plugin

Jul 28, 2026

Changes in this version

type CachedPlugin

+ func SortAndDedupeLatest(cached []CachedPlugin, allVersions bool) []CachedPlugin

Jul 27, 2026

Changes in this version

type Pool

+ func (p *Pool) BaseProviderConfig() ProviderConfig

type PoolOption

+ func WithBaseProviderConfig(cfg ProviderConfig) PoolOption

Jul 9, 2026

Changes in this version

type AuthHandlerClient

+ func (c *AuthHandlerClient) ActivateServerMode(ctx context.Context, settings []byte) error

type AuthHandlerGRPCClient

+ func (c *AuthHandlerGRPCClient) ActivateServerMode(ctx context.Context, settings json.RawMessage) error

type AuthHandlerWrapper

+ func (w *AuthHandlerWrapper) ActivateServerMode(ctx context.Context, settings json.RawMessage) error

type Cache

+ func (c *Cache) ResolveVersion(name, version, platform string) (string, bool, error)

type LazyAuthHandlerWrapper

+ func (l *LazyAuthHandlerWrapper) ActivateServerMode(ctx context.Context, settings json.RawMessage) error

Jul 6, 2026

Changes in this version

+ type LogoutRequest = sdkplugin.LogoutRequest

+ type StatusRequest = sdkplugin.StatusRequest

Jul 2, 2026

Changes in this version

type AuthHandlerWrapper

+ func (w *AuthHandlerWrapper) SetRequireTrustedDomains(require bool)

Jul 1, 2026

Changes in this version

type PoolOption

+ func WithSpawnTimeout(d time.Duration) PoolOption

Jun 24, 2026

Changes in this version

+ var ErrDedupTimeout = errors.New("operation timed out while waiting for concurrent request")

+ func CanonicalFromCacheKey(cacheKey string) string

+ func PluginCachePath(name string, kind solution.PluginKind, registryHash, version, platform string) string

+ func ResolveAllowedCanonicals(allowed []string, catalogs []interface{ ... }) map[string]bool

type Cache

+ func NewManagedCache(cacheDir string, maxSize int64) (*Cache, error)

+ func (c *Cache) GetLatestCachedPin(name, platform string, opts ...CacheOption) (string, string, func(), bool)

+ func (c *Cache) GetPin(name, version, platform, expectedDigest string, opts ...CacheOption) (string, func(), bool)

+ func (c *Cache) Pin(name, version, platform string, opts ...CacheOption) (path string, release func(), ok bool)

+ func (c *Cache) SetPin(name, version, platform string, data []byte, opts ...CacheOption) (string, func(), error)

+ func (c *Cache) WarmUp() error

+ type CacheOption func(*cacheOpts)

+ func WithRegistryHash(hash string) CacheOption

type CachedPlugin

+ RegistryHash string

+ type CatalogIdentity struct

+ Alias string

+ Canonical string

+ func IdentityFromCatalog(cat interface{ ... }) CatalogIdentity

+ func NewCatalogIdentity(canonical, alias string) CatalogIdentity

+ func (id CatalogIdentity) IsZero() bool

+ func (id CatalogIdentity) RegistryHash() string

+ func (id CatalogIdentity) String() string

type FetchResult

+ Release func()

type PruneResult

+ RegistryHash string

Jun 15, 2026

Changes in this version

+ func BareNames(plugins []AllowedPlugin) []string

+ func CatalogNames(plugins []AllowedPlugin) []string

+ func GroupByCatalog(plugins []AllowedPlugin) map[string]catalog.PluginPolicy

+ func PluginKindFromCacheKey(cacheKey string) (name string, kind solution.PluginKind)

+ func PolicyPlugins(policies map[string]catalog.PluginPolicy, catalogName string) []string

+ func ProbePluginDescriptor(ctx context.Context, binaryPath, providerName string) (*provider.Descriptor, error)

+ type AllowedPlugin string

+ func ParseAllowedPlugins(raw []string) ([]AllowedPlugin, error)

