proto

type AuthHandlerInfo struct {
	Name         string   `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	DisplayName  string   `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	Flows        []string `protobuf:"bytes,3,rep,name=flows,proto3" json:"flows,omitempty"`
	Capabilities []string `protobuf:"bytes,4,rep,name=capabilities,proto3" json:"capabilities,omitempty"`
	// contains filtered or unexported fields
}

type AuthHandlerServiceClient interface {
	// GetAuthHandlers returns metadata for all auth handlers exposed by this plugin.
	GetAuthHandlers(ctx context.Context, in *GetAuthHandlersRequest, opts ...grpc.CallOption) (*GetAuthHandlersResponse, error)
	// ConfigureAuthHandler sends host-side configuration to the plugin once after load.
	ConfigureAuthHandler(ctx context.Context, in *ConfigureAuthHandlerRequest, opts ...grpc.CallOption) (*ConfigureAuthHandlerResponse, error)
	// Login initiates authentication. Returns a stream: zero or more DeviceCodePrompt
	// messages followed by exactly one LoginResult message.
	Login(ctx context.Context, in *LoginRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[LoginStreamMessage], error)
	// Logout clears stored credentials for the named handler.
	Logout(ctx context.Context, in *LogoutRequest, opts ...grpc.CallOption) (*LogoutResponse, error)
	// GetStatus returns the current authentication status.
	GetStatus(ctx context.Context, in *GetStatusRequest, opts ...grpc.CallOption) (*GetStatusResponse, error)
	// GetToken returns a valid access token.
	GetToken(ctx context.Context, in *GetTokenRequest, opts ...grpc.CallOption) (*GetTokenResponse, error)
	// ListCachedTokens enumerates cached tokens for the named handler.
	ListCachedTokens(ctx context.Context, in *ListCachedTokensRequest, opts ...grpc.CallOption) (*ListCachedTokensResponse, error)
	// PurgeExpiredTokens removes expired tokens for the named handler.
	PurgeExpiredTokens(ctx context.Context, in *PurgeExpiredTokensRequest, opts ...grpc.CallOption) (*PurgeExpiredTokensResponse, error)
	// StopAuthHandler requests graceful shutdown of a running auth handler operation.
	// handler_name may be empty to stop all handlers.
	StopAuthHandler(ctx context.Context, in *StopAuthHandlerRequest, opts ...grpc.CallOption) (*StopAuthHandlerResponse, error)
}

type AuthHandlerServiceServer interface {
	// GetAuthHandlers returns metadata for all auth handlers exposed by this plugin.
	GetAuthHandlers(context.Context, *GetAuthHandlersRequest) (*GetAuthHandlersResponse, error)
	// ConfigureAuthHandler sends host-side configuration to the plugin once after load.
	ConfigureAuthHandler(context.Context, *ConfigureAuthHandlerRequest) (*ConfigureAuthHandlerResponse, error)
	// Login initiates authentication. Returns a stream: zero or more DeviceCodePrompt
	// messages followed by exactly one LoginResult message.
	Login(*LoginRequest, grpc.ServerStreamingServer[LoginStreamMessage]) error
	// Logout clears stored credentials for the named handler.
	Logout(context.Context, *LogoutRequest) (*LogoutResponse, error)
	// GetStatus returns the current authentication status.
	GetStatus(context.Context, *GetStatusRequest) (*GetStatusResponse, error)
	// GetToken returns a valid access token.
	GetToken(context.Context, *GetTokenRequest) (*GetTokenResponse, error)
	// ListCachedTokens enumerates cached tokens for the named handler.
	ListCachedTokens(context.Context, *ListCachedTokensRequest) (*ListCachedTokensResponse, error)
	// PurgeExpiredTokens removes expired tokens for the named handler.
	PurgeExpiredTokens(context.Context, *PurgeExpiredTokensRequest) (*PurgeExpiredTokensResponse, error)
	// StopAuthHandler requests graceful shutdown of a running auth handler operation.
	// handler_name may be empty to stop all handlers.
	StopAuthHandler(context.Context, *StopAuthHandlerRequest) (*StopAuthHandlerResponse, error)
	// contains filtered or unexported methods
}

type AuthHandlerService_LoginClient = grpc.ServerStreamingClient[LoginStreamMessage]

type AuthHandlerService_LoginServer = grpc.ServerStreamingServer[LoginStreamMessage]

