{
  "swagger": "2.0",
  "info": {
    "title": "evey/v1/admin_plugin.proto",
    "version": "version not set"
  },
  "tags": [
    {
      "name": "AdminPluginService"
    }
  ],
  "consumes": [
    "application/json"
  ],
  "produces": [
    "application/json"
  ],
  "paths": {
    "/api/v1/admin/plugin-publishers": {
      "get": {
        "summary": "Trusted publishers are the plugin signing keys this instance accepts: a\nplugin signed by one of them shows its publisher's name, an unknown key\nshows its fingerprint, and the enforce policy admits trusted keys only.",
        "operationId": "AdminPluginService_ListTrustedPublishers",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1ListTrustedPublishersResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "tags": [
          "AdminPluginService"
        ]
      },
      "post": {
        "summary": "AddTrustedPublisher registers a key by its PEM public key, or by the\nfingerprint an installed plugin already carries.",
        "operationId": "AdminPluginService_AddTrustedPublisher",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1TrustedPublisher"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "body",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1AddTrustedPublisherRequest"
            }
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugin-publishers/{fingerprint}": {
      "delete": {
        "operationId": "AdminPluginService_RemoveTrustedPublisher",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1RemoveTrustedPublisherResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "fingerprint",
            "in": "path",
            "required": true,
            "type": "string"
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugin-resource-limits": {
      "get": {
        "summary": "GetPluginResourceLimits returns the effective per-plugin resource caps the\nrunner is enforcing (env defaults overlaid with admin overrides).",
        "operationId": "AdminPluginService_GetPluginResourceLimits",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1PluginResourceLimits"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "tags": [
          "AdminPluginService"
        ]
      },
      "put": {
        "summary": "UpdatePluginResourceLimits validates, persists and applies the per-plugin\nresource caps live: memory/PID/disk on the next monitor sweep, cpu_nice and\nsandbox_mode to plugins started afterwards. Returns the new effective caps.",
        "operationId": "AdminPluginService_UpdatePluginResourceLimits",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1PluginResourceLimits"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "body",
            "description": "PluginResourceLimits is the effective per-plugin cap set enforced by the\nrunner's resource monitor. Used as both the read response and the update\nrequest (server validates ranges and ignores out-of-range values).",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1PluginResourceLimits"
            }
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugin-runtimes": {
      "get": {
        "operationId": "AdminPluginService_ListPluginRuntimes",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1ListPluginRuntimesResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "tags": [
          "AdminPluginService"
        ]
      },
      "post": {
        "operationId": "AdminPluginService_AddPluginRuntime",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1PluginRuntime"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "body",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1AddPluginRuntimeRequest"
            }
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugin-runtimes/{id}": {
      "delete": {
        "operationId": "AdminPluginService_RemovePluginRuntime",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1RemovePluginRuntimeResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "type": "string"
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins": {
      "get": {
        "operationId": "AdminPluginService_ListPlugins",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1ListPluginsResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins/install": {
      "post": {
        "operationId": "AdminPluginService_InstallPlugin",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1Plugin"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "body",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/v1InstallPluginRequest"
            }
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins/{id}": {
      "delete": {
        "operationId": "AdminPluginService_UninstallPlugin",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1UninstallPluginResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "type": "string"
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins/{id}/disable": {
      "post": {
        "operationId": "AdminPluginService_DisablePlugin",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1Plugin"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "type": "string"
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins/{id}/enable": {
      "post": {
        "operationId": "AdminPluginService_EnablePlugin",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1Plugin"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "id",
            "in": "path",
            "required": true,
            "type": "string"
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins/{pluginId}/apply-update": {
      "post": {
        "summary": "ApplyPluginUpdate applies a previously previewed update. The\nacknowledged_hash must match the SHA-256 of the candidate ZIP computed\nduring the preview call (anti-TOCTOU guard). When the preview indicated\nrequires_ack=true, the admin must explicitly confirm before calling this.",
        "operationId": "AdminPluginService_ApplyPluginUpdate",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1Plugin"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "pluginId",
            "in": "path",
            "required": true,
            "type": "string"
          },
          {
            "name": "body",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/AdminPluginServiceApplyPluginUpdateBody"
