

+ const SurfaceOperationSnapshotPerSurfaceBurst

+ const SurfaceOperationSnapshotPerSurfaceRate

+ const SurfaceOperationSnapshotRetryMaxMS

+ const SurfaceOperationSnapshotRetryMinMS

+ var ErrSessionMaintenanceAbsent = errors.New("session lifecycle maintenance record is absent")

+ var ErrSessionMaintenanceState = errors.New("session lifecycle maintenance state is invalid")

+ var ErrSessionMaintenanceUnavailable = errors.New("session lifecycle maintenance is unavailable")

+ type CloseAuthenticatedSessionScopeRequest struct

+ Now time.Time

+ Session sessionctx.Context

+ type CommitSessionScopeFinalizationRequest = PrepareSessionScopeFinalizationRequest

type CoreAdapters

+ SessionMaintenance SessionLifecycleMaintenanceAdapter

+ type FinalizeClosedSessionScopeRequest struct

+ Identity sessionscope.TeardownIdentity

+ Session sessionctx.Context

+ type GetSurfaceOperationRequest struct

+ BridgeChannelID string

+ Now time.Time

+ OperationID string

+ SurfaceInstanceID string

type Host

+ func (h *Host) CloseAuthenticatedSessionScope(ctx context.Context, req CloseAuthenticatedSessionScopeRequest) (SessionScopeTeardownMaintenanceResult, error)

+ func (h *Host) FinalizeClosedSessionScope(ctx context.Context, req FinalizeClosedSessionScopeRequest) (SessionScopeFinalizationResult, error)

+ func (h *Host) GetSurfaceOperation(ctx context.Context, req GetSurfaceOperationRequest) (PluginOperationSnapshot, error)

+ func (h *Host) ResumeClosedSessionScopeTeardown(ctx context.Context, req ResumeClosedSessionScopeTeardownRequest) (SessionScopeTeardownMaintenanceResult, error)

+ type InspectSessionScopeMaintenanceRequest struct

+ Session sessionctx.Context

type ManagementAction

+ const ManagementActionGetSurfaceOperation

+ type PluginOperationSnapshot struct

+ Cancelable bool

+ CreatedAt time.Time

+ FailureCode *capability.ExecutionFailureCode

+ OperationID string

+ RetryAfterMS int

+ Status operation.Status

+ TerminalAt *time.Time

+ UpdatedAt time.Time

+ type PrepareSessionScopeFinalizationRequest struct

+ Identity sessionscope.TeardownIdentity

+ Session sessionctx.Context

+ type ResumeClosedSessionScopeTeardownRequest struct

+ Identity sessionscope.TeardownIdentity

+ Now time.Time

+ Session sessionctx.Context

+ type SessionLifecycleMaintenanceAdapter interface

+ CommitSessionScopeFinalization func(context.Context, CommitSessionScopeFinalizationRequest) error

+ InspectSessionScopeMaintenance func(context.Context, InspectSessionScopeMaintenanceRequest) (SessionScopeMaintenanceRecord, error)

+ ListSessionScopeMaintenanceRecords func(context.Context) ([]SessionScopeMaintenanceRecord, error)

+ PrepareSessionScopeFinalization func(context.Context, PrepareSessionScopeFinalizationRequest) error

+ ValidateTerminalSessionScopeClose func(context.Context, ValidateTerminalSessionScopeCloseRequest) (SessionScopeMaintenanceRecord, error)

+ type SessionScopeFinalizationResult struct

+ Status SessionScopeFinalizationStatus

+ type SessionScopeFinalizationStatus string

+ const SessionScopeFinalizationAbsent

+ const SessionScopeFinalized

+ type SessionScopeLifecyclePhase string

+ const SessionScopeLifecycleClosed

+ const SessionScopeLifecycleFinalizing

+ const SessionScopeLifecyclePrepared

+ func (phase SessionScopeLifecyclePhase) Valid() bool

+ type SessionScopeMaintenanceRecord struct

+ Identity sessionscope.TeardownIdentity

+ Phase SessionScopeLifecyclePhase

+ Session sessionctx.Context

+ TerminalEvidence bool

+ func (record SessionScopeMaintenanceRecord) Valid() bool

+ type SessionScopeTeardownMaintenanceResult struct

+ Identity sessionscope.TeardownIdentity

+ Status SessionScopeTeardownMaintenanceStatus

+ Teardown RevokeSessionScopeResult

+ type SessionScopeTeardownMaintenanceStatus string

+ const SessionScopeTeardownAbsent

+ const SessionScopeTeardownComplete

+ const SessionScopeTeardownIncomplete

+ type SurfaceOperationRateLimitError struct

+ RetryAfterMS int

+ func (e *SurfaceOperationRateLimitError) Error() string

+ type ValidateTerminalSessionScopeCloseRequest struct

+ Identity sessionscope.TeardownIdentity

+ Session sessionctx.Context

v0.6.17

Jul 25, 2026

v0.6.16

Jul 25, 2026

v0.6.15

Jul 24, 2026

v0.6.14

Jul 24, 2026

v0.6.13

Jul 24, 2026

v0.6.12

Jul 24, 2026

v0.6.11

Jul 24, 2026

Changes in this version

type ExternalPackageSourceProvenance

+ func (provenance ExternalPackageSourceProvenance) MarshalJSON() ([]byte, error)

v0.6.10

Jul 23, 2026

v0.6.9

Jul 23, 2026

Changes in this version

+ type GetPermissionRequirementsRequest struct

+ PluginInstanceID string

type Host

+ func (h *Host) GetPermissionRequirements(ctx context.Context, req GetPermissionRequirementsRequest) (PermissionRequirementsResult, error)

+ func (h *Host) ReconcileSurfaceRevocation(ctx context.Context, req DisposeSurfaceRequest) (ReconcileSurfaceRevocationResult, error)

type ManagementAction

+ const ManagementActionGetPermissionRequirements

+ type PermissionRequirementContract struct

+ CapabilityID string

+ CapabilityVersion string

+ ContractID string

+ ContractSHA256 string

+ ContractVersion string

+ Methods []PermissionRequirementMethod

+ type PermissionRequirementMethod struct

+ Method string

+ RequiredPermissions []string

+ type PermissionRequirementsResult struct

+ ActiveFingerprint string

+ Contracts []PermissionRequirementContract

+ ManagementRevision uint64

+ PluginInstanceID string

+ PluginVersion string

+ RequiredPermissions []string

+ type ReconcileSurfaceRevocationResult = bridge.ReconcileSurfaceRevocationResult

v0.6.8

Jul 23, 2026

Changes in this version

+ var ErrExternalPackageCommitBlocked = errors.New("external package commit is blocked by integrity assessment")

+ var ErrExternalPackageCommitInProgress = errors.New("external package commit is in progress")

+ var ErrExternalPackageConfirmation = errors.New("external package confirmation does not match inspection")

+ var ErrExternalPackageInspectionExpired = errors.New("external package inspection expired")

+ var ErrExternalPackageInspectionNotFound = errors.New("external package inspection not found")

+ var ErrExternalPackageInspectionStale = errors.New("external package signature assessment changed after inspection")

+ var ErrExternalPackageModuleRequired = errors.New("external package module is required")

+ var ErrExternalPackageRequestInvalid = errors.New("external package request is invalid")

+ type CommitExternalPackageRequest struct

+ ConfirmationDigest string

+ InspectionID string

+ Now time.Time

type Config

+ ExternalPackage *ExternalPackageModule

+ type ExternalPackageCancelSummary struct

+ AckTimeoutMS int

+ Cancelable bool

+ DisableBehavior string

+ UninstallBehavior string

+ type ExternalPackageCapabilityContractSummary struct

+ BindingID string

+ CapabilityID string

+ CapabilityVersion string

+ ContractSHA256 string

+ type ExternalPackageCommitReceipt struct

+ CommitID string

+ CommittedAt time.Time

+ InspectionID string

+ ManagementRevision uint64

+ PackageSHA256 string

+ type ExternalPackageCommitResult struct

+ ExecutionApproval *ExternalPackageExecutionApproval

+ FailureCode string

+ InspectionID string

+ Intent ExternalPackageIntent

+ Plugin *registry.PluginRecord

+ Receipt *ExternalPackageCommitReceipt

+ RetryAfterMS int

+ SecuritySummary *ExternalPackageSecuritySummary

+ SignatureAssessment *ExternalPackageSignatureAssessment

+ SourceProvenance *ExternalPackageSourceProvenance

+ Status string

+ UpdateEligibility *ExternalPackageUpdateEligibility

+ type ExternalPackageConfirmationSummary struct

+ Mode string

+ PlanHashRequired bool

+ PreflightMethod string

+ RequestHashFields []string

+ type ExternalPackageCoreActionSummary struct

+ ActionID string

+ Effect string

+ Method string

+ type ExternalPackageExecutionApproval struct

+ ApprovedAt *time.Time

+ AssessedAt time.Time

+ ReasonCodes []string

+ State string

+ type ExternalPackageFetcher interface

+ FetchPackage func(context.Context, externalsource.FetchRequest) (externalsource.FetchResult, error)

+ type ExternalPackageGitHubResolver interface

+ ResolvePackage func(context.Context, externalsource.GitHubRepositorySource) (externalsource.ResolvedGitHubAsset, error)

