abi

const (
	KeyAuth          = "auth"
	KeyScoring       = "scoring"
	KeyNotification  = "notification"
	KeyChallengeType = "challenge_type"
)

Dispense keys — one per plugin type. A plugin serves exactly the one its manifest `type` declares; the host dispenses that key and receives the matching gRPC client.

const ABIMajor = 1

ABIMajor is the go-plugin ProtocolVersion — the ABI MAJOR, bumped ONLY on a breaking change. A plugin built against a different major is refused by go-plugin before any call; the loader logs "ABI major mismatch" and skips it (no crash, no partial init).

const ABIMinor = 1

ABIMinor is the host's ABI minor. 1.1 added Identity.email_verified, which the auth return path requires before binding a login to an existing account by email; a plugin on 1.0 simply leaves it false and fails closed. Minor is forward-compatible: the host may call a plugin advertising an OLDER minor (it won't invoke methods/fields the plugin lacks), and a plugin advertising a NEWER minor is accepted (the host uses only what it knows). Carried per-plugin in the manifest and the Info RPC.

const ABIString = "1.1"

ABIString is the host's advertised "major.minor".

const PluginConfigEnv = "OSCTF_PLUGIN_CONFIG"

PluginConfigEnv is the single environment variable the host sets on the PLUGIN process carrying its resolved config as a JSON object. It is the SHARED definition: the host writes it (see internal/plugin) and the public SDK's Config() reads it, so the two sides cannot drift — the pairing is one source of truth, not two strings that must agree. One var (not per-key) so a plugin never reconstructs the host's OSCTF_PLUGIN_<NAME>_<KEY> override names — it just asks for a key.