plugin

type InstallRecord struct {
	Name        string    `json:"name"`
	Version     string    `json:"version"`
	Transport   string    `json:"transport"`
	Tier        string    `json:"tier"`
	Source      string    `json:"source"`             // the path installed from
	Checksum    string    `json:"checksum,omitempty"` // verified tarball checksum, when one was checked
	InstalledAt time.Time `json:"installed_at"`
}

type InstalledPlugin struct {
	Manifest Manifest
	Dir      string
}

type Manifest struct {
	Name      string `toml:"name"`      // channel type string; must not collide with a built-in
	Version   string `toml:"version"`   // plugin version, informational
	Transport string `toml:"transport"` // "nats" (preferred) | "stdio"
	Exec      string `toml:"exec"`      // command the supervisor launches (path within the package; whitespace-split into argv)
	MinRysh   string `toml:"min_rysh"`  // minimum rysh version, informational in v1
	Checksum  string `toml:"checksum"`  // "sha256:<hex>" over the package tarball (registry flow)
	Signature string `toml:"signature"` // reserved for the registry flow (@rysh/@verified); the dev tier signs via the detached rysh.channel.sig instead (signing.go)

	DeclaresCreds  []string `toml:"declares_creds"`  // ${ENV} credentials the plugin needs
	DeclaresScopes []string `toml:"declares_scopes"` // capabilities requested
	NetworkEgress  []string `toml:"network_egress"`  // hosts the plugin declares it reaches (declared, not enforced in v1)
}

type NATSProvider func() (*nats.Conn, string, error)

type PluginChannelAdapter struct {
	// contains filtered or unexported fields
}

type PluginSupervisor struct {
	// contains filtered or unexported fields
}

type Registry struct {
	// contains filtered or unexported fields
}

type SigStatus int

type SignatureFile struct {
	Algo      string `json:"algo"`       // "ed25519"
	KeyID     string `json:"key_id"`     // KeyID(public key)
	PublicKey string `json:"public_key"` // hex, 32 bytes
	Signature string `json:"signature"`  // hex, over PluginDigest
}

type SupervisorOptions struct {
	// Dir is the plugin's install directory (.rysh/channels/{name}): a
	// relative exec resolves against it and it becomes the process's cwd.
	Dir string
	// TrustFile lists trusted signing keys (DefaultTrustFile when empty).
	// When Dir is set, spawn refuses a plugin whose signature fails
	// verification (SigInvalid); unsigned/unknown-key plugins spawn as
	// before. Dir=="" skips the check (ad-hoc/test adapters have no package
	// directory to verify).
	TrustFile string
	// ExtraEnv is appended to the child's environment.
	ExtraEnv []string
	// NATSConn is the core-side bus handle (required for transport=nats).
	NATSConn *nats.Conn
	// NATSURL is the loopback bus URL handed to a nats-transport plugin via
	// RYSH_PLUGIN_NATS_URL at spawn.
	NATSURL string

	InitialBackoff time.Duration // crash-restart initial backoff (default 2s)
	MaxBackoff     time.Duration // crash-restart backoff cap (default 60s)
	MaxFailures    int           // consecutive failed restarts before circuit-break (default 5)
	ReadyTimeout   time.Duration // max wait for the ready handshake (default 10s)
	StopGrace      time.Duration // per-stage wait during clean stop (default 2s)
}

type VerifyResult struct {
	Status SigStatus
	KeyID  string
	Reason string
}

type WireOptions struct {
	// Root of the plugin registry (DefaultRoot when empty).
	Root string
	// TrustFile lists trusted signing keys (DefaultTrustFile when empty).
	TrustFile string
	// NATS provides the session bus for nats-transport plugins; nil makes
	// nats plugins unresolvable (logged), stdio plugins still work.
	NATS NATSProvider
	// Supervisor is the base supervisor option set (backoffs etc.); Dir,
	// NATSConn, and NATSURL are filled per plugin at resolution time.
	Supervisor SupervisorOptions
}