bootstrap

type Options struct {
	// LangoDir is the lango data directory (default: ~/.lango/).
	// When set, envelope.json, keyfile (if default), and skills/ are placed under this path.
	// Primarily used by tests to isolate state in t.TempDir().
	LangoDir string
	// DBPath is the SQLite database path (default: <LangoDir>/lango.db).
	DBPath string
	// KeyfilePath is the path to the passphrase keyfile (default: <LangoDir>/keyfile).
	KeyfilePath string
	// ForceProfile overrides the active profile selection.
	ForceProfile string
	// KeepKeyfile prevents the keyfile from being shredded after crypto initialization.
	// Default (false) shreds the keyfile for security.
	KeepKeyfile bool
	// DBEncryption configures SQLCipher transparent database encryption.
	DBEncryption config.DBEncryptionConfig
	// SkipSecureDetection disables secure hardware provider detection (biometric/TPM).
	// When true, the bootstrap falls back to keyfile or interactive prompt only.
	// Useful for testing and headless environments.
	SkipSecureDetection bool
	// KMSConfig provides KMS settings for KMS KEK slot unwrapping during bootstrap.
	// When set and the envelope has a hardware slot, bootstrap attempts KMS-based
	// MK unwrap before falling back to passphrase.
	KMSConfig *config.KMSConfig
	// KMSProviderName identifies which KMS backend to use for KEK unwrap (e.g., "aws-kms").
	KMSProviderName string
}

type Phase struct {
	Name    string
	Run     func(ctx context.Context, state *State) error
	Cleanup func(state *State) // called in reverse order if a later phase fails
}

type PhaseTimingEntry struct {
	Phase    string        `json:"phase"`
	Duration time.Duration `json:"duration"`
}

type Pipeline struct {
	// contains filtered or unexported fields
}

type Result struct {
	// Config is the decrypted, active configuration.
	Config *config.Config
	// ExplicitKeys tracks which context-related config keys the user explicitly set.
	// nil for legacy profiles or when explicit key tracking is unavailable.
	ExplicitKeys map[string]bool
	// AutoEnabled records which context subsystems were auto-enabled during config resolution.
	AutoEnabled config.AutoEnabledSet
	// DBClient is the shared ent.Client for the application database.
	DBClient *ent.Client
	// RawDB is the underlying *sql.DB for direct SQL operations (e.g., sqlite-vec).
	RawDB *sql.DB
	// Crypto is the initialized CryptoProvider for the session.
	Crypto security.CryptoProvider
	// ConfigStore provides encrypted profile CRUD operations.
	ConfigStore *configstore.Store
	// ProfileName is the name of the loaded profile.
	ProfileName string
	// LangoDir is the resolved data directory (Options.LangoDir or ~/.lango).
	// Downstream components (CLI, status, change-passphrase) use this to locate
	// the envelope file without reaching into bootstrap internals.
	LangoDir string
	// IdentityKey is the Ed25519 identity key derived from the Master Key (Phase 3).
	// nil when MK is unavailable (legacy mode).
	IdentityKey ed25519.PrivateKey
	// PQSigningKeySeed is the 32-byte HKDF seed for ML-DSA-65 PQ signing (Phase 5).
	// nil when MK is unavailable. Downstream calls mldsa65.NewKeyFromSeed to derive the key.
	PQSigningKeySeed []byte
	// KMSUnwrap indicates the MK was unwrapped via a KMS KEK slot (not passphrase/mnemonic).
	KMSUnwrap bool
	// PhaseTiming records the duration of each bootstrap phase.
	PhaseTiming []PhaseTimingEntry `json:"phaseTiming,omitempty"`
}

type State struct {
	Options Options
	Result  Result

	// Internal state passed between phases.
	Home     string
	LangoDir string

	// Encryption detection.
	DBEncrypted bool
	NeedsDBKey  bool

	// Passphrase acquisition.
	Passphrase     string
	PassSource     passphrase.Source
	SecureProvider keyring.Provider
	SecurityTier   keyring.SecurityTier
	FirstRunGuess  bool

	// Database handles (set by phaseOpenDatabase).
	Client *ent.Client
	RawDB  *sql.DB

	// Security state from DB (legacy path).
	Salt     []byte
	Checksum []byte
	FirstRun bool

	// Crypto.
	DBKey  string
	Crypto security.CryptoProvider

	// Envelope-based crypto state.
	Envelope     *security.MasterKeyEnvelope
	MasterKey    []byte // unwrapped MK (zeroed on cleanup)
	LegacyMode   bool   // no envelope, not first run — needs legacy→envelope migration
	RecoveryMode bool   // reserved for future use; no longer set during bootstrap

	// Identity key derived from MK via HKDF (Phase 3).
	IdentityKey ed25519.PrivateKey

	// PQ signing key seed derived from MK via HKDF (Phase 5).
	// 32-byte seed for ML-DSA-65. Downstream code calls mldsa65.NewKeyFromSeed.
	PQSigningKeySeed []byte

	// KMS KEK state (Phase 6).
	KMSProvider security.CryptoProvider // transient, for KMS KEK unwrap only
	KMSUnwrap   bool                    // MK was unwrapped via KMS (not passphrase)
}