type CachedTokenInfo struct {
	Handler       string `protobuf:"bytes,1,opt,name=handler,proto3" json:"handler,omitempty"`
	TokenKind     string `protobuf:"bytes,2,opt,name=token_kind,json=tokenKind,proto3" json:"token_kind,omitempty"`
	Scope         string `protobuf:"bytes,3,opt,name=scope,proto3" json:"scope,omitempty"`
	TokenType     string `protobuf:"bytes,4,opt,name=token_type,json=tokenType,proto3" json:"token_type,omitempty"`
	Flow          string `protobuf:"bytes,5,opt,name=flow,proto3" json:"flow,omitempty"`
	ExpiresAtUnix int64  `protobuf:"varint,6,opt,name=expires_at_unix,json=expiresAtUnix,proto3" json:"expires_at_unix,omitempty"`
	CachedAtUnix  int64  `protobuf:"varint,7,opt,name=cached_at_unix,json=cachedAtUnix,proto3" json:"cached_at_unix,omitempty"`
	IsExpired     bool   `protobuf:"varint,8,opt,name=is_expired,json=isExpired,proto3" json:"is_expired,omitempty"`
	SessionId     string `protobuf:"bytes,9,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	Fingerprint   string `protobuf:"bytes,10,opt,name=fingerprint,proto3" json:"fingerprint,omitempty"`
	// contains filtered or unexported fields
}

type Claims struct {
	Issuer        string `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
	Subject       string `protobuf:"bytes,2,opt,name=subject,proto3" json:"subject,omitempty"`
	TenantId      string `protobuf:"bytes,3,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	ObjectId      string `protobuf:"bytes,4,opt,name=object_id,json=objectId,proto3" json:"object_id,omitempty"`
	ClientId      string `protobuf:"bytes,5,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	Email         string `protobuf:"bytes,6,opt,name=email,proto3" json:"email,omitempty"`
	Name          string `protobuf:"bytes,7,opt,name=name,proto3" json:"name,omitempty"`
	Username      string `protobuf:"bytes,8,opt,name=username,proto3" json:"username,omitempty"`
	IssuedAtUnix  int64  `protobuf:"varint,9,opt,name=issued_at_unix,json=issuedAtUnix,proto3" json:"issued_at_unix,omitempty"`
	ExpiresAtUnix int64  `protobuf:"varint,10,opt,name=expires_at_unix,json=expiresAtUnix,proto3" json:"expires_at_unix,omitempty"`
	// contains filtered or unexported fields
}

type ConfigureAuthHandlerRequest struct {
	HandlerName     string            `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	Quiet           bool              `protobuf:"varint,2,opt,name=quiet,proto3" json:"quiet,omitempty"`
	NoColor         bool              `protobuf:"varint,3,opt,name=no_color,json=noColor,proto3" json:"no_color,omitempty"`
	BinaryName      string            `protobuf:"bytes,4,opt,name=binary_name,json=binaryName,proto3" json:"binary_name,omitempty"`
	Settings        map[string][]byte `` /* 143-byte string literal not displayed */
	HostServiceId   uint32            `protobuf:"varint,6,opt,name=host_service_id,json=hostServiceId,proto3" json:"host_service_id,omitempty"`
	ProtocolVersion int32             `protobuf:"varint,7,opt,name=protocol_version,json=protocolVersion,proto3" json:"protocol_version,omitempty"`
	// contains filtered or unexported fields
}

type ConfigureAuthHandlerResponse struct {
	Error           string        `protobuf:"bytes,1,opt,name=error,proto3" json:"error,omitempty"`
	ProtocolVersion int32         `protobuf:"varint,2,opt,name=protocol_version,json=protocolVersion,proto3" json:"protocol_version,omitempty"`
	Diagnostics     []*Diagnostic `protobuf:"bytes,3,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type ConfigureProviderRequest struct {
	ProviderName    string            `protobuf:"bytes,1,opt,name=provider_name,json=providerName,proto3" json:"provider_name,omitempty"`
	Quiet           bool              `protobuf:"varint,2,opt,name=quiet,proto3" json:"quiet,omitempty"`
	NoColor         bool              `protobuf:"varint,3,opt,name=no_color,json=noColor,proto3" json:"no_color,omitempty"`
	BinaryName      string            `protobuf:"bytes,4,opt,name=binary_name,json=binaryName,proto3" json:"binary_name,omitempty"`
	HostServiceId   uint32            `protobuf:"varint,5,opt,name=host_service_id,json=hostServiceId,proto3" json:"host_service_id,omitempty"`
	Settings        map[string][]byte `` /* 143-byte string literal not displayed */
	ProtocolVersion int32             `protobuf:"varint,7,opt,name=protocol_version,json=protocolVersion,proto3" json:"protocol_version,omitempty"`
	// contains filtered or unexported fields
}

type ConfigureProviderResponse struct {
	Error           string        `protobuf:"bytes,1,opt,name=error,proto3" json:"error,omitempty"`
	Diagnostics     []*Diagnostic `protobuf:"bytes,2,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	ProtocolVersion int32         `protobuf:"varint,3,opt,name=protocol_version,json=protocolVersion,proto3" json:"protocol_version,omitempty"`
	// contains filtered or unexported fields
}

type Contact struct {
	Name  string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Email string `protobuf:"bytes,2,opt,name=email,proto3" json:"email,omitempty"`
	// contains filtered or unexported fields
}

