security

Aug 13, 2026

retracted

Changes in this version

+ type ConfirmationIntentControlStore interface

+ ConsumeConfirmationIntentRecord func(context.Context, string, sessionctx.SessionScope, time.Time) (ConfirmationIntentRecord, error)

+ FinalizeSessionConfirmationIntentRevocation func(context.Context, sessionctx.SessionScope, string) error

+ ListConfirmationIntentRecords func(context.Context, string) ([]ConfirmationIntentRecord, error)

+ PutConfirmationIntentRecord func(context.Context, ConfirmationIntentRecord, time.Time, ...) error

+ RejectConfirmationIntentRecord func(context.Context, RejectConfirmationIntentRequest) (ConfirmationIntentRecord, error)

+ RevokePluginConfirmationIntentRecords func(context.Context, string, string) (int, error)

+ RevokeSessionConfirmationIntentRecords func(context.Context, sessionctx.SessionScope, string, int) (int, error)

type ConfirmationIntentStore

+ func NewControlConfirmationIntentStore(backend ConfirmationIntentControlStore, options ConfirmationIntentStoreOptions) (ConfirmationIntentStore, error)

type ErrorCode

+ const ErrExecutionBlocked

+ const ErrExecutionNotCancelable

+ const ErrExecutionNotFound

Aug 5, 2026

Changes in this version

type ErrorCode

+ const ErrInstallInterrupted

+ const ErrInstallStateConflict

+ const ErrInternalFailure

+ const ErrReleaseAssetIntegrity

+ const ErrReleaseAssetMissing

+ const ErrReleaseNetwork

+ const ErrReleaseTimeout

Jul 26, 2026

Changes in this version

type ErrorCode

+ const ErrOperationRateLimited

Jul 21, 2026

Changes in this version

+ const DefaultMaxConfirmationSessionRevocations

+ const DefaultMaxPendingConfirmationIntents

+ const DefaultMaxPendingConfirmationIntentsPerOwnerPlugin

+ const DefaultMaxPendingConfirmationIntentsPerSession

+ const HardMaxConfirmationSessionRevocations

+ const HardMaxPendingConfirmationIntents

+ const HardMaxPendingConfirmationIntentsPerOwnerPlugin

+ const HardMaxPendingConfirmationIntentsPerSession

+ var ErrConfirmationIntentCapacity = errors.New("plugin confirmation intent capacity is exhausted")

type ConfirmationIntentStore

+ Durable func() bool

+ FinalizeSessionConfirmationRevocation func(ctx context.Context, req FinalizeSessionConfirmationRevocationRequest) error

+ RevokeSessionConfirmationIntents func(ctx context.Context, req RevokeSessionConfirmationIntentsRequest) (int, error)

+ type ConfirmationIntentStoreOptions struct

+ MaxPerOwnerPlugin int

+ MaxPerSession int

+ MaxSessionRevocations int

+ MaxTotal int

type ConsumeConfirmationIntentRequest

+ SessionScope sessionctx.SessionScope

type ErrorCode

+ const ErrRuntimeContractMismatch

+ const ErrSessionFenceCapacity

+ const ErrSessionRevoked

+ const ErrSessionTeardownIncomplete

+ type FinalizeSessionConfirmationRevocationRequest struct

+ SessionScope sessionctx.SessionScope

+ TeardownOperationID string

type MemoryConfirmationIntentStore

+ func NewMemoryConfirmationIntentStoreWithOptions(options ConfirmationIntentStoreOptions) (*MemoryConfirmationIntentStore, error)

+ func (*MemoryConfirmationIntentStore) Durable() bool

+ func (s *MemoryConfirmationIntentStore) FinalizeSessionConfirmationRevocation(_ context.Context, req FinalizeSessionConfirmationRevocationRequest) error

+ func (s *MemoryConfirmationIntentStore) RevokeSessionConfirmationIntents(_ context.Context, req RevokeSessionConfirmationIntentsRequest) (int, error)

type RevokePluginConfirmationIntentsRequest

+ OwnerEnvHash string

+ type RevokeSessionConfirmationIntentsRequest struct

+ Now time.Time

+ SessionScope sessionctx.SessionScope

+ TeardownOperationID string

type SQLiteConfirmationIntentStore

+ func NewSQLiteConfirmationIntentStoreWithOptions(ctx context.Context, path string, options ConfirmationIntentStoreOptions) (*SQLiteConfirmationIntentStore, error)