            }
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins/{pluginId}/config": {
      "get": {
        "operationId": "AdminPluginService_GetPluginConfig",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1PluginConfig"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "pluginId",
            "in": "path",
            "required": true,
            "type": "string"
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      },
      "put": {
        "operationId": "AdminPluginService_UpdatePluginConfig",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1PluginConfig"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "pluginId",
            "in": "path",
            "required": true,
            "type": "string"
          },
          {
            "name": "body",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/AdminPluginServiceUpdatePluginConfigBody"
            }
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins/{pluginId}/logs": {
      "get": {
        "operationId": "AdminPluginService_GetPluginLogs",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1GetPluginLogsResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "pluginId",
            "in": "path",
            "required": true,
            "type": "string"
          },
          {
            "name": "level",
            "in": "query",
            "required": false,
            "type": "string"
          },
          {
            "name": "limit",
            "in": "query",
            "required": false,
            "type": "integer",
            "format": "int32"
          },
          {
            "name": "offset",
            "in": "query",
            "required": false,
            "type": "integer",
            "format": "int32"
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/admin/plugins/{pluginId}/preview-update": {
      "post": {
        "summary": "PreviewPluginUpdate returns a diff of what would change if the candidate\nZIP were applied to the currently installed plugin. No state is mutated.",
        "operationId": "AdminPluginService_PreviewPluginUpdate",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1PreviewPluginUpdateResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "pluginId",
            "in": "path",
            "required": true,
            "type": "string"
          },
          {
            "name": "body",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/AdminPluginServicePreviewPluginUpdateBody"
            }
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    },
    "/api/v1/plugins/{pluginId}/token": {
      "post": {
        "summary": "IssuePluginToken returns a short-lived (5min) scoped JWT for the plugin iframe.\nScopes are the intersection of the plugin manifest permissions and the\nadmin-approved permissions, filtered through the auth-layer whitelist.\nForbidden scopes (admin:*, auth:*, system:*, user:write, library:write) are\nstripped unconditionally.",
        "operationId": "AdminPluginService_IssuePluginToken",
        "responses": {
          "200": {
            "description": "A successful response.",
            "schema": {
              "$ref": "#/definitions/v1IssuePluginTokenResponse"
            }
          },
          "default": {
            "description": "An unexpected error response.",
            "schema": {
              "$ref": "#/definitions/rpcStatus"
            }
          }
        },
        "parameters": [
          {
            "name": "pluginId",
            "in": "path",
            "required": true,
            "type": "string"
          },
          {
            "name": "body",
            "in": "body",
            "required": true,
            "schema": {
              "$ref": "#/definitions/AdminPluginServiceIssuePluginTokenBody"
            }
          }
        ],
        "tags": [
          "AdminPluginService"
        ]
      }
    }
  },
  "definitions": {
    "AdminPluginServiceApplyPluginUpdateBody": {
      "type": "object",
      "properties": {
        "source": {
          "type": "string"
        },
        "acknowledgedHash": {
          "type": "string",
          "description": "acknowledged_hash must match the source_hash returned by PreviewPluginUpdate.\nEnsures the admin acknowledged exactly the candidate that was previewed."
        },
        "acceptNewPublisher": {
          "type": "boolean",
          "description": "accept_new_publisher lets an update signed by another key than the\ninstalled version (or no longer signed) through; refused without it."
        }
      }
    },
    "AdminPluginServiceIssuePluginTokenBody": {
      "type": "object"
    },
    "AdminPluginServicePreviewPluginUpdateBody": {
      "type": "object",
      "properties": {
        "source": {
          "type": "string"
        }
      }
    },
    "AdminPluginServiceUpdatePluginConfigBody": {
      "type": "object",
      "properties": {
        "values": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          }
        }
      }
    },
    "protobufAny": {
      "type": "object",
      "properties": {
        "@type": {
          "type": "string"
        }
      },
      "additionalProperties": {}
    },
    "rpcStatus": {
      "type": "object",
      "properties": {
        "code": {
          "type": "integer",
          "format": "int32"
        },
        "message": {
          "type": "string"
        },
        "details": {
          "type": "array",
          "items": {
            "type": "object",
            "$ref": "#/definitions/protobufAny"
          }
        }
      }
    },
    "v1AddPluginRuntimeRequest": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string"
        },
        "language": {
          "type": "string"
        },
        "version": {
          "type": "string"
        },
        "binaryPath": {
          "type": "string"
        }
      }
    },
    "v1AddTrustedPublisherRequest": {
      "type": "object",
      "properties": {
        "name": {
          "type": "string"
        },
        "publicKeyPem": {
          "type": "string",
          "description": "One of the two: a PEM public key, or the fingerprint of a key an\ninstalled plugin carries (the server already holds that key)."