type DeleteSecretRequest struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteSecretResponse struct {
	Error string `protobuf:"bytes,1,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type DescribeWhatIfRequest struct {
	ProviderName string `protobuf:"bytes,1,opt,name=provider_name,json=providerName,proto3" json:"provider_name,omitempty"`
	Input        []byte `protobuf:"bytes,2,opt,name=input,proto3" json:"input,omitempty"`
	// contains filtered or unexported fields
}

type DescribeWhatIfResponse struct {
	Description string        `protobuf:"bytes,1,opt,name=description,proto3" json:"description,omitempty"`
	Error       string        `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	Diagnostics []*Diagnostic `protobuf:"bytes,3,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type DeviceCodePrompt struct {
	UserCode        string `protobuf:"bytes,1,opt,name=user_code,json=userCode,proto3" json:"user_code,omitempty"`
	VerificationUri string `protobuf:"bytes,2,opt,name=verification_uri,json=verificationUri,proto3" json:"verification_uri,omitempty"`
	Message         string `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type Diagnostic struct {
	Severity  Diagnostic_Severity `protobuf:"varint,1,opt,name=severity,proto3,enum=plugin.Diagnostic_Severity" json:"severity,omitempty"`
	Summary   string              `protobuf:"bytes,2,opt,name=summary,proto3" json:"summary,omitempty"`
	Detail    string              `protobuf:"bytes,3,opt,name=detail,proto3" json:"detail,omitempty"`
	Attribute string              `protobuf:"bytes,4,opt,name=attribute,proto3" json:"attribute,omitempty"`
	// contains filtered or unexported fields
}

type Diagnostic_Severity int32

type Example struct {
	Name        string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	Yaml        string `protobuf:"bytes,3,opt,name=yaml,proto3" json:"yaml,omitempty"`
	// contains filtered or unexported fields
}

type ExecuteProviderRequest struct {
	ProviderName     string            `protobuf:"bytes,1,opt,name=provider_name,json=providerName,proto3" json:"provider_name,omitempty"`
	Input            []byte            `protobuf:"bytes,2,opt,name=input,proto3" json:"input,omitempty"`
	Context          []byte            `protobuf:"bytes,3,opt,name=context,proto3" json:"context,omitempty"`
	DryRun           bool              `protobuf:"varint,4,opt,name=dry_run,json=dryRun,proto3" json:"dry_run,omitempty"`
	ExecutionMode    string            `protobuf:"bytes,5,opt,name=execution_mode,json=executionMode,proto3" json:"execution_mode,omitempty"`
	WorkingDirectory string            `protobuf:"bytes,6,opt,name=working_directory,json=workingDirectory,proto3" json:"working_directory,omitempty"`
	OutputDirectory  string            `protobuf:"bytes,7,opt,name=output_directory,json=outputDirectory,proto3" json:"output_directory,omitempty"`
	ConflictStrategy string            `protobuf:"bytes,8,opt,name=conflict_strategy,json=conflictStrategy,proto3" json:"conflict_strategy,omitempty"`
	Backup           bool              `protobuf:"varint,9,opt,name=backup,proto3" json:"backup,omitempty"`
	IterationContext *IterationContext `protobuf:"bytes,10,opt,name=iteration_context,json=iterationContext,proto3" json:"iteration_context,omitempty"`
	Parameters       []byte            `protobuf:"bytes,11,opt,name=parameters,proto3" json:"parameters,omitempty"`
	SolutionMetadata *SolutionMeta     `protobuf:"bytes,12,opt,name=solution_metadata,json=solutionMetadata,proto3" json:"solution_metadata,omitempty"`
	// contains filtered or unexported fields
}

type ExecuteProviderResponse struct {
	Output      []byte        `protobuf:"bytes,1,opt,name=output,proto3" json:"output,omitempty"`
	Error       string        `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	ExitCode    int32         `protobuf:"varint,3,opt,name=exit_code,json=exitCode,proto3" json:"exit_code,omitempty"`
	Diagnostics []*Diagnostic `protobuf:"bytes,4,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type ExecuteProviderStreamChunk struct {