+ func (*SQLiteConfirmationIntentStore) Durable() bool

+ func (s *SQLiteConfirmationIntentStore) FinalizeSessionConfirmationRevocation(ctx context.Context, req FinalizeSessionConfirmationRevocationRequest) error

+ func (s *SQLiteConfirmationIntentStore) RevokeSessionConfirmationIntents(ctx context.Context, req RevokeSessionConfirmationIntentsRequest) (int, error)

Jul 19, 2026

Changes in this version

+ func ValidatePolicy(record PolicyRecord) error

+ func ValidatePolicyEvaluationRequest(req EvaluatePolicyRequest) error

+ func ValidatePolicyID(pluginInstanceID string) error

type ConfirmationScope

+ OwnerEnvHash string

type ErrorCode

+ const ErrActionDenied

+ const ErrAdapterFailure

+ const ErrAuthorizationRevisionMismatch

+ const ErrBindingRevisionMismatch

+ const ErrBridgeCancelled

+ const ErrCSRFInvalid

+ const ErrFeatureNotConfigured

+ const ErrManagementRevisionMismatch

+ const ErrOriginDenied

+ const ErrOwnerScopeMismatch

+ const ErrSecretScopeMismatch

+ const ErrStorageScopeMismatch

+ const ErrStreamDeliveryInvalid

+ const ErrSurfaceQuiesceTimeout

+ const ErrUIProtocolUnsupported

+ const ErrUIProtocolViolation

+ const ErrValuesRevisionMismatch

type PolicyEvaluation

+ func Evaluate(policy *PolicyRecord, req EvaluatePolicyRequest) (PolicyEvaluation, error)

type PolicyRecord

+ func ClonePolicy(record PolicyRecord) PolicyRecord

+ func NewPolicy(req PutPolicyRequest) (PolicyRecord, error)

+ func NormalizePolicy(record PolicyRecord) PolicyRecord

type RejectConfirmationIntentRequest

+ OwnerEnvHash string

Jul 15, 2026

Changes in this version

type ErrorCode

+ const ErrWorkerError

Jul 14, 2026

Changes in this version

+ var ErrConfirmationIntentScopeMismatch = errors.New("plugin confirmation intent scope mismatch")

type ConfirmationIntentRecord

+ Scope ConfirmationScope

type ConfirmationIntentStore

+ RejectConfirmationIntent func(ctx context.Context, req RejectConfirmationIntentRequest) (ConfirmationIntentRecord, error)

+ type ConfirmationScope struct

+ ActiveFingerprint string

+ ManagementRevision uint64

+ OwnerSessionHash string

+ OwnerUserHash string

+ PolicyRevision uint64

+ RevokeEpoch uint64

+ SessionChannelIDHash string

+ TargetDescriptorSHA256 string

type ErrorCode

+ const ErrCapabilityError

type MemoryConfirmationIntentStore

+ func (s *MemoryConfirmationIntentStore) RejectConfirmationIntent(_ context.Context, req RejectConfirmationIntentRequest) (ConfirmationIntentRecord, error)

type PutConfirmationIntentRequest

+ Scope ConfirmationScope

+ type RejectConfirmationIntentRequest struct

+ ActiveFingerprint string

+ BridgeChannelID string

+ ConfirmationID string

+ ManagementRevision uint64

+ Now time.Time

+ OwnerSessionHash string

+ OwnerUserHash string

+ PluginInstanceID string

+ PolicyRevision uint64

+ RevokeEpoch uint64

+ SessionChannelIDHash string

+ SurfaceInstanceID string

type SQLiteConfirmationIntentStore

+ func (s *SQLiteConfirmationIntentStore) RejectConfirmationIntent(ctx context.Context, req RejectConfirmationIntentRequest) (ConfirmationIntentRecord, error)

Jul 12, 2026

Changes in this version

+ const DefaultMaxPendingConfirmationIntentsPerPlugin

+ const PolicyDenyReasonMethodDenied

+ const PolicyDenyReasonPermissionNotAllowed

+ var ErrConfirmationIntentExpired = errors.New("plugin confirmation intent expired")

+ var ErrConfirmationIntentNotFound = errors.New("plugin confirmation intent not found")

+ var ErrInvalidConfirmationIntent = errors.New("plugin confirmation intent is invalid")

