install

type ConfirmMismatchError struct {
	Provided string // display-form fingerprint the user provided
	Expected string // display-form fingerprint from the bundle
}

type ContainerStopper interface {
	StopByAgentRef(ctx context.Context, agentRef string) error
}

type CredentialMapOpts struct {
	Policy     *policy.Policy
	Store      secrets.SecretStore
	InstallRef string
	// Lock is the signed agent lock (for extracting the LLM credential requirement).
	Lock *pack.AgentLock

	IsTTY bool
	// MapCredentials holds non-TTY mappings as "<declared>=<local>" strings.
	MapCredentials []string

	Prompt    func(prompt string) (string, error)
	PrintWarn func(msg string)
	EmitAudit func(eventType string, payload map[string]string)
}

type CredentialMapResult struct {
	Map          map[string]string
	Warnings     []string
	DisplayLines []string
}

type DockerContainerStopper struct{}

type DowngradeRefusedError struct {
	PriorVersion string
	NewVersion   string
}

type FakeContainerStopper struct {
	Stopped []string
}

type FileInstallState struct {
	StateRoot string
}

type ForkLineage struct {
	Version  int               `json:"version"`
	Parent   ForkLineageParent `json:"parent"`
	ForkedAt string            `json:"forked_at"`
}

type ForkLineageParent struct {
	AgentName            string                 `json:"agent_name"`
	AgentVersion         string                 `json:"agent_version"`
	PublisherFingerprint string                 `json:"publisher_fingerprint"`
	PublisherName        string                 `json:"publisher_name"`
	LockDigest           string                 `json:"lock_digest"`
	BundleDigest         string                 `json:"bundle_digest"`
	PolicyDigest         string                 `json:"policy_digest"`
	PolicyYAMLB64        string                 `json:"policy_yaml_b64"`
	Provenance           []pack.ProvenanceEntry `json:"provenance"`
}

type ImageBuilder interface {
	Build(ctx context.Context, sourceDir, agentName string) (digest string, err error)
}

type ImageLoader interface {
	Load(ctx context.Context, ociLayoutDir, expectedDigest string) (digest string, err error)
}

type InstallManifest struct {
	PublisherFingerprint string `json:"publisher_fingerprint"`
	PublisherName        string `json:"publisher_name"`
	AgentName            string `json:"agent_name"`
	AgentVersion         string `json:"agent_version"`
	AcceptedPolicyDigest string `json:"accepted_policy_digest"`
	// CredentialMap maps declared policy credential IDs to local secret store names
	// (renames only; scope remains governed by the signed policy).
	CredentialMap map[string]string `json:"credential_map,omitempty"`

	// B23-T04 materialization fields (install-manifest.json under state/agents/<name>@<pub8>/).
	InstallMode         string           `json:"install_mode,omitempty"`
	LocalImageDigest    string           `json:"local_image_digest,omitempty"`
	DepsUnlockedRebuild bool             `json:"deps_unlocked_rebuild,omitempty"`
	ParentBundleRef     *ParentBundleRef `json:"parent_bundle_ref,omitempty"`
	InstalledAt         time.Time        `json:"installed_at,omitempty"`
	Alias               string           `json:"alias,omitempty"`
}

type InstallStateStore interface {
	GetPriorInstall(publisherFingerprint, agentName string) (*PriorInstallRecord, error)
	SaveApprovedInstall(manifest InstallManifest, policyYAML []byte) error
	GetInstallByRef(ref string) (*PriorInstallRecord, error)
}

type InstalledAgentEntry struct {
	Ref         string    `json:"ref"`
	Alias       string    `json:"alias,omitempty"`
	Version     string    `json:"version"`
	Publisher   string    `json:"publisher"`
	InstalledAt time.Time `json:"installed_at"`
	Mode        string    `json:"mode"`
}

type KeyConflictError struct {
	PublisherName string // name from the bundle that triggered the conflict
	ExpectedFP    string // fingerprint already trusted for this name
	ReceivedFP    string // fingerprint from the incoming bundle
}

type MapCredentialOpts struct {
	State   InstallStateStore
	Store   secrets.SecretStore
	Ref     string
	Mapping string // declared=local
	// StateRoot is the installed agent state root (for reading the signed lock).
	StateRoot string
	EmitAudit func(eventType string, payload map[string]string)
}

type MaterializeOpts struct {
	StateRoot    string
	Bundle       *bundle.Bundle
	BundlePath   string
	BundleDigest string
	Manifest     InstallManifest