	// Types that are valid to be assigned to Chunk:
	//
	//	*ExecuteProviderStreamChunk_Stdout
	//	*ExecuteProviderStreamChunk_Stderr
	//	*ExecuteProviderStreamChunk_Result
	Chunk isExecuteProviderStreamChunk_Chunk `protobuf_oneof:"chunk"`
	// contains filtered or unexported fields
}

type ExecuteProviderStreamChunk_Result struct {
	Result *ExecuteProviderResponse `protobuf:"bytes,3,opt,name=result,proto3,oneof"`
}

type ExecuteProviderStreamChunk_Stderr struct {
	Stderr []byte `protobuf:"bytes,2,opt,name=stderr,proto3,oneof"`
}

type ExecuteProviderStreamChunk_Stdout struct {
	Stdout []byte `protobuf:"bytes,1,opt,name=stdout,proto3,oneof"`
}

type ExtractDependenciesRequest struct {
	ProviderName string `protobuf:"bytes,1,opt,name=provider_name,json=providerName,proto3" json:"provider_name,omitempty"`
	Inputs       []byte `protobuf:"bytes,2,opt,name=inputs,proto3" json:"inputs,omitempty"`
	// contains filtered or unexported fields
}

type ExtractDependenciesResponse struct {
	Dependencies []string      `protobuf:"bytes,1,rep,name=dependencies,proto3" json:"dependencies,omitempty"`
	Error        string        `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	Diagnostics  []*Diagnostic `protobuf:"bytes,3,rep,name=diagnostics,proto3" json:"diagnostics,omitempty"`
	// contains filtered or unexported fields
}

type GetAuthGroupsRequest struct {
	HandlerName string `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	// contains filtered or unexported fields
}

type GetAuthGroupsResponse struct {
	Groups []string `protobuf:"bytes,1,rep,name=groups,proto3" json:"groups,omitempty"`
	Error  string   `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type GetAuthHandlersRequest struct {
	// contains filtered or unexported fields
}

type GetAuthHandlersResponse struct {
	Handlers []*AuthHandlerInfo `protobuf:"bytes,1,rep,name=handlers,proto3" json:"handlers,omitempty"`
	// contains filtered or unexported fields
}

type GetAuthIdentityRequest struct {
	HandlerName string `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	Scope       string `protobuf:"bytes,2,opt,name=scope,proto3" json:"scope,omitempty"`
	// contains filtered or unexported fields
}

type GetAuthIdentityResponse struct {
	Claims *Claims `protobuf:"bytes,1,opt,name=claims,proto3" json:"claims,omitempty"`
	Error  string  `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type GetAuthTokenRequest struct {
	HandlerName        string `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	Scope              string `protobuf:"bytes,2,opt,name=scope,proto3" json:"scope,omitempty"`
	MinValidForSeconds int64  `protobuf:"varint,3,opt,name=min_valid_for_seconds,json=minValidForSeconds,proto3" json:"min_valid_for_seconds,omitempty"`
	ForceRefresh       bool   `protobuf:"varint,4,opt,name=force_refresh,json=forceRefresh,proto3" json:"force_refresh,omitempty"`
	// contains filtered or unexported fields
}

type GetAuthTokenResponse struct {
	AccessToken   string `protobuf:"bytes,1,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
	TokenType     string `protobuf:"bytes,2,opt,name=token_type,json=tokenType,proto3" json:"token_type,omitempty"`
	ExpiresAtUnix int64  `protobuf:"varint,3,opt,name=expires_at_unix,json=expiresAtUnix,proto3" json:"expires_at_unix,omitempty"`
	Scope         string `protobuf:"bytes,4,opt,name=scope,proto3" json:"scope,omitempty"`
	Error         string `protobuf:"bytes,5,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type GetProviderDescriptorRequest struct {
	ProviderName string `protobuf:"bytes,1,opt,name=provider_name,json=providerName,proto3" json:"provider_name,omitempty"`
	// contains filtered or unexported fields
}

type GetProviderDescriptorResponse struct {
	Descriptor_ *ProviderDescriptor `protobuf:"bytes,1,opt,name=descriptor,proto3" json:"descriptor,omitempty"`
	// contains filtered or unexported fields
}

type GetProvidersRequest struct {
	// contains filtered or unexported fields
}

type GetProvidersResponse struct {
	ProviderNames []string `protobuf:"bytes,1,rep,name=provider_names,json=providerNames,proto3" json:"provider_names,omitempty"`
	// contains filtered or unexported fields
}

type GetSecretRequest struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetSecretResponse struct {
	Value string `protobuf:"bytes,1,opt,name=value,proto3" json:"value,omitempty"`
	Found bool   `protobuf:"varint,2,opt,name=found,proto3" json:"found,omitempty"`
	Error string `protobuf:"bytes,3,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type GetStatusRequest struct {
	HandlerName string `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	// contains filtered or unexported fields
}

