personastore

type Definition struct {
	Name        string   `json:"name"`
	DisplayName string   `json:"display_name"`
	Description string   `json:"description,omitempty"`
	Roles       []string `json:"roles"`
	ToolsAllow  []string `json:"tools_allow"`
	ToolsDeny   []string `json:"tools_deny"`
	ConnsAllow  []string `json:"connections_allow,omitempty"`
	ConnsDeny   []string `json:"connections_deny,omitempty"`
	// APIRoutes are the per-(connection, method, path) rules for api-kind
	// connections. Persisted so a persona edited in the portal expresses
	// everything a file persona can; before it was stored, saving a
	// persona through the admin API dropped the rules its file config
	// gave it (issue #1479).
	APIRoutes []persona.APIRouteRule   `json:"api_routes,omitempty"`
	Context   persona.ContextOverrides `json:"context"`
	Priority  int                      `json:"priority"`
	// ServiceAccount marks the persona an automated caller signs in under:
	// its calls are audited but not cataloged (#1980).
	ServiceAccount bool `json:"service_account"`
	// Portal is what the persona's people may do in the portal (#2225); a
	// field it leaves unset resolves from the persona's tools at load.
	Portal persona.PortalAccess `json:"portal"`
	// External marks the persona for people outside the organization (#2092).
	External bool `json:"external"`
	// AllowSharing lets the persona's people share what they own (#2241).
	// The column defaults true, which is what every persona stored before it
	// could do.
	AllowSharing bool      `json:"allow_sharing"`
	CreatedBy    string    `json:"created_by"`
	UpdatedAt    time.Time `json:"updated_at"`
}

type NoopStore struct{}

type PostgresStore struct {
	// contains filtered or unexported fields
}

type Store interface {
	List(ctx context.Context) ([]Definition, error)
	Get(ctx context.Context, name string) (*Definition, error)
	Set(ctx context.Context, def Definition) error
	Delete(ctx context.Context, name string) error
}