+ type ExternalPackageInspection struct

+ ConfirmationDigest string

+ ExecutionApproval ExternalPackageExecutionApproval

+ ExpiresAt time.Time

+ InspectedHashes PackageHashSet

+ InspectionID string

+ Intent ExternalPackageIntent

+ PluginID string

+ PublisherID string

+ SecuritySummary ExternalPackageSecuritySummary

+ SignatureAssessment ExternalPackageSignatureAssessment

+ SourceProvenance ExternalPackageSourceProvenance

+ UpdateEligibility ExternalPackageUpdateEligibility

+ Version string

+ type ExternalPackageIntent struct

+ Action string

+ ExpectedManagementRevision uint64

+ PluginInstanceID string

+ type ExternalPackageIntentSummary struct

+ IntentID string

+ Method string

+ type ExternalPackageMethodRouteSummary struct

+ ActionID string

+ BindingID string

+ Kind string

+ TargetMethod string

+ WorkerID string

+ type ExternalPackageMethodSummary struct

+ Cancel *ExternalPackageCancelSummary

+ Confirmation ExternalPackageConfirmationSummary

+ Dangerous bool

+ Effect string

+ Execution string

+ Method string

+ PreflightOnly bool

+ RequiredPermissions []string

+ Route ExternalPackageMethodRouteSummary

+ type ExternalPackageModule struct

+ GitHubResolver ExternalPackageGitHubResolver

+ PackageFetcher ExternalPackageFetcher

+ SignatureAssessor ExternalPackageSignatureAssessor

+ StageStore ExternalPackageStageStore

+ type ExternalPackageNetworkMethodAccessSummary struct

+ HTTPMethods []string

+ Method string

+ Operations []string

+ type ExternalPackageNetworkSummary struct

+ AuthDeclared bool

+ ConnectorID string

+ Destinations []string

+ MethodAccess []ExternalPackageNetworkMethodAccessSummary

+ Scope string

+ TLSDeclared bool

+ Transport string

+ type ExternalPackagePermissionSummary struct

+ Methods []string

+ PermissionID string

+ type ExternalPackageRedirectHop struct

+ Origin string

+ Path string

+ type ExternalPackageSecretRefSummary struct

+ Scope string

+ SecretRef string

+ SettingKey string

+ type ExternalPackageSecuritySummary struct

+ CapabilityContracts []ExternalPackageCapabilityContractSummary

+ CoreActions []ExternalPackageCoreActionSummary

+ Intents []ExternalPackageIntentSummary

+ Methods []ExternalPackageMethodSummary

+ Network []ExternalPackageNetworkSummary

+ Permissions []ExternalPackagePermissionSummary

+ SecretRefs []ExternalPackageSecretRefSummary

+ Storage []ExternalPackageStorageSummary

+ SummarySHA256 string

+ Surfaces []ExternalPackageSurfaceSummary

+ Workers []ExternalPackageWorkerSummary

+ type ExternalPackageSignatureAssessment struct

+ Algorithm string

+ AssessedAt time.Time

+ AssessedHashes PackageHashSet

+ AssessmentEpoch string

+ KeyID string

+ ReasonCodes []string

+ State string

+ type ExternalPackageSignatureAssessmentRequest struct

+ Now time.Time

+ Package pluginpkg.Package

+ type ExternalPackageSignatureAssessor interface

+ AssessExternalPackageSignature func(context.Context, ExternalPackageSignatureAssessmentRequest) (registry.SignatureAssessment, error)

+ type ExternalPackageSignatureFreshnessAssessor interface

+ AssessExternalPackageSignatureFreshness func(context.Context, ExternalPackageSignatureFreshnessRequest) (registry.SignatureAssessment, error)

+ type ExternalPackageSignatureFreshnessRequest struct

+ Assessment registry.SignatureAssessment

+ EntriesSHA256 string

+ ManifestSHA256 string

+ Now time.Time

+ PackageSHA256 string

+ PluginID string

+ PublisherID string

+ type ExternalPackageSizeSummary struct

+ Height int

+ Width int

+ type ExternalPackageSource struct

+ Kind string

+ Tag string

+ URL string

+ type ExternalPackageSourceProvenance struct

+ AssetID string

+ AssetName string

+ Kind string

+ Owner string

+ PackageSHA256 string

+ RedirectChain []ExternalPackageRedirectHop

+ ReleaseID string

+ ReleaseTag string

+ Repository string

+ RepositoryID string

+ RepositoryURL string

+ ResolvedAt time.Time

+ ResolvedCommitSHA string

+ SourceOrigin string

+ SourcePath string

+ UploadID string

+ type ExternalPackageStageStore interface

+ Remove func(externalsource.StagedArtifact) error

+ StageUpload func(context.Context, string, io.Reader, int64) (externalsource.StagedArtifact, error)

+ VerifyPackage func(context.Context, externalsource.StagedArtifact, pluginpkg.ReadLimits) (pluginpkg.Package, error)

+ type ExternalPackageStorageMethodAccessSummary struct

+ Method string

+ Operations []string

+ type ExternalPackageStorageSummary struct

+ Kind string

+ MethodAccess []ExternalPackageStorageMethodAccessSummary

+ QuotaBytes int64

+ QuotaFiles *int64

+ SchemaVersion int

+ Scope string

+ StoreID string

+ type ExternalPackageSurfaceSummary struct

+ DefaultSize *ExternalPackageSizeSummary

+ Entry string

+ Icon string

+ Intent string

+ Kind string

+ Label string

+ SurfaceID string

+ type ExternalPackageUpdateEligibility struct

+ AssessedAt time.Time

+ ReasonCodes []string

+ State string

+ type ExternalPackageWorkerSummary struct

+ ABI string

+ Artifact string

+ IdleTimeoutMS int

+ MemoryLimitBytes int64

+ Mode string

+ Scope string

+ WorkerID string

type Feature

+ const FeatureExternalPackage

type Host

+ func (h *Host) CommitExternalPackage(ctx context.Context, req CommitExternalPackageRequest) (result ExternalPackageCommitResult, retErr error)

+ func (h *Host) InspectExternalPackage(ctx context.Context, req InspectExternalPackageRequest) (result ExternalPackageInspection, retErr error)

+ func (h *Host) InspectUploadedExternalPackage(ctx context.Context, req InspectUploadedExternalPackageRequest) (ExternalPackageInspection, error)

+ func (h *Host) QueryExternalPackageCommit(ctx context.Context, req QueryExternalPackageCommitRequest) (ExternalPackageCommitResult, error)

+ type InspectExternalPackageRequest struct

+ Intent ExternalPackageIntent

+ Now time.Time

+ Source ExternalPackageSource

+ type InspectUploadedExternalPackageRequest struct

+ DeclaredSize int64

+ Intent ExternalPackageIntent

+ Now time.Time

+ Package io.Reader

type ManagementAction

+ const ManagementActionCommitExternalPackage

+ const ManagementActionInspectExternalPackage

+ const ManagementActionQueryExternalPackageCommit

+ type QueryExternalPackageCommitRequest struct

+ CommitID string

+ InspectionID string

v0.6.7

Jul 23, 2026

v0.6.6

Jul 23, 2026

v0.6.5

Jul 22, 2026

v0.6.4

Jul 22, 2026

v0.6.3

Jul 22, 2026

v0.6.2

Jul 22, 2026

v0.6.1

Jul 22, 2026

v0.6.0

Jul 21, 2026

Changes in this version

+ const DefaultRuntimeShutdownTimeout

+ const DefaultRuntimeStartupTimeout

+ const MaximumRuntimeTimeout

+ const MinimumRuntimeTimeout

+ const MutationOutcomeCommitted

+ const MutationOutcomeNotCommitted

+ const MutationOutcomeUnknown

+ const WorkerErrorOriginHostcall

+ const WorkerErrorOriginPlugin

+ const WorkerErrorOriginRuntime

+ var ErrDurableSessionScopeRequired = errors.New("durable session scope coordinator is required")

+ var ErrRuntimeAdmissionInvalid = errors.New("runtime executable admission failed")

+ var ErrRuntimeAdmissionTargetInvalid = errors.New("runtime admission target is invalid")

+ var ErrRuntimeAdmissionUnsupported = errors.New("runtime admission is unsupported on this platform")

+ var ErrRuntimeBinaryNameInvalid = errors.New("runtime binary name is invalid")

+ var ErrRuntimeDescriptorInvalid = errors.New("runtime descriptor is invalid")

+ var ErrRuntimeDescriptorMismatch = errors.New("runtime descriptor does not match the platform")

+ var ErrRuntimeHandshake = runtimeclient.ErrRuntimeHandshake

+ var ErrRuntimeIPCUnavailable = runtimeclient.ErrRuntimeIPCUnavailable

+ var ErrRuntimeModuleClosed = errors.New("runtime module is closed")

+ var ErrRuntimeModuleConsumed = errors.New("runtime module ownership was transferred to a host")

+ var ErrRuntimeModuleOptionsInvalid = errors.New("runtime module options are invalid")

+ var ErrRuntimeNotReady = runtimeclient.ErrRuntimeNotReady

+ var ErrRuntimeProtocolVersionInvalid = errors.New("runtime protocol version is invalid")

+ var ErrRuntimeRequestFailed = runtimeclient.ErrRuntimeRequestFailed

+ var ErrSHA256DigestInvalid = errors.New("sha256 digest is invalid")

+ var ErrSessionTeardownIncomplete = errors.New("plugin session teardown is incomplete")

+ var ErrVerifiedExecutableClosed = errors.New("verified runtime executable is closed")

+ var ErrVerifiedExecutableRequired = errors.New("verified runtime executable is required")