+ var ErrInvalidPolicy = errors.New("plugin security policy is invalid")

+ var ErrPolicyDenied = errors.New("plugin security policy denied request")

+ var ErrPolicyNotFound = errors.New("plugin security policy not found")

+ type ConfirmationIntentRecord struct

+ BridgeChannelID string

+ ConfirmationID string

+ ConfirmationTokenID string

+ ExpiresAt time.Time

+ IssuedAt time.Time

+ Method string

+ PlanHash string

+ PluginID string

+ PluginInstanceID string

+ RequestHash string

+ SurfaceInstanceID string

+ type ConfirmationIntentStore interface

+ ConsumeConfirmationIntent func(ctx context.Context, req ConsumeConfirmationIntentRequest) (ConfirmationIntentRecord, error)

+ ListConfirmationIntents func(ctx context.Context, req ListConfirmationIntentsRequest) ([]ConfirmationIntentRecord, error)

+ PutConfirmationIntent func(ctx context.Context, req PutConfirmationIntentRequest) (ConfirmationIntentRecord, error)

+ RevokePluginConfirmationIntents func(ctx context.Context, req RevokePluginConfirmationIntentsRequest) (int, error)

+ type ConsumeConfirmationIntentRequest struct

+ ConfirmationID string

+ Now time.Time

+ type ErrorCode string

+ const ErrAssetSessionInvalid

+ const ErrAssetTicketInvalid

+ const ErrBridgeDisposed

+ const ErrBridgeHandshakeFailed

+ const ErrBridgeHandshakeRequired

+ const ErrBridgeTimeout

+ const ErrCSRFRequired

+ const ErrConfirmationInvalid

+ const ErrConfirmationRejected

+ const ErrConfirmationRequired

+ const ErrContractMismatch

+ const ErrDisabled

+ const ErrDisabledByPolicy

+ const ErrGatewayTokenChannelMismatch

+ const ErrGatewayTokenInvalid

+ const ErrGatewayTokenReplayed

+ const ErrGrantInvalid

+ const ErrInvalidRequest

+ const ErrJSONLimitExceeded

+ const ErrLeaseInvalid

+ const ErrLeaseReplayed

+ const ErrManifestInvalid

+ const ErrNetworkRateLimited

+ const ErrNetworkTargetDenied

+ const ErrOperationBlocked

+ const ErrOperationNotCancelable

+ const ErrOperationNotFound

+ const ErrPackageInvalid

+ const ErrPackagePathForbidden

+ const ErrPackageTooLarge

+ const ErrPermissionDenied

+ const ErrPlatformRequestFailed

+ const ErrReleaseRefPolicyDenied

+ const ErrReleaseRefVerificationFailed

+ const ErrRetainedDataBindFailed

+ const ErrRetainedDataCleanupFailed

+ const ErrRuntimeUnavailable

+ const ErrRuntimeVersionMismatch

+ const ErrSignatureInvalid

+ const ErrStateVersionMismatch

+ const ErrStorageQuotaExceeded

+ const ErrStreamCancelled

+ const ErrStreamFailed

+ const ErrStreamTicketInvalid

+ const ErrTokenExpired

+ const ErrTokenReplay

+ const ErrTrustStateDenied

+ const ErrTrustVerificationInvalid

+ const ErrTrustVerificationRequired

+ func BridgeErrorCodes() []ErrorCode

+ func PlatformErrorCodes() []ErrorCode

+ func TypeScriptClientErrorCodes() []ErrorCode

+ type EvaluatePolicyRequest struct

+ Method string

+ PluginInstanceID string

+ RequiredPermissions []string

+ type ListConfirmationIntentsRequest struct

+ PluginInstanceID string

+ type MemoryConfirmationIntentStore struct

+ func NewMemoryConfirmationIntentStore() *MemoryConfirmationIntentStore

+ func (s *MemoryConfirmationIntentStore) ConsumeConfirmationIntent(_ context.Context, req ConsumeConfirmationIntentRequest) (ConfirmationIntentRecord, error)

+ func (s *MemoryConfirmationIntentStore) ListConfirmationIntents(_ context.Context, req ListConfirmationIntentsRequest) ([]ConfirmationIntentRecord, error)

+ func (s *MemoryConfirmationIntentStore) PutConfirmationIntent(_ context.Context, req PutConfirmationIntentRequest) (ConfirmationIntentRecord, error)

