upgrade

type Asset struct {
	Name               string `json:"name"`
	BrowserDownloadURL string `json:"browser_download_url"`
	Size               int64  `json:"size"`
}

type CheckResult struct {
	Current         string
	Latest          string
	UpdateAvailable bool
	Release         *Release
}

type Options struct {
	// SkipVerify installs without proving the archive's provenance.
	//
	// It exists for air-gapped mirrors that cannot reach Sigstore, and for
	// nothing else. It does not disable the checksum: that still runs, and
	// still proves only that the download arrived intact — checksums.txt is
	// served from the same release as the archive, so an attacker who can
	// replace one replaces the other.
	SkipVerify bool

	// Verifier overrides the provenance verifier. Tests set it.
	Verifier *provenance.Verifier
}

type Release struct {
	TagName string  `json:"tag_name"`
	Name    string  `json:"name"`
	Assets  []Asset `json:"assets"`
}

type Staged struct {
	// Tag is the release this came from, resolved — so a caller that asked
	// for "latest" learns what latest meant.
	Tag string
	// BinaryPath is the extracted cloop executable.
	BinaryPath string
	// AssetName is the release archive the binary came out of.
	AssetName string
	// ProvenanceVerified records that the archive's signature was checked
	// against cloop's pinned release identity. False only when the caller
	// passed Options.SkipVerify.
	ProvenanceVerified bool
}