portal

type Asset ¶

type Asset = portaldomain.Asset

Asset represents a persisted AI-generated asset.

type AssetCollectionRef ¶ added in v1.47.0

type AssetCollectionRef = portaldomain.AssetCollectionRef

AssetCollectionRef is a lightweight reference to a collection that contains an asset.

type AssetFilter ¶

type AssetFilter = portaldomain.AssetFilter

AssetFilter defines filtering criteria for listing assets.

type AssetSearchQuery ¶ added in v1.81.0

type AssetSearchQuery = portaldomain.AssetSearchQuery

AssetSearchQuery describes a relevance ranking request over saved assets.

type AssetSearcher ¶ added in v1.81.0

type AssetSearcher = portaldomain.AssetSearcher

AssetSearcher ranks the caller's assets by relevance to a query.

type AssetStore ¶

type AssetStore = portaldomain.AssetStore

AssetStore persists and queries portal assets.

func NewNoopAssetStore() AssetStore

func NewPostgresAssetStore(db *sql.DB, producers producedby.Store, opts ...indexjobs.StoreOption) AssetStore

type AssetUpdate ¶

type AssetUpdate = portaldomain.AssetUpdate

AssetUpdate holds mutable fields for updating an asset.

type AssetVersion ¶ added in v1.43.0

type AssetVersion = portaldomain.AssetVersion

AssetVersion records a single version of an asset's content.

type AuditMetrics ¶ added in v0.36.0

type AuditMetrics interface {
	Timeseries(ctx context.Context, filter audit.TimeseriesFilter) ([]audit.TimeseriesBucket, error)
	Breakdown(ctx context.Context, filter audit.BreakdownFilter) ([]audit.BreakdownEntry, error)
	Overview(ctx context.Context, filter audit.MetricsFilter) (*audit.Overview, error)
}

AuditMetrics provides aggregate audit metrics scoped to individual users.

type Authenticator ¶

type Authenticator struct {
	// contains filtered or unexported fields
}

Authenticator wraps the platform's middleware.Authenticator chain for HTTP portal requests. Unlike the admin authenticator, it does not require a specific persona — any authenticated user can access the portal.

func NewAuthenticator(auth middleware.Authenticator, opts ...AuthenticatorOption) *Authenticator

func (pa *Authenticator) Authenticate(r *http.Request) (*User, error)

func (pa *Authenticator) IssueCSRF(subject string) string

type AuthenticatorOption ¶

type AuthenticatorOption func(*Authenticator)

AuthenticatorOption configures the portal authenticator.

func WithBrowserAuth(ba *browsersession.Authenticator) AuthenticatorOption

type CallCatalog ¶ added in v1.121.0

type CallCatalog = callapi.Store

CallCatalog reads the recorded data-access calls. Aliased to the seam's own declaration rather than restated so the two cannot drift, and identical to the operator surface's alias: there is one catalog, and the portal's face of it differs only in being scoped to the caller.

type CallPromoter ¶ added in v1.121.0

type CallPromoter = callrecord.Promoter

CallPromoter publishes a record its owner chose to publish.

type CatalogLabeler ¶ added in v1.119.0

type CatalogLabeler interface {
	Labels(ctx context.Context, urns []string) map[string]string
}

CatalogLabeler resolves catalog (DataHub) entity URNs to display names in one batch. It is satisfied by the DataHub bridge's labeler; the portal states only the shape it needs so this package keeps no DataHub dependency.

type ChangesetReader ¶ added in v1.84.0

type ChangesetReader = feedbackapi.ChangesetReader

ChangesetReader provides read access to knowledge changesets, used to surface the thread -> insight -> changeset chain on a feedback thread.

type Collection ¶ added in v1.47.0

type Collection = portaldomain.Collection

Collection represents a curated, ordered group of assets organized into sections.

type CollectionConfig ¶ added in v1.47.0

type CollectionConfig = portaldomain.CollectionConfig

CollectionConfig holds extensible per-collection settings.