+ var RuntimeAdmissionLinuxAMD64 = RuntimeAdmissionTarget

+ var RuntimeAdmissionLinuxARM64 = RuntimeAdmissionTarget

+ func MarshalRuntimeDescriptorJSON(descriptor RuntimeDescriptor) ([]byte, error)

type CapabilityContractResolveRequest

+ SourcePolicy releasecontract.SourcePolicyV2

+ type CommitSessionScopeCloseRequest struct

+ Identity sessionscope.TeardownIdentity

+ Session sessionctx.Context

type CoreAdapters

+ SessionLifecycle SessionLifecycleAdapter

+ SessionScopes *sessionscope.Coordinator

type DiagnosticDetails

+ ContractSetSHA256 string

+ RuntimeBinarySHA256 string

+ type FinalizeSessionScopeRequest struct

+ Identity sessionscope.TeardownIdentity

type Host

+ func (h *Host) FinalizeSessionScope(ctx context.Context, req FinalizeSessionScopeRequest) (retErr error)

+ func (h *Host) RevokeSessionScope(ctx context.Context, req RevokeSessionScopeRequest) (result RevokeSessionScopeResult, retErr error)

type HostConfigError

+ func (e *HostConfigError) RuntimeModuleDisposition() RuntimeModuleDisposition

type ManagementAction

+ const ManagementActionFinalizeSessionScope

+ const ManagementActionRevokeSessionScope

+ type MutationOutcome = mutation.Outcome

type PluginReleaseRef

+ Channel string

+ type PrepareSessionScopeCloseRequest struct

+ Session sessionctx.Context

+ type ReconcileRetainedSessionScopesRequest struct

+ Scopes []sessionscope.RetainedScope

type ReleaseArtifactResolveRequest

+ SourcePolicy releasecontract.SourcePolicyV2

type ReleaseModule

+ Trust *releasetrust.ServiceSet

type ResourceRef

+ const ResourceSessionScope

+ type RevokeSessionScopeRequest struct

+ Identity sessionscope.TeardownIdentity

+ Now time.Time

+ type RevokeSessionScopeResult struct

+ Complete bool

+ Counts sessionscope.Counts

+ Fenced bool

+ State sessionscope.State

+ type RuntimeAdmissionTarget struct

+ func ParseRuntimeAdmissionTarget(value string) (RuntimeAdmissionTarget, error)

+ func (target RuntimeAdmissionTarget) String() string

+ type RuntimeBinaryName struct

+ func NewRuntimeBinaryName(value string) (RuntimeBinaryName, error)

+ func (name RuntimeBinaryName) String() string

+ type RuntimeDescriptor struct

+ func NewRuntimeDescriptor(options RuntimeDescriptorOptions) (RuntimeDescriptor, error)

+ func UnmarshalRuntimeDescriptorJSON(raw []byte) (RuntimeDescriptor, error)

+ func (descriptor RuntimeDescriptor) BinarySHA256() SHA256Digest

+ func (descriptor RuntimeDescriptor) CompatibleWithPlatform() error

+ func (descriptor RuntimeDescriptor) ContractSetSHA256() SHA256Digest

+ func (descriptor RuntimeDescriptor) PlatformVersion() platformversion.SemVer

+ func (descriptor RuntimeDescriptor) RustIPCVersion() RustIPCVersion

+ func (descriptor RuntimeDescriptor) Target() RuntimeAdmissionTarget

+ func (descriptor RuntimeDescriptor) WASMABIVersion() WASMABIVersion

+ type RuntimeDescriptorOptions struct

+ BinarySHA256 SHA256Digest

+ ContractSetSHA256 SHA256Digest

+ PlatformVersion platformversion.SemVer

+ RustIPCVersion RustIPCVersion

+ Target RuntimeAdmissionTarget

+ WASMABIVersion WASMABIVersion

+ type RuntimeHealth struct

+ Descriptor RuntimeDescriptor

+ Ready bool

+ Shards []RuntimeShardHealth

+ type RuntimeLimits = runtimeclient.RuntimeLimits

type RuntimeModule

+ func NewRuntimeModule(executable *VerifiedExecutable, options RuntimeModuleOptions) (*RuntimeModule, error)

+ func (module *RuntimeModule) Close(ctx context.Context) (RuntimeModuleCloseResult, error)

+ func (module *RuntimeModule) Descriptor() RuntimeDescriptor

+ type RuntimeModuleCacheMetrics struct

+ Compiles uint64

+ Entries int

+ Hits uint64

+ Misses uint64

+ SourceBytes int64

+ type RuntimeModuleCloseResult struct

+ Disposition RuntimeModuleDisposition

+ Outcome MutationOutcome

+ type RuntimeModuleDisposition string

+ const RuntimeModuleAlreadyClosed

+ const RuntimeModuleCallerOwned

+ const RuntimeModuleConsumedAndClosed

+ type RuntimeModuleOptions struct

+ Limits RuntimeLimits

+ ShutdownTimeout time.Duration

+ StartupTimeout time.Duration

+ type RuntimeProcessHealth struct

+ ActiveInvocations int

+ ConnectionNonce string

+ Descriptor RuntimeDescriptor

+ IPCChannelID string

+ Limits RuntimeLimits

+ ModuleCache RuntimeModuleCacheMetrics

+ QueuedInvocations int

+ Ready bool

+ RuntimeGenerationID string

+ RuntimeInstanceID string

+ type RuntimeShardHealth struct

+ RuntimeShardID string

+ type RustIPCVersion struct

+ func ParseRustIPCVersion(value string) (RustIPCVersion, error)

+ func (version RustIPCVersion) String() string

+ type SHA256Digest struct

+ func ParseSHA256Digest(value string) (SHA256Digest, error)

+ func (digest SHA256Digest) String() string

+ type SessionLifecycleAdapter interface

+ CommitSessionScopeClose func(context.Context, CommitSessionScopeCloseRequest) error

+ PrepareSessionScopeClose func(context.Context, PrepareSessionScopeCloseRequest) (sessionscope.TeardownIdentity, error)

+ ReconcileRetainedSessionScopes func(context.Context, ReconcileRetainedSessionScopesRequest) error

+ ValidateClosedSessionScope func(context.Context, ValidateClosedSessionScopeRequest) error

+ type ValidateClosedSessionScopeRequest struct

+ Identity sessionscope.TeardownIdentity

+ Session sessionctx.Context

+ type VerifiedExecutable struct

+ func OpenVerifiedExecutable(ctx context.Context, options VerifiedExecutableOptions) (*VerifiedExecutable, error)

+ func (executable *VerifiedExecutable) Close() (MutationOutcome, error)

+ func (executable *VerifiedExecutable) Descriptor() RuntimeDescriptor

+ type VerifiedExecutableOptions struct

+ ExecutionRoot *os.File

+ ExpectedDescriptor RuntimeDescriptor

+ RelativeName RuntimeBinaryName

+ RootDir *os.File

+ type WASMABIVersion struct

+ func ParseWASMABIVersion(value string) (WASMABIVersion, error)

+ func (version WASMABIVersion) String() string

+ type WorkerErrorOrigin = runtimeclient.WorkerErrorOrigin

+ type WorkerExecutionError = runtimeclient.WorkerExecutionError

v0.5.1

Jul 19, 2026

v0.5.0

Jul 19, 2026

Changes in this version

+ var ErrActionDenied = errors.New("host platform action is denied")

+ var ErrAdapterFailure = errors.New("plugin host adapter failed")

+ var ErrCapabilityModuleRequired = errors.New("capability module is required")

+ var ErrConnectivityModuleRequired = errors.New("connectivity module is required")

+ var ErrCoreActionModuleRequired = errors.New("core action module is required")

+ var ErrFeatureNotConfigured = errors.New("plugin feature is not configured")

+ var ErrHostClosed = errors.New("plugin host is closed")

+ var ErrHostConfig = errors.New("plugin host configuration is invalid")

+ var ErrManagementRevisionMismatch = errors.New("management revision mismatch")

+ var ErrOwnerScopeMismatch = errors.New("plugin owner scope mismatch")

+ var ErrPluginAlreadyInstalled = errors.New("plugin instance is already installed")

+ var ErrPluginDataContractChanged = errors.New("plugin data contract changed")

+ var ErrPluginRuntimeIncompatible = errors.New("plugin runtime is incompatible")

+ var ErrPluginRuntimeNotConfigured = errors.New("plugin runtime is not configured")

+ var ErrPluginUIProtocolUnsupported = errors.New("plugin UI protocol is unsupported")

+ var ErrReleaseModuleRequired = errors.New("release module is required")

+ var ErrRuntimeModuleRequired = errors.New("runtime module is required")

+ var ErrSecretScopeMismatch = errors.New("plugin secret scope mismatch")

+ var ErrSecretsModuleRequired = errors.New("secrets module is required")

+ var ErrStorageScopeMismatch = errors.New("plugin storage scope mismatch")

+ func AsValidatedCapabilityBusinessError(err error) (capability.BusinessError, bool)

+ func AsValidatedWorkerExecutionError(err error) (runtimeclient.WorkerExecutionError, bool)

