setupwizard

type Action string

type AgentCapability struct {
	ID      string
	Present bool
	Path    string
	Bound   bool
	Profile string
}

type BootstrapDirectMCP struct {
	ID, OwnerID         string
	Registered          bool
	Config, RuntimeRoot []byte
	Commands            [][]byte
}

type BootstrapMCPBinding struct {
	Client, ID, Scope         string
	Target, DataRoot, Profile []byte
}

type BootstrapMCPProjection struct {
	InstallationID string                `json:"installationID"`
	Bindings       []BootstrapMCPBinding `json:"bindings"`
	Direct         []BootstrapDirectMCP  `json:"direct"`
	Profiles       map[string][]byte     `json:"profiles"`
	PolicyPresent  bool                  `json:"policyPresent"`
	Enabled        bool                  `json:"enabled"`
}

type BootstrapMCPSelection struct {
	Selected   []string               `json:"selected"`
	Skipped    []string               `json:"skipped"`
	Projection BootstrapMCPProjection `json:"projection"`
	// A fresh absent policy may become the exact seed shown at confirmation.
	AllowPolicySeed bool `json:"allowPolicySeed"`
	SeedEnabled     bool `json:"seedEnabled"`
}

type ClientUnits struct {
	Client string
	Hooks  bool
	Notify bool
}

type LinePrompt struct {
	In  io.Reader
	Out io.Writer
	// contains filtered or unexported fields
}

type MigrationBinding struct {
	Old, New                       portable.Binding
	OldConsumerKey, NewConsumerKey string
}

type NextAction struct {
	Kind    string   `json:"kind"`
	Agents  []string `json:"agents,omitempty"`
	Command []string `json:"command,omitempty"`
	Reason  string   `json:"reason,omitempty"`
}

type Prompter interface {
	SelectAgents(context.Context, []AgentCapability) ([]string, error)
	SelectExistingAction(context.Context) (Action, error)
	SelectUnits(context.Context) (hooks, notify bool, err error)
	SelectLiveUnits(context.Context, []ClientUnits) (keep, hooks, notify bool, err error)
	Confirm(context.Context, string) (bool, error)
}

type PublicPrompt struct {
	// contains filtered or unexported fields
}

type ReadinessFact struct {
	Client     string `json:"client"`
	Runtime    string `json:"runtime"`
	Hooks      string `json:"hooks"`
	MCP        string `json:"mcp"`
	Permission string `json:"permission"`
	Restart    string `json:"restart"`
	Delivery   string `json:"delivery"`
}

type RemovalBinding struct {
	Old            portable.Binding
	OldConsumerKey string
}