type GetStatusResponse struct {
	Authenticated   bool     `protobuf:"varint,1,opt,name=authenticated,proto3" json:"authenticated,omitempty"`
	Claims          *Claims  `protobuf:"bytes,2,opt,name=claims,proto3" json:"claims,omitempty"`
	ExpiresAtUnix   int64    `protobuf:"varint,3,opt,name=expires_at_unix,json=expiresAtUnix,proto3" json:"expires_at_unix,omitempty"`
	LastRefreshUnix int64    `protobuf:"varint,4,opt,name=last_refresh_unix,json=lastRefreshUnix,proto3" json:"last_refresh_unix,omitempty"`
	TenantId        string   `protobuf:"bytes,5,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	IdentityType    string   `protobuf:"bytes,6,opt,name=identity_type,json=identityType,proto3" json:"identity_type,omitempty"`
	ClientId        string   `protobuf:"bytes,7,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	TokenFile       string   `protobuf:"bytes,8,opt,name=token_file,json=tokenFile,proto3" json:"token_file,omitempty"`
	Scopes          []string `protobuf:"bytes,9,rep,name=scopes,proto3" json:"scopes,omitempty"`
	Reason          string   `protobuf:"bytes,10,opt,name=reason,proto3" json:"reason,omitempty"`
	// contains filtered or unexported fields
}

type GetTokenRequest struct {
	HandlerName        string `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	Scope              string `protobuf:"bytes,2,opt,name=scope,proto3" json:"scope,omitempty"`
	MinValidForSeconds int64  `protobuf:"varint,3,opt,name=min_valid_for_seconds,json=minValidForSeconds,proto3" json:"min_valid_for_seconds,omitempty"`
	ForceRefresh       bool   `protobuf:"varint,4,opt,name=force_refresh,json=forceRefresh,proto3" json:"force_refresh,omitempty"`
	// contains filtered or unexported fields
}

type GetTokenResponse struct {
	AccessToken   string `protobuf:"bytes,1,opt,name=access_token,json=accessToken,proto3" json:"access_token,omitempty"`
	TokenType     string `protobuf:"bytes,2,opt,name=token_type,json=tokenType,proto3" json:"token_type,omitempty"`
	ExpiresAtUnix int64  `protobuf:"varint,3,opt,name=expires_at_unix,json=expiresAtUnix,proto3" json:"expires_at_unix,omitempty"`
	Scope         string `protobuf:"bytes,4,opt,name=scope,proto3" json:"scope,omitempty"`
	CachedAtUnix  int64  `protobuf:"varint,5,opt,name=cached_at_unix,json=cachedAtUnix,proto3" json:"cached_at_unix,omitempty"`
	Flow          string `protobuf:"bytes,6,opt,name=flow,proto3" json:"flow,omitempty"`
	SessionId     string `protobuf:"bytes,7,opt,name=session_id,json=sessionId,proto3" json:"session_id,omitempty"`
	// contains filtered or unexported fields
}

type HostServiceClient interface {
	// GetSecret retrieves a secret value from the host's secret store.
	GetSecret(ctx context.Context, in *GetSecretRequest, opts ...grpc.CallOption) (*GetSecretResponse, error)
	// SetSecret stores a secret value in the host's secret store.
	SetSecret(ctx context.Context, in *SetSecretRequest, opts ...grpc.CallOption) (*SetSecretResponse, error)
	// DeleteSecret removes a secret from the host's secret store.
	DeleteSecret(ctx context.Context, in *DeleteSecretRequest, opts ...grpc.CallOption) (*DeleteSecretResponse, error)
	// ListSecrets lists secret names from the host's secret store.
	ListSecrets(ctx context.Context, in *ListSecretsRequest, opts ...grpc.CallOption) (*ListSecretsResponse, error)
	// GetAuthIdentity retrieves identity claims from the host's auth registry.
	GetAuthIdentity(ctx context.Context, in *GetAuthIdentityRequest, opts ...grpc.CallOption) (*GetAuthIdentityResponse, error)
	// ListAuthHandlers lists available auth handlers on the host.
	ListAuthHandlers(ctx context.Context, in *ListAuthHandlersRequest, opts ...grpc.CallOption) (*ListAuthHandlersResponse, error)
	// GetAuthToken retrieves a valid access token from the host's auth registry.
	// Plugins use this for authenticated HTTP requests and token refresh on 401.
	GetAuthToken(ctx context.Context, in *GetAuthTokenRequest, opts ...grpc.CallOption) (*GetAuthTokenResponse, error)
	// GetAuthGroups retrieves group memberships for the authenticated user.
	// Only handlers that implement group queries (e.g. Entra) will return results.
	GetAuthGroups(ctx context.Context, in *GetAuthGroupsRequest, opts ...grpc.CallOption) (*GetAuthGroupsResponse, error)
}