+ func HasUnattestedRPCStructuredError(err error) bool

+ type AcknowledgeStreamRequest struct

+ DeliveryID string

+ Now time.Time

+ StreamID string

+ StreamTicket string

+ SurfaceInstanceID string

+ type ActionDeniedError struct

+ Action ManagementAction

+ Target AuthorizationTarget

+ func (e ActionDeniedError) Error() string

+ func (e ActionDeniedError) Unwrap() error

+ type AuthorizationAdapter interface

+ Authorize func(ctx context.Context, req AuthorizationRequest) error

+ type AuthorizationRequest struct

+ Action ManagementAction

+ RelatedTargets []AuthorizationTarget

+ Session sessionctx.Context

+ Target AuthorizationTarget

+ type AuthorizationTarget struct

+ Collection bool

+ ID string

+ Kind ResourceRef

+ Scope *sessionctx.ResourceScope

type BindRetainedDataRequest

+ ExpectedSourceBindingRevision uint64

+ SourcePluginInstanceID string

+ TargetExpectedManagementRevision uint64

+ type CapabilityModule struct

+ Registry *capability.Registry

+ type Config struct

+ Capability *CapabilityModule

+ Connectivity *ConnectivityModule

+ Core CoreAdapters

+ CoreAction *CoreActionModule

+ Release *ReleaseModule

+ Runtime *RuntimeModule

+ Secrets *SecretsModule

+ type ConnectivityModule struct

+ Broker connectivity.Broker

+ NetworkExecutor connectivity.NetworkExecutor

+ type CoreActionModule struct

+ Adapter CoreActionAdapter

+ type CoreAdapters struct

+ Assets pluginpkg.AssetStore

+ Audit AuditSink

+ Authorization AuthorizationAdapter

+ ConfirmationIntents security.ConfirmationIntentStore

+ Diagnostics DiagnosticsSink

+ InstallStages installstage.Store

+ Operations operation.Store

+ PackageTrustVerifier PackageTrustVerifier

+ PluginData PluginData

+ Policy PolicyAdapter

+ Registry registry.Store

+ SecurityAudit observability.SecurityAuditJournal

+ Streams stream.Store

+ SurfaceCatalog SurfaceCatalogSink

+ SurfaceTokens *bridge.SurfaceTokenService

+ type DeleteExportDataRequest struct

+ BundleRef string

+ PluginInstanceID string

type DeleteRetainedDataRequest

+ ExpectedBindingRevision uint64

+ PluginInstanceID string

type DeleteSecurityPolicyRequest

+ ExpectedManagementRevision uint64

+ ExpectedPolicyRevision uint64

+ ExpectedRevokeEpoch uint64

+ type DiagnosticDetails struct

+ Arch string

+ Artifact string

+ Code string

+ ConnectorID string

+ FailureCode string

+ Hostcall string

+ InvocationID string

+ Method string

+ OS string

+ Operation string

+ OperationID string

+ OperationsDeleted int64

+ PackageHash string

+ PluginInstanceID string

+ Reason string

+ RevokeEpoch uint64

+ RuntimeArtifactSHA256 string

+ RuntimeGenerationID string

+ RuntimeInstanceID string

+ RuntimeProcessFailureCode observability.RuntimeProcessFailureCode

+ RuntimeTargetArch string

+ RuntimeTargetOS string

+ RuntimeVersion string

+ RustIPCVersion string

+ StageID string

+ StoreID string

+ Stream string

+ StreamID string

+ StreamsDeleted int64

+ SurfaceInstanceID string

+ Transport string

+ WASMABIVersion string

type DiagnosticEvent

+ ActiveFingerprint string

+ CorrelationID string

+ Details DiagnosticDetails

+ EventID string

+ Message string

+ MutationOutcome mutation.Outcome

+ OccurredAt time.Time

+ PluginID string

+ PluginInstanceID string

+ RequestID string

+ Severity observability.DiagnosticSeverity

+ SurfaceID string

+ SurfaceInstanceID string

+ Type string

type DisableRequest

+ ExpectedManagementRevision uint64

type DowngradeRequest

+ ExpectedManagementRevision uint64

type EnableRequest

+ ExpectedManagementRevision uint64

type ExportDataResult

+ BundleRef string

+ ContentHash string

+ SizeBytes int64

+ type Feature string

+ const FeatureCapability

+ const FeatureConnectivity

+ const FeatureCoreAction

+ const FeatureRelease

+ const FeatureRuntime

+ const FeatureSecrets

+ type FeatureNotConfiguredError struct

+ Features []Feature

+ func (e FeatureNotConfiguredError) Error() string

+ func (e FeatureNotConfiguredError) MissingFeatures() []Feature

+ func (e FeatureNotConfiguredError) Unwrap() error

type GetSettingsRequest

+ Scope sessionctx.ScopeKind

type GrantPermissionRequest

+ ExpectedManagementRevision uint64

+ ExpectedPolicyRevision uint64

+ ExpectedRevokeEpoch uint64

type Host

+ func Open(ctx context.Context, config Config) (*Host, error)

+ func (h *Host) AcknowledgeStream(ctx context.Context, req AcknowledgeStreamRequest) (stream.Record, error)

+ func (h *Host) Close() error

+ func (h *Host) DeleteExportedPluginData(ctx context.Context, req DeleteExportDataRequest) error

+ func (h *Host) Features(ctx context.Context) ([]Feature, error)

+ func (h *Host) GetCompatibility(ctx context.Context) (version.CompatibilityManifest, error)

+ func (h *Host) ReportHTTPAdapterFailure(ctx context.Context, operation string, code security.ErrorCode, err error)

+ type HostConfigError struct

+ Adapter string

+ Cause error

+ Module string

+ func (e *HostConfigError) Error() string

+ func (e *HostConfigError) Is(target error) bool

+ func (e *HostConfigError) Unwrap() error

type ImportDataRequest

+ BundleRef string

+ ExpectedManagementRevision uint64

+ Now time.Time

type ListDiagnosticEventsRequest

+ Limit int

+ PluginID string

+ PluginInstanceID string

+ Severity observability.DiagnosticSeverity

+ SurfaceInstanceID string

+ Type string

type ListOperationsRequest

+ Cursor string

+ Limit int

+ type ListOperationsResult struct

+ NextCursor string

+ Operations []operation.Record

type ListRetainedDataRequest

+ PluginInstanceID string

+ type ManagementAction string

+ const ManagementActionAcknowledgeSurfaceStream

+ const ManagementActionBindRetainedData

+ const ManagementActionBindSecretRef

+ const ManagementActionCallPluginMethod

+ const ManagementActionCancelOperation

+ const ManagementActionCancelSurfaceOperation

+ const ManagementActionCleanupExpiredRetainedData

+ const ManagementActionDeleteExportedPluginData

+ const ManagementActionDeleteRetainedData

+ const ManagementActionDeleteSecretRef

+ const ManagementActionDeleteSecurityPolicy

+ const ManagementActionDisablePlugin

+ const ManagementActionDisposeSurface

+ const ManagementActionDowngradePlugin

+ const ManagementActionEnablePlugin

+ const ManagementActionExportPluginData

+ const ManagementActionGetCompatibility

+ const ManagementActionGetOperation

+ const ManagementActionGetPluginSettings

+ const ManagementActionGetRuntimeHealth

+ const ManagementActionGetSecurityPolicy

+ const ManagementActionGetSettingsSchema

+ const ManagementActionGrantPermission

+ const ManagementActionImportLocalPackage

+ const ManagementActionImportPluginData

+ const ManagementActionInstallReleaseRef

+ const ManagementActionInvokeIntent

+ const ManagementActionListDiagnosticEvents

+ const ManagementActionListFeatures

+ const ManagementActionListIntents

+ const ManagementActionListOperations

+ const ManagementActionListPermissionGrants

+ const ManagementActionListPlugins

+ const ManagementActionListRetainedData

+ const ManagementActionListSecurityPolicies

+ const ManagementActionMintBridgeToken

+ const ManagementActionMintConnectionGrant

+ const ManagementActionMintNetworkHandleGrant

+ const ManagementActionMintStorageHandleGrant

+ const ManagementActionOpenSurface

+ const ManagementActionPatchPluginSettings

+ const ManagementActionPrepareMethodConfirmation

+ const ManagementActionPrepareSurface

+ const ManagementActionPutSecurityPolicy

+ const ManagementActionReadSurfaceAsset

+ const ManagementActionReadSurfaceStream

+ const ManagementActionRefreshEnabledPlugins

+ const ManagementActionRejectSurfaceConfirmation

+ const ManagementActionRevokePermission

+ const ManagementActionRevokeSurfaceScope

+ const ManagementActionStartRuntime

+ const ManagementActionStopRuntime

+ const ManagementActionTestSecretRef

+ const ManagementActionUninstallPlugin

+ const ManagementActionUpdateLocalPackage

+ const ManagementActionUpdateReleaseRef

+ func (action ManagementAction) Resource() ResourceRef

+ func (action ManagementAction) Valid() bool

+ type ManagementRevisionMismatchError struct

+ Actual uint64

+ Expected uint64

+ PluginInstanceID string

+ func (e *ManagementRevisionMismatchError) Error() string

+ func (e *ManagementRevisionMismatchError) Unwrap() error

type OpenSurfaceRequest

+ ExpectedManagementRevision uint64

type PatchSettingsRequest

+ ExpectedValuesRevision uint64

+ Remove []string

+ Scope sessionctx.ScopeKind

+ Set map[string]any

+ type PermissionMutationResult struct

+ Permission permissions.Record

+ Revisions registry.AuthorizationRevisions

+ type PluginData interface

+ Close func() error

+ type PrepareMethodConfirmationRequest struct

+ BridgeChannelID string

+ GatewayToken string

+ Method string

+ Now time.Time

+ Params map[string]any

+ PluginInstanceID string

+ SurfaceInstanceID string

+ type PrepareMethodConfirmationResult struct

+ ConfirmationID string

+ ConfirmationTokenID string

+ ExpiresAt time.Time

+ Plan any

+ PlanHash string

+ RequestHash string

+ type PrepareSurfaceRequest struct

+ AssetTicket string

+ Now time.Time

+ SurfaceInstanceID string

type PutSecurityPolicyRequest

+ ExpectedManagementRevision uint64

+ ExpectedPolicyRevision uint64

+ ExpectedRevokeEpoch uint64

type ReadStreamRequest

+ ReadID string

type ReadStreamResult

+ DeliveryID string

+ ReadID string

type ReadSurfaceAssetRequest

+ SurfaceInstanceID string

+ type RefreshEnabledPluginPublicError struct

+ Code security.ErrorCode

+ Message string

+ type RefreshEnabledPluginResult struct

+ Error *RefreshEnabledPluginPublicError

+ PluginInstanceID string

+ Status RefreshEnabledPluginStatus

+ func (result RefreshEnabledPluginResult) MarshalJSON() ([]byte, error)

