notifylayer

type AssetReader interface {
	// Get returns one asset by id.
	Get(ctx context.Context, id string) (*portaldomain.Asset, error)
	// Content returns the asset's stored bytes at its current version.
	Content(ctx context.Context, asset *portaldomain.Asset) ([]byte, error)
}

type Config struct {
	// Channels lists and resolves the operator's channels. nil leaves the
	// tool unregistered: there is nothing to send to.
	Channels notification.ChannelStore
	// Enqueuer writes the queue row a send becomes. nil leaves the tool
	// unregistered, because a listed channel that cannot be sent to is worse
	// than no tool at all.
	Enqueuer *notification.Enqueuer
	// Scope decides whether a caller's persona reaches a channel's
	// connection. nil denies every channel that names one, which is the
	// fail-closed answer the action path already gives.
	Scope *connscope.Scope
	// Assets reads the asset publish turns into a document. nil leaves the
	// publish action refusing, and list and send unaffected.
	Assets AssetReader
	// Access decides whether the caller may read the asset they named. nil
	// leaves the publish action refusing: a deployment that cannot check
	// entitlement must not publish on the strength of an id.
	Access Entitlement
	// PortalURL is the deployment's public base URL, used to build the link
	// a published document carries. Empty omits the link.
	PortalURL string
	// AdminPersona is the persona name whose reach is unrestricted, as it is
	// everywhere else in the product. Empty means no persona is lifted.
	AdminPersona string
}

type Entitlement interface {
	// CanRead reports whether the identified caller may read the asset.
	CanRead(ctx context.Context, asset *portaldomain.Asset, userID, email string) bool
}

type Handle struct {
	// contains filtered or unexported fields
}