type CollectionFilter ¶ added in v1.47.0

type CollectionFilter = portaldomain.CollectionFilter

CollectionFilter defines filtering criteria for listing collections.

type CollectionItem ¶ added in v1.47.0

type CollectionItem = portaldomain.CollectionItem

CollectionItem is an ordered reference to an asset within a section.

type CollectionSearchQuery ¶ added in v1.81.0

type CollectionSearchQuery = portaldomain.CollectionSearchQuery

CollectionSearchQuery describes a relevance ranking request over collections.

type CollectionSearcher ¶ added in v1.81.0

type CollectionSearcher = portaldomain.CollectionSearcher

CollectionSearcher ranks the caller's collections by relevance to a query.

type CollectionSection ¶ added in v1.47.0

type CollectionSection = portaldomain.CollectionSection

CollectionSection is an ordered section within a collection.

type CollectionStore ¶ added in v1.47.0

type CollectionStore = portaldomain.CollectionStore

CollectionStore persists and queries portal collections.

func NewNoopCollectionStore() CollectionStore

func NewPostgresCollectionStore(db *sql.DB, opts ...indexjobs.StoreOption) CollectionStore

type Deps ¶

type Deps struct {
	AssetStore         AssetStore
	ShareStore         ShareStore
	VersionStore       VersionStore
	CollectionStore    CollectionStore
	ThreadStore        ThreadStore
	KnowledgePageStore knowledgepage.Store
	// RestoreBuiltinPages un-hides the operator-hidden built-in knowledge pages
	// and reconciles them to the running release, returning how many came back
	// (#1390). Wired by the composition root (the reconcile lives in an
	// internal seam this package cannot import); nil leaves the route
	// unregistered.
	RestoreBuiltinPages func(ctx context.Context) (int, error)
	// KnowledgePageDedupThreshold is the create-time duplicate-gate threshold (#705)
	// the REST create path shares with the MCP apply path. 0 disables the gate. The
	// platform resolves it (default/disabled) before wiring; the handler treats it as
	// final.
	KnowledgePageDedupThreshold float64
	S3Client                    S3Client
	S3Bucket                    string
	PublicBaseURL               string
	RateLimit                   RateLimitConfig
	// RateLimitResolver attributes the client IP for the public viewer's
	// rate limiter with trusted-proxy awareness (#904). nil yields the safe
	// trust-none default (direct peer address; X-Forwarded-For ignored), so an
	// attacker cannot mint unlimited per-IP buckets with a spoofed header.
	RateLimitResolver  *ratelimit.Resolver
	OIDCEnabled        bool
	AdminRoles         []string // roles that grant admin access in the portal
	PromptStore        PromptStore
	PromptRegistrar    PromptRegistrar
	PromptInfoProvider PromptInfoProvider
	AuditMetrics       AuditMetrics
	// SessionViewer reads sessions off the audit log. The portal serves it
	// scoped to the caller: the same read model the operator surface uses,
	// narrowed to the sessions the reader ran themselves. nil (no database)
	// leaves the routes unregistered.
	SessionViewer SessionViewer
	// CallCatalog is the record of the data-access calls the caller made
	// (#1321), served scoped to them. nil (no database) leaves the routes
	// unregistered.
	CallCatalog CallCatalog
	// CallPromoter publishes a record its owner chose to publish. nil leaves
	// the promote and reject actions unregistered.
	CallPromoter      *CallPromoter
	InsightStore      InsightReader
	ChangesetReader   ChangesetReader
