update

type AdvancedSignatureVerifier struct {
	// Algorithm is the signature algorithm used
	Algorithm SignatureAlgorithm
	// PublicKey is the public key used for verification
	PublicKey interface{}
}

type ApplierOptions struct {
	// InstallDir is the directory where the tool is installed
	InstallDir string
	// TempDir is the directory for temporary files during update
	TempDir string
	// BackupDir is the directory for backups during update
	BackupDir string
	// CurrentVersions contains the current versions of components
	CurrentVersions map[string]version.Version
	// Logger is the logger for update operations
	Logger io.Writer
}

type AtomicReplaceResult struct {
	// StagedBytes is the total decompressed size landed in staging.
	StagedBytes int64

	// BackupPath is the dest.bak.<ts> path. Empty when there was no
	// pre-existing dest (first install) or when KeepBackup=false and
	// the cleanup happened.
	BackupPath string

	// FirstInstall reports whether dest didn't exist before the apply.
	FirstInstall bool
}

type AuditEvent struct {
	// Timestamp is the time the event occurred
	Timestamp time.Time `json:"timestamp"`
	// EventType is the type of event
	EventType string `json:"event_type"`
	// Component is the component associated with the event
	Component string `json:"component"`
	// User is the user who triggered the event
	User string `json:"user,omitempty"`
	// TransactionID is the ID of the transaction associated with the event
	TransactionID string `json:"transaction_id,omitempty"`
	// PackageID is the ID of the package associated with the event
	PackageID string `json:"package_id,omitempty"`
	// Details contains additional details about the event
	Details map[string]interface{} `json:"details,omitempty"`
}

type AuditLogger struct {
	// Writer is the writer for audit log output
	Writer io.Writer
}

type BatchDownloader struct {
	MaxConcurrent int
	Client        *http.Client
}

type BinaryComponentInfo struct {
	Version      string            `json:"version"`
	Platforms    []string          `json:"platforms"`
	MinVersion   string            `json:"min_version"`
	Required     bool              `json:"required"`
	ChangelogURL string            `json:"changelog_url"`
	Checksums    map[string]string `json:"checksums"`
}

type BinaryUpdater struct {
	// contains filtered or unexported fields
}

type Bundle struct {
	Metadata   BundleMetadata    `json:"metadata"`
	Components []ComponentInfo   `json:"components"`
	Checksums  map[string]string `json:"checksums"`
	Signatures map[string]string `json:"signatures"`
	CreatedBy  string            `json:"created_by"`
	CreatedAt  time.Time         `json:"created_at"`
	ExpiresAt  *time.Time        `json:"expires_at,omitempty"`
}

type BundleExportOptions struct {
	Version          string
	Type             string
	Description      string
	SourceVersion    string
	TargetVersion    string
	Platforms        []string
	Incremental      bool
	OutputPath       string
	CreatedBy        string
	ExpiresAt        *time.Time
	IncludeBinary    bool
	IncludeTemplates bool
	IncludeModules   bool
	SignBundle       bool
	SigningKey       *rsa.PrivateKey
}

type BundleImportOptions struct {
	VerifyIntegrity bool
	ForceImport     bool
	CreateBackup    bool
	DryRun          bool
}

type BundleInfo struct {
	Path           string
	Size           int64
	Created        time.Time
	ComponentCount int
	Signed         bool
	Bundle         *Bundle
}

type BundleManager struct {
	// contains filtered or unexported fields
}

type BundleMetadata struct {
	Version       string   `json:"version"`
	BundleType    string   `json:"bundle_type"`
	Description   string   `json:"description"`
	SourceVersion string   `json:"source_version"`
	TargetVersion string   `json:"target_version"`
	Platforms     []string `json:"platforms"`
	Incremental   bool     `json:"incremental"`
}

type Changelog struct {
	Project     string           `json:"project"`
	Format      string           `json:"format"`
	LastUpdated time.Time        `json:"last_updated"`
	Entries     []ChangelogEntry `json:"entries"`
}

type ChangelogEntry struct {
	Version     string    `json:"version"`
	Date        time.Time `json:"date"`
	Type        string    `json:"type"` // added, changed, fixed, removed, security
	Category    string    `json:"category"`
	Title       string    `json:"title"`
	Description string    `json:"description"`
	Impact      string    `json:"impact"`
	Breaking    bool      `json:"breaking"`
	Security    bool      `json:"security"`
	References  []string  `json:"references"`
}

