update

type Action string

type Asset struct {
	OS     string `json:"os"`     // "linux", "darwin", "windows"
	Arch   string `json:"arch"`   // "amd64", "arm64"
	URL    string `json:"url"`    // absolute https URL of a .tar.gz/.zip
	SHA256 string `json:"sha256"` // lowercase hex digest of the archive
	// Binary is the path of the filex executable INSIDE the archive. Empty
	// defaults to "filex" (goreleaser's layout).
	Binary string `json:"binary,omitempty"`
}

type Config struct {
	// Enabled turns the whole feature off (no outbound request at all).
	Enabled bool
	// Policy is how far this install may move on its own.
	Policy Policy
	// Channel selects the manifest flavor; informational unless ManifestURL is
	// templated by the operator.
	Channel string
	// ManifestURL overrides DefaultManifestURL (air-gapped mirrors, forks).
	ManifestURL string
	// Window restricts automatic application to a daily maintenance window.
	Window Window
	// Interval between checks. Zero → 24h. Values below an hour are raised to
	// an hour: a self-hosted install has no reason to poll harder, and the
	// endpoint is shared by everyone.
	Interval time.Duration
	// StateDir is where the last-seen state is persisted (usually DataDir).
	StateDir string
	// CurrentVersion is the running build (version.Version).
	CurrentVersion string
}

type Decision struct {
	Action Action
	Step   Step
	Target Release
	// Reason is the decision in English, for the log and the webhook.
	Reason string
	// ReasonKey + ReasonVars are the same sentence as a key of the server
	// catalogue (srvtext, `server.update.reason.*`): the admin page says it
	// in the reader's language. ⚠ It printed Reason, so the Turkish panel read
	// "policy is manual — updates are announced, not applied"
	// (release-candidate sweep, 2026-09-21).
	ReasonKey  string
	ReasonVars map[string]string
	Skipped    []Release // releases between current and target (informational)
}

type Input struct {
	Current  Version
	Manifest *Manifest
	Policy   Policy
	Mode     InstallMode
	// Now and Window gate automatic application to a maintenance window. A zero
	// Window means "any time".
	Now    time.Time
	Window Window
}

type InstallMode string

type Manifest struct {
	// Channel this document describes ("stable", "beta"…). Informational.
	Channel string `json:"channel"`
	// Releases, newest first is NOT required — Latest sorts them.
	Releases []Release `json:"releases"`
}

type Policy string

type PreApply func(ctx context.Context, target Release) error

type Release struct {
	Version string `json:"version"` // "v0.7.6"
	Date    string `json:"date"`    // ISO-8601 date, display only
	// AutoOK false = never apply automatically (kill switch), even for a patch.
	// Absent is treated as TRUE by the JSON default, so the field must be
	// written explicitly by the release tooling; MarshalJSON on the producer
	// side always emits it.
	AutoOK bool `json:"auto_ok"`
	// Migrations true = this release changes the database schema.
	Migrations bool `json:"migrations"`
	// MinVersion, when set, is the oldest version that may upgrade DIRECTLY to
	// this one. Older installs must step through it. Empty = no floor.
	MinVersion string `json:"min_version,omitempty"`
	// Notes is a short human summary; NotesURL points at the full changelog.
	Notes    string `json:"notes,omitempty"`
	NotesURL string `json:"notes_url,omitempty"`
	// Severity ("security" | "normal") — a security release is surfaced even
	// when the policy would otherwise stay quiet.
	Severity string `json:"severity,omitempty"`
	// Assets are the downloadable binaries for a self-applying install, each
	// with its SHA-256. The digest lives HERE rather than in a separate
	// checksums file so there is one authenticated document to trust: the
	// manifest arrives over TLS from a host we control, and everything else is
	// verified against it.
	Assets []Asset `json:"assets,omitempty"`
	// Image is the container reference for this release, shown in the upgrade
	// instructions a container install receives.
	Image string `json:"image,omitempty"`
}

type Service struct {

	// OnNewRelease, when set, is called once per newly discovered version —
	// wired to notifications. "Once" is tracked in the persisted state, so a
	// restart loop cannot spam the operator.
	OnNewRelease func(Decision)
	// contains filtered or unexported fields
}

type State struct {
	LastCheck   time.Time `json:"last_check"`
	LastError   string    `json:"last_error,omitempty"`
	LatestSeen  string    `json:"latest_seen,omitempty"`
	NotifiedFor string    `json:"notified_for,omitempty"`
	// LastApplied records a self-update this install performed, for the audit
	// trail the UI shows ("upgraded 0.7.5 → 0.7.6 on …").
	LastApplied    string    `json:"last_applied,omitempty"`
	LastAppliedAt  time.Time `json:"last_applied_at,omitempty"`
	LastApplyError string    `json:"last_apply_error,omitempty"`
	// contains filtered or unexported fields
}

type Step string

type Version struct {
	Major, Minor, Patch int
	Pre                 string // "rc.1" in 1.2.3-rc.1 (without the dash)
	Raw                 string // exactly as parsed, e.g. "v0.7.6"
}

type Window struct {
	FromMin, ToMin int // minutes since midnight; equal values = always
	Set            bool
}