	MemoryStore       MemoryReader
	MemoryWriter      MemoryWriter
	EmbeddingProvider embedding.Provider
	PersonaResolver   PersonaResolver
	// PortalAppAdmits reports whether a signed-in caller holding these roles
	// would be served the portal application at /portal/ — the SPA is mounted
	// in this build, and the shell's own gate admits the account. The public
	// share viewer asks before sending a signed-in reader there instead of
	// rendering the public page (#1473).
	//
	// Supplied by the composition root, the only place that knows both facts.
	// nil means no portal application is served for this handler, and no share
	// is ever redirected.
	PortalAppAdmits func(roles []string) bool
	// SearchRouter backs GET /api/v1/portal/search, the REST surface over the
	// unified knowledge federation. nil disables the endpoint (no searchable
	// source configured).
	SearchRouter SearchRouter
	// DataHubRegistrar, when set, registers the portal DataHub Catalog and Context
	// Docs REST routes (#718) onto the portal mux. It is provided by cmd wiring
	// (internal/httpserver/datahubapi.Handler.Register) so the DataHub feature lives in its
	// own package; nil leaves the /api/v1/portal/datahub/* routes unregistered.
	DataHubRegistrar func(*http.ServeMux)
	// OnAssetDeleted, when set, is called after an asset is deleted so the
	// tables registered over its file are dropped (#1327). A delete is soft
	// and leaves the object in place, so a table still pointing at it would
	// keep serving rows out of a schema the owner can no longer see. Nil on a
	// deployment that cannot register tables.
	OnAssetDeleted func(context.Context, string)
	// OnAssetRevised, when set, is called after a new version of an asset's
	// content is written -- an edit or a revert -- so the tables registered
	// over its file follow it (#1536). It returns what happened to each table,
	// which the response carries: a following table now reads the new version,
	// a pinned one is behind it. The write is never failed by it. Nil on a
	// deployment that cannot register tables.
	OnAssetRevised func(ctx context.Context, id string, version int) []string
	// CatalogLabeler names the DataHub governance entities a knowledge page
	// references (#1159), so a citation to a glossary term, a tag, or a domain
	// renders as its display name instead of the generated key inside its URN.
	// It is provided by the same cmd wiring as DataHubRegistrar; nil (no DataHub
	// connection) falls back to the name derivable from the URN itself.
	CatalogLabeler CatalogLabeler
	// MentionResolver filters the @-mentions written in a thread comment to
	// the people who can open the thread's target (#627). nil disables
	// mentions (no database): tokens stay ordinary text and notify nobody.
	MentionResolver MentionResolver
	// Authenticator resolves a logged-in user from a public (unauthenticated)
	// request so the public viewer can auto-promote a signed-in viewer to a
	// derived share. Optional; nil disables auto-promote.
	Authenticator *Authenticator
	// Platform brand (far right of public viewer header)
	BrandName string // display name (default: "MCP Data Platform")
	// BrandLogoHTML is the header logo as markup: an <img> element sourced at
	// the configured logo URL, or an inline <svg> an MCP App config named.
	// Empty renders the bundled default icon.
	BrandLogoHTML string
	BrandURL      string // link URL (e.g., "https://plexara.io"); empty = no link