type ChangelogManager struct {
	// contains filtered or unexported fields
}

type Checker interface {
	CheckForUpdates() (*VersionInfo, error)
	GetCurrentVersion() string
	GetLatestVersion() (string, error)
}

type ComplianceInfo struct {
	Version  string   `json:"version"`
	Coverage []string `json:"coverage,omitempty"`
	Controls []string `json:"controls,omitempty"`
}

type ComplianceMap struct {
	OWASPLLMTop10 ComplianceInfo `json:"owasp_llm_top10"`
	ISO42001      ComplianceInfo `json:"iso_42001"`
}

type ComponentInfo struct {
	Name        string `json:"name"`
	Version     string `json:"version"`
	Type        string `json:"type"`
	Path        string `json:"path"`
	Size        int64  `json:"size"`
	Checksum    string `json:"checksum"`
	Required    bool   `json:"required"`
	Description string `json:"description"`
}

type ComponentType string

type ComponentUpdate struct {
	Component      string
	Available      bool
	CurrentVersion string
	LatestVersion  string
	ChangelogURL   string
	ReleaseNotes   string
	UpdateSize     int64
	Critical       bool
	SecurityUpdate bool
}

type ComponentVersionChecker struct {
	// contains filtered or unexported fields
}

type Components struct {
	Binary    BinaryComponentInfo    `json:"binary"`
	Templates TemplatesComponentInfo `json:"templates"`
	Modules   []ModuleComponentInfo  `json:"modules"`
	Patches   PatchesInfo            `json:"patches,omitempty"`
}

type ConnectionSecurityOptions struct {
	// Whether to enable certificate pinning
	EnableCertificatePinning bool
	// Pinned certificates by host
	PinnedCertificates []PinnedCertificate
	// Whether to check certificate revocation
	CheckRevocation bool
	// Minimum TLS version
	MinTLSVersion uint16
	// Cipher suites (nil means use defaults)
	CipherSuites []uint16
	// Whether to enable HTTP/2
	EnableHTTP2 bool
	// Timeout for connections
	ConnectionTimeout time.Duration
	// Timeout for TLS handshake
	TLSHandshakeTimeout time.Duration
	// Timeout for idle connections
	IdleConnectionTimeout time.Duration
	// Maximum number of idle connections
	MaxIdleConnections int
	// Maximum number of idle connections per host
	MaxIdleConnectionsPerHost int
	// Retry configuration
	RetryConfig RetryConfig
}

type ConsoleNotificationHandler struct {
	// Writer is the writer for notification output
	Writer io.Writer
}

type CustomizationManager struct {
	// Registry is the customization registry
	Registry *customization.Registry
	// Detector detects user customizations
	Detector *customization.CustomizationDetector
	// Preserver preserves and reapplies user customizations
	Preserver *customization.CustomizationPreserver
	// InstallDir is the directory where the tool is installed
	InstallDir string
	// BackupDir is the directory for backups during update
	BackupDir string
	// Logger is the logger for customization operations
	Logger *os.File
}

type DetailedVersionInfo struct {
	Version        string    `json:"version"`
	ReleaseDate    time.Time `json:"releaseDate"`
	ChangelogURL   string    `json:"changelogURL"`
	ReleaseNotes   string    `json:"releaseNotes"`
	DownloadURL    string    `json:"downloadURL"`
	Signature      string    `json:"signature"`
	ChecksumSHA256 string    `json:"checksumSHA256"`
	Required       bool      `json:"required"`
	MinVersion     string    `json:"minVersion,omitempty"`
}

type DowngradeProtection struct {
	// Policy is the current security policy
	Policy *SecurityPolicy

