Support policy checks

buf/registry/module/v1beta1/label.proto

@@ -61,6 +61,7 @@ message Label {
   ];
   // The id of the Commit currently associated with the Label.
   //
+  // If governance workflow is enabled, this will point to the most recent Commit that passed or accepted Commit.
   // To get the history of the Commits that have been associated with a Label, use ListLabelHistory.
   string commit_id = 8 [
     (buf.validate.field).required = true,
@@ -71,6 +72,47 @@ message Label {
     (buf.validate.field).required = true,
     (buf.validate.field).string.uuid = true
   ];
+  // Whether or not governance workflow is enabled for this Label.
+  //
+  // Governance workflow is an enterprise-only feature - contact us to learn more!
+  bool governance_workflow_enabled = 10;
+  // The governance workflow state of the Commit the Label points to.
+  //
+  // This field will only be set if governance workflow was enabled on this Label when this Commit was pushed.
+  GovernanceWorkflowState governance_workflow_state = 11;
+}
+
+// The state of a Commit in the governance workflow for a particular Label.
+//
+// Governance workflow is an enterprise-only feature - contact us to learn more!
+message GovernanceWorkflowState {
+  // The status of the workflow.
+  GovernanceWorkflowStatus status = 1 [(buf.validate.field).enum.defined_only = true];
+
+  // The time the status was last updated.
+  google.protobuf.Timestamp status_updated_at = 3 [(buf.validate.field).required = true];
+
+  // The ids of Commits that have governance workflows blocking this governance workflow.
+  //
+  // This field will only be set if the status is blocked.
+  repeated string blocked_on_commit_ids = 2 [(buf.validate.field).string.uuid = true];
+}
+
+// The status of a GovernanceWorkflowState.
+//
+// Governance workflow is an enterprise-only feature - contact us to learn more!
+enum GovernanceWorkflowStatus {
+  GOVERNANCE_WORKFLOW_STATUS_UNSPECIFIED = 0;
+  // The Commit did not fail any governance checks and therefore did not need review.
+  GOVERNANCE_WORKFLOW_STATUS_PASSED = 1;
+  // The Commit was reviewed after failing governance checks and was accepted.
+  GOVERNANCE_WORKFLOW_STATUS_ACCEPTED = 2;
+  // The Commit was reviewed after failing governance checks and was rejected.
+  GOVERNANCE_WORKFLOW_STATUS_REJECTED = 3;
+  // The Commit has not yet been reviewed after failing governance checks and is pending.
+  GOVERNANCE_WORKFLOW_STATUS_PENDING = 4;
+  // The governance workflow for this Commit is blocked on the governance workflow for another Commit.
+  GOVERNANCE_WORKFLOW_STATUS_BLOCKED = 5;
 }
 
 // LabelRef is a reference to a Label, either an id or a fully-qualified name.

buf/registry/module/v1beta1/label_service.proto

@@ -96,7 +96,9 @@ message ListLabelsRequest {
   // Once the resource is resolved, the following Labels are listed:
   //   - If a Module is referenced, all Labels for the Module are returned.
   //   - If a Label is referenced, this Label is returned.
-  //   - If a Commit is referenced, all Labels for the Commit are returned.
+  //   - If a Commit is referenced, all Labels for the Commit are returned. Note that this will
+  //     not return any Labels where the Commit is currently rejected or pending, it will only
+  //     return Labels for Commits that are passed or accepted.
   ResourceRef resource_ref = 3 [(buf.validate.field).required = true];
   // The order to return the Labels.
   //
@@ -106,6 +108,10 @@ message ListLabelsRequest {
   // TODO: We are purposefully not making the default the zero enum value, however
   // we may want to consider this.
   Order order = 4 [(buf.validate.field).enum.defined_only = true];
+  // Only return Labels that point to a Commit with one of these GovernanceWorkflowStatus values.
+  //
+  // If not set, Labels that point to a Commit with any GovernanceWorkflowStatus value are returned.
+  repeated GovernanceWorkflowStatus governance_workflow_statuses = 5;
 }
 
 message ListLabelsResponse {
@@ -157,12 +163,22 @@ message ListLabelHistoryRequest {
 }
 
 message ListLabelHistoryResponse {
+  message Value {
+    // The Commit.
+    Commit commit = 1 [(buf.validate.field).required = true];
+
+    // The GovernanceWorkflowState for this Commit on this Label.
+    //
+    // This field will only be set if governance workflow was enabled on this Label when this Commit was pushed.
+    GovernanceWorkflowState governance_workflow_state = 2;
+  }
+
   // The next page token.
   //
   /// If empty, there are no more pages.
   string next_page_token = 1 [(buf.validate.field).string.max_len = 4096];
-  // The listed Commits that represent the history of the Label.
-  repeated Commit commits = 2;
+  // The ordered history of the Label.
+  repeated Value values = 2;
 }
 
 message CreateOrUpdateLabelsRequest {