	// Implementor brand (far left of public viewer header, optional)
	ImplementorName string // display name (e.g., "ACME Corp"); empty = hidden
	// ImplementorLogoHTML is the logo as markup, on the same terms as
	// BrandLogoHTML; empty = hidden.
	ImplementorLogoHTML string
	ImplementorURL      string // link URL; empty = no link

	// Notifier receives share and thread trigger events (issue #631). nil
	// disables email notifications; implementations log their own failures
	// and never fail the originating request.
	Notifier Notifier
	// ShareGuest is the guest access path for email shares (#1001): branded
	// denial pages, one-time view links, and guest sessions. nil keeps the
	// pre-#1001 plain-text denials and registers no guest routes.
	ShareGuest *shareguest.Service
	// NotificationRegistrar, when set, registers the self-scoped
	// notification-preference REST routes onto the portal's authenticated
	// mux (the DataHubRegistrar pattern): the feature lives with the
	// notification substrate, not in this package. nil leaves the
	// /api/v1/portal/notification-prefs routes unregistered.
	NotificationRegistrar func(*http.ServeMux)

	// ContentRefs records the managed resources an asset's content
	// references (#1474). Every content read this handler serves rewrites the
	// declared mcp:// URIs into the serving URL below; nil (no database, or no
	// managed-resource layer) leaves content served exactly as stored, which
	// is what an asset with no references gets anyway.
	//
	// Its type is not aliased into this package's namespace, unlike the store
	// contracts around it: pkg/portal sits exactly at the exported-surface
	// budget, and this is an implementation package rather than a supported
	// import surface (docs/library/stability.md), so the composition root
	// names the internal type directly.
	ContentRefs assetrefs.Store
	// ResourceReader and ResourceBlobs read a referenced resource's metadata
	// and its bytes. They are the managed-resource layer's store and object
	// client, not the portal's: a reference points at a resource, which lives
	// in its own bucket. Either nil leaves the serving route unregistered.
	ResourceReader assetrefs.Resources
	ResourceBlobs  assetrefs.BlobReader
	// ResourceS3Bucket is the bucket managed-resource blobs live in.
	ResourceS3Bucket string

	// Producers is the record of what wrote each asset and each managed
	// resource (#1569), read by the producer routes from the target end. Nil
	// (no database) leaves those routes unregistered. Its type is named
	// directly for the reason ContentRefs's is.
	Producers producedby.Store
	// ScriptNames resolves a script producer to the name it carries now, and
	// so to whether it still exists at all. Nil reports every script producer
	// as existing.
	ScriptNames producerapi.ScriptNames
}

Deps holds dependencies for the portal handler.

type Handler ¶

type Handler struct {
	// contains filtered or unexported fields
}

Handler provides portal REST API endpoints.

func NewHandler(deps Deps, authMiddle func(http.Handler) http.Handler) *Handler

func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request)

type InsightReader ¶ added in v0.36.0

type InsightReader interface {
	List(ctx context.Context, filter knowledge.InsightFilter) ([]knowledge.Insight, int, error)
	Stats(ctx context.Context, filter knowledge.InsightFilter) (*knowledge.InsightStats, error)
	// Get returns a single insight by id, used to surface a knowledge page's
	// source-insight lineage (#678). A drained or deleted insight returns an error.
	Get(ctx context.Context, id string) (*knowledge.Insight, error)
}

InsightReader provides read-only access to user insights.

type InsightSearcher ¶ added in v1.80.0

type InsightSearcher = knowledge.InsightSearcher

InsightSearcher is the optional relevance-search capability of the insight store, declared canonically in the knowledge package next to its query and result types. The knowledge-search route (and the recall_insight tool) are registered only when the wired InsightStore satisfies it; the memory-backed adapter does, the legacy separate-table store does not.

type MemoryReader ¶ added in v1.52.0

type MemoryReader interface {
	List(ctx context.Context, filter memory.Filter) ([]memory.Record, int, error)
	HybridSearch(ctx context.Context, q memory.HybridQuery) ([]memory.ScoredRecord, error)
	LexicalSearch(ctx context.Context, q memory.LexicalQuery) ([]memory.ScoredRecord, error)
}

MemoryReader provides read-only access to user memory records. The search methods back the portal's per-user "my knowledge" search: both queries are scoped to the caller via CreatedBy server-side, so a user can never search another user's records.

type MemoryWriter ¶ added in v1.88.0

type MemoryWriter = feedbackapi.MemoryWriter

MemoryWriter inserts memory records. It backs the "capture feedback as an insight" path: a reviewer turns a feedback thread into a pending, knowledge-dimension memory record that enters the apply_knowledge review queue. The full memory.Store satisfies it; the portal only needs Insert.

type MentionResolver ¶ added in v1.114.0

type MentionResolver = feedbackapi.MentionResolver

MentionResolver returns the addresses a comment body delivers an @-mention to on a thread target: the names written in the body, minus the author's own address, filtered to the people who can open that target. Implemented by pkg/portal/mention, which the composition root injects; a nil resolver disables mentions (no database), leaving every token ordinary text.

