feat: trust/exposure fields — installVerification, keyPinned, exposure
Some checks failed
Security / Security check (push) Failing after 2s

Regenerated stubs for the additive proto: per-entry
StoreEntry.installVerification, StoreSource.keyPinned, the
ListStoresResponse policy snapshot (requireSignatures /
trustedPublisherCount) and DeclaredService.exposure. New
listStoresFull() exposes the response-level snapshot; listStores()
stays as the plain source list.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>
This commit is contained in:
flemming-it 2026-07-21 12:56:35 +02:00
parent d9ef3ecdb6
commit 0eafaa763a
4 changed files with 143 additions and 4 deletions

View file

@ -75,6 +75,7 @@ typedef CheckUpdateResponse = pb.CheckUpdateResponse;
typedef ChannelStatusResponse = pb.ChannelStatusResponse;
typedef ChannelEntry = pb.ChannelEntry;
typedef StoreSource = pb.StoreSource;
typedef ListStoresResponse = pb.ListStoresResponse;
typedef AddStoreResponse = pb.AddStoreResponse;
typedef RemoveStoreResponse = pb.RemoveStoreResponse;
typedef SystemAiStatusResponse = pb.SystemAiStatusResponse;
@ -764,6 +765,14 @@ class HubClient {
return r.stores;
}
/// Full store listing including the operator policy snapshot
/// (`requireSignatures`, `trustedPublisherCount`) the hub reports
/// alongside the sources since 0.23 store UIs use it to state
/// honestly whether installs are signature-checked at all.
/// [listStores] stays as the plain source list.
Future<ListStoresResponse> listStoresFull() =>
_admin.listStores(pb.ListStoresRequest());
/// Register a new module store. The hub fetches + validates its index,
/// persists it to config, and merges it live so its modules are
/// immediately searchable + installable.