	PreferImage       bool
	AllowUnlockedDeps bool
	IsTTY             bool
	PrintWarn         func(msg string)
	PromptUnlocked    func(prompt string) (string, error)

	Builder ImageBuilder
	Loader  ImageLoader

	// PostVerifyHook runs after files are written but before atomic rename (tests).
	PostWriteHook func(stagingDir string) error

	Audit audit.AuditAppender
}

type MaterializeResult struct {
	AgentRef      string
	InstalledPath string
	Manifest      InstallManifest
}

type PackImageBuilder struct {
	HarnessPath string
	SDKDir      string
	ImageTag    string
}

type ParentBundleRef struct {
	Digest string `json:"digest"`
	Path   string `json:"path"`
}

type PolicyConsentOpts struct {
	Report *bundle.InspectReport

	PolicyDigest string
	PolicyYAML   []byte

	PublisherFingerprint string
	PublisherName        string
	AgentName            string
	AgentVersion         string

	State InstallStateStore

	IsTTY bool
	// AcceptPolicyDigest is the caller-provided --accept-policy value (non-TTY).
	AcceptPolicyDigest string
	AllowDowngrade     bool

	Prompt    func(prompt string) (string, error)
	EmitAudit func(eventType string, payload map[string]string)
}

type PolicyConsentResult struct {
	Manifest     InstallManifest
	CardText     string
	DisplayLines []string
}

type PolicyMismatchError struct {
	Provided string
	Expected string
}

type PolicyRefusedError struct {
	Reason string
	Digest string
}

type PolicyStructuralDiff struct {
	EgressAdded        []string
	EgressRemoved      []string
	CredentialsAdded   []string
	CredentialsRemoved []string
	MCPAdded           []string
	MCPRemoved         []string
	IngressAdded       []string
	IngressRemoved     []string
}

type PriorInstallRecord struct {
	Manifest   InstallManifest
	PolicyYAML []byte
}

type ResolveRefOpts struct {
	StateRoot string
	Input     string
	// Infof prints non-fatal resolution hints (e.g. ambiguous-soon) to stderr.
	Infof func(format string, args ...any)
}

type ResolvedAgent struct {
	// DaemonKey is the agent identity passed to the daemon Run/Cron/Trigger APIs.
	DaemonKey string
	// Ref is the canonical installed ref (name@pub8) when installed; otherwise DaemonKey.
	Ref string
	// Display is the D7 publisher string: name@pub8 (alias) or name@pub8.
	Display string
	// Installed is true when resolution targeted materialized shared install state.
	Installed bool
}

type SkopeoImageLoader struct{}

type TrustRefusedError struct {
	Reason      string // explanation for non-TTY missing-flag case
	Fingerprint string // display-form fingerprint (non-TTY missing-flag)
}

type TrustResolveOpts struct {
	// PublisherName is the human-readable slug from the bundle lock's publisher block.
	PublisherName string

	// PublisherFingerprint is the hex-encoded SHA-256 of the publisher's public key.
	PublisherFingerprint string

	// PublisherPublicKeyPEM is the PEM-encoded ECDSA P-256 public key.
	PublisherPublicKeyPEM string

	// Store is a pre-loaded trust store. ResolveTrust only mutates the store
	// (via Pin + Save) on the TOFU approval path. On every non-approval path
	// the store is left unchanged.
	Store *trust.Store

	// IsTTY indicates whether the caller is attached to an interactive terminal.
	IsTTY bool

	// ConfirmedFingerprint is the value of the --confirm-fingerprint CLI flag
	// (non-TTY mode). Empty string means the flag was not provided.
	ConfirmedFingerprint string

	// Prompt is a callback for TTY interactive input. It receives a prompt
	// message and must return the user's typed line. Tests inject this to
	// simulate user input without reading os.Stdin directly.
	Prompt func(prompt string) (string, error)

	// EmitAudit is a best-effort audit event emitter. It receives an event
	// type string and a string→string payload. Never called with secret material.
	EmitAudit func(eventType string, payload map[string]string)
}

type TrustResult struct {
	// Publisher is the resolved publisher record (from the store or newly pinned).
	Publisher *trust.Publisher

	// WasPinned is true when a new publisher was added to the trust store (TOFU path).
	WasPinned bool

	// DisplayLines contains the exact user-facing strings to print to the
	// operator, one per line. These are computed by ResolveTrust so the CLI
	// layer does not need to derive display messages.
	DisplayLines []string
}