type Notifier ¶ added in v1.103.0

type Notifier interface {
	// NotifyShare fires after a successful direct-share insert.
	NotifyShare(ctx context.Context, share *Share, ev ShareEvent)
	// NotifyThreadEvent fires after a successful thread create or event
	// append. thread carries the target reference; body is the comment text;
	// mentioned carries the @-mentions the body delivers, already filtered to
	// people who can open the target (#627). Mentioned people are notified as
	// mentions -- their own category, which a recipient can keep on while
	// muting general thread activity -- and are left out of the general
	// notification, so one comment never sends the same person two emails.
	NotifyThreadEvent(ctx context.Context, thread *Thread, actorEmail, body string, mentioned []string)
}

Notifier receives the portal's notification trigger events (issue #631): direct shares and feedback-thread activity. Implementations queue email notifications and must never fail the originating request -- both methods are fire-and-forget, logging their own errors. The share kind is one of "asset", "collection", or "prompt". A nil Notifier disables notifications.

The implementation lives with the notification delivery substrate (internal/platform/notifydelivery); portal only fires the events.

type PersonaInfo ¶ added in v0.36.0

type PersonaInfo struct {
	Name  string
	Tools []string // resolved tool names from Allow/Deny patterns
}

PersonaInfo holds resolved persona details for the current user.

type PersonaResolver ¶ added in v0.36.0

type PersonaResolver func(roles []string) *PersonaInfo

PersonaResolver resolves a user's roles to their persona info.

type PromptInfoProvider ¶ added in v1.51.0

type PromptInfoProvider interface {
	AllPromptInfos() []registry.PromptInfo
}

PromptInfoProvider returns metadata about system-registered prompts.

type PromptRegistrar ¶ added in v1.51.0

type PromptRegistrar interface {
	RegisterRuntimePrompt(p *prompt.Prompt)
	UnregisterRuntimePrompt(name string)
}

PromptRegistrar registers/unregisters prompts with the live MCP server.

type PromptStore ¶ added in v1.51.0

type PromptStore = prompt.Store

PromptStore provides prompt persistence for the portal: exactly the prompt store contract, aliased so portal deps read naturally.

type Provenance ¶

type Provenance = portaldomain.Provenance

Provenance records which calls produced an asset.

type ProvenanceCall ¶ added in v1.121.0

type ProvenanceCall = portaldomain.ProvenanceCall

ProvenanceCall is one captured call in a capture's snapshot.

type ProvenanceCapture ¶ added in v1.121.0

type ProvenanceCapture = portaldomain.ProvenanceCapture

ProvenanceCapture is one recording of the calls an asset was built from.

type ProvenanceCapturer ¶ added in v1.121.0

type ProvenanceCapturer = portaldomain.ProvenanceCapturer

ProvenanceCapturer resolves a write's sources into a capture.

type ProvenanceRequest ¶ added in v1.121.0

type ProvenanceRequest = portaldomain.ProvenanceRequest

ProvenanceRequest asks for a capture of the calls behind one asset write.

type ProvenanceToolCall ¶

type ProvenanceToolCall = portaldomain.ProvenanceToolCall

ProvenanceToolCall records a single tool invocation in the provenance chain. Pre-#1320 shape, still read from assets written under it.

type RateLimitConfig ¶

type RateLimitConfig = viewerlimit.Config

RateLimitConfig aliases the public viewer rate limiter's config, which lives in internal/portal/viewerlimit with the implementation. The alias keeps the portal's public API spelling stable for existing callers.

type S3Client ¶

type S3Client = portaldomain.S3Client

S3Client abstracts the S3 operations needed by the portal toolkit.

type ScoredAsset ¶ added in v1.81.0

type ScoredAsset = portaldomain.ScoredAsset

ScoredAsset pairs an asset with its relevance score in [0,1].

type ScoredCollection ¶ added in v1.81.0

type ScoredCollection = portaldomain.ScoredCollection

ScoredCollection pairs a collection with its relevance score in [0,1].

type SearchCaller ¶ added in v1.88.0

type SearchCaller struct {
	UserID  string
	Email   string
	Persona string
}

SearchCaller is the resolved requester identity per-user providers scope on.