type HostServiceServer interface {
	// GetSecret retrieves a secret value from the host's secret store.
	GetSecret(context.Context, *GetSecretRequest) (*GetSecretResponse, error)
	// SetSecret stores a secret value in the host's secret store.
	SetSecret(context.Context, *SetSecretRequest) (*SetSecretResponse, error)
	// DeleteSecret removes a secret from the host's secret store.
	DeleteSecret(context.Context, *DeleteSecretRequest) (*DeleteSecretResponse, error)
	// ListSecrets lists secret names from the host's secret store.
	ListSecrets(context.Context, *ListSecretsRequest) (*ListSecretsResponse, error)
	// GetAuthIdentity retrieves identity claims from the host's auth registry.
	GetAuthIdentity(context.Context, *GetAuthIdentityRequest) (*GetAuthIdentityResponse, error)
	// ListAuthHandlers lists available auth handlers on the host.
	ListAuthHandlers(context.Context, *ListAuthHandlersRequest) (*ListAuthHandlersResponse, error)
	// GetAuthToken retrieves a valid access token from the host's auth registry.
	// Plugins use this for authenticated HTTP requests and token refresh on 401.
	GetAuthToken(context.Context, *GetAuthTokenRequest) (*GetAuthTokenResponse, error)
	// GetAuthGroups retrieves group memberships for the authenticated user.
	// Only handlers that implement group queries (e.g. Entra) will return results.
	GetAuthGroups(context.Context, *GetAuthGroupsRequest) (*GetAuthGroupsResponse, error)
	// contains filtered or unexported methods
}

type IterationContext struct {
	Item       []byte `protobuf:"bytes,1,opt,name=item,proto3" json:"item,omitempty"`
	Index      int32  `protobuf:"varint,2,opt,name=index,proto3" json:"index,omitempty"`
	ItemAlias  string `protobuf:"bytes,3,opt,name=item_alias,json=itemAlias,proto3" json:"item_alias,omitempty"`
	IndexAlias string `protobuf:"bytes,4,opt,name=index_alias,json=indexAlias,proto3" json:"index_alias,omitempty"`
	// contains filtered or unexported fields
}

type Link struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Url  string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// contains filtered or unexported fields
}

type ListAuthHandlersRequest struct {
	// contains filtered or unexported fields
}

type ListAuthHandlersResponse struct {
	HandlerNames   []string `protobuf:"bytes,1,rep,name=handler_names,json=handlerNames,proto3" json:"handler_names,omitempty"`
	DefaultHandler string   `protobuf:"bytes,2,opt,name=default_handler,json=defaultHandler,proto3" json:"default_handler,omitempty"`
	// contains filtered or unexported fields
}

type ListCachedTokensRequest struct {
	HandlerName string `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	// contains filtered or unexported fields
}

type ListCachedTokensResponse struct {
	Tokens []*CachedTokenInfo `protobuf:"bytes,1,rep,name=tokens,proto3" json:"tokens,omitempty"`
	// contains filtered or unexported fields
}

type ListSecretsRequest struct {
	Pattern string `protobuf:"bytes,1,opt,name=pattern,proto3" json:"pattern,omitempty"`
	// contains filtered or unexported fields
}

type ListSecretsResponse struct {
	Names []string `protobuf:"bytes,1,rep,name=names,proto3" json:"names,omitempty"`
	Error string   `protobuf:"bytes,2,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type LoginRequest struct {
	HandlerName    string   `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	TenantId       string   `protobuf:"bytes,2,opt,name=tenant_id,json=tenantId,proto3" json:"tenant_id,omitempty"`
	Scopes         []string `protobuf:"bytes,3,rep,name=scopes,proto3" json:"scopes,omitempty"`
	Flow           string   `protobuf:"bytes,4,opt,name=flow,proto3" json:"flow,omitempty"`
	TimeoutSeconds int64    `protobuf:"varint,5,opt,name=timeout_seconds,json=timeoutSeconds,proto3" json:"timeout_seconds,omitempty"`
	// contains filtered or unexported fields
}

type LoginResult struct {
	Claims        *Claims `protobuf:"bytes,1,opt,name=claims,proto3" json:"claims,omitempty"`
	ExpiresAtUnix int64   `protobuf:"varint,2,opt,name=expires_at_unix,json=expiresAtUnix,proto3" json:"expires_at_unix,omitempty"`
	// contains filtered or unexported fields
}

type LoginStreamMessage struct {

	// Types that are valid to be assigned to Payload:
	//
	//	*LoginStreamMessage_DeviceCodePrompt
	//	*LoginStreamMessage_Result
	//	*LoginStreamMessage_Error
	Payload isLoginStreamMessage_Payload `protobuf_oneof:"payload"`
	// contains filtered or unexported fields
}

type LoginStreamMessage_DeviceCodePrompt struct {
	DeviceCodePrompt *DeviceCodePrompt `protobuf:"bytes,1,opt,name=device_code_prompt,json=deviceCodePrompt,proto3,oneof"`
}

type LoginStreamMessage_Error struct {
	Error string `protobuf:"bytes,3,opt,name=error,proto3,oneof"`
}

type LoginStreamMessage_Result struct {
	Result *LoginResult `protobuf:"bytes,2,opt,name=result,proto3,oneof"`
}

type LogoutRequest struct {
	HandlerName string `protobuf:"bytes,1,opt,name=handler_name,json=handlerName,proto3" json:"handler_name,omitempty"`
	// contains filtered or unexported fields
}