	// PolicyPath is the path to the security policy file
	PolicyPath string

	// Verifier is used to verify policy signatures
	Verifier *SignatureVerifier

	// KeyStore is used to store and retrieve cryptographic keys
	KeyStore *keystore.FileKeyStore
}

type DownloadOptions struct {
	// Whether to verify TLS certificates
	VerifyCertificate bool
	// Number of retry attempts
	RetryAttempts int
	// Delay between retries (exponential backoff will be applied)
	RetryDelay time.Duration
	// Timeout for the entire download
	Timeout time.Duration
	// Progress callback
	ProgressCallback func(totalBytes, downloadedBytes int64, percentage float64)
	// Whether to resume a partial download if possible
	Resume bool
	// Custom HTTP headers
	Headers map[string]string
}

type DownloadProgress struct {
	URL             string
	Filename        string
	TotalBytes      int64
	DownloadedBytes int64
	Speed           float64
	ETA             time.Duration
	StartTime       time.Time
}

type DownloadResult struct {
	URL      string
	Path     string
	Size     int64
	Duration time.Duration
	Error    error
}

type DownloadStats struct {
	TotalDownloads      int
	TotalBytes          int64
	SuccessfulDownloads int
	FailedDownloads     int
	AverageSpeed        float64
	TotalTime           time.Duration
}

type Downloader struct {
	// contains filtered or unexported fields
}

type EnhancedVersionManifest struct {
	Core struct {
		Version         string    `json:"version"`
		ReleaseDate     time.Time `json:"releaseDate"`
		ChangelogURL    string    `json:"changelogURL"`
		ReleaseNotes    string    `json:"releaseNotes"`
		DownloadURL     string    `json:"downloadURL"`
		Signature       string    `json:"signature"`
		ChecksumSHA256  string    `json:"checksumSHA256"`
		Size            int64     `json:"size"`
		Dependencies    []string  `json:"dependencies"`
		BreakingChanges bool      `json:"breakingChanges"`
	} `json:"core"`
	Templates struct {
		Version         string    `json:"version"`
		ReleaseDate     time.Time `json:"releaseDate"`
		ChangelogURL    string    `json:"changelogURL"`
		ReleaseNotes    string    `json:"releaseNotes"`
		DownloadURL     string    `json:"downloadURL"`
		Signature       string    `json:"signature"`
		ChecksumSHA256  string    `json:"checksumSHA256"`
		Size            int64     `json:"size"`
		Dependencies    []string  `json:"dependencies"`
		BreakingChanges bool      `json:"breakingChanges"`
	} `json:"templates"`
	Modules []struct {
		ID              string    `json:"id"`
		Name            string    `json:"name"`
		Version         string    `json:"version"`
		ReleaseDate     time.Time `json:"releaseDate"`
		ChangelogURL    string    `json:"changelogURL"`
		ReleaseNotes    string    `json:"releaseNotes"`
		DownloadURL     string    `json:"downloadURL"`
		Signature       string    `json:"signature"`
		ChecksumSHA256  string    `json:"checksumSHA256"`
		Size            int64     `json:"size"`
		Dependencies    []string  `json:"dependencies"`
		BreakingChanges bool      `json:"breakingChanges"`
	} `json:"modules"`
}

type ExtendedUpdateInfo struct {
	Component       string                    `json:"component"`
	CurrentVersion  version.Version           `json:"current_version"`
	LatestVersion   version.Version           `json:"latest_version"`
	ChangeType      version.VersionChangeType `json:"change_type"`
	ChangelogURL    string                    `json:"changelog_url"`
	ReleaseDate     time.Time                 `json:"release_date"`
	ReleaseNotes    string                    `json:"release_notes"`
	DownloadURL     string                    `json:"download_url"`
	Signature       string                    `json:"signature"`
	ChecksumSHA256  string                    `json:"checksum_sha256"`
	Required        bool                      `json:"required"`
	SecurityFixes   bool                      `json:"security_fixes"`
	Size            int64                     `json:"size"`
	Dependencies    []string                  `json:"dependencies"`
	BreakingChanges bool                      `json:"breaking_changes"`
}

type ExtendedUpdateNotifier interface {
	UpdateNotifier
	NotifyAvailableUpdate(ctx context.Context, versionInfo *UpdateVersionInfo) error
	NotifyRequiredUpdate(ctx context.Context, versionInfo *UpdateVersionInfo) error
	NotifySecurityUpdate(ctx context.Context, versionInfo *UpdateVersionInfo, details string) error
}

type FileVerificationResult struct {
	Verified       bool
	ChecksumValid  bool
	SignatureValid bool
	Algorithm      string
	KeyID          string
	Error          error
}