type SearchCoverage ¶ added in v1.88.0

type SearchCoverage struct {
	Source   string `json:"source"`
	Matched  int    `json:"matched"`
	Shown    int    `json:"shown"`
	Withheld int    `json:"withheld,omitempty"`
}

SearchCoverage reports, per source, how many records matched versus how many are shown, the anti-tunnel signal that breadth exists beyond the display set, plus how many the caller's persona hid (#1108) so "nothing matched" and "matches you may not see" render differently.

type SearchGroup ¶ added in v1.88.0

type SearchGroup struct {
	Source string      `json:"source"`
	Hits   []SearchHit `json:"hits"`
}

SearchGroup is one source's slice of the balanced display set.

type SearchHit ¶ added in v1.88.0

type SearchHit struct {
	Text       string   `json:"text"`
	Source     string   `json:"source"`
	Ref        string   `json:"ref"`
	Score      float64  `json:"score"`
	Status     string   `json:"status,omitempty"`
	EntityURNs []string `json:"entity_urns,omitempty"`
	Dimension  string   `json:"dimension,omitempty"`
}

SearchHit is one matched record. The JSON shape matches the MCP search tool's hit so the portal and agent surfaces render identical results.

type SearchQuery ¶ added in v1.88.0

type SearchQuery struct {
	Intent     string
	EntityURNs []string
	Status     string
	Sources    []string
	Caller     SearchCaller
	Limit      int
}

SearchQuery is one unified search. Intent is natural-language text; EntityURNs is an exact entity-keyed lookup; at least one is set. Caller is the per-user scope boundary. These fields mirror knowledge.Query; the adapter in main maps between them.

type SearchResult ¶ added in v1.88.0

type SearchResult struct {
	Groups         []SearchGroup
	Coverage       []SearchCoverage
	Ranking        string
	UnknownSources []string
	// WithheldNotice explains, in one line, results the caller's persona hid
	// because they belong to connections it is not granted (#1108). Empty when
	// nothing was withheld. The adapter builds it from the router's coverage so
	// the portal and the MCP search tool render identical copy.
	WithheldNotice string
}

SearchResult is the grouped-by-source response. It mirrors knowledge.Result.

type SearchRouter ¶ added in v1.88.0

type SearchRouter interface {
	Search(ctx context.Context, q SearchQuery) (SearchResult, error)
}

SearchRouter is the unified knowledge-search federation behind the portal's GET /api/v1/portal/search endpoint. It is a portal-local interface (rather than a direct dependency on pkg/knowledge) because that package already imports pkg/portal for the asset and knowledge-page stores; importing it back would form a cycle. main wires a thin adapter over *knowledge.Router that maps to these types, so the REST surface returns the same grouped, scope-enforced result set as the MCP search tool.

type SessionViewer ¶ added in v1.121.0

type SessionViewer = sessionapi.Store

SessionViewer reads the audit-derived session record. Aliased to the seam's declaration rather than restated so the two cannot drift, and identical to the operator surface's alias: there is one read model, and the portal's face of it differs only in being scoped to the caller.

type Share ¶

type Share = portaldomain.Share

Share represents a share link for an asset, collection, or prompt.

type ShareAccessMode ¶ added in v1.104.0

type ShareAccessMode = portaldomain.ShareAccessMode

ShareAccessMode determines who may open a share token.

type ShareEvent ¶ added in v1.118.0

type ShareEvent struct {
	// Kind is one of "asset", "collection", or "prompt".
	Kind string
	// ItemID and ItemTitle identify the shared item.
	ItemID    string
	ItemTitle string
	// Message is the sharer's plain-text note, already validated by
	// ValidateShareMessage. Empty means no note.
	Message string
}

ShareEvent carries what a share notification is about: the item shared and the sharer's optional personal note.