+ func (a AllowedPlugin) Catalog() string

+ func (a AllowedPlugin) IsWildcard() bool

+ func (a AllowedPlugin) Plugin() string

+ func (a AllowedPlugin) Validate() error

type AuthHandlerWrapper

+ func (w *AuthHandlerWrapper) ApplyOverrides(ctx context.Context, overrides map[string]string) error

type Cache

+ func (c *Cache) Prune(opts PruneOptions, dryRun bool) (*PruneSummary, error)

type Client

+ func RegisterCachedPluginVersion(ctx context.Context, name, version string, registry *provider.Registry, ...) ([]*Client, error)

type ClientOption

+ func WithGRPCMaxMessageSize(size int) ClientOption

+ type DescriptorCache struct

+ func NewDescriptorCache(dir string, ttl time.Duration) *DescriptorCache

+ func (c *DescriptorCache) Dir() string

+ func (c *DescriptorCache) Get(name string) *provider.Descriptor

+ func (c *DescriptorCache) Invalidate(name string)

+ func (c *DescriptorCache) InvalidateAll()

+ func (c *DescriptorCache) Put(name string, desc provider.Descriptor) error

type HostServiceDeps

+ ProfileResolverFunc func(handlerName string) string

+ type LazyAuthHandlerConfig struct

+ BinPath string

+ ClientOpts []ClientOption

+ Name string

+ OfficialRegistry *authofficial.Registry

+ PluginCfg *ProviderConfig

+ type LazyAuthHandlerWrapper struct

+ func NewLazyAuthHandlerWrapper(cfg LazyAuthHandlerConfig) *LazyAuthHandlerWrapper

+ func (l *LazyAuthHandlerWrapper) ApplyOverrides(ctx context.Context, overrides map[string]string) error

+ func (l *LazyAuthHandlerWrapper) Capabilities() []auth.Capability

+ func (l *LazyAuthHandlerWrapper) Client() *AuthHandlerClient

+ func (l *LazyAuthHandlerWrapper) DetectAvailableFlows(ctx context.Context) ([]auth.FlowAvailability, error)

+ func (l *LazyAuthHandlerWrapper) DisplayName() string

+ func (l *LazyAuthHandlerWrapper) GetToken(ctx context.Context, opts auth.TokenOptions) (*auth.Token, error)

+ func (l *LazyAuthHandlerWrapper) InjectAuth(ctx context.Context, req *http.Request, opts auth.TokenOptions) error

+ func (l *LazyAuthHandlerWrapper) IsInitialized() bool

+ func (l *LazyAuthHandlerWrapper) ListCachedTokens(ctx context.Context) ([]*auth.CachedTokenInfo, error)

+ func (l *LazyAuthHandlerWrapper) Login(ctx context.Context, opts auth.LoginOptions) (*auth.Result, error)

+ func (l *LazyAuthHandlerWrapper) Logout(ctx context.Context) error

+ func (l *LazyAuthHandlerWrapper) Name() string

+ func (l *LazyAuthHandlerWrapper) PurgeExpiredTokens(ctx context.Context) (int, error)

+ func (l *LazyAuthHandlerWrapper) SetContext(ctx context.Context)

+ func (l *LazyAuthHandlerWrapper) Status(ctx context.Context) (*auth.Status, error)

+ func (l *LazyAuthHandlerWrapper) SupportedFlows() []auth.Flow

+ type PruneOptions struct

+ All bool

+ Force bool

+ Keep int

+ Names []string

+ Platform string

+ type PruneResult struct

+ Name string

+ Path string

+ Platform string

+ Size int64

+ Version string

+ type PruneSkipped struct

+ Name string

+ Platform string

+ Reason string

+ Version string

+ type PruneSummary struct

+ Removed []PruneResult

+ Skipped []PruneSkipped

+ TotalFreed int64

+ type UpdateEntry struct

+ Kind string

+ Name string

+ NewVersion string

+ OldVersion string

+ type UpdateError struct

+ Error string

+ Name string

+ type UpdateOptions struct

+ All bool

+ Names []string

+ Platform string

+ Target UpdateTarget

+ type UpdatePlan struct

+ Failed []UpdateError

+ UpToDate []string

+ Updates []UpdateEntry

+ func PlanUpdates(ctx context.Context, cache *Cache, catalogFetcher *catalog.PluginFetcher, ...) (*UpdatePlan, error)

+ type UpdateTarget string

+ const UpdateTargetLatest

+ const UpdateTargetMinor

+ const UpdateTargetPatch

May 14, 2026

Changes in this version

+ var ErrCosignNotAvailable = errors.New(...)