+ func (s *MemoryConfirmationIntentStore) RevokePluginConfirmationIntents(_ context.Context, req RevokePluginConfirmationIntentsRequest) (int, error)

+ type MemoryPolicyStore struct

+ func NewMemoryPolicyStore() *MemoryPolicyStore

+ func (s *MemoryPolicyStore) DeletePolicy(_ context.Context, pluginInstanceID string) error

+ func (s *MemoryPolicyStore) EvaluatePolicy(_ context.Context, req EvaluatePolicyRequest) (PolicyEvaluation, error)

+ func (s *MemoryPolicyStore) GetPolicy(_ context.Context, pluginInstanceID string) (PolicyRecord, error)

+ func (s *MemoryPolicyStore) ListPolicies(_ context.Context) ([]PolicyRecord, error)

+ func (s *MemoryPolicyStore) PutPolicy(_ context.Context, req PutPolicyRequest) (PolicyRecord, error)

+ type PolicyEvaluation struct

+ Allowed bool

+ DeniedMethod string

+ MissingPermissions []string

+ Reason string

+ type PolicyRecord struct

+ AllowedPermissions []string

+ DeniedMethods []string

+ PluginInstanceID string

+ UpdatedAt time.Time

+ type PolicyStore interface

+ DeletePolicy func(ctx context.Context, pluginInstanceID string) error

+ EvaluatePolicy func(ctx context.Context, req EvaluatePolicyRequest) (PolicyEvaluation, error)

+ GetPolicy func(ctx context.Context, pluginInstanceID string) (PolicyRecord, error)

+ ListPolicies func(ctx context.Context) ([]PolicyRecord, error)

+ PutPolicy func(ctx context.Context, req PutPolicyRequest) (PolicyRecord, error)

+ type PutConfirmationIntentRequest struct

+ BridgeChannelID string

+ ConfirmationID string

+ ConfirmationTokenID string

+ ExpiresAt time.Time

+ IssuedAt time.Time

+ MaxPendingPerPlugin int

+ Method string

+ Now time.Time

+ PlanHash string

+ PluginID string

+ PluginInstanceID string

+ RequestHash string

+ SurfaceInstanceID string

+ type PutPolicyRequest struct

+ AllowedPermissions []string

+ DeniedMethods []string

+ Now time.Time

+ PluginInstanceID string

+ type RevokePluginConfirmationIntentsRequest struct

+ Now time.Time

+ PluginInstanceID string

+ type SQLiteConfirmationIntentStore struct

+ func NewSQLiteConfirmationIntentStore(ctx context.Context, path string) (*SQLiteConfirmationIntentStore, error)

+ func (s *SQLiteConfirmationIntentStore) Close() error

+ func (s *SQLiteConfirmationIntentStore) ConsumeConfirmationIntent(ctx context.Context, req ConsumeConfirmationIntentRequest) (ConfirmationIntentRecord, error)

+ func (s *SQLiteConfirmationIntentStore) ListConfirmationIntents(ctx context.Context, req ListConfirmationIntentsRequest) ([]ConfirmationIntentRecord, error)

+ func (s *SQLiteConfirmationIntentStore) PutConfirmationIntent(ctx context.Context, req PutConfirmationIntentRequest) (ConfirmationIntentRecord, error)

+ func (s *SQLiteConfirmationIntentStore) RevokePluginConfirmationIntents(ctx context.Context, req RevokePluginConfirmationIntentsRequest) (int, error)

+ type SQLitePolicyStore struct

+ func NewSQLitePolicyStore(ctx context.Context, path string) (*SQLitePolicyStore, error)

+ func (s *SQLitePolicyStore) Close() error

+ func (s *SQLitePolicyStore) DeletePolicy(ctx context.Context, pluginInstanceID string) error

+ func (s *SQLitePolicyStore) EvaluatePolicy(ctx context.Context, req EvaluatePolicyRequest) (PolicyEvaluation, error)

+ func (s *SQLitePolicyStore) GetPolicy(ctx context.Context, pluginInstanceID string) (PolicyRecord, error)

+ func (s *SQLitePolicyStore) ListPolicies(ctx context.Context) ([]PolicyRecord, error)

+ func (s *SQLitePolicyStore) PutPolicy(ctx context.Context, req PutPolicyRequest) (PolicyRecord, error)