skillpins

type ApproveRequest struct {
	ExpectedHash     string
	Reason           string
	Evidence         []string
	ApprovedBy       string
	ApprovedBySource string
}

type FileDigest struct {
	Path   string `json:"path"`
	Digest string `json:"digest"`
}

type Manifest struct {
	SkillMD []byte
	Files   []ManifestFile
}

type ManifestFile struct {
	Path   string
	Digest string
	Size   int64
}

type OriginRef struct {
	Repo      string `json:"repo,omitempty"`
	Ref       string `json:"ref,omitempty"`
	CommitSHA string `json:"commitSha,omitempty"`
}

type PinFile struct {
	Version   string               `json:"version"`
	Stack     string               `json:"stack"`
	CreatedAt time.Time            `json:"created_at"`
	Skills    map[string]*SkillPin `json:"skills"`
}

type SkillDiff struct {
	Name          string         `json:"name"`
	OldSkillHash  string         `json:"old_skill_hash"`
	NewSkillHash  string         `json:"new_skill_hash"`
	OldDocument   string         `json:"old_document,omitempty"`
	NewDocument   string         `json:"new_document,omitempty"`
	AddedFiles    []string       `json:"added_files,omitempty"`
	RemovedFiles  []string       `json:"removed_files,omitempty"`
	ModifiedFiles []string       `json:"modified_files,omitempty"`
	Findings      []pins.Finding `json:"findings,omitempty"`
}

type SkillPin struct {
	// SkillHash is the digest of the canonical SKILL.md rendering.
	SkillHash string `json:"skill_hash"`
	// Files are the supporting-file digests, sorted by path.
	Files []FileDigest `json:"files,omitempty"`
	// Document is the canonical SKILL.md as pinned, kept so drift review can
	// show a prose diff (the pkg/pins Description/schema-capture precedent).
	Document string `json:"document,omitempty"`
	// Source and Origin are provenance at pin time: "local" or "git".
	Source string     `json:"source,omitempty"`
	Origin *OriginRef `json:"origin,omitempty"`
	// ApprovedReason records the human justification when a pin carrying
	// unresolved findings was approved. Empty for finding-free approvals.
	ApprovedReason string `json:"approved_reason,omitempty"`

	PinnedAt       time.Time `json:"pinned_at"`
	LastVerifiedAt time.Time `json:"last_verified_at"`
	Status         string    `json:"status"`
	// Findings are advisory poisoning-scan results for the pinned content.
	Findings []pins.Finding `json:"findings,omitempty"`
	// Approvals is the projected history, newest first. The log under
	// pins/approvals/skills/ is the source of truth.
	Approvals []pinapprovals.Entry `json:"approvals,omitempty"`
	// CompositeHash is the approval-binding fingerprint of the pinned digests.
	CompositeHash string `json:"composite_hash,omitempty"`
}

type SkillSource interface {
	ListSkills() []*registry.AgentSkill
	GetSkill(name string) (*registry.AgentSkill, error)
	ListFiles(skillName string) ([]registry.SkillFile, error)
	ReadFile(skillName, filePath string) ([]byte, error)
}

type Store struct {
	// contains filtered or unexported fields
}

type SyncResult struct {
	// Pinned lists skills pinned for the first time this pass.
	Pinned []string
	// Drifted lists skills whose content no longer matches their pin.
	Drifted []string
	// Missing lists pinned skills absent from the registry. Their records
	// are kept (reset guidance surfaces in the CLI), never auto-pruned.
	Missing []string
}

type VerifyResult struct {
	SkillName     string
	Status        string // StatusPinned (first pin or clean) | StatusDrift
	CompositeHash string
	Diff          *SkillDiff
}