+ var ErrSignatureInvalid = errors.New("cosign signature verification failed")

+ var ErrSignatureNotFound = errors.New("no cosign signature found for artifact")

+ func HandleVerificationError(policy *SignaturePolicy, err error, lgr logr.Logger, labels ...any) error

+ func PluginCacheKey(name string, kind solution.PluginKind) string

+ func WithSignaturePolicy(ctx context.Context, policy *SignaturePolicy) context.Context

type AuthHandlerClient

+ func (c *AuthHandlerClient) StartupDuration() time.Duration

type AuthHandlerGRPCClient

+ func (c *AuthHandlerGRPCClient) DetectAvailableFlows(ctx context.Context, handlerName string) ([]FlowAvailability, error)

type AuthHandlerGRPCServer

+ func (s *AuthHandlerGRPCServer) DetectAvailableFlows(ctx context.Context, req *proto.DetectAvailableFlowsRequest) (*proto.DetectAvailableFlowsResponse, error)

type AuthHandlerWrapper

+ func (w *AuthHandlerWrapper) DetectAvailableFlows(ctx context.Context) ([]auth.FlowAvailability, error)

+ func (w *AuthHandlerWrapper) SetStartupLatency(d time.Duration)

+ func (w *AuthHandlerWrapper) StartupLatency() time.Duration

type ClientOption

+ func AuthClientOptsFromContext(ctx context.Context) []ClientOption

type FetchResult

+ Signature *SignatureResult

type FetcherConfig

+ SignaturePolicy *SignaturePolicy

+ SignatureVerifier SignatureVerifier

+ type FlowAvailability = sdkplugin.FlowAvailability

type HostServiceDeps

+ func HostDepsFromAuthRegistry(authReg *auth.Registry) *HostServiceDeps

type Pool

+ func (p *Pool) ClientOptsLen() int

+ func (p *Pool) SanitizeEnv() bool

type PoolOption

+ func WithClientOptions(opts ...ClientOption) PoolOption

+ func WithSanitizeEnv(sanitize bool) PoolOption

+ type SignatureMode string

+ const SignatureModeEnforce

+ const SignatureModeOff

+ const SignatureModeWarn

+ func ParseSignatureMode(s string) (SignatureMode, error)

+ type SignaturePolicy struct

+ Mode SignatureMode

+ TrustedIdentities []string

+ TrustedIssuers []string

+ func SignaturePolicyFromContext(ctx context.Context) *SignaturePolicy

+ func SignaturePolicyFromRaw(mode string, trustedIssuers, trustedIdentities []string) (*SignaturePolicy, error)

+ func (p *SignaturePolicy) IsEnabled() bool

+ func (p *SignaturePolicy) Validate() error

+ type SignatureResult struct

+ Identity string

+ Issuer string

+ SignedAt string

+ Verified bool

+ type SignatureVerifier interface

+ VerifySignature func(ctx context.Context, imageRef string, policy *SignaturePolicy) (*SignatureResult, error)

+ func NewSignatureVerifier() SignatureVerifier

May 6, 2026

Changes in this version

+ const DefaultFetchCooldown

+ var ErrExternalDisabled = errors.New("external plugins disabled")

+ var ErrPluginNotAllowed = errors.New("plugin not in allowlist")

+ var ErrPoolClosed = errors.New("plugin pool is closed")

+ var ErrPoolFull = errors.New("plugin pool at maximum capacity")

+ func PoolErrorHTTPStatus(err error) int

+ func ProbePluginDescription(ctx context.Context, binaryPath, name string) (string, bool)

+ func ValidateVerificationURI(uri string, trusted []string) error

type AuthHandlerWrapper

+ func (w *AuthHandlerWrapper) SetTrustedDomains(domains []string)

type Cache

+ func (c *Cache) GetLatestBinary(name string) (string, string, bool)

+ func (c *Cache) GetLatestCached(name, platform string) (string, string, bool)

+ func (c *Cache) ListCurrentPlatform() ([]CachedPlugin, error)

