Changeset 0.29.0 (#195)

server/models/models_extension_perm.go

@@ -0,0 +1,58 @@
+package models
+
+import "time"
+
+// ── Package Status Constants ─────────────────
+
+const (
+	// PackageStatusActive means the package is running normally.
+	PackageStatusActive = "active"
+
+	// PackageStatusPendingReview means the package declared permissions
+	// that require admin approval before activation.
+	PackageStatusPendingReview = "pending_review"
+
+	// PackageStatusSuspended means an admin has suspended the package.
+	PackageStatusSuspended = "suspended"
+)
+
+// ValidPackageStatuses is the set of valid package status values.
+var ValidPackageStatuses = map[string]bool{
+	PackageStatusActive:        true,
+	PackageStatusPendingReview: true,
+	PackageStatusSuspended:     true,
+}
+
+// ── Extension Permission Constants ───────────
+
+const (
+	ExtPermSecretsRead         = "secrets.read"
+	ExtPermNotificationsSend   = "notifications.send"
+	ExtPermFiltersPreCompletion = "filters.pre_completion"
+	ExtPermDBRead              = "db.read"
+	ExtPermDBWrite             = "db.write"
+	ExtPermAPIHTTP             = "api.http"
+)
+
+// ValidExtensionPermissions is the set of recognized permission keys.
+var ValidExtensionPermissions = map[string]bool{
+	ExtPermSecretsRead:          true,
+	ExtPermNotificationsSend:    true,
+	ExtPermFiltersPreCompletion: true,
+	ExtPermDBRead:               true,
+	ExtPermDBWrite:              true,
+	ExtPermAPIHTTP:              true,
+}
+
+// ── Extension Permission Model ───────────────
+
+// ExtensionPermission represents a declared/granted capability for a package.
+type ExtensionPermission struct {
+	ID         string     `json:"id" db:"id"`
+	PackageID  string     `json:"package_id" db:"package_id"`
+	Permission string     `json:"permission" db:"permission"`
+	Granted    bool       `json:"granted" db:"granted"`
+	GrantedBy  *string    `json:"granted_by,omitempty" db:"granted_by"`
+	GrantedAt  *time.Time `json:"granted_at,omitempty" db:"granted_at"`
+	CreatedAt  time.Time  `json:"created_at" db:"created_at"`
+}