type GeneralUpdateManifest struct {
	Version      string            `json:"version"`
	Components   []ComponentInfo   `json:"components"`
	Checksums    map[string]string `json:"checksums"`
	Signatures   map[string]string `json:"signatures"`
	Timestamp    time.Time         `json:"timestamp"`
	MinVersion   string            `json:"min_version"`
	MaxVersion   string            `json:"max_version"`
	ChangelogURL string            `json:"changelog_url"`
}

type GitHubCommit struct {
	SHA    string `json:"sha"`
	Commit struct {
		Message string `json:"message"`
		Author  struct {
			Date string `json:"date"`
		} `json:"author"`
	} `json:"commit"`
}

type GitHubRelease struct {
	TagName     string `json:"tag_name"`
	Name        string `json:"name"`
	Body        string `json:"body"`
	Draft       bool   `json:"draft"`
	Prerelease  bool   `json:"prerelease"`
	CreatedAt   string `json:"created_at"`
	PublishedAt string `json:"published_at"`
	Assets      []struct {
		Name               string `json:"name"`
		BrowserDownloadURL string `json:"browser_download_url"`
		Size               int64  `json:"size"`
		ContentType        string `json:"content_type"`
	} `json:"assets"`
	HTMLURL string `json:"html_url"`
}

type GitHubRepoInfo struct {
	Owner string
	Repo  string
}

type GitLabCommit struct {
	ID      string `json:"id"`
	Title   string `json:"title"`
	Message string `json:"message"`
}

type GitLabRelease struct {
	TagName     string `json:"tag_name"`
	Name        string `json:"name"`
	Description string `json:"description"`
	CreatedAt   string `json:"created_at"`
	ReleasedAt  string `json:"released_at"`
	Assets      struct {
		Links []struct {
			Name string `json:"name"`
			URL  string `json:"url"`
		} `json:"links"`
	} `json:"assets"`
	WebURL string `json:"web_url"`
}

type GitLabRepoInfo struct {
	Host  string
	Owner string
	Repo  string
}

type HashAlgorithm string

type HashGenerator struct {
	Algorithm HashAlgorithm
	// contains filtered or unexported fields
}

type HashResult struct {
	Algorithm HashAlgorithm // The algorithm used
	Hash      []byte        // Raw hash bytes
	HexString string        // Hex-encoded hash string
	FilePath  string        // Path to the file that was hashed (if applicable)
	Timestamp time.Time     // When the hash was generated
}

type HashVerifier struct {
	// contains filtered or unexported fields
}

type ImportResult struct {
	Success           bool
	ComponentsUpdated []string
	Errors            []string
	BackupPath        string
	RestartRequired   bool
}

type InstallationInfo struct {
	BinaryPath    string    `json:"binary_path"`
	BinarySize    int64     `json:"binary_size"`
	BinaryModTime time.Time `json:"binary_mod_time"`
	TemplateDir   string    `json:"template_dir"`
	TemplateCount int       `json:"template_count"`
	ModuleDir     string    `json:"module_dir"`
	ModuleCount   int       `json:"module_count"`
	BackupDir     string    `json:"backup_dir"`
	Platform      string    `json:"platform"`
	Architecture  string    `json:"architecture"`
}

type Installer struct {
	// contains filtered or unexported fields
}

type IntegrityReport struct {
	FilePath         string
	ChecksumValid    bool
	ExpectedChecksum string
	ActualChecksum   string
	SignatureValid   bool
	SignatureError   error
	FileSize         int64
	VerifiedAt       string
}

type IntegrityVerifier struct {
	// Logger is the logger for verification operations
	Logger io.Writer
}

type JSONNotificationHandler struct {
	// Writer is the writer for JSON notification output
	Writer io.Writer
}

type KeyInfo struct {
	ID        string `json:"id"`
	KeySize   int    `json:"key_size"`
	Algorithm string `json:"algorithm"`
	Usage     string `json:"usage"`
}

type LogEntry struct {
	// Timestamp is the time the log entry was created
	Timestamp time.Time `json:"timestamp"`
	// Level is the severity level of the log entry
	Level LogLevel `json:"level"`
	// Message is the log message
	Message string `json:"message"`
	// Component is the component that generated the log entry
	Component string `json:"component"`
	// TransactionID is the ID of the transaction associated with the log entry
	TransactionID string `json:"transaction_id,omitempty"`
	// Details contains additional details about the log entry
	Details map[string]interface{} `json:"details,omitempty"`
}