+ type CachedPluginInfo struct

+ Description string

+ Name string

+ Path string

+ Version string

+ func DescribeCachedPlugins(ctx context.Context, cached []CachedPlugin, skip map[string]bool) []CachedPluginInfo

type Client

+ func RegisterCachedPlugin(ctx context.Context, name string, registry *provider.Registry, ...) ([]*Client, error)

type ClientOption

+ func WithDebugLogging() ClientOption

+ func WithSanitizedEnv() ClientOption

+ func WithStartTimeout(d time.Duration) ClientOption

+ type FetchCooldown struct

+ func NewFetchCooldown(cacheDir string, cooldown time.Duration) *FetchCooldown

+ func (fc *FetchCooldown) Clear(name string) error

+ func (fc *FetchCooldown) OnCooldown(name string) bool

+ func (fc *FetchCooldown) RecordFailure(name string) error

type FetcherConfig

+ AllowedCatalogs []string

+ BinaryName string

+ NoCache bool

type HostServiceClient

+ func (c *HostServiceClient) GetAuthGroups(ctx context.Context, handler string) ([]string, error)

type HostServiceDeps

+ AuthGroupsFunc func(ctx context.Context, handler string) ([]string, error)

type HostServiceServer

+ func (h *HostServiceServer) GetAuthGroups(ctx context.Context, req *proto.GetAuthGroupsRequest) (*proto.GetAuthGroupsResponse, error)

+ type Pool struct

+ func NewPool(fetcher *Fetcher, registry *provider.Registry, logger logr.Logger, ...) *Pool

+ func (p *Pool) Acquire(name string) bool

+ func (p *Pool) Adopt(name string, client *Client, dep solution.PluginDependency, ...)

+ func (p *Pool) Ensure(ctx context.Context, deps []solution.PluginDependency) error

+ func (p *Pool) EnsureAndAcquire(ctx context.Context, deps []solution.PluginDependency) (release func(), err error)

+ func (p *Pool) Ping(ctx context.Context, name string) bool

+ func (p *Pool) Release(name string)

+ func (p *Pool) Shutdown()

+ func (p *Pool) Stats() PoolStats

+ type PoolOption func(*poolOptions)

+ func WithAllowedPlugins(names []string) PoolOption

+ func WithDisableExternal(disabled bool) PoolOption

+ func WithHealthCheckInterval(d time.Duration) PoolOption

+ func WithIdleTimeout(d time.Duration) PoolOption

+ func WithMaxPlugins(n int) PoolOption

+ type PoolStats struct

+ Active int

+ Dead int

+ Evicted int

+ Idle int

+ Total int

Apr 16, 2026

Changes in this version

+ const PluginProtocolVersion

+ var ErrStreamingNotSupported = sdkplugin.ErrStreamingNotSupported

+ func KillAll(clients []*Client)

+ func KillAllAuthHandlers(clients []*AuthHandlerClient)

type AuthHandlerClient

+ func (c *AuthHandlerClient) ConfigureAuthHandler(ctx context.Context, handlerName string, cfg ProviderConfig) error

+ func (c *AuthHandlerClient) HostServiceID() uint32

+ func (c *AuthHandlerClient) StopAuthHandler(ctx context.Context, handlerName string) error

type AuthHandlerGRPCClient

+ func (c *AuthHandlerGRPCClient) ConfigureAuthHandler(ctx context.Context, handlerName string, cfg ProviderConfig) error

+ func (c *AuthHandlerGRPCClient) StopAuthHandler(ctx context.Context, handlerName string) error

type AuthHandlerGRPCPlugin

+ HostDeps *HostServiceDeps

type AuthHandlerGRPCServer

+ func (s *AuthHandlerGRPCServer) ConfigureAuthHandler(ctx context.Context, req *proto.ConfigureAuthHandlerRequest) (*proto.ConfigureAuthHandlerResponse, error)

+ func (s *AuthHandlerGRPCServer) StopAuthHandler(ctx context.Context, req *proto.StopAuthHandlerRequest) (*proto.StopAuthHandlerResponse, error)

type Client

+ func (c *Client) ConfigureProvider(ctx context.Context, providerName string, cfg ProviderConfig) error

+ func (c *Client) ExecuteProviderStream(ctx context.Context, providerName string, input map[string]any, ...) error