        },
        "fingerprint": {
          "type": "string"
        }
      }
    },
    "v1FrontModule": {
      "type": "object",
      "properties": {
        "slot": {
          "type": "string"
        },
        "src": {
          "type": "string"
        }
      }
    },
    "v1GetPluginLogsResponse": {
      "type": "object",
      "properties": {
        "entries": {
          "type": "array",
          "items": {
            "type": "object",
            "$ref": "#/definitions/v1PluginLogEntry"
          }
        },
        "total": {
          "type": "integer",
          "format": "int32"
        }
      }
    },
    "v1InstallPluginRequest": {
      "type": "object",
      "properties": {
        "source": {
          "type": "string"
        },
        "name": {
          "type": "string"
        },
        "acceptPermissionChanges": {
          "type": "boolean",
          "description": "Set to true after the admin has explicitly acknowledged the new\npermissions / capabilities / slots / external_fetch hosts requested by\nan update. When false, an update that escalates permissions returns\nFAILED_PRECONDITION with the diff in the error message and the install\nis rolled back. The frontend should surface a modal listing the diff\nand retry with this flag set after the admin confirms."
        }
      }
    },
    "v1IssuePluginTokenResponse": {
      "type": "object",
      "properties": {
        "token": {
          "type": "string"
        },
        "expiresAt": {
          "type": "string",
          "format": "date-time"
        },
        "scopes": {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      }
    },
    "v1ListPluginRuntimesResponse": {
      "type": "object",
      "properties": {
        "runtimes": {
          "type": "array",
          "items": {
            "type": "object",
            "$ref": "#/definitions/v1PluginRuntime"
          }
        }
      }
    },
    "v1ListPluginsResponse": {
      "type": "object",
      "properties": {
        "plugins": {
          "type": "array",
          "items": {
            "type": "object",
            "$ref": "#/definitions/v1Plugin"
          }
        }
      }
    },
    "v1ListTrustedPublishersResponse": {
      "type": "object",
      "properties": {
        "publishers": {
          "type": "array",
          "items": {
            "type": "object",
            "$ref": "#/definitions/v1TrustedPublisher"
          }
        }
      }
    },
    "v1Plugin": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string"
        },
        "name": {
          "type": "string"
        },
        "description": {
          "type": "string"
        },
        "version": {
          "type": "string"
        },
        "author": {
          "type": "string"
        },
        "language": {
          "type": "string"
        },
        "enabled": {
          "type": "boolean"
        },
        "state": {
          "$ref": "#/definitions/v1PluginState"
        },
        "entryPoint": {
          "type": "string"
        },
        "installedAt": {
          "type": "string",
          "format": "date-time"
        },
        "permissions": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "capabilities": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "sourceHash": {
          "type": "string"
        },
        "analysisReport": {
          "$ref": "#/definitions/v1PluginAnalysisReport"
        },
        "errorMessage": {
          "type": "string"
        },
        "kind": {
          "type": "string"
        },
        "frontend": {
          "type": "array",
          "items": {
            "type": "object",
            "$ref": "#/definitions/v1FrontModule"
          }
        },
        "externalFetch": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "webRoot": {
          "type": "string"
        },
        "signature": {
          "$ref": "#/definitions/v1PluginSignature",
          "description": "signature is the install-time verdict; null when the policy is off."
        }
      }
    },
    "v1PluginAnalysisReport": {
      "type": "object",
      "properties": {
        "safe": {
          "type": "boolean"
        },
        "issues": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "urls": {
          "type": "array",
          "items": {
            "type": "object",
            "$ref": "#/definitions/v1PluginExtractedURL"
          }
        },
        "fileCount": {
          "type": "integer",
          "format": "int32"
        }
      },
      "description": "PluginAnalysisReport exposes the static-analysis warnings recorded at\ninstall time so the admin can audit them post-install."
    },
    "v1PluginConfig": {
      "type": "object",
      "properties": {
        "pluginId": {
          "type": "string"
        },
        "values": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          }
        },
        "configSchemaJson": {
          "type": "string"
        }
      }
    },
    "v1PluginExtractedURL": {
      "type": "object",
      "properties": {
        "url": {
          "type": "string"
        },
        "file": {
          "type": "string"
        },
        "line": {
          "type": "integer",
          "format": "int32"
        }
      }
    },
    "v1PluginLogEntry": {
      "type": "object",
      "properties": {
        "level": {
          "type": "string"
        },
        "message": {
          "type": "string"
        },
        "fields": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          }
        },
        "timestamp": {
          "type": "string",
          "format": "date-time"
        }
      }
    },
    "v1PluginResourceLimits": {
      "type": "object",
      "properties": {
        "memoryMb": {
          "type": "integer",
          "format": "int32",
          "title": "max RSS per plugin (MiB); 0 = package default"
        },
        "pidsMax": {
          "type": "integer",
          "format": "int32",
          "title": "max threads/processes per plugin; 0 = package default"
        },
        "diskMaxMb": {
          "type": "integer",
          "format": "int32",
          "title": "max install-dir size per plugin (MiB); 0 = disabled"
        },
        "cpuNice": {
          "type": "integer",
          "format": "int32",
          "title": "scheduling nice applied at spawn (0-19)"
        },
        "sandboxMode": {
          "type": "string",
          "title": "auto | landlock | bubblewrap | strict | basic"
        }
      },
      "description": "PluginResourceLimits is the effective per-plugin cap set enforced by the\nrunner's resource monitor. Used as both the read response and the update\nrequest (server validates ranges and ignores out-of-range values)."
    },
    "v1PluginRuntime": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string"
        },
        "name": {
          "type": "string"
        },
        "language": {
          "type": "string"
        },
        "version": {
          "type": "string"
        },
        "binaryPath": {
          "type": "string"
        },
        "available": {
          "type": "boolean"
        }
      }
    },
    "v1PluginSignature": {
      "type": "object",
      "properties": {
        "verified": {
          "type": "boolean",
          "description": "verified says the detached signature matches the package and its key."
        },
        "keyFingerprint": {
          "type": "string",
          "description": "key_fingerprint is \"sha256:\u003chex\u003e\" of the signing public key, empty when\nthe package carries no key."
        },
        "publisher": {
          "type": "string",
          "description": "publisher is the trusted publisher's name when the key is in the\ninstance's list, empty otherwise."
        },
        "trusted": {
          "type": "boolean"
        },
        "continuity": {
          "type": "string",
          "description": "continuity against the installed version: \"\" (first install or the\ninstalled version was unsigned), \"same\", \"changed\" (another key),\n\"lost\" (the installed version was signed, this one is not)."
        },
        "error": {
          "type": "string"
        }
      },
      "description": "PluginSignature is the verdict on a plugin package's cosign signature. The\nkey travels with the package (cosign.pub at the ZIP root); its fingerprint\nis pinned at install so a later update signed by another key is caught."
    },
    "v1PluginState": {
      "type": "string",
      "enum": [
        "PLUGIN_STATE_UNSPECIFIED",
        "PLUGIN_STATE_INSTALLED",
        "PLUGIN_STATE_RUNNING",
        "PLUGIN_STATE_STOPPED",
        "PLUGIN_STATE_ERROR",
        "PLUGIN_STATE_INITIALIZING"
      ],
      "default": "PLUGIN_STATE_UNSPECIFIED"
    },
    "v1PreviewPluginUpdateResponse": {
      "type": "object",
      "properties": {
        "currentVersion": {
          "type": "string"
        },
        "candidateVersion": {
          "type": "string"
        },
        "permissionsAdded": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "permissionsRemoved": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "capabilitiesAdded": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "capabilitiesRemoved": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "slotsAdded": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "slotsRemoved": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "externalFetchAdded": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "externalFetchRemoved": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "newFindings": {
          "type": "array",
          "items": {
            "type": "object",
            "$ref": "#/definitions/v1SecurityFinding"
          }
        },
        "signatureStatus": {
          "type": "string",
          "description": "signature_status: \"signed\", \"signed-untrusted\", \"unsigned\", \"invalid\",\n\"publisher-changed\" or \"signature-lost\" (the last two set requires_ack)."
        },
        "requiresAck": {
          "type": "boolean"
        },
        "sourceHash": {
          "type": "string"
        },
        "signature": {
          "$ref": "#/definitions/v1PluginSignature"
        }
      }
    },
    "v1RemovePluginRuntimeResponse": {
      "type": "object"
    },
    "v1RemoveTrustedPublisherResponse": {
      "type": "object"
    },
    "v1SecurityFinding": {
      "type": "object",
      "properties": {
        "category": {
          "type": "string"
        },
        "severity": {
          "type": "string"
        },
        "file": {
          "type": "string"
        },
        "line": {
          "type": "integer",
          "format": "int32"
        },
        "description": {
          "type": "string"
        }
      }
    },
    "v1TrustedPublisher": {
      "type": "object",
      "properties": {
        "fingerprint": {
          "type": "string"
        },
        "name": {
          "type": "string"
        },
        "publicKeyPem": {
          "type": "string"
        },
        "addedAt": {
          "type": "string"
        },
        "seeded": {
          "type": "boolean",
          "description": "seeded says the key came from EVEY_PLUGINS_COSIGN_PUBLIC_KEY at boot and\ncannot be removed from the panel."
        }
      }
    },
    "v1UninstallPluginResponse": {
      "type": "object"
    }
  }
}