type LogoutResponse struct {
	// contains filtered or unexported fields
}

type Parameter struct {
	Type                string   `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	Required            bool     `protobuf:"varint,2,opt,name=required,proto3" json:"required,omitempty"`
	Description         string   `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	DefaultValue        []byte   `protobuf:"bytes,4,opt,name=default_value,json=defaultValue,proto3" json:"default_value,omitempty"`
	Example             string   `protobuf:"bytes,5,opt,name=example,proto3" json:"example,omitempty"`
	MaxLength           int32    `protobuf:"varint,6,opt,name=max_length,json=maxLength,proto3" json:"max_length,omitempty"`
	Pattern             string   `protobuf:"bytes,7,opt,name=pattern,proto3" json:"pattern,omitempty"`
	PatternDescription  string   `protobuf:"bytes,8,opt,name=pattern_description,json=patternDescription,proto3" json:"pattern_description,omitempty"`
	MinLength           int32    `protobuf:"varint,9,opt,name=min_length,json=minLength,proto3" json:"min_length,omitempty"`
	Minimum             float64  `protobuf:"fixed64,10,opt,name=minimum,proto3" json:"minimum,omitempty"`
	Maximum             float64  `protobuf:"fixed64,11,opt,name=maximum,proto3" json:"maximum,omitempty"`
	ExclusiveMinimum    float64  `protobuf:"fixed64,12,opt,name=exclusive_minimum,json=exclusiveMinimum,proto3" json:"exclusive_minimum,omitempty"`
	ExclusiveMaximum    float64  `protobuf:"fixed64,13,opt,name=exclusive_maximum,json=exclusiveMaximum,proto3" json:"exclusive_maximum,omitempty"`
	EnumValues          [][]byte `protobuf:"bytes,14,rep,name=enum_values,json=enumValues,proto3" json:"enum_values,omitempty"`
	Format              string   `protobuf:"bytes,15,opt,name=format,proto3" json:"format,omitempty"`
	MinItems            int32    `protobuf:"varint,16,opt,name=min_items,json=minItems,proto3" json:"min_items,omitempty"`
	MaxItems            int32    `protobuf:"varint,17,opt,name=max_items,json=maxItems,proto3" json:"max_items,omitempty"`
	HasMinimum          bool     `protobuf:"varint,18,opt,name=has_minimum,json=hasMinimum,proto3" json:"has_minimum,omitempty"`
	HasMaximum          bool     `protobuf:"varint,19,opt,name=has_maximum,json=hasMaximum,proto3" json:"has_maximum,omitempty"`
	HasExclusiveMinimum bool     `protobuf:"varint,20,opt,name=has_exclusive_minimum,json=hasExclusiveMinimum,proto3" json:"has_exclusive_minimum,omitempty"`
	HasExclusiveMaximum bool     `protobuf:"varint,21,opt,name=has_exclusive_maximum,json=hasExclusiveMaximum,proto3" json:"has_exclusive_maximum,omitempty"`
	// contains filtered or unexported fields
}

type PluginServiceClient interface {
	// GetProviders returns all providers exposed by this plugin
	GetProviders(ctx context.Context, in *GetProvidersRequest, opts ...grpc.CallOption) (*GetProvidersResponse, error)
	// GetProviderDescriptor returns metadata for a specific provider
	GetProviderDescriptor(ctx context.Context, in *GetProviderDescriptorRequest, opts ...grpc.CallOption) (*GetProviderDescriptorResponse, error)
	// ConfigureProvider sends host-side configuration to a provider once after
	// plugin load. Providers store this internally for subsequent Execute calls.
	ConfigureProvider(ctx context.Context, in *ConfigureProviderRequest, opts ...grpc.CallOption) (*ConfigureProviderResponse, error)
	// ExecuteProvider executes a provider
	ExecuteProvider(ctx context.Context, in *ExecuteProviderRequest, opts ...grpc.CallOption) (*ExecuteProviderResponse, error)
	// ExecuteProviderStream executes a provider that produces incremental output.
	// The server sends zero or more OutputChunk messages followed by exactly one
	// Result message.
	ExecuteProviderStream(ctx context.Context, in *ExecuteProviderRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ExecuteProviderStreamChunk], error)
	// DescribeWhatIf returns a human-readable description of what the provider
	// would do with the given inputs, without executing.
	DescribeWhatIf(ctx context.Context, in *DescribeWhatIfRequest, opts ...grpc.CallOption) (*DescribeWhatIfResponse, error)
	// ExtractDependencies returns resolver dependency names from the provider's
	// inputs. Called during dependency graph construction. Plugins that do not
	// implement custom extraction should return an empty list (the host falls
	// back to generic extraction).
	ExtractDependencies(ctx context.Context, in *ExtractDependenciesRequest, opts ...grpc.CallOption) (*ExtractDependenciesResponse, error)
	// StopProvider requests graceful shutdown of a running provider execution.
	// The host calls this when the user cancels an operation (e.g. Ctrl+C).
	// Plugins should abort in-flight work and return promptly.
	StopProvider(ctx context.Context, in *StopProviderRequest, opts ...grpc.CallOption) (*StopProviderResponse, error)
}