type LogLevel string

type Logger interface {
	Debug(msg string, args ...interface{})
	Info(msg string, args ...interface{})
	Warn(msg string, args ...interface{})
	Error(msg string, args ...interface{})
}

type LoggerOptions struct {
	// Writer is the writer for log output
	Writer io.Writer
	// JSONWriter is the writer for JSON log output
	JSONWriter io.Writer
	// MinLevel is the minimum log level to output
	MinLevel LogLevel
	// IncludeDetails determines whether to include details in log output
	IncludeDetails bool
}

type Manager interface {
	Checker
	PerformUpdate(request UpdateRequest) (*UpdateResponse, error)
	GetUpdateHistory() ([]UpdateResult, error)
}

type ManagerUpdateResult struct {
	Component    string
	Success      bool
	OldVersion   string
	NewVersion   string
	ChangelogURL string
	FilesUpdated []string
	Error        error
	Duration     time.Duration
}

type ModuleComponentInfo struct {
	ID           string             `json:"id"`
	Name         string             `json:"name"`
	Version      string             `json:"version"`
	MinVersion   string             `json:"min_version"`
	Required     bool               `json:"required"`
	ChangelogURL string             `json:"changelog_url"`
	Checksum     string             `json:"checksum"`
	Dependencies []ModuleDependency `json:"dependencies"`
}

type ModuleDependency struct {
	ID         string `json:"id"`
	MinVersion string `json:"min_version"`
}

type ModuleInfo struct {
	Name           string            `json:"name"`
	Version        string            `json:"version"`
	Provider       string            `json:"provider"`
	Author         string            `json:"author"`
	Description    string            `json:"description"`
	Capabilities   []string          `json:"capabilities"`
	Dependencies   []string          `json:"dependencies"`
	MinToolVersion string            `json:"min_tool_version"`
	MaxToolVersion string            `json:"max_tool_version"`
	Metadata       map[string]string `json:"metadata"`
	FilePath       string            `json:"file_path"`
	Size           int64             `json:"size"`
	Checksum       string            `json:"checksum"`
	LastUpdated    time.Time         `json:"last_updated"`
}

type ModuleManifest struct {
	Version     string                 `json:"version"`
	LastUpdated time.Time              `json:"last_updated"`
	Modules     map[string]ModuleInfo  `json:"modules"`
	Providers   map[string][]string    `json:"providers"`
	Statistics  map[string]interface{} `json:"statistics"`
	Repository  RepositoryMetadata     `json:"repository"`
}

type Notification struct {
	// Type is the type of notification
	Type NotificationType `json:"type"`
	// Timestamp is the time the notification was created
	Timestamp time.Time `json:"timestamp"`
	// Message is the notification message
	Message string `json:"message"`
	// TransactionID is the ID of the transaction associated with the notification
	TransactionID string `json:"transaction_id,omitempty"`
	// PackageID is the ID of the package associated with the notification
	PackageID string `json:"package_id,omitempty"`
	// Component is the component associated with the notification
	Component string `json:"component,omitempty"`
	// Details contains additional details about the notification
	Details map[string]interface{} `json:"details,omitempty"`
}

type NotificationHandler interface {
	// HandleNotification handles a notification
	HandleNotification(notification *Notification) error
}

type NotificationIntegration struct {
	// contains filtered or unexported fields
}

type NotificationManager struct {
	// Handlers is the list of notification handlers
	Handlers []NotificationHandler
}

type NotificationType string

type PackageManifest struct {
	SchemaVersion string        `json:"schema_version"`
	PackageID     string        `json:"package_id"`
	PackageType   PackageType   `json:"package_type"`
	CreatedAt     time.Time     `json:"created_at"`
	ExpiresAt     time.Time     `json:"expires_at"`
	Publisher     Publisher     `json:"publisher"`
	Components    Components    `json:"components"`
	Compliance    ComplianceMap `json:"compliance"`
	Signature     string        `json:"signature"`
}

type PackageType string

type PatchInfo struct {
	FromVersion string            `json:"from_version"`
	ToVersion   string            `json:"to_version"`
	Platforms   []string          `json:"platforms,omitempty"`
	Checksums   map[string]string `json:"checksums,omitempty"`
	Checksum    string            `json:"checksum,omitempty"`
	ID          string            `json:"id,omitempty"`
}

