plugin

type ActivateInput struct {
	TeamID     string
	PluginName string
	Version    string
	Digest     string
	Origin     ActivationOrigin
	ActorID    string
}

type Activation struct {
	ID         string `json:"id"`
	TeamID     string `json:"team_id"`
	PluginName string `json:"plugin_name"`
	Version    string `json:"version"`
	Digest     string `json:"digest"`
	// Enabled false suspends the activation without losing the pin. A suspended
	// activation fails the runs of the agents that name it rather than quietly
	// dropping the plugin from them.
	Enabled bool             `json:"enabled"`
	Origin  ActivationOrigin `json:"origin"`

	ActivatedBy string    `json:"activated_by"`
	ActivatedAt time.Time `json:"activated_at"`
	UpdatedBy   string    `json:"updated_by,omitempty"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type ActivationOrigin string

type ClientVersion struct {
	Version Version
	// Known is false for a build whose version cannot be placed on the release
	// line at all — "dev", a Go pseudo-version, anything unparseable. Such a
	// build satisfies every bound, because refusing to run on an unknown
	// version would break every contributor's checkout.
	Known bool
}

type CreateInput struct {
	Name        string
	DisplayName string
	Description string
	CreatedBy   string
}

type CreateReleaseInput struct {
	PluginName         string
	Version            string
	MinBuildmaxVersion string
	Digest             string
	ObjectKey          string
	SizeBytes          int64
	Inspection         Inspection
	Source             ReleaseSource
	PublishedBy        string
}

type Curation string

type EnvVar struct {
	Name        string
	Description string
	// Required defaults to true: declaring a variable at all normally means the
	// plugin wants it.
	Required bool
}

type Finding struct {
	Severity Severity
	Field    string
	Line     int
	Message  string

	// Plugins names the plugins a finding concerns, so a surface can attribute
	// a collision to every side of it. Filtering on the message text instead
	// would break the first time a message was reworded.
	Plugins []string
}

type Hook struct {
	Event      string `json:"event"`
	Type       string `json:"type"`
	Matcher    string `json:"matcher,omitempty"`
	Executable string `json:"executable,omitempty"`
	Host       string `json:"host,omitempty"`
	MCPServer  string `json:"mcp_server,omitempty"`
	MCPTool    string `json:"mcp_tool,omitempty"`
}

type Inspection struct {
	Skills      []string    `json:"skills,omitempty"`
	Subagents   []Subagent  `json:"subagents,omitempty"`
	MCP         []MCPServer `json:"mcp,omitempty"`
	Hooks       []Hook      `json:"hooks,omitempty"`
	EnvRefs     []string    `json:"env_refs,omitempty"`
	PluginPaths []string    `json:"plugin_paths,omitempty"`
	// Warnings are the findings that did not stop publication, kept so an
	// installer can show what a publisher chose to accept.
	Warnings []string `json:"warnings,omitempty"`
}

type Layer string

type MCPServer struct {
	ID         string `json:"id"`
	Transport  string `json:"transport"`
	Executable string `json:"executable,omitempty"`
	Host       string `json:"host,omitempty"`
}

type Manifest struct {
	Name        string
	Version     string
	Description string

	DisplayName string
	Homepage    string
	Maintainer  string
	License     string

	MinBuildmaxVersion string

	// Env is the declared environment contract, in file order.
	Env []EnvVar

	// Unknown lists top-level keys this build did not recognise, in file
	// order. They are kept rather than dropped so `plugin validate` can show a
	// misspelling that would otherwise be invisible.
	Unknown []string
}

type MovePinInput struct {
	TeamID     string
	PluginName string
	Version    string
	Digest     string
	ActorID    string
}

type Origin struct {
	Layer Layer
	// Plugin is the plugin's name when Layer is LayerPlugin.
	Plugin string
	// Dir is the directory that was scanned.
	Dir string
}

type Pin struct {
	PluginName string `json:"plugin_name"`
	Version    string `json:"version"`
	Digest     string `json:"digest"`
}

type Plugin struct {
	// Name is the manifest name, unique in the deployment, and the slug every
	// route addresses the plugin by.
	Name        string `json:"name"`
	DisplayName string `json:"display_name,omitempty"`
	Description string `json:"description,omitempty"`
	// ArchivedAt hides the entry from the default catalog and refuses new
	// releases. It never deletes anything: a local copy someone installed keeps
	// working, and the record still explains where that copy came from.
	ArchivedAt *time.Time `json:"archived_at,omitempty"`
	CreatedBy  string     `json:"created_by"`
	CreatedAt  time.Time  `json:"created_at"`
	UpdatedAt  time.Time  `json:"updated_at"`
}

type Provenance struct {
	Name   string `json:"name"`
	Source string `json:"source,omitempty"`

	RemoteURL string `json:"remote_url,omitempty"`
	Commit    string `json:"commit,omitempty"`
	Branch    string `json:"branch,omitempty"`
	// Dirty is a pointer so a clean checkout records false rather than
	// omitting the field: an absent flag reads as "nobody looked", and a
	// reader resolving that silence in the run's favour would credit it with
	// an immutable input it did not have.
	Dirty *bool `json:"dirty,omitempty"`

	MarketplaceServer string `json:"marketplace_server,omitempty"`
	CatalogID         string `json:"catalog_id,omitempty"`
	Version           string `json:"version,omitempty"`
	Digest            string `json:"digest,omitempty"`
}

type Release struct {
	// PluginName is denormalised so a release can be reported without a second
	// read; the catalog entry remains the owner of the name.
	PluginName string `json:"plugin_name"`
	Version    string `json:"version"`
	// MinBuildmaxVersion is the release's own lower bound, kept as a column
	// because default install selection filters on it.
	MinBuildmaxVersion string `json:"min_buildmax_version,omitempty"`

	// Digest is the labelled SHA-256 of the stored bytes, calculated by the
	// server rather than accepted from the publisher.
	Digest    string `json:"digest"`
	ObjectKey string `json:"object_key"`
	SizeBytes int64  `json:"size_bytes"`

	// Inspection is the sanitized capability report shown before an install.
	Inspection Inspection `json:"inspection"`
	// Source is where the publisher says the bytes came from. Unlike the
	// digest, the server cannot verify it, so it is presented as a claim.
	Source ReleaseSource `json:"source"`

	PublishedBy string    `json:"published_by"`
	PublishedAt time.Time `json:"published_at"`

	// YankedAt removes the release from default selection without deleting it.
	// An existing local copy keeps working, and an exact version can still be
	// recovered by someone who acknowledges the state.
	YankedAt     *time.Time `json:"yanked_at,omitempty"`
	YankedBy     string     `json:"yanked_by,omitempty"`
	YankedReason string     `json:"yanked_reason,omitempty"`
}

type ReleaseSource struct {
	RemoteURL string `json:"remote_url,omitempty"`
	Commit    string `json:"commit,omitempty"`
	Branch    string `json:"branch,omitempty"`
	// Dirty says the working tree held uncommitted changes when it was packed,
	// which means the commit above does not describe these bytes.
	Dirty bool `json:"dirty,omitempty"`
}

type Severity int

type Shadowed struct {
	Name   string
	Winner Origin
	Loser  Origin
}

type Source struct {
	Dir    string
	Origin Origin
}

type Subagent struct {
	Name  string   `json:"name"`
	Tools []string `json:"tools,omitempty"`
	Model string   `json:"model,omitempty"`
}

type UpdateInput struct {
	DisplayName string
	Description string
}

type Version struct {
	Major int
	Minor int
	Patch int
	// Pre holds prerelease identifiers, empty for a release version.
	Pre []string
}