type PluginServiceServer interface {
	// GetProviders returns all providers exposed by this plugin
	GetProviders(context.Context, *GetProvidersRequest) (*GetProvidersResponse, error)
	// GetProviderDescriptor returns metadata for a specific provider
	GetProviderDescriptor(context.Context, *GetProviderDescriptorRequest) (*GetProviderDescriptorResponse, error)
	// ConfigureProvider sends host-side configuration to a provider once after
	// plugin load. Providers store this internally for subsequent Execute calls.
	ConfigureProvider(context.Context, *ConfigureProviderRequest) (*ConfigureProviderResponse, error)
	// ExecuteProvider executes a provider
	ExecuteProvider(context.Context, *ExecuteProviderRequest) (*ExecuteProviderResponse, error)
	// ExecuteProviderStream executes a provider that produces incremental output.
	// The server sends zero or more OutputChunk messages followed by exactly one
	// Result message.
	ExecuteProviderStream(*ExecuteProviderRequest, grpc.ServerStreamingServer[ExecuteProviderStreamChunk]) error
	// DescribeWhatIf returns a human-readable description of what the provider
	// would do with the given inputs, without executing.
	DescribeWhatIf(context.Context, *DescribeWhatIfRequest) (*DescribeWhatIfResponse, error)
	// ExtractDependencies returns resolver dependency names from the provider's
	// inputs. Called during dependency graph construction. Plugins that do not
	// implement custom extraction should return an empty list (the host falls
	// back to generic extraction).
	ExtractDependencies(context.Context, *ExtractDependenciesRequest) (*ExtractDependenciesResponse, error)
	// StopProvider requests graceful shutdown of a running provider execution.
	// The host calls this when the user cancels an operation (e.g. Ctrl+C).
	// Plugins should abort in-flight work and return promptly.
	StopProvider(context.Context, *StopProviderRequest) (*StopProviderResponse, error)
	// contains filtered or unexported methods
}

type PluginService_ExecuteProviderStreamClient = grpc.ServerStreamingClient[ExecuteProviderStreamChunk]

type PluginService_ExecuteProviderStreamServer = grpc.ServerStreamingServer[ExecuteProviderStreamChunk]

type ProviderDescriptor struct {
	Name                   string             `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	DisplayName            string             `protobuf:"bytes,2,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	Description            string             `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	Version                string             `protobuf:"bytes,4,opt,name=version,proto3" json:"version,omitempty"`
	Category               string             `protobuf:"bytes,5,opt,name=category,proto3" json:"category,omitempty"`
	Capabilities           []string           `protobuf:"bytes,6,rep,name=capabilities,proto3" json:"capabilities,omitempty"`
	Schema                 *Schema            `protobuf:"bytes,7,opt,name=schema,proto3" json:"schema,omitempty"`
	OutputSchemas          map[string]*Schema `` /* 174-byte string literal not displayed */
	ApiVersion             string             `protobuf:"bytes,9,opt,name=api_version,json=apiVersion,proto3" json:"api_version,omitempty"`
	SensitiveFields        []string           `protobuf:"bytes,11,rep,name=sensitive_fields,json=sensitiveFields,proto3" json:"sensitive_fields,omitempty"`
	Tags                   []string           `protobuf:"bytes,12,rep,name=tags,proto3" json:"tags,omitempty"`
	Icon                   string             `protobuf:"bytes,13,opt,name=icon,proto3" json:"icon,omitempty"`
	Links                  []*Link            `protobuf:"bytes,14,rep,name=links,proto3" json:"links,omitempty"`
	Examples               []*Example         `protobuf:"bytes,15,rep,name=examples,proto3" json:"examples,omitempty"`
	Maintainers            []*Contact         `protobuf:"bytes,16,rep,name=maintainers,proto3" json:"maintainers,omitempty"`
	Deprecated             bool               `protobuf:"varint,17,opt,name=deprecated,proto3" json:"deprecated,omitempty"`
	Beta                   bool               `protobuf:"varint,18,opt,name=beta,proto3" json:"beta,omitempty"`
	RawSchema              []byte             `protobuf:"bytes,19,opt,name=raw_schema,json=rawSchema,proto3" json:"raw_schema,omitempty"`
	RawOutputSchemas       map[string][]byte  `` /* 186-byte string literal not displayed */
	HasExtractDependencies bool               `` /* 131-byte string literal not displayed */
	WriteOperations        []string           `protobuf:"bytes,22,rep,name=write_operations,json=writeOperations,proto3" json:"write_operations,omitempty"`
	// contains filtered or unexported fields
}