hubaccess

type Caller struct {
	// User is the person a delegated token stands for.
	User          string
	OrgUUID       string
	WorkspaceUUID string
	// Delegated is true for a delegated user token; Provider and Legacy are
	// meaningful only then.
	Delegated bool
	Provider  string
	// ProviderOrgUUID is the provider's owner org ("" = platform), covered by
	// the hub's proof unless Legacy.
	ProviderOrgUUID string
	// Legacy marks a token whose proof predates the owner org; the owner is
	// then resolved the way the proxy resolved it when issuing.
	Legacy bool
}

type Decision int

type Gate struct {
	// Human resolves the caller's own credential (OIDC, static token, kcp
	// ServiceAccount). When it succeeds the request is not a delegated call.
	Human     tenant.UserResolver
	Verify    VerifyFunc
	Providers ProviderLookup
	Grants    GrantReader
	// PlatformDefault grants a platform provider the capabilities it declares
	// in a workspace where no decision was recorded yet (no grant object).
	// Platform providers are operator-installed and, under the default
	// --provider-delegated-tokens=off, already hold the caller's own bearer;
	// this keeps them working across the upgrade. Org-owned providers always
	// need an explicit grant.
	PlatformDefault bool
	// InvitesPerHour bounds memberships.invite per (provider, org); 0 uses
	// DefaultInvitesPerHour.
	InvitesPerHour int
	// contains filtered or unexported fields
}

type GrantKey struct {
	OrgUUID, WorkspaceUUID, Provider, ProviderOrgUUID string
}

type GrantReader interface {
	Get(ctx context.Context, key GrantKey) (*tenancyv1alpha1.Grant, error)
}

type Limits struct {
	MaxRole     string
	AllowInvite bool
}

type MergeFunc func(prev *tenancyv1alpha1.Grant) (accepted []tenancyv1alpha1.GrantedCapability, declined []tenancyv1alpha1.CapabilityRef)

type ProviderLookup interface {
	Get(name string) (providers.Provider, bool)
	GetForOrg(orgUUID, name string) (providers.Provider, bool)
}

type Requirement struct {
	Capability providersv1alpha1.ProviderHubCapability
	Scope      providersv1alpha1.ProviderHubAccessScope
}

type Store struct {
	// contains filtered or unexported fields
}

type VerifyFunc func(*http.Request) (Caller, error)