releasecatalog

Documentation

Overview

Package releasecatalog reads signed release records from another MemQL installation. This integration adapter lives in the root module because its canonical SDK transport belongs to that module; integrations/go.mod cannot import the root module. Its taxonomy does not depend on its package location. Selection, scheduling and installation remain separate DSL/native operations.

Index

• Constants
• type ComponentSummary
• type Page
• type Reader
  • func New(variable, secret func(context.Context, string) (string, error)) *Reader
  • func NewSnapshot(ctx context.Context, configuration []byte, credential string) (*Reader, error)
  • func (r *Reader) Get(ctx context.Context, sourceID, candidateID, expectedCatalogDigest string) (pl.VerifiedPublishedRelease, error)
  • func (r *Reader) List(ctx context.Context, sourceID, cursor string, limit int) (Page, error)
  • func (r *Reader) Sources(ctx context.Context) ([]SourceSummary, error)
• type ReleaseSummary
• type SourceSummary

Constants

const ConfigurationVariable = "MEMQL_RELEASE_SOURCES"

Types

type ComponentSummary

type ComponentSummary struct {
	Name       string `json:"name"`
	Version    string `json:"version"`
	Repository string `json:"repository"`
	Commit     string `json:"commit"`
}

type Page

type Page struct {
	SourceID   string           `json:"sourceId"`
	Publisher  string           `json:"publisher"`
	Releases   []ReleaseSummary `json:"releases"`
	NextCursor string           `json:"nextCursor,omitempty"`
}

type Reader

type Reader struct {
	// contains filtered or unexported fields
}

Reader resolves current operator configuration for every call. It retains no per-process trust, credentials, publication evidence or installation authority.

func New

func New(variable, secret func(context.Context, string) (string, error)) *Reader

func NewSnapshot

func NewSnapshot(ctx context.Context, configuration []byte, credential string) (*Reader, error)

NewSnapshot is a native receiving-adapter port, not a public capability. The caller authenticates and versions the configuration and credential resource before construction, and reobserves those versions before acting on results. This reader owns one frozen source and credential, retaining the same SDK, role gate, TLS verification and signed-envelope verification as discovery.

func (*Reader) Get

func (r *Reader) Get(ctx context.Context, sourceID, candidateID, expectedCatalogDigest string) (pl.VerifiedPublishedRelease, error)

Get independently reads and verifies one exact selection under CURRENT source configuration. The caller receives an opaque verified value, never authority reconstructed from a browser's envelope or a serialized "verified" flag.

func (*Reader) List

func (r *Reader) List(ctx context.Context, sourceID, cursor string, limit int) (Page, error)

List reads one page, then verifies each suggested record. Unsigned list metadata is only a locator: every displayed component comes from its verified envelope. No automatic update choice, pagination loop or retry is hidden here.

func (*Reader) Sources

func (r *Reader) Sources(ctx context.Context) ([]SourceSummary, error)

type ReleaseSummary

type ReleaseSummary struct {
	CandidateID string             `json:"candidateId"`
	Digest      string             `json:"catalogDigest"`
	Components  []ComponentSummary `json:"components"`
}

type SourceSummary

type SourceSummary struct {
	ID        string `json:"id"`
	Publisher string `json:"publisher"`
}