The note lives here rather than on Share because it is not part of the share: it is never persisted, never shown in the viewer, and reaches only the one email the share produces. A share created with notify off carries no note anywhere.

type ShareKeep ¶ added in v1.86.0

type ShareKeep = feedbackapi.ShareKeep

ShareKeep decides whether a share grant counts toward a gathered target set. KeepEditorShares is the "I can act on it" scope (worklist, MCP agent); KeepAnyShare is the "I can view it" scope (activity feed).

type ShareOrigin ¶ added in v1.84.0

type ShareOrigin = portaldomain.ShareOrigin

ShareOrigin records how a share came to exist.

type SharePermission ¶ added in v1.42.0

type SharePermission = portaldomain.SharePermission

SharePermission defines the access level for a share recipient.

type ShareStore ¶

type ShareStore = portaldomain.ShareStore

ShareStore persists and queries share links for assets, collections, and prompts.

func NewNoopShareStore() ShareStore

func NewPostgresShareStore(db *sql.DB) ShareStore

type ShareSummary ¶ added in v0.37.0

type ShareSummary = portaldomain.ShareSummary

ShareSummary indicates what kinds of active shares exist for an asset.

type SharedAsset ¶

type SharedAsset = portaldomain.SharedAsset

SharedAsset combines an Asset with share metadata for "shared with me" results.

type SharedCollection ¶ added in v1.47.0

type SharedCollection = portaldomain.SharedCollection

SharedCollection combines a Collection with share metadata.

type SharedPrompt ¶ added in v1.81.0

type SharedPrompt struct {
	Prompt     prompt.Prompt                `json:"prompt"`
	ShareID    string                       `json:"share_id"`
	SharedBy   string                       `json:"shared_by"`
	SharedAt   time.Time                    `json:"shared_at"`
	Permission portaldomain.SharePermission `json:"permission"`
}

SharedPrompt is a prompt shared with the current user, with share metadata, for the "Shared With Me" listing.

type SharedPromptRef ¶ added in v1.81.0

type SharedPromptRef = portaldomain.SharedPromptRef

SharedPromptRef references a prompt shared with a user along with share metadata.

type SharedTargetRef ¶ added in v1.121.0

type SharedTargetRef = portaldomain.SharedTargetRef

SharedTargetRef is one share grant to a named recipient, of any artifact kind.

type TargetGatherer ¶ added in v1.86.0

type TargetGatherer = feedbackapi.TargetGatherer

TargetGatherer gathers the asset/collection ids a single user can reach, bundling the stores and identity so callers (REST worklist/activity feed, the manage_feedback MCP tool) build it once and ask for asset or collection ids with the desired share scope.

type Thread ¶ added in v1.84.0

type Thread = threads.Thread

Thread is re-exported from pkg/portal/threads.

type ThreadEvent ¶ added in v1.84.0

type ThreadEvent = threads.ThreadEvent

ThreadEvent is re-exported from pkg/portal/threads.

type ThreadFilter ¶ added in v1.84.0

type ThreadFilter = threads.ThreadFilter

ThreadFilter is re-exported from pkg/portal/threads.

type ThreadStore ¶ added in v1.84.0

type ThreadStore = threads.ThreadStore

ThreadStore is re-exported from pkg/portal/threads.

type ThreadUpdate ¶ added in v1.84.0

type ThreadUpdate = threads.ThreadUpdate

ThreadUpdate is re-exported from pkg/portal/threads.

type ThreadWithMeta ¶ added in v1.84.0

type ThreadWithMeta = threads.ThreadWithMeta

ThreadWithMeta is re-exported from pkg/portal/threads.

type User ¶

type User = access.User

User holds information about the authenticated portal user. It is defined with the authorization core because it is the subject of every permission check the portal makes.

func GetUser(ctx context.Context) *User

type ValidationResponse ¶ added in v1.84.0

type ValidationResponse = threads.ValidationResponse

ValidationResponse is re-exported from pkg/portal/threads.

type VersionStore ¶ added in v1.43.0

type VersionStore = portaldomain.VersionStore

VersionStore persists and queries asset version history.

func NewNoopVersionStore() VersionStore

func NewPostgresVersionStore(db *sql.DB, s3Client S3Client, maxVersions *int, producers producedby.Store) VersionStore