+ func (c *Client) ExtractDependencies(ctx context.Context, providerName string, inputs map[string]any) ([]string, error)

+ type ClientOption func(*clientOptions)

+ func WithHostDeps(deps *HostServiceDeps) ClientOption

type GRPCClient

+ func (c *GRPCClient) ConfigureProvider(ctx context.Context, providerName string, cfg ProviderConfig) error

+ func (c *GRPCClient) ExecuteProviderStream(ctx context.Context, providerName string, input map[string]any, ...) error

+ func (c *GRPCClient) ExtractDependencies(ctx context.Context, providerName string, inputs map[string]any) ([]string, error)

+ func (c *GRPCClient) HostServiceID() uint32

+ func (c *GRPCClient) StopProvider(ctx context.Context, providerName string) error

type GRPCPlugin

+ HostDeps *HostServiceDeps

type GRPCServer

+ func (s *GRPCServer) ConfigureProvider(ctx context.Context, req *proto.ConfigureProviderRequest) (*proto.ConfigureProviderResponse, error)

+ func (s *GRPCServer) ExecuteProviderStream(req *proto.ExecuteProviderRequest, ...) error

+ func (s *GRPCServer) ExtractDependencies(ctx context.Context, req *proto.ExtractDependenciesRequest) (*proto.ExtractDependenciesResponse, error)

+ func (s *GRPCServer) StopProvider(ctx context.Context, req *proto.StopProviderRequest) (*proto.StopProviderResponse, error)

+ type HostServiceClient struct

+ func NewHostServiceClient(conn *grpc.ClientConn) *HostServiceClient

+ func (c *HostServiceClient) DeleteSecret(ctx context.Context, name string) error

+ func (c *HostServiceClient) GetAuthIdentity(ctx context.Context, handler, scope string) (*proto.Claims, error)

+ func (c *HostServiceClient) GetAuthToken(ctx context.Context, handler, scope string, minValidFor int64, ...) (*proto.GetAuthTokenResponse, error)

+ func (c *HostServiceClient) GetSecret(ctx context.Context, name string) (string, bool, error)

+ func (c *HostServiceClient) ListAuthHandlers(ctx context.Context) (handlers []string, defaultHandler string, err error)

+ func (c *HostServiceClient) ListSecrets(ctx context.Context, pattern string) ([]string, error)

+ func (c *HostServiceClient) SetSecret(ctx context.Context, name, value string) error

+ type HostServiceDeps struct

+ AllowedAuthHandlers []string

+ AllowedSecretPrefix string

+ AuthHandlersFunc func(ctx context.Context) (handlers []string, defaultHandler string, err error)

+ AuthIdentityFunc func(ctx context.Context, handler, scope string) (*proto.Claims, error)

+ AuthTokenFunc func(ctx context.Context, handler, scope string, minValidFor int64, ...) (*proto.GetAuthTokenResponse, error)

+ SecretStore secrets.Store

+ type HostServiceServer struct

+ Deps HostServiceDeps

+ func (h *HostServiceServer) DeleteSecret(ctx context.Context, req *proto.DeleteSecretRequest) (*proto.DeleteSecretResponse, error)

+ func (h *HostServiceServer) GetAuthIdentity(ctx context.Context, req *proto.GetAuthIdentityRequest) (*proto.GetAuthIdentityResponse, error)

+ func (h *HostServiceServer) GetAuthToken(ctx context.Context, req *proto.GetAuthTokenRequest) (*proto.GetAuthTokenResponse, error)

+ func (h *HostServiceServer) GetSecret(ctx context.Context, req *proto.GetSecretRequest) (*proto.GetSecretResponse, error)

+ func (h *HostServiceServer) ListAuthHandlers(ctx context.Context, _ *proto.ListAuthHandlersRequest) (*proto.ListAuthHandlersResponse, error)

+ func (h *HostServiceServer) ListSecrets(ctx context.Context, req *proto.ListSecretsRequest) (*proto.ListSecretsResponse, error)

+ func (h *HostServiceServer) SetSecret(ctx context.Context, req *proto.SetSecretRequest) (*proto.SetSecretResponse, error)

