cliupdate

type Hinter struct {
	Source  Source
	Current string
	// Dir is the CLI's config directory, where the check result is cached.
	Dir string
	// IntervalDays of 0 or less disables the hint.
	IntervalDays int
	// Method is the install method; empty means a plain binary.
	Method string
	Now    func() time.Time
}

type Options struct {
	Source Source
	// Current is the running version, Target an explicit tag ("" means latest).
	Current string
	Target  string
	DryRun  bool
	// Force skips the package-manager path refusal.
	Force bool
	// ExePath is the resolved path of the running executable.
	ExePath string
	// TUFCacheDir keeps Sigstore trust metadata between runs.
	TUFCacheDir string
	// Confirm runs after the plan is known and before any download; an error aborts.
	Confirm func(current, target string) error
	// Verify checks the signature over checksums.txt. Nil verifies in process,
	// in require mode, so a release without a valid signature is never applied.
	Verify func(ctx context.Context, checksumsPath, bundlePath string) (string, error)
}

type Result struct {
	Action       string `json:"action"`
	Current      string `json:"current"`
	Target       string `json:"target"`
	Asset        string `json:"asset"`
	Path         string `json:"path"`
	Verification string `json:"verification,omitempty"`
	Backup       string `json:"backup,omitempty"`
}

type Source struct {
	// Repo is "owner/name".
	Repo string
	// APIBase serves the releases listing, for example https://api.github.com.
	APIBase string
	// DownloadBase is the asset prefix, the tag is appended by the fetcher.
	DownloadBase string
	// Asset is the release asset for this OS and arch.
	Asset string
	// Channel is "stable" (stable only), "beta" (prereleases count too) or ""
	// (stable, else the newest prerelease), the same rules as install-cli.sh.
	Channel string
	Client  *http.Client
	// AllowHTTP permits plain http bases, for tests against a local server.
	AllowHTTP bool
}