+ type RefreshEnabledPluginStatus string

+ const RefreshEnabledPluginStatusFailed

+ const RefreshEnabledPluginStatusRefreshed

+ type ReleaseModule struct

+ CapabilityContractArtifacts CapabilityContractArtifactResolver

+ CapabilityContractKeys CapabilityContractKeyResolver

+ HostRequirements HostRequirementPolicy

+ ReleaseArtifactResolver ReleaseArtifactResolver

+ ReleaseMetadataVerifier ReleaseMetadataVerifier

+ ReleaseSourcePolicy ReleaseSourcePolicyResolver

+ RevocationVerifier SourceRevocationEvidenceVerifier

type ResolvedPackageArtifact

+ ArtifactSHA256 string

+ type ResourceRef string

+ const ResourceAssetSession

+ const ResourceBridgeChannel

+ const ResourceConfirmation

+ const ResourceConnector

+ const ResourceDataExport

+ const ResourceDiagnostic

+ const ResourceIntent

+ const ResourceMethod

+ const ResourceOperation

+ const ResourcePermission

+ const ResourcePlatform

+ const ResourcePlugin

+ const ResourcePluginData

+ const ResourceRetainedData

+ const ResourceRuntime

+ const ResourceSecret

+ const ResourceSecurityPolicy

+ const ResourceSettings

+ const ResourceStore

+ const ResourceStream

+ const ResourceSurface

+ const ResourceSurfaceAsset

+ const ResourceSurfaceDefinition

+ func (resource ResourceRef) Valid() bool

type RevokePermissionRequest

+ ExpectedManagementRevision uint64

+ ExpectedPolicyRevision uint64

+ ExpectedRevokeEpoch uint64

+ type RuntimeModule struct

+ Manager runtimeclient.Manager

+ type SecretsModule struct

+ Store SecretStoreAdapter

+ type SecurityPolicyResult struct

+ Policy security.PolicyRecord

+ Revisions registry.AuthorizationRevisions

type SettingsResult

+ Scope sessionctx.ScopeKind

+ SecretMetadata []SettingsSecretMetadata

+ ValuesRevision uint64

type SettingsSchemaResult

+ Scope sessionctx.ScopeKind

+ ValuesRevision uint64

+ type SettingsSecretMetadata struct

+ Bound bool

+ BoundAt *time.Time

+ Key string

+ LastTestStatus string

+ Scope string

+ SecretRef string

+ TestedAt *time.Time

+ UpdatedAt *time.Time

type UninstallRequest

+ ExpectedManagementRevision uint64

type UpdateLocalPackageRequest

+ ExpectedManagementRevision uint64

type UpdateReleaseRefRequest

+ ExpectedManagementRevision uint64

v0.4.3

Jul 15, 2026

v0.4.2

Jul 15, 2026

v0.4.1

Jul 15, 2026

v0.4.0

Jul 15, 2026

v0.3.2

Jul 14, 2026

v0.3.1

Jul 14, 2026

v0.3.0

Jul 14, 2026

Changes in this version

+ var ErrConfirmationInvalid = errors.New("plugin confirmation is invalid")

+ var ErrConfirmationRejected = errors.New("plugin confirmation was rejected")

+ var ErrMethodAdapterPanic = errors.New("plugin method adapter panicked")

+ var ErrPluginTrustDenied = errors.New("plugin trust does not allow execution")

+ var ErrPluginTrustUnavailable = errors.New("plugin trust is unavailable")

+ var ErrSecurityEventPersistence = errors.New("plugin security event persistence failed")

type Adapters

+ CapabilityContractArtifacts CapabilityContractArtifactResolver

+ CapabilityContractKeys CapabilityContractKeyResolver

+ HostRequirements HostRequirementPolicy

+ type CancelSurfaceOperationRequest struct

+ BridgeChannelID string

+ Now time.Time

+ OperationID string

+ OwnerSessionHash string

+ OwnerUserHash string

+ Reason string

+ SessionChannelIDHash string

+ SurfaceInstanceID string

+ type CapabilityArtifactFetchHop struct

+ ResolvedIP string

+ URL string

+ type CapabilityContractArtifactResolver interface

+ ResolveCapabilityContract func(ctx context.Context, req CapabilityContractResolveRequest) (ResolvedCapabilityContractArtifact, error)

+ type CapabilityContractArtifactSet interface

+ OpenCapabilityContractArtifact func(ctx context.Context, ref string) (ResolvedCapabilityContractFile, error)

+ type CapabilityContractKeyRequest struct

+ KeyID string

+ PublisherID string

+ SourceID string

+ SourcePolicySnapshot SourcePolicySnapshot

+ type CapabilityContractKeyResolver interface

+ ResolveCapabilityContractKey func(ctx context.Context, req CapabilityContractKeyRequest) ([]byte, error)

+ type CapabilityContractResolveRequest struct

+ Pin capabilitycontract.Pin

+ PluginPublisherID string

+ SourceID string

+ SourcePolicySnapshot SourcePolicySnapshot

type CoreActionAdapter

+ ResolveCoreActionTarget func(ctx context.Context, req capability.TargetResolutionRequest) (capability.TargetDescriptor, error)

type Host

+ func (h *Host) CancelSurfaceOperation(ctx context.Context, req CancelSurfaceOperationRequest) (operation.Record, error)

+ func (h *Host) RejectMethodConfirmation(ctx context.Context, req RejectMethodConfirmationRequest) (RejectMethodConfirmationResult, error)

+ type HostRequirementPolicy interface

+ SelectHostRequirement func(ctx context.Context, req HostRequirementSelectionRequest) (HostRequirementSelection, error)

+ type HostRequirementSelection struct

+ HostID string

+ type HostRequirementSelectionRequest struct

+ PluginID string

+ PluginVersion string

+ PublisherID string

+ Requirements []HostRequirement

+ SourceID string

type ReadStreamRequest

+ WaitTimeout time.Duration

type ReadStreamResult

+ Done bool

+ NextStreamExpiresAt *time.Time

+ NextStreamTicket string

+ NextStreamTicketID string

+ TerminalStatus stream.Status

+ type RejectMethodConfirmationRequest struct

+ BridgeChannelID string

+ ConfirmationID string

+ GatewayToken string

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ PluginInstanceID string

+ SessionChannelIDHash string

+ SurfaceInstanceID string

+ type RejectMethodConfirmationResult struct

+ Rejected bool

+ type ResolvedCapabilityContractArtifact struct

+ Artifacts CapabilityContractArtifactSet

+ type ResolvedCapabilityContractFile struct

+ FetchChain []CapabilityArtifactFetchHop

+ MediaType string

+ Reader io.ReadCloser

+ Size int64

type SourcePolicySnapshot

+ AllowedArtifactHosts []string

type SourcePolicyTrustedKey

+ AllowedCapabilityPublishers []string

type WorkerInvocationPayload

+ AuditCorrelationID string

+ OperationID string

+ ParamsSHA256 string

+ StreamID string

v0.2.2

Jul 12, 2026

v0.2.1

Jul 12, 2026

v0.2.0

Jul 12, 2026

Changes in this version

+ var ErrConfirmationRequired = errors.New("plugin method confirmation required")

+ var ErrInvalidSecretRef = secrets.ErrInvalidSecretRef

+ var ErrMethodRequestContract = errors.New("plugin method request contract validation failed")

+ var ErrMethodResponseContract = errors.New("plugin method response contract validation failed")

+ var ErrOperationCancelDispatchFailed = errors.New("operation cancel dispatch failed")

+ var ErrPackageTrustVerificationInvalid = errors.New("package trust verifier returned invalid trust state")

+ var ErrPackageTrustVerifierRequired = errors.New("package trust verifier is required for requested trust state")

+ var ErrPluginDataArchiveRequired = errors.New("archive_ref or settings_archive_ref is required")

+ var ErrPluginDataNotDeclared = errors.New("plugin does not declare exportable data")

+ var ErrPluginMigrationPreflight = errors.New("plugin migration preflight failed")

+ var ErrPluginSettingsNotDeclared = errors.New("target plugin does not declare settings")

+ var ErrPluginStateVersionMismatch = errors.New("plugin state version mismatch")

+ var ErrPluginStorageNotDeclared = errors.New("target plugin does not declare storage")

+ var ErrReleaseArtifactResolverRequired = errors.New("release artifact resolver is required")

+ var ErrReleaseMetadataVerifierRequired = errors.New("release metadata verifier is required")

