api

type CatalogAdmission func(context.Context, gating.Principal, CatalogEntry) (handled bool, allowed bool, err error)

type CatalogEntry struct {
	Name        string         `json:"name"`
	Resource    authz.Resource `json:"resource"`
	Actions     []string       `json:"actions"`
	GateActions []string       `json:"gateActions,omitempty"`
	// Target is an optional server-authored selection hint for a host editor.
	// It conveys no identity or allow decision; the target service reauthorizes.
	Target map[string]string `json:"target,omitempty"`
	// Context is supplied by the trusted catalog provider for an optional
	// host admission check. It is never serialized to HTTP/MCP clients.
	Context any `json:"-"`
}

type CatalogFunc func(context.Context) ([]CatalogEntry, error)

type CatalogInput struct {
	JWT *jwt.Claims `parameter:"JWT,kind=header,in=Authorization,dataType=string" codec:"JwtClaim" json:"-"`
}

type CatalogOutput struct {
	Resources []CatalogEntry `json:"resources"`
}

type CatalogProvider interface {
	List(context.Context) ([]CatalogEntry, error)
}

type CheckInput struct {
	JWT       *jwt.Claims     `parameter:"JWT,kind=header,in=Authorization,dataType=string" codec:"JwtClaim" json:"-"`
	Resource  authz.Resource  `parameter:"Resource,kind=body,in=resource,required=true" json:"resource"`
	Action    string          `parameter:"Action,kind=body,in=action,required=true" json:"action"`
	Selection *[]authz.Entity `parameter:"Selection,kind=body,in=selection" json:"selection,omitempty"`
}

type Components struct {
	Catalog     xdatly.Component[CatalogInput, CatalogOutput]        `` /* 151-byte string literal not displayed */
	Check       xdatly.Component[CheckInput, DecisionOutput]         `` /* 156-byte string literal not displayed */
	Get         xdatly.Component[PolicyInput, PolicyOutput]          `` /* 145-byte string literal not displayed */
	Context     xdatly.Component[PolicyInput, PolicyContextOutput]   `` /* 167-byte string literal not displayed */
	Create      xdatly.Component[WriteInput, PolicyOutput]           `` /* 157-byte string literal not displayed */
	Replace     xdatly.Component[WriteInput, PolicyOutput]           `` /* 161-byte string literal not displayed */
	GateCheck   xdatly.Component[GateCheckInput, GateDecisionOutput] `` /* 149-byte string literal not displayed */
	GateGet     xdatly.Component[GateInput, GateDocumentOutput]      `` /* 141-byte string literal not displayed */
	GateContext xdatly.Component[GateInput, GateContextOutput]       `` /* 157-byte string literal not displayed */
	GateReplace xdatly.Component[GateWriteInput, GateDocumentOutput] `` /* 157-byte string literal not displayed */
}

type DecisionOutput struct {
	Decision authz.Decision `json:"decision"`
}

type GateCheckInput struct {
	JWT      *jwt.Claims    `parameter:"JWT,kind=header,in=Authorization,dataType=string" codec:"JwtClaim" json:"-"`
	Resource authz.Resource `parameter:"Resource,kind=body,in=resource,required=true" json:"resource"`
	Action   string         `parameter:"Action,kind=body,in=action,required=true" json:"action"`
	Selected []authz.Entity `parameter:"Selected,kind=body,in=selected" json:"selected,omitempty"`
}

type GateContextOutput struct {
	Context gating.EditorContext `json:"context"`
}

type GateDecisionOutput struct {
	Decision gating.Decision `json:"decision"`
}

type GateDocumentOutput struct {
	Document gating.RequirementsDocument `json:"document"`
}

type GateInput struct {
	JWT      *jwt.Claims    `parameter:"JWT,kind=header,in=Authorization,dataType=string" codec:"JwtClaim" json:"-"`
	Resource authz.Resource `parameter:"Resource,kind=body,in=resource,required=true" json:"resource"`
	Action   string         `parameter:"Action,kind=body,in=action,required=true" json:"action"`
}

type GateWriteInput struct {
	JWT              *jwt.Claims         `parameter:"JWT,kind=header,in=Authorization,dataType=string" codec:"JwtClaim" json:"-"`
	Resource         authz.Resource      `parameter:"Resource,kind=body,in=resource,required=true" json:"resource"`
	Action           string              `parameter:"Action,kind=body,in=action,required=true" json:"action"`
	ExpectedRevision string              `parameter:"ExpectedRevision,kind=body,in=expectedRevision,required=true" json:"expectedRevision"`
	Requirements     gating.Requirements `parameter:"Requirements,kind=body,in=requirements,required=true" json:"requirements"`
}

type PolicyContextOutput struct {
	Context authz.EditorContext `json:"context"`
}

type PolicyInput struct {
	JWT      *jwt.Claims    `parameter:"JWT,kind=header,in=Authorization,dataType=string" codec:"JwtClaim" json:"-"`
	Resource authz.Resource `parameter:"Resource,kind=body,in=resource,required=true" json:"resource"`
}

type PolicyOutput struct {
	Document authz.Document `json:"document"`
}

type Services struct {
	Authorization    *authz.Service
	Policies         *authz.Administration
	Gates            *gating.Evaluator
	Requirements     *gating.Administration
	Catalog          CatalogProvider
	CatalogAdmission CatalogAdmission
}

type WriteInput struct {
	JWT      *jwt.Claims    `parameter:"JWT,kind=header,in=Authorization,dataType=string" codec:"JwtClaim" json:"-"`
	Document authz.Document `parameter:"Document,kind=body,in=document,required=true" json:"document"`
}