+ type ProviderConfig = sdkplugin.ProviderConfig

type ProviderWrapper

+ func (w *ProviderWrapper) Configure(ctx context.Context, cfg ProviderConfig) error

+ func (w *ProviderWrapper) ExecuteStream(ctx context.Context, input any, cb func(StreamChunk)) error

+ type StreamChunk = sdkplugin.StreamChunk

+ type WrapperOption func(*wrapperConfig)

+ func WithContext(ctx context.Context) WrapperOption

Mar 19, 2026

Changes in this version

type Client

+ func (c *Client) DescribeWhatIf(ctx context.Context, providerName string, input map[string]any) (string, error)

type GRPCClient

+ func (c *GRPCClient) DescribeWhatIf(ctx context.Context, providerName string, input map[string]any) (string, error)

type GRPCServer

+ func (s *GRPCServer) DescribeWhatIf(ctx context.Context, req *proto.DescribeWhatIfRequest) (*proto.DescribeWhatIfResponse, error)

type ProviderPlugin

+ DescribeWhatIf func(ctx context.Context, providerName string, input map[string]any) (string, error)

Feb 25, 2026

Changes in this version

+ const AuthHandlerPluginName

+ var AuthHandlerHandshakeConfig = &HandshakeConfigData

+ func CurrentPlatform() string

+ func ParsePlatform(platform string) (os, arch string, err error)

+ func Paths(results []FetchResult) []string

+ func PlatformCacheKey(platform string) string

+ func RegisterAuthHandlerPlugins(registry *auth.Registry, pluginDirs []string) error

+ func ServeAuthHandler(impl AuthHandlerPlugin)

+ type AuthHandlerClient struct

+ func DiscoverAuthHandlers(pluginDirs []string) ([]*AuthHandlerClient, error)

+ func NewAuthHandlerClient(pluginPath string) (*AuthHandlerClient, error)

+ func RegisterFetchedAuthHandlerPlugins(ctx context.Context, registry *auth.Registry, results []FetchResult) ([]*AuthHandlerClient, error)

+ func (c *AuthHandlerClient) GetAuthHandlers(ctx context.Context) ([]AuthHandlerInfo, error)

+ func (c *AuthHandlerClient) GetStatus(ctx context.Context, handlerName string) (*auth.Status, error)

+ func (c *AuthHandlerClient) GetToken(ctx context.Context, handlerName string, req TokenRequest) (*TokenResponse, error)

+ func (c *AuthHandlerClient) Kill()

+ func (c *AuthHandlerClient) Login(ctx context.Context, handlerName string, req LoginRequest, ...) (*LoginResponse, error)

+ func (c *AuthHandlerClient) Logout(ctx context.Context, handlerName string) error

+ func (c *AuthHandlerClient) Name() string

+ func (c *AuthHandlerClient) Path() string

+ type AuthHandlerGRPCClient struct

+ func (c *AuthHandlerGRPCClient) GetAuthHandlers(ctx context.Context) ([]AuthHandlerInfo, error)

+ func (c *AuthHandlerGRPCClient) GetStatus(ctx context.Context, handlerName string) (*auth.Status, error)

+ func (c *AuthHandlerGRPCClient) GetToken(ctx context.Context, handlerName string, req TokenRequest) (*TokenResponse, error)

+ func (c *AuthHandlerGRPCClient) ListCachedTokens(ctx context.Context, handlerName string) ([]*auth.CachedTokenInfo, error)

+ func (c *AuthHandlerGRPCClient) Login(ctx context.Context, handlerName string, req LoginRequest, ...) (*LoginResponse, error)

+ func (c *AuthHandlerGRPCClient) Logout(ctx context.Context, handlerName string) error

+ func (c *AuthHandlerGRPCClient) PurgeExpiredTokens(ctx context.Context, handlerName string) (int, error)

+ type AuthHandlerGRPCPlugin struct

+ Impl AuthHandlerPlugin

+ func (p *AuthHandlerGRPCPlugin) GRPCClient(ctx context.Context, broker *plugin.GRPCBroker, c *grpc.ClientConn) (any, error)

+ func (p *AuthHandlerGRPCPlugin) GRPCServer(broker *plugin.GRPCBroker, s *grpc.Server) error