+ var ErrReleaseRefPolicyDenied = errors.New("release ref source policy denied")

+ var ErrReleaseRefVerificationFailed = errors.New("release ref verification failed")

+ var ErrReleaseSourcePolicyRequired = errors.New("release source policy resolver is required")

+ var ErrRetainedDataBindFailed = errors.New("retained data bind failed")

+ var ErrRetainedDataCleanupFailed = errors.New("retained data cleanup failed")

+ var ErrRetainedDataUnsafePayload = errors.New("retained data payload is not safe to delete")

+ var ErrSecretStoreRequired = errors.New("secret store adapter is required")

+ var ErrSourceRevocationVerifierRequired = errors.New("source revocation evidence verifier is required")

+ var ErrStreamTicketRequired = errors.New("stream ticket is required")

+ func ImportLocalPackageBytes(ctx context.Context, h *Host, data []byte) (registry.PluginRecord, error)

+ type Adapters struct

+ Assets pluginpkg.AssetStore

+ Audit AuditSink

+ Capabilities *capability.Registry

+ Cleanup cleanup.Orchestrator

+ ConfirmationIntents security.ConfirmationIntentStore

+ Connectivity connectivity.Broker

+ CoreActions CoreActionAdapter

+ Diagnostics DiagnosticsSink

+ InstallStages installstage.Store

+ NetworkExecutor connectivity.NetworkExecutor

+ OperationCanceler OperationCanceler

+ Operations operation.Store

+ PackageTrustVerifier PackageTrustVerifier

+ Permissions permissions.Store

+ Policy PolicyAdapter

+ Registry registry.Store

+ ReleaseArtifactResolver ReleaseArtifactResolver

+ ReleaseMetadataVerifier ReleaseMetadataVerifier

+ ReleaseSourcePolicy ReleaseSourcePolicyResolver

+ RetainedData retaineddata.Store

+ RevocationVerifier SourceRevocationEvidenceVerifier

+ RuntimeArtifactResolver RuntimeArtifactResolver

+ RuntimeSupervisor runtimeclient.Supervisor

+ Secrets SecretStoreAdapter

+ SecurityPolicy security.PolicyStore

+ SessionResolver sessionctx.Resolver

+ Settings settings.Store

+ Storage storage.Broker

+ Streams stream.Store

+ SurfaceCatalog SurfaceCatalogSink

+ SurfaceTokens *bridge.SurfaceTokenService

+ type AppendStreamEventRequest struct

+ Data []byte

+ Error string

+ Kind string

+ Now time.Time

+ StreamID string

+ type AuditEvent = observability.AuditEvent

+ type AuditLister = observability.AuditLister

+ type AuditSink = observability.AuditSink

+ type BindRetainedDataRequest struct

+ Now time.Time

+ RetainedID string

+ TargetPluginInstanceID string

+ type CallMethodRequest struct

+ BridgeChannelID string

+ ConfirmationID string

+ GatewayToken string

+ Method string

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ Params map[string]any

+ PluginInstanceID string

+ SessionChannelIDHash string

+ SurfaceInstanceID string

+ type CallMethodResult struct

+ ConfirmationRequired bool

+ ConfirmationTokenID string

+ Data any

+ OperationID string

+ PlanHash string

+ RequestHash string

+ StreamExpiresAt *time.Time

+ StreamID string

+ StreamTicket string

+ StreamTicketID string

+ type CancelOperationRequest struct

+ Now time.Time

+ OperationID string

+ Reason string

+ type CleanupExpiredRetainedDataRequest struct

+ MaxRecords int

+ Now time.Time

+ RetryFailed bool

+ type CloseStreamRequest struct

+ Now time.Time

+ Reason string

+ Status stream.Status

+ StreamID string

+ type ConfirmMethodRequest = CallMethodRequest

+ type ConfirmMethodResult struct

+ ConfirmationID string

+ ConfirmationTokenID string

+ ExpiresAt time.Time

+ Plan any

+ PlanHash string

+ RequestHash string

+ type CoreActionAdapter interface

+ InvokeCoreAction func(ctx context.Context, req capability.Invocation) (capability.Result, error)

+ type DeleteRetainedDataRequest struct

+ Now time.Time

+ RetainedID string

+ type DeleteSecurityPolicyRequest struct

+ Now time.Time

+ PluginInstanceID string

+ type DiagnosticEvent = observability.DiagnosticEvent

+ type DiagnosticLister = observability.DiagnosticLister

+ type DiagnosticsSink = observability.DiagnosticsSink

+ type DisableRequest struct

+ Now time.Time

+ PluginInstanceID string

+ PluginStateVersion uint64

+ Reason string

+ type DisposeSurfaceRequest struct

+ BridgeNonce string

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ SessionChannelIDHash string

+ SurfaceInstanceID string

+ type DowngradeRequest struct

+ Now time.Time

+ PackageHash string

+ PluginInstanceID string

+ PluginStateVersion uint64

+ Version string

+ type EnableRequest struct

+ Now time.Time

+ PluginInstanceID string

+ PluginStateVersion uint64

+ type ExchangeAssetTicketRequest struct

+ AssetTicket string

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ SessionChannelIDHash string

+ SurfaceInstanceID string

+ type ExportDataRequest struct

+ IncludeSecrets bool

+ PluginInstanceID string

+ type ExportDataResult struct

+ ArchiveRef string

+ SettingsArchiveRef string

+ type FinishOperationRequest struct

+ Now time.Time

+ OperationID string

+ Reason string

+ Status operation.Status

+ type GetSecurityPolicyRequest struct

+ PluginInstanceID string

+ type GetSettingsRequest struct

+ PluginInstanceID string

+ type GrantPermissionRequest struct

+ ExpiresAt time.Time

+ GrantedBy string

+ Now time.Time

+ PermissionID string

+ PluginInstanceID string

+ type Host struct

+ func New(adapters Adapters) (*Host, error)

+ func (h *Host) AppendStreamEvent(ctx context.Context, req AppendStreamEventRequest) (stream.Event, error)

+ func (h *Host) BindRetainedData(ctx context.Context, req BindRetainedDataRequest) (retaineddata.Record, error)

+ func (h *Host) BindSecretRef(ctx context.Context, req SecretBindRequest) error

+ func (h *Host) CallPluginMethod(ctx context.Context, req CallMethodRequest) (CallMethodResult, error)

+ func (h *Host) CancelOperation(ctx context.Context, req CancelOperationRequest) (operation.Record, error)

+ func (h *Host) Capabilities() *capability.Registry

+ func (h *Host) CleanupExpiredRetainedData(ctx context.Context, req CleanupExpiredRetainedDataRequest) (RetainedDataCleanupResult, error)

+ func (h *Host) CloseStream(ctx context.Context, req CloseStreamRequest) (stream.Record, error)

+ func (h *Host) DeleteRetainedData(ctx context.Context, req DeleteRetainedDataRequest) (retaineddata.Record, error)

+ func (h *Host) DeleteSecretRef(ctx context.Context, req SecretDeleteRequest) error

+ func (h *Host) DeleteSecurityPolicy(ctx context.Context, req DeleteSecurityPolicyRequest) error

+ func (h *Host) DisablePlugin(ctx context.Context, req DisableRequest) (registry.PluginRecord, error)

+ func (h *Host) DisposeSurface(_ context.Context, req DisposeSurfaceRequest) error

+ func (h *Host) DowngradePlugin(ctx context.Context, req DowngradeRequest) (registry.PluginRecord, error)

+ func (h *Host) EnablePlugin(ctx context.Context, req EnableRequest) (registry.PluginRecord, error)

+ func (h *Host) ExchangeAssetTicket(ctx context.Context, req ExchangeAssetTicketRequest) (bridge.AssetSessionResult, error)

+ func (h *Host) ExportPluginData(ctx context.Context, req ExportDataRequest) (ExportDataResult, error)

+ func (h *Host) FinishOperation(ctx context.Context, req FinishOperationRequest) (operation.Record, error)

+ func (h *Host) GetOperation(ctx context.Context, operationID string) (operation.Record, error)

+ func (h *Host) GetPluginSettings(ctx context.Context, req GetSettingsRequest) (SettingsResult, error)

+ func (h *Host) GetSecurityPolicy(ctx context.Context, req GetSecurityPolicyRequest) (security.PolicyRecord, error)

+ func (h *Host) GetSettingsSchema(ctx context.Context, req GetSettingsRequest) (SettingsSchemaResult, error)

+ func (h *Host) GrantPermission(ctx context.Context, req GrantPermissionRequest) (permissions.Record, error)

+ func (h *Host) ImportLocalPackage(ctx context.Context, req ImportLocalPackageRequest) (registry.PluginRecord, error)

+ func (h *Host) ImportPluginData(ctx context.Context, req ImportDataRequest) error

+ func (h *Host) InstallReleaseRef(ctx context.Context, req InstallReleaseRefRequest) (registry.PluginRecord, error)

+ func (h *Host) InvokeIntent(ctx context.Context, req InvokeIntentRequest) (CallMethodResult, error)

+ func (h *Host) ListAuditEvents(ctx context.Context, req ListAuditEventsRequest) ([]AuditEvent, error)

+ func (h *Host) ListDiagnosticEvents(ctx context.Context, req ListDiagnosticEventsRequest) ([]DiagnosticEvent, error)

+ func (h *Host) ListIntents(ctx context.Context, req ListIntentsRequest) ([]IntentRecord, error)

