approval

type ApprovedField struct {
	Keys    []string
	Network *bool
}

type EphemeralStore struct {
	// contains filtered or unexported fields
}

type FSStore struct {
	// contains filtered or unexported fields
}

type GatedItem struct {
	Field  string
	Key    string
	Value  string
	Source profile.Contributor
	// PriorApproved reports whether the stored state already approved this
	// key. The UI pre-selects such items and leaves newly introduced ones
	// unselected, so a profile change cannot silently re-approve old grants.
	PriorApproved bool
	// Detail is a concise one-line descriptor for the list view ("read/write",
	// "host value", "talk", a host→container port binding, ...). Value is the
	// full pre-expansion label, shown for the highlighted item in the detail
	// pane.
	Detail string
	// Body is an optional multi-line rendering of the item's full value for
	// the detail pane (services format their definition across lines). When
	// empty, the pane shows Value wrapped.
	Body string
	// Benign marks permissions that are almost always harmless — common
	// dotfiles, cache dirs, display/runtime env vars, loopback ports,
	// D-Bus talk. Benign items are de-emphasized (grey, listed at the
	// bottom); everything else — including anything new from a remote import
	// — stays prominent, so the emphasis is fail-safe.
	Benign bool
	// Warning marks grants that deserve a highlighted color and the very top
	// of the list. Services are the biggest grant — a whole companion
	// container — so they carry it.
	Warning bool
}

type Lockable interface {
	// LockPath returns the advisory lock file path for fullName's state
	// file: a stable sibling of the state file, which Save replaces via
	// rename.
	LockPath(fullName string) (string, error)
}

type Prompt func(req PromptRequest, stdin io.Reader, stdout io.Writer) (map[string]map[string]bool, error)

type PromptRequest struct {
	ProfileName string
	FullName    string
	Hash        string
	Items       []GatedItem
}

type ReadOnlyStore struct {
	// contains filtered or unexported fields
}

type State struct {
	Hash     string
	Approved map[string]ApprovedField
}

type Store interface {
	Load(profileName string) (State, error)
	Save(profileName string, s State) error
}