+ type AuthHandlerGRPCServer struct

+ Impl AuthHandlerPlugin

+ func (s *AuthHandlerGRPCServer) GetAuthHandlers(ctx context.Context, _ *proto.GetAuthHandlersRequest) (*proto.GetAuthHandlersResponse, error)

+ func (s *AuthHandlerGRPCServer) GetStatus(ctx context.Context, req *proto.GetStatusRequest) (*proto.GetStatusResponse, error)

+ func (s *AuthHandlerGRPCServer) GetToken(ctx context.Context, req *proto.GetTokenRequest) (*proto.GetTokenResponse, error)

+ func (s *AuthHandlerGRPCServer) ListCachedTokens(ctx context.Context, req *proto.ListCachedTokensRequest) (*proto.ListCachedTokensResponse, error)

+ func (s *AuthHandlerGRPCServer) Login(req *proto.LoginRequest, ...) error

+ func (s *AuthHandlerGRPCServer) Logout(ctx context.Context, req *proto.LogoutRequest) (*proto.LogoutResponse, error)

+ func (s *AuthHandlerGRPCServer) PurgeExpiredTokens(ctx context.Context, req *proto.PurgeExpiredTokensRequest) (*proto.PurgeExpiredTokensResponse, error)

+ type AuthHandlerInfo struct

+ Capabilities []auth.Capability

+ DisplayName string

+ Flows []auth.Flow

+ Name string

+ type AuthHandlerPlugin interface

+ GetAuthHandlers func(ctx context.Context) ([]AuthHandlerInfo, error)

+ GetStatus func(ctx context.Context, handlerName string) (*auth.Status, error)

+ GetToken func(ctx context.Context, handlerName string, req TokenRequest) (*TokenResponse, error)

+ ListCachedTokens func(ctx context.Context, handlerName string) ([]*auth.CachedTokenInfo, error)

+ Login func(ctx context.Context, handlerName string, req LoginRequest, ...) (*LoginResponse, error)

+ Logout func(ctx context.Context, handlerName string) error

+ PurgeExpiredTokens func(ctx context.Context, handlerName string) (int, error)

+ type AuthHandlerWrapper struct

+ func NewAuthHandlerWrapper(client *AuthHandlerClient, info AuthHandlerInfo) *AuthHandlerWrapper

+ func (w *AuthHandlerWrapper) Capabilities() []auth.Capability

+ func (w *AuthHandlerWrapper) Client() *AuthHandlerClient

+ func (w *AuthHandlerWrapper) DisplayName() string

+ func (w *AuthHandlerWrapper) GetToken(ctx context.Context, opts auth.TokenOptions) (*auth.Token, error)

+ func (w *AuthHandlerWrapper) InjectAuth(ctx context.Context, req *http.Request, opts auth.TokenOptions) error

+ func (w *AuthHandlerWrapper) ListCachedTokens(ctx context.Context) ([]*auth.CachedTokenInfo, error)

+ func (w *AuthHandlerWrapper) Login(ctx context.Context, opts auth.LoginOptions) (*auth.Result, error)

+ func (w *AuthHandlerWrapper) Logout(ctx context.Context) error

+ func (w *AuthHandlerWrapper) Name() string

+ func (w *AuthHandlerWrapper) PurgeExpiredTokens(ctx context.Context) (int, error)

+ func (w *AuthHandlerWrapper) Status(ctx context.Context) (*auth.Status, error)

+ func (w *AuthHandlerWrapper) SupportedFlows() []auth.Flow

+ type Cache struct

+ func NewCache(cacheDir string) *Cache

+ func (c *Cache) Digest(name, version, platform string) (string, error)

+ func (c *Cache) Dir() string

+ func (c *Cache) Get(name, version, platform, expectedDigest string) (string, bool)

+ func (c *Cache) List() ([]CachedPlugin, error)

+ func (c *Cache) Put(name, version, platform string, data []byte) (string, error)

+ func (c *Cache) Remove(name, version, platform string) error

+ type CachedPlugin struct

+ Name string

+ Path string

+ Platform string

+ Size int64

+ Version string

type Client

+ func RegisterFetchedPlugins(ctx context.Context, registry *provider.Registry, results []FetchResult) ([]*Client, error)

