update

type ApplyResult struct {
	Updated      bool         `json:"updated"`
	FromVersion  string       `json:"from_version"`
	ToVersion    string       `json:"to_version,omitempty"`
	Asset        string       `json:"asset,omitempty"`
	Path         string       `json:"path,omitempty"`
	Verification Verification `json:"verification"`
	Managed      Managed      `json:"managed"`
	// Skipped explains a no-op ("already up to date", "another update is in
	// progress", "managed install").
	Skipped string `json:"skipped,omitempty"`
}

type CheckResult struct {
	CurrentVersion  string       `json:"current_version"`
	LatestVersion   string       `json:"latest_version,omitempty"`
	UpdateAvailable bool         `json:"update_available"`
	Asset           string       `json:"asset,omitempty"`
	Verification    Verification `json:"verification,omitempty"`
	Managed         Managed      `json:"managed"`
	CheckedAt       time.Time    `json:"checked_at"`
}

type Env struct {
	GOPATH string
	GOBIN  string
	Home   string
	GOOS   string
}

type Managed struct {
	// Managed is true when a manager owns this binary.
	Managed bool `json:"managed"`
	// Manager names it ("go install", "homebrew", "nix", …).
	Manager string `json:"manager,omitempty"`
	// Hint is the command the user should run instead.
	Hint string `json:"hint,omitempty"`
}

type Outcome string

type Signer struct {
	// LookPath finds cosign. nil uses exec.LookPath.
	LookPath func(string) (string, error)
	// Run executes cosign. nil uses os/exec.
	Run func(ctx context.Context, name string, args ...string) error
	// HTTP is the client used for the attestation API.
	HTTP *http.Client
	// APIBase is the GitHub API base URL.
	APIBase string
	// Repo is "owner/name".
	Repo string
	// Token is GH_TOKEN, if any.
	Token string
	// Identity and Issuer pin the expected signing identity for cosign.
	Identity string
	Issuer   string
}

type State struct {
	Version int `json:"version"`
	// LastCheck is when the release API was last consulted; it drives the 24 h
	// throttle.
	LastCheck time.Time `json:"last_check,omitempty"`
	// CurrentVersion is the binary that performed the check.
	CurrentVersion string `json:"current_version,omitempty"`
	// PendingVersion is a newer release that has been seen but not applied.
	// The implicit apply path consumes it (§15.1).
	PendingVersion string `json:"pending_version,omitempty"`
	// Verification is the last known outcome for PendingVersion.
	Verification Outcome `json:"verification,omitempty"`
	// Notified records that the user has already been told about
	// PendingVersion, so the notice is printed once per release.
	Notified bool `json:"notified,omitempty"`
	// LastApply is when an apply last completed.
	LastApply time.Time `json:"last_apply,omitempty"`
	// LastError is the last apply or check failure, for `pay doctor`.
	LastError string `json:"last_error,omitempty"`
}

type Updater struct {
	// HTTP is the client for the release API and downloads.
	HTTP *http.Client
	// APIBase is the GitHub API root (a field, not a constant, so tests point
	// it at an httptest.Server).
	APIBase string
	// DownloadBase is the release asset root. Empty derives GitHub's.
	// PAY_UPDATE_URL sets it.
	DownloadBase string
	// Repo is "owner/name".
	Repo string
	// Channel is "stable" (the /releases/latest endpoint) or anything else,
	// which lists /releases and takes the newest, prereleases included.
	Channel string
	// CurrentVersion is the running binary's version.
	CurrentVersion string
	// BinaryPath is the symlink-resolved path that will be replaced.
	BinaryPath string
	// StatePath is update-state.json's location.
	StatePath string
	// LockPath is the apply lock's location. Empty derives it from StatePath.
	LockPath string
	// Token is GH_TOKEN.
	Token string
	// Strict is PAY_UPDATE_STRICT=1: refuse an unverifiable release.
	Strict bool
	// Force applies even when the version is not newer.
	Force bool
	// AllowManaged applies even on a package-managed install.
	AllowManaged bool
	// OS and Arch name the artefact; empty uses runtime's.
	OS, Arch string
	// Now is the injected clock.
	Now func() time.Time
	// Stderr receives the loud unverifiable warning. Nil discards it.
	Stderr io.Writer
	// Signer verifies checksums.txt.
	Signer Signer
	// Timeout is the apply deadline; 0 uses ApplyDeadline.
	Timeout time.Duration
	// CheckTimeout bounds the release lookup; 0 uses CheckTimeout.
	CheckTimeout time.Duration
	// VerifyOnCheck makes --check report the three-state outcome by verifying
	// the signature over checksums.txt (no artefact download).
	VerifyOnCheck bool
	// contains filtered or unexported fields
}

type Verification struct {
	Outcome Outcome `json:"outcome"`
	// Method is "checksum", "cosign" or "attestation".
	Method string `json:"method,omitempty"`
	// Reason explains an unverifiable or failed outcome in one line.
	Reason string `json:"reason,omitempty"`
	// Expected and Computed are the digests, printed on a mismatch.
	Expected string `json:"expected,omitempty"`
	Computed string `json:"computed,omitempty"`
}