Documentation
¶
Index ¶
- func AccountProjection(mode string, provider permittedview.AccountProjection) (permittedview.AccountProjection, error)
- func BindAuthoredSources(ctx context.Context, root, owner string, templates, intents []DirectorySource, ...) ([]resources.LocalResourceBinding, error)
- func BindSources[T any](ctx context.Context, root, owner string, sources []T, ...) ([]resources.LocalResourceBinding, error)
- func BindToolfeedSources(ctx context.Context, root, owner string, sources []DirectorySource, ...) ([]resources.LocalResourceBinding, error)
- func ExecutionContext(ctx context.Context, metadata forgeservice.MetadataReadScope, ...) context.Context
- func FreshAuthority(resolve policy.AuthoritySnapshotResolver, ...) policy.AuthoritySnapshotResolver
- type AuthoredCompiler
- type DirectorySource
- type ProviderFactory
- type Providers
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AccountProjection ¶
func AccountProjection(mode string, provider permittedview.AccountProjection) (permittedview.AccountProjection, error)
AccountProjection preserves the explicit account ID vocabulary while adding only display fields supplied by a trusted verified projection.
func BindAuthoredSources ¶
func BindAuthoredSources(ctx context.Context, root, owner string, templates, intents []DirectorySource, policy resources.LocalRevisionPolicyFactory, snapshot identity.ResourceSource, playbookSources ...[]DirectorySource) ([]resources.LocalResourceBinding, error)
BindAuthoredSources composes content with the managing provider's existing revision-policy callback. It never evaluates permissions during startup.
func BindSources ¶
func BindSources[T any](ctx context.Context, root, owner string, sources []T, directory func(T) (resources.ExtensionDirectory, error), policy resources.LocalRevisionPolicyFactory, snapshot identity.ResourceSource) ([]resources.LocalResourceBinding, error)
BindSources composes a trusted startup inventory with its owning provider and optional captured source. Kind-specific loaders and namespace restrictions remain in directory; request-time revision authority remains in policy. Calling this function publishes no authority or request result cache.
func BindToolfeedSources ¶
func BindToolfeedSources(ctx context.Context, root, owner string, sources []DirectorySource, policy resources.LocalRevisionPolicyFactory, snapshot identity.ResourceSource) ([]resources.LocalResourceBinding, error)
BindToolfeedSources uses the same generic publisher and captured source as other authored kinds. Policy remains a managing-provider callback.
func ExecutionContext ¶
func ExecutionContext(ctx context.Context, metadata forgeservice.MetadataReadScope, decision executor.AuthorizationDecisionScope) context.Context
func FreshAuthority ¶
func FreshAuthority(resolve policy.AuthoritySnapshotResolver, metadata forgeservice.MetadataReadScope, decision executor.AuthorizationDecisionScope) policy.AuthoritySnapshotResolver
Component execution independently refreshes authority. Explicit metadata and decision scopes may batch pure checks, but cannot supply execution freshness.
Types ¶
type AuthoredCompiler ¶
type AuthoredCompiler interface {
Prepare(context.Context, *resources.ExtensionReader) error
Release()
}
AuthoredCompiler prepares the existing compilation in the shared snapshot's confined reader. Its lifetime ends after that startup compilation.
func AuthoredDirectories ¶
func AuthoredDirectories(templates, intents []DirectorySource, playbookSources ...[]DirectorySource) ([]resources.ExtensionDirectory, []AuthoredCompiler, error)
type DirectorySource ¶
type DirectorySource struct {
Namespace string `json:"namespace"`
Directory string `json:"directory"`
}
DirectorySource assigns an authored folder to a logical namespace. Publication does not grant identity, resource permissions, or revision selection.
type ProviderFactory ¶
type ProviderFactory func(context.Context, json.RawMessage, json.RawMessage) (Providers, error)
ProviderFactory consumes only operator-owned configuration.
type Providers ¶
type Providers struct {
// NativeWindowIdentity verifies identity only for configured static YAML reads.
// It carries no role, feature or entity authority. Protected operations use Identity.
NativeWindowIdentity func(context.Context) (gating.Principal, error)
Entitlements map[string]gating.EntitlementProvider
AccountProjection permittedview.AccountProjection
DecisionScope executor.AuthorizationDecisionScope
MetadataScope primitiveprovider.MetadataReadScope
Identity oauth.IdentityAuthority
AllowsTenant func(string) bool
EntityPermissions gating.EntityPermissionProvider
PermissionWithLease func(context.Context, authz.Facts, authz.Entity, string) (bool, time.Time, error)
}
Providers binds trusted authority interfaces. The standard HTTP adapter is configured by the operator; embedding hosts may override it.
func HTTPProviders ¶
func HTTPProviders(ctx context.Context, identityRaw, evaluationRaw json.RawMessage) (Providers, error)
HTTPProviders makes the normal executable usable without compiling an application-specific host or importing private IdP code.
Source Files
¶
Directories
¶
| Path | Synopsis |
|---|---|
|
Package reporting owns workspace reporting discovery, reload lifecycle and neutral enrichment of framework windows and view catalogs.
|
Package reporting owns workspace reporting discovery, reload lifecycle and neutral enrichment of framework windows and view catalogs. |
|
Package runtime composes operator-owned resource providers, authorization, immutable source snapshots and native window delivery for a workspace host.
|
Package runtime composes operator-owned resource providers, authorization, immutable source snapshots and native window delivery for a workspace host. |
|
internal/testmetadata
Package testmetadata holds a frozen framework artifact used to verify host source composition independently of any embedding application's UI bundle.
|
Package testmetadata holds a frozen framework artifact used to verify host source composition independently of any embedding application's UI bundle. |