+ type DeviceCodePrompt struct

+ Message string

+ UserCode string

+ VerificationURI string

+ type FetchResult struct

+ Catalog string

+ Digest string

+ FromCache bool

+ Kind solution.PluginKind

+ Name string

+ Path string

+ Version string

+ type Fetcher struct

+ func NewFetcher(cfg FetcherConfig) *Fetcher

+ func (f *Fetcher) FetchPlugins(ctx context.Context, plugins []solution.PluginDependency, ...) ([]FetchResult, error)

+ type FetcherConfig struct

+ Cache *Cache

+ Catalog catalog.Catalog

+ Logger logr.Logger

+ Platform string

+ type LoginRequest struct

+ Flow auth.Flow

+ Scopes []string

+ TenantID string

+ Timeout time.Duration

+ type LoginResponse struct

+ Claims *auth.Claims

+ ExpiresAt time.Time

+ type LoginStreamMessage struct

+ DeviceCodePrompt *DeviceCodePrompt

+ Error string

+ Result *LoginResponse

+ type TokenRequest struct

+ ForceRefresh bool

+ MinValidFor time.Duration

+ Scope string

+ type TokenResponse struct

+ AccessToken string

+ CachedAt time.Time

+ ExpiresAt time.Time

+ Flow auth.Flow

+ Scope string

+ SessionID string

+ TokenType string

Feb 10, 2026

Changes in this version

+ const PluginName

+ var HandshakeConfig = &HandshakeConfigData

+ func RegisterPluginProviders(registry *provider.Registry, pluginDirs []string) error

+ func Serve(impl ProviderPlugin)

+ type Client struct

+ func Discover(pluginDirs []string) ([]*Client, error)

+ func NewClient(pluginPath string) (*Client, error)

+ func (c *Client) ExecuteProvider(ctx context.Context, providerName string, input map[string]any) (*provider.Output, error)

+ func (c *Client) GetProviderDescriptor(ctx context.Context, providerName string) (*provider.Descriptor, error)

+ func (c *Client) GetProviders(ctx context.Context) ([]string, error)

+ func (c *Client) Kill()

+ func (c *Client) Name() string

+ func (c *Client) Path() string

+ type GRPCClient struct

+ func (c *GRPCClient) ExecuteProvider(ctx context.Context, providerName string, input map[string]any) (*provider.Output, error)

+ func (c *GRPCClient) GetProviderDescriptor(ctx context.Context, providerName string) (*provider.Descriptor, error)

+ func (c *GRPCClient) GetProviders(ctx context.Context) ([]string, error)

+ type GRPCPlugin struct

+ Impl ProviderPlugin

+ func (p *GRPCPlugin) GRPCClient(ctx context.Context, broker *plugin.GRPCBroker, c *grpc.ClientConn) (any, error)

+ func (p *GRPCPlugin) GRPCServer(broker *plugin.GRPCBroker, s *grpc.Server) error

+ type GRPCServer struct

+ Impl ProviderPlugin

+ func (s *GRPCServer) ExecuteProvider(ctx context.Context, req *proto.ExecuteProviderRequest) (*proto.ExecuteProviderResponse, error)

+ func (s *GRPCServer) GetProviderDescriptor(ctx context.Context, req *proto.GetProviderDescriptorRequest) (*proto.GetProviderDescriptorResponse, error)

+ func (s *GRPCServer) GetProviders(ctx context.Context, _ *proto.GetProvidersRequest) (*proto.GetProvidersResponse, error)

+ type HandshakeConfigData struct

+ MagicCookieKey string

+ MagicCookieValue string

+ ProtocolVersion uint

+ type ProviderPlugin interface

+ ExecuteProvider func(ctx context.Context, providerName string, input map[string]any) (*provider.Output, error)

+ GetProviderDescriptor func(ctx context.Context, providerName string) (*provider.Descriptor, error)

+ GetProviders func(ctx context.Context) ([]string, error)

+ type ProviderWrapper struct

+ func NewProviderWrapper(client *Client, providerName string) (*ProviderWrapper, error)

+ func (w *ProviderWrapper) Client() *Client

+ func (w *ProviderWrapper) Descriptor() *provider.Descriptor

+ func (w *ProviderWrapper) Execute(ctx context.Context, input any) (*provider.Output, error)