+ func (h *Host) ListOperations(ctx context.Context, req ListOperationsRequest) ([]operation.Record, error)

+ func (h *Host) ListPermissionGrants(ctx context.Context, req ListPermissionGrantsRequest) ([]permissions.Record, error)

+ func (h *Host) ListPlugins(ctx context.Context) ([]registry.PluginRecord, error)

+ func (h *Host) ListRetainedData(ctx context.Context, req ListRetainedDataRequest) ([]retaineddata.Record, error)

+ func (h *Host) ListSecurityPolicies(ctx context.Context) ([]security.PolicyRecord, error)

+ func (h *Host) MintBridgeToken(ctx context.Context, req MintBridgeTokenRequest) (bridge.GatewayTokenResult, error)

+ func (h *Host) MintConnectionGrant(ctx context.Context, req MintConnectionGrantRequest) (connectivity.ConnectionGrant, error)

+ func (h *Host) MintNetworkHandleGrant(ctx context.Context, req MintConnectionGrantRequest) (NetworkHandleGrantResult, error)

+ func (h *Host) MintStorageHandleGrant(ctx context.Context, req MintStorageHandleGrantRequest) (StorageHandleGrantResult, error)

+ func (h *Host) OpenSurface(ctx context.Context, req OpenSurfaceRequest) (bridge.SurfaceBootstrap, error)

+ func (h *Host) PatchPluginSettings(ctx context.Context, req PatchSettingsRequest) (SettingsResult, error)

+ func (h *Host) PrepareMethodConfirmation(ctx context.Context, req ConfirmMethodRequest) (ConfirmMethodResult, error)

+ func (h *Host) PrepareSurface(ctx context.Context, req ExchangeAssetTicketRequest) (result PrepareSurfaceResult, err error)

+ func (h *Host) PutSecurityPolicy(ctx context.Context, req PutSecurityPolicyRequest) (security.PolicyRecord, error)

+ func (h *Host) ReadStream(ctx context.Context, req ReadStreamRequest) (ReadStreamResult, error)

+ func (h *Host) ReadSurfaceAsset(ctx context.Context, req ReadSurfaceAssetRequest) (ReadSurfaceAssetResult, error)

+ func (h *Host) RefreshEnabledPlugins(ctx context.Context) ([]registry.PluginRecord, error)

+ func (h *Host) RevokePermission(ctx context.Context, req RevokePermissionRequest) (permissions.Record, error)

+ func (h *Host) RevokeSurfaceScope(ctx context.Context, req RevokeSurfaceScopeRequest) (int, error)

+ func (h *Host) RuntimeHealth(ctx context.Context) (runtimeclient.Health, error)

+ func (h *Host) StartRuntime(ctx context.Context, req StartRuntimeRequest) (runtimeclient.Health, error)

+ func (h *Host) StopRuntime(ctx context.Context) error

+ func (h *Host) TestSecretRef(ctx context.Context, req SecretTestRequest) error

+ func (h *Host) UninstallPlugin(ctx context.Context, req UninstallRequest) (registry.PluginRecord, error)

+ func (h *Host) UpdateLocalPackage(ctx context.Context, req UpdateLocalPackageRequest) (registry.PluginRecord, error)

+ func (h *Host) UpdateReleaseRef(ctx context.Context, req UpdateReleaseRefRequest) (registry.PluginRecord, error)

+ type HostCapabilityContractRef struct

+ ArtifactRef string

+ ArtifactSHA256 string

+ CompatibilitySHA256 string

+ ContractID string

+ ContractVersion string

+ GeneratedClientSHA256 string

+ ManifestSHA256 string

+ NoticesSHA256 string

+ SignatureKeyID string

+ SignatureRef string

+ SignatureSHA256 string

+ type HostCapabilityRequirement struct

+ CapabilityID string

+ CapabilityVersion string

+ Contract HostCapabilityContractRef

+ type HostRequirement struct

+ HostID string

+ MinHostVersion string

+ RequiredCapabilityContracts []HostCapabilityRequirement

+ type ImportDataRequest struct

+ ArchiveRef string

+ DeleteExisting bool

+ PluginInstanceID string

+ SettingsArchiveRef string

+ type ImportLocalPackageRequest struct

+ Now time.Time

+ PackageReader io.ReaderAt

+ PackageSize int64

+ PluginInstanceID string

+ PluginStateVersion uint64

+ type InstallReleaseRefRequest struct

+ Now time.Time

+ PluginInstanceID string

+ PluginStateVersion uint64

+ ReleaseRef PluginReleaseRef

+ type IntentRecord struct

+ ActiveFingerprint string

+ DisplayName string

+ Effect string

+ Execution string

+ IntentID string

+ Method string

+ PayloadSchema map[string]any

+ PluginID string

+ PluginInstanceID string

+ PublisherID string

+ Version string

+ type InvokeIntentRequest struct

+ IntentID string

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ Params map[string]any

+ PluginInstanceID string

+ SessionChannelIDHash string

+ type ListAuditEventsRequest = observability.ListAuditRequest

+ type ListDiagnosticEventsRequest = observability.ListDiagnosticRequest

+ type ListIntentsRequest struct

+ IntentID string

+ PluginInstanceID string

+ type ListOperationsRequest struct

+ PluginInstanceID string

+ type ListPermissionGrantsRequest struct

+ ActiveOnly bool

+ PluginInstanceID string

+ type ListRetainedDataRequest = retaineddata.ListRequest

+ type MintBridgeTokenRequest struct

+ BridgeChannelID string

+ Handshake bridge.Handshake

+ HandshakeTranscriptSHA256 string

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ PreviousGatewayToken string

+ SessionChannelIDHash string

+ type MintConnectionGrantRequest struct

+ ConnectorID string

+ Destination string

+ Now time.Time

+ PluginInstanceID string

+ RuntimeGenerationID string

+ RuntimeInstanceID string

+ RuntimeShardID string

+ TTL time.Duration

+ Transport connectivity.Transport

+ type MintStorageHandleGrantRequest struct

+ Now time.Time

+ PluginInstanceID string

+ RuntimeGenerationID string

+ RuntimeInstanceID string

+ RuntimeShardID string

+ StoreID string

+ TTL time.Duration

+ type NetworkHandleGrantResult struct

+ ConnectionGrant connectivity.ConnectionGrant

+ HandleGrant bridge.HandleGrantResult

+ type OpenSurfaceRequest struct

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ PluginInstanceID string

+ PluginStateVersion uint64

+ SessionChannelIDHash string

+ SurfaceID string

+ SurfaceInstanceID string

+ type OperationCancelAdapterRequest struct

+ BridgeChannelID string

+ Effect string

+ Execution string

+ Method string

+ OperationID string

+ PluginID string

+ PluginInstanceID string

+ Reason string

+ RequestedAt time.Time

+ SessionChannelIDHash string

+ SurfaceInstanceID string

+ type OperationCanceler interface

+ RequestOperationCancel func(ctx context.Context, req OperationCancelAdapterRequest) error

+ type PackageDistribution string

+ const PackageDistributionHostArtifactRef

+ const PackageDistributionLocalImport

+ const PackageDistributionRegistryRef

+ type PackageDistributionRef struct

+ ArtifactRef string

+ Distribution PackageDistribution

+ ImportID string

+ type PackageDowngradePolicy string

+ const PackageDowngradeBlock

+ const PackageDowngradeReviewRequired

+ type PackageHashSet struct

+ EntriesSHA256 string

+ ManifestSHA256 string

+ PackageSHA256 string

+ type PackageInstallPolicy string

+ const PackageInstallAllow

+ const PackageInstallBlock

+ const PackageInstallReviewRequired

+ type PackageReleaseSignature struct

+ Algorithm string

+ KeyID string

+ RevocationEpoch string

+ SignatureBundleRef string

+ SourcePolicyEpoch string

+ type PackageSourceClass string

+ const PackageSourceClassCommunity

+ const PackageSourceClassCurated

+ const PackageSourceClassOfficial

+ const PackageSourceClassPrivate

+ type PackageSourceType string

+ const PackageSourceHostArtifact

+ const PackageSourceRegistry

+ type PackageTrustAction string

+ const PackageTrustActionInstall

+ const PackageTrustActionUpdate

+ type PackageTrustVerificationRequest struct

+ Action PackageTrustAction

+ CurrentRecord *registry.PluginRecord

+ LocalImport bool

+ Now time.Time

+ Package pluginpkg.Package

+ PluginInstanceID string

+ Release *PluginPackageRelease

+ ReleaseRef *PluginReleaseRef

+ SourcePolicySnapshot *SourcePolicySnapshot

+ type PackageTrustVerificationResult = registry.TrustAssessment

+ type PackageTrustVerifier interface

+ VerifyPackageTrust func(ctx context.Context, req PackageTrustVerificationRequest) (PackageTrustVerificationResult, error)

+ type PackageUnsignedPolicy string

+ const PackageUnsignedBlock

+ const PackageUnsignedDevOnly

+ const PackageUnsignedReviewRequired

+ type PatchSettingsRequest struct

+ Now time.Time

+ PluginInstanceID string

+ Values map[string]any

+ type PluginPackageRelease struct

+ Compatibility *ReleaseCompatibility

+ DistributionRef PackageDistributionRef

+ Hashes PackageHashSet

+ HostRequirements []HostRequirement

+ Metadata map[string]string

+ PackageSignature *PackageReleaseSignature

+ PluginID string

+ PublisherID string

+ ReleaseEvidence *ReleaseEvidence

+ ReleaseMetadataSHA256 string

+ ReleaseMetadataSignature *ReleaseMetadataSignature

+ SourceID string

+ Version string

+ type PluginRef struct

+ ActiveFingerprint string

+ PluginID string

+ PluginInstanceID string

+ Version string

+ type PluginReleaseRef struct

+ ExpectedHashes PackageHashSet

+ PluginID string

+ PublisherID string

+ ReleaseMetadataRef string

+ ReleaseMetadataSHA256 string

+ SourceID string

+ Version string

+ type PolicyAdapter interface

+ DeveloperModeEnabled func(ctx context.Context, session sessionctx.Context) (bool, error)

