oras

type AuthConfig struct {
	Username string
	Password string
}

type AuthOptions struct {
	// StaticAuth provides static credentials for a specific registry.
	// If set, this overrides the default Docker credential chain for that registry.
	StaticRegistry string
	StaticUsername string
	StaticPassword string

	// CredentialFunc provides a custom credential callback.
	// If set, this completely overrides the default credential chain.
	CredentialFunc CredentialFunc

	// HTTPConfig controls HTTP vs HTTPS and certificate validation.
	HTTPConfig *HTTPConfig

	// Transport provides a custom HTTP transport with connection pooling.
	// If nil, a default transport with connection pooling is used.
	Transport http.RoundTripper
}

type Client interface {
	// Push pushes an artifact to an OCI registry.
	Push(ctx context.Context, reference string, descriptor *PushDescriptor, opts *AuthOptions) error

	// Pull pulls an artifact from an OCI registry.
	Pull(ctx context.Context, reference string, opts *AuthOptions) (*PullDescriptor, error)
}

type CredentialFunc = auth.CredentialFunc

type DefaultORASClient struct{}

type HTTPConfig struct {
	// AllowHTTP enables HTTP instead of HTTPS for registry connections.
	AllowHTTP bool

	// AllowInsecure allows connections with self-signed certificates.
	AllowInsecure bool

	// Registries specifies which registries this applies to.
	// If empty, applies to all registries.
	Registries []string
}

type PullDescriptor struct {
	MediaType string
	Data      io.ReadCloser
	Size      int64
}

type PushDescriptor struct {
	MediaType   string
	Data        io.Reader
	Size        int64
	Annotations map[string]string
	Platform    string
}