type Request struct {
	Action                                            Action
	Agents                                            []string
	Hooks, AgentNotify                                *bool
	Yes                                               bool
	PackageRoot, PluginRoot, ControlRoot, RuntimeRoot string
	// PackageRoots are per-agent local packages for mixed-revision Repair.
	// Run fills them from the offered root and still-usable recorded sources;
	// they are not CLI flags.
	PackageRoots map[string]string
	// CodexHome and ClaudeConfig are explicit UAP client profile roots.
	// EnvCodexHome and EnvClaudeConfig are a one-shot CLI snapshot of
	// CODEX_HOME / CLAUDE_CONFIG_DIR, not flags. Resume restores intent
	// profiles first; remaining empty roots take this snapshot. Run and
	// Plan do not reread the process environment.
	GlobalConfig, CodexHome, ClaudeConfig string
	// Cursor selection is explicit, never filled from discovery or environment.
	// Fixed authority is provided by the qualified composition owner; it does
	// not replace physical capture, installed receipts, or channel consent.
	CursorConfig                        string
	CursorAuthority                     *cursorinstall.Authority
	CursorAgentNotify                   *bool
	EnvCodexHome, EnvClaudeConfig       string
	ClientExecutable, ScopeRoot, Helper string
	ClientExecutables                   map[string]string
	PackageSHA256                       string
	// TreeDigest is the canonical package-tree digest from Prepare. It is
	// distinct from PackageSHA256 (archive bytes).
	TreeDigest, HelperDigest, HelperVersion string
	InstallationID, Primary                 string
	// BindingIDs are reserved per client during Plan/identity without
	// staging. Run and the durable intent reuse them.
	BindingIDs map[string]string
	// MigrationBindings freezes the exact historical and replacement consumer
	// identities before the confirmed intent is published. It is restored from
	// that intent on retry, never reconstructed from a changed host environment.
	MigrationBindings map[string]MigrationBinding
	// RemovalBindings freezes the exact portable consumer that uninstall will
	// revoke. A retry restores it from the confirmed intent after kernel revoke.
	RemovalBindings map[string]RemovalBinding
	// DataReceiptIDs are known UAP PLUGIN_DATA receipts. Uninstall/publish
	// copies live receipts onto the durable intent; resume rejects a different ID.
	DataReceiptIDs                      map[string]string
	MCPConfig                           map[string]string
	ClaudeHooks, CodexHooks             *bool
	ClaudeAgentNotify, CodexAgentNotify *bool
	// ExternalUninstalled is host attestation that Codex already removed the
	// native plugin, or never activated it. --yes does not set this.
	ExternalUninstalled bool
	// BootstrapExpectedGeneration fences an automatic client selection made
	// before release acquisition. It is internal to the bootstrap orchestrator:
	// an intervening opt-out must not become an implicit Add.
	BootstrapExpectedGeneration *uint64
	// BootstrapExpectedPolicy is captured after the last relevant projection check.
	BootstrapExpectedPolicy *installruntime.Identity
	// BootstrapMCP is consumed by the command admission boundary. Plan/Run use
	// the verified generation, then existing reservation/config CAS protects apply.
	BootstrapMCP *BootstrapMCPSelection
	// ClaudeRunner overrides Claude activation probing. Production leaves it
	// nil so the OS process runner is used. Isolated tests inject a listing
	// fixture; the field is never parsed from CLI flags.
	ClaudeRunner ports.CommandRunner
	// ReleaseVersion is the accepted master revision without a leading v.
	// DefaultReleaseVersion is a one-shot CLI snapshot of this binary's
	// compiled consumer version, not an explicit flag. Resume restores
	// intent.SourceRevision first; remaining empty values take this snapshot.
	ReleaseVersion, DefaultReleaseVersion string
	// ReleaseDownloadRoot is the directory that contains v{version}/ assets.
	// Empty disables host fetch so tests that omit --package stay offline.
	ReleaseDownloadRoot string
	// PackageFetcher downloads one URL. Production uses HTTPS; tests inject
	// a local server. Never parsed from CLI flags.
	PackageFetcher func(context.Context, string) ([]byte, error)
	// Progress reports large confirmed phases to the host. JSON stdout stays
	// one result; the CLI writes these lines to stderr. Nil is silent.
	Progress func(string)
	// DiscoverAgents supplies Claude/Codex executable presence for the TTY
	// picker. Production sets this from Engine.Discover. Nil skips presence
	// labels. The function must not execute found files.
	DiscoverAgents func() []AgentCapability
	// LiveUnits reports managed hooks/notify for the TTY mixed-opt-out
	// display. Nil uses LiveClientUnits from control-root state.
	LiveUnits func([]string) []ClientUnits
}

type Result struct {
	Action         string          `json:"action"`
	Outcome        string          `json:"outcome"`
	Reason         string          `json:"reason,omitempty"`
	InstallationID string          `json:"installationID,omitempty"`
	Generation     uint64          `json:"generation,omitempty"`
	Command        []string        `json:"command,omitempty"`
	Targets        []TargetResult  `json:"targets,omitempty"`
	Readiness      []ReadinessFact `json:"readiness,omitempty"`
	NextActions    []NextAction    `json:"nextActions,omitempty"`
	// DataRetained is true after the last live binding is removed while
	// PLUGIN_DATA remains. Absent inspect rows are not a license to run.
	DataRetained bool `json:"dataRetained,omitempty"`
	// contains filtered or unexported fields
}

type SetupPlan struct {
	Text    string
	Ready   bool
	Request Request
	Result  Result
	// contains filtered or unexported fields
}

type TargetResult struct {
	Client     string `json:"client"`
	Unit       string `json:"unit"`
	Outcome    string `json:"outcome"`
	Reason     string `json:"reason,omitempty"`
	Profile    string `json:"profile,omitempty"`
	TreeDigest string `json:"treeDigest,omitempty"`
	// ConfigPath is the owned MCP file inspect used for a direct-mcp
	// target. Empty on hooks/notify rows so JSON omits it.
	ConfigPath string `json:"configPath,omitempty"`
	// Warnings are post-commit maintenance diagnostics, not installation failure.
	Warnings []string `json:"warnings,omitempty"`
}