+ EvaluateLocalPolicy func(ctx context.Context, session sessionctx.Context, plugin PluginRef, ...) (PolicyDecision, error)

+ LocalGeneratedPluginsEnabled func(ctx context.Context, session sessionctx.Context) (bool, error)

+ type PolicyDecision string

+ const PolicyAllow

+ const PolicyDeny

+ type PrepareSurfaceResult struct

+ Document pluginpkg.OpaqueSurfaceDocument

+ type PutSecurityPolicyRequest struct

+ AllowedPermissions []string

+ DeniedMethods []string

+ Now time.Time

+ PluginInstanceID string

+ type ReadStreamRequest struct

+ MaxBytes int64

+ MaxEvents int

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ SessionChannelIDHash string

+ StreamID string

+ StreamTicket string

+ SurfaceInstanceID string

+ type ReadStreamResult struct

+ Events []stream.Event

+ Record stream.Record

+ type ReadSurfaceAssetRequest struct

+ AssetSession string

+ AssetSessionID string

+ BindingID string

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ SessionChannelIDHash string

+ type ReadSurfaceAssetResult struct

+ Content []byte

+ Entry pluginpkg.Entry

+ Session bridge.SurfaceSession

+ type ReleaseArtifactResolveRequest struct

+ Action PackageTrustAction

+ CurrentRecord *registry.PluginRecord

+ Now time.Time

+ PluginInstanceID string

+ ReleaseRef PluginReleaseRef

+ SourcePolicySnapshot SourcePolicySnapshot

+ type ReleaseArtifactResolver interface

+ ResolveReleaseArtifact func(ctx context.Context, req ReleaseArtifactResolveRequest) (ResolvedPackageArtifact, error)

+ type ReleaseCompatibility struct

+ MinReDevPluginVersion string

+ MinRuntimeVersion string

+ SupportedTargets []string

+ UIProtocolVersion string

+ type ReleaseEvidence struct

+ GeneratedAt string

+ NoticesSHA256 string

+ ProvenanceSHA256 string

+ type ReleaseMetadataSignature struct

+ Algorithm string

+ KeyID string

+ RevocationEpoch string

+ SignatureRef string

+ SourcePolicyEpoch string

+ type ReleaseMetadataVerificationRequest struct

+ Action PackageTrustAction

+ CurrentRecord *registry.PluginRecord

+ Now time.Time

+ PluginInstanceID string

+ Release PluginPackageRelease

+ ReleaseMetadataBytes []byte

+ ReleaseMetadataSignature []byte

+ ReleaseRef PluginReleaseRef

+ SourcePolicySnapshot SourcePolicySnapshot

+ type ReleaseMetadataVerificationResult struct

+ Metadata map[string]string

+ type ReleaseMetadataVerifier interface

+ VerifyReleaseMetadata func(ctx context.Context, req ReleaseMetadataVerificationRequest) (ReleaseMetadataVerificationResult, error)

+ type ReleaseSourcePolicyRequest struct

+ Action PackageTrustAction

+ CurrentRecord *registry.PluginRecord

+ Now time.Time

+ PluginInstanceID string

+ ReleaseRef PluginReleaseRef

+ type ReleaseSourcePolicyResolver interface

+ ResolveReleaseSourcePolicy func(ctx context.Context, req ReleaseSourcePolicyRequest) (SourcePolicySnapshot, error)

+ type ResolvedPackageArtifact struct

+ Reader io.ReaderAt

+ ReleaseMetadataBytes []byte

+ ReleaseMetadataSignature []byte

+ Size int64

+ type RetainedDataCleanupResult struct

+ Deleted []retaineddata.Record

+ Failed []retaineddata.Record

+ type RevokePermissionRequest struct

+ Now time.Time

+ PermissionID string

+ PluginInstanceID string

+ Reason string

+ RevokedBy string

+ type RevokeSurfaceScopeRequest struct

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ SessionChannelIDHash string

+ type RuntimeArtifactResolver interface

+ RuntimePath func(ctx context.Context, target RuntimeTarget) (string, error)

+ type RuntimeTarget struct

+ Arch string

+ OS string

+ type SecretBindRequest = secrets.BindRequest

+ type SecretDeleteRequest = secrets.DeleteRequest

+ type SecretStoreAdapter = secrets.Store

+ type SecretTestRequest = secrets.TestRequest

+ type SettingsResult struct

+ PluginInstanceID string

+ SchemaVersion int

+ SettingsRevision uint64

+ UpdatedAt time.Time

+ Values map[string]any

+ type SettingsSchemaResult struct

+ Fields []manifest.SettingFieldSpec

+ Migration manifest.MigrationSpec

+ PluginInstanceID string

+ SchemaVersion int

+ SettingsRevision uint64

+ type SourcePolicyRevocationEvidence struct

+ ExpiresAt string

+ HighestSeenEpoch string

+ MetadataBytes []byte

+ MetadataRef string

+ MetadataSHA256 string

+ SignatureBytes []byte

+ SignatureKeyID string

+ SignatureRef string

+ VerifiedAt string

+ type SourcePolicySnapshot struct

+ AllowedPublishers []string

+ AssessedAt string

+ DowngradePolicy PackageDowngradePolicy

+ InstallPolicy PackageInstallPolicy

+ KeyRotationEpoch string

+ Metadata map[string]string

+ PolicyEpoch string

+ RequireSignature bool

+ RevocationEpoch string

+ RevocationEvidence *SourcePolicyRevocationEvidence

+ SchemaVersion string

+ SourceClass PackageSourceClass

+ SourceID string

+ SourceType PackageSourceType

+ TrustedKeyIDs []string

+ TrustedKeys []SourcePolicyTrustedKey

+ UnsignedPolicy PackageUnsignedPolicy

+ type SourcePolicyTrustedKey struct

+ Algorithm string

+ KeyID string

+ PublicKeySHA256 string

+ RevocationEpoch string

+ Usage []string

+ ValidFrom string

+ ValidUntil string

+ type SourceRevocationEvidenceVerificationRequest struct

+ Now time.Time

+ ReleaseRef PluginReleaseRef

+ RevocationEvidence SourcePolicyRevocationEvidence

+ RevocationMetadata SourceRevocationMetadata

+ RevocationMetadataBytes []byte

+ RevocationMetadataSignature []byte

+ SourcePolicySnapshot SourcePolicySnapshot

+ type SourceRevocationEvidenceVerificationResult struct

+ Metadata map[string]string

+ type SourceRevocationEvidenceVerifier interface

+ VerifySourceRevocationEvidence func(ctx context.Context, req SourceRevocationEvidenceVerificationRequest) (SourceRevocationEvidenceVerificationResult, error)

+ type SourceRevocationMetadata struct

+ ExpiresAt string

+ GeneratedAt string

+ HighestSeenEpoch string

+ RevokedKeyIDs []string

+ SchemaVersion string

+ SourceID string

+ type StartRuntimeRequest struct

+ Target RuntimeTarget

+ type StorageHandleGrantResult struct

+ HandleGrant bridge.HandleGrantResult

+ Namespace storage.Namespace

+ type SurfaceCatalogSink interface

+ PublishSurfaces func(ctx context.Context, snapshot SurfaceSnapshot) error

+ type SurfaceSnapshot struct

+ ActiveFingerprint string

+ PluginInstanceID string

+ Surfaces []manifest.SurfaceSpec

+ type UninstallRequest struct

+ DeleteData bool

+ Now time.Time

+ PluginInstanceID string

+ PluginStateVersion uint64

+ type UpdateLocalPackageRequest struct

+ Now time.Time

+ PackageReader io.ReaderAt

+ PackageSize int64

+ PluginInstanceID string

+ PluginStateVersion uint64

+ type UpdateReleaseRefRequest struct

+ Now time.Time

+ PluginInstanceID string

+ PluginStateVersion uint64

+ ReleaseRef PluginReleaseRef

+ type WorkerInvocationPayload struct

+ ABI string

+ ActiveFingerprint string

+ Artifact string

+ ArtifactSHA256 string

+ BridgeChannelID string

+ Effect string

+ Execution string

+ Export string

+ Method string

+ OwnerSessionHash string

+ OwnerUserHash string

+ PackageHash string

+ Params map[string]any

+ PluginID string

+ PluginInstanceID string

+ RuntimeGenerationID string

+ RuntimeInstanceID string

+ SessionChannelIDHash string

+ SurfaceInstanceID string

+ WorkerID string

+ WorkerMode string

+ WorkerScope string

v0.1.6

Jul 12, 2026

v0.1.5

Jul 6, 2026

v0.1.4

Jul 6, 2026

v0.1.3

Jul 6, 2026

v0.1.2

Jul 6, 2026

v0.1.1

Jul 4, 2026

v0.1.0

Jul 4, 2026

Other modules containing this package

github.com/floegence/redevplugin/v2

github.com/floegence/redevplugin/v3

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL