CatalogInstallation
An installation bound to a listing, with the release record as inspected.
The bound installation.
Possible values: Value must match regular expression ^managed\.[a-z0-9][a-z0-9._-]{0,80}$
listing objectrequired
One listed release as an operator sees it: consent facts, no addresses.
Bundle identity the release belongs to.
Bundle version the release carries.
title object
Display title, if any.
- string
- null
Publisher that signed the release.
Publisher release sequence.
Digest of the signed claims, as inspection reviews them.
runtime_platform object
Exact artifact family of a runtime-bearing release; None for a plain one.
- string
- null
Digest of the executable artifact.
Signed artifact size in bytes.
Everything an install transfers: the artifact plus, for a runtime-bearing release, every wheel it lists.
Operating systems supported.
Skulk build the publisher qualified the release against; recorded for provenance, not required to match this host.
skulk_requires object
Skulk versions the release runs on (catalog protocol 2); null for a protocol 1 listing, which fits one exact Skulk build.
- string
- null
Signed permission summaries.
Qualified capability ids.
Titles of declared surfaces.
Whether durable operations are declared.
Steward exposure risk classes: observation, billable, effect.
Release expiry as a Unix timestamp.
Whether the release fits this host: its platforms, and this host's Skulk version inside its range (for a protocol 1 listing, this host's exact Skulk build).
source objectrequired
Source readiness after binding.
Current source revision, zero if unconfigured.
Possible values: >= 0
Whether a private release source is configured.
credential_reference object
Opaque feed credential reference.
- string
- null
Possible values: Value must match regular expression ^[a-f0-9]{32}$
Whether the configured credential is readable, or the source is anonymous.
trust_revision object
Configured publisher trust revision.
- integer
- null
Whether the publisher trust follows the built-in capability store: bound from a store listing and renewed by the host.
falsereview objectrequired
The verified release record at the listed feed; it matches the listing.
Digest of all signed runtime claims.
Possible values: Value must match regular expression ^[a-f0-9]{64}$
Reviewed owner source revision.
Possible values: >= 1
Trusted publisher identity.
Signed stable plugin identity.
Signed plugin release version.
Signed publisher release sequence.
Possible values: >= 1
Verified compatible host platform.
Possible values: <= 64 characters, Value must match regular expression ^[a-z0-9]+(?:[.-][a-z0-9_]+)*$
Signed supported Python version range.
Skulk build the publisher qualified the release against.
Possible values: Value must match regular expression ^[a-f0-9]{64}$
Signed declared plugin permissions.
Total signed bundle and wheel byte count.
Possible values: >= 1
Signed release expiry as Unix seconds.
{
"plugin_id": "string",
"listing": {
"bundle_id": "string",
"bundle_version": "string",
"title": "string",
"publisher": "string",
"sequence": 0,
"release_digest": "string",
"runtime_platform": "string",
"artifact_sha256": "string",
"artifact_bytes": 0,
"transfer_bytes": 0,
"platforms": [
"string"
],
"skulk_build_sha256": "string",
"skulk_requires": "string",
"permissions": [
"string"
],
"descriptors": [
"string"
],
"surfaces": [
"string"
],
"operations": true,
"steward_risks": [
"string"
],
"expires_at": 0,
"matches_host": true
},
"source": {
"revision": 0,
"configured": true,
"credential_reference": "string",
"credential_ready": true,
"trust_revision": 0,
"follows_store": false
},
"review": {
"runtime_digest": "string",
"source_revision": 0,
"publisher": "string",
"bundle_id": "string",
"version": "string",
"sequence": 0,
"platform": "string",
"python_requires": "string",
"skulk_build_sha256": "string",
"permissions": [
"string"
],
"artifact_bytes": 0,
"expires_at": 0
}
}