type PatchesInfo struct {
	Binary    []PatchInfo `json:"binary,omitempty"`
	Templates []PatchInfo `json:"templates,omitempty"`
	Modules   []PatchInfo `json:"modules,omitempty"`
}

type PinnedCertificate struct {
	Host            string   // Hostname
	PublicKeyHashes []string // SHA-256 hashes of the public key in base64
	SubjectName     string   // Expected subject name
	Issuer          string   // Expected issuer
}

type ProgressCallback func(*DownloadProgress)

type Publisher struct {
	Name        string `json:"name"`
	URL         string `json:"url"`
	PublicKeyID string `json:"public_key_id"`
}

type Release struct {
	Version      string
	Name         string
	Description  string
	ChangelogURL string
	ReleaseDate  time.Time
	Assets       []ReleaseAsset
	Prerelease   bool
	Draft        bool
	TagName      string
}

type ReleaseAsset struct {
	Name         string
	DownloadURL  string
	Size         int64
	ContentType  string
	Checksum     string
	SignatureURL string
	Platform     string
	Architecture string
}

type RepositoryConfig struct {
	Name     string
	URL      string
	Branch   string
	Type     string
	Token    string
	Priority int
	Enabled  bool
}

type RepositoryInfo struct {
	// Type of repository (github, gitlab, local)
	Type RepositoryType
	// URL of the repository
	URL string
	// Local path where the repository is cloned
	LocalPath string
	// Current version (commit hash or tag)
	CurrentVersion string
	// Latest available version
	LatestVersion string
	// Whether the repository has updates available
	HasUpdates bool
	// Last sync time
	LastSync time.Time
}

type RepositoryManager struct {
	// Base directory for repositories
	BaseDir string
	// Map of repository information by name
	Repositories map[string]*RepositoryInfo
}

type RepositoryMetadata struct {
	URL         string    `json:"url"`
	Branch      string    `json:"branch"`
	Commit      string    `json:"commit"`
	LastUpdated time.Time `json:"last_updated"`
	Size        int64     `json:"size"`
	FileCount   int       `json:"file_count"`
}

type RepositoryStatus struct {
	Name        string    `json:"name"`
	URL         string    `json:"url"`
	Type        string    `json:"type"`
	Available   bool      `json:"available"`
	LastChecked time.Time `json:"last_checked"`
	LastUpdated time.Time `json:"last_updated"`
	ItemCount   int       `json:"item_count"`
	TotalSize   int64     `json:"total_size"`
	Error       string    `json:"error,omitempty"`
	Version     string    `json:"version"`
}

type RepositoryType string

type RepositoryUpdater struct {
	// contains filtered or unexported fields
}

type RetryConfig struct {
	// Maximum number of retry attempts
	MaxRetries int
	// Initial delay before first retry
	InitialDelay time.Duration
	// Maximum delay between retries
	MaxDelay time.Duration
	// Whether to use exponential backoff
	UseExponentialBackoff bool
	// Jitter factor (0.0-1.0) to add randomness to retry delays
	JitterFactor float64
	// Status codes that should trigger a retry
	RetryableStatusCodes []int
	// Network errors that should trigger a retry
	RetryableNetworkErrors []string
}

type SecureClient struct {
	// contains filtered or unexported fields
}

type SecureDownloadOptions struct {
	// Security options for the connection
	SecurityOptions *ConnectionSecurityOptions
	// Progress callback
	ProgressCallback func(totalBytes, downloadedBytes int64, percentage float64)
	// Whether to resume a partial download if possible
	Resume bool
	// Custom HTTP headers
	Headers map[string]string
	// Chunk size for downloading (0 means no chunking)
	ChunkSize int64
	// Verify file after download
	VerifyAfterDownload bool
}

type SecureDownloader struct {
	// contains filtered or unexported fields
}

type SecurityPolicy struct {
	// MinimumTLSVersion is the minimum allowed TLS version
	MinimumTLSVersion uint16 `json:"minimum_tls_version"`

	// AllowedCipherSuites is the list of allowed TLS cipher suites
	AllowedCipherSuites []uint16 `json:"allowed_cipher_suites"`

	// AllowedSignatureAlgorithms is the list of allowed signature algorithms
	AllowedSignatureAlgorithms []SignatureAlgorithm `json:"allowed_signature_algorithms"`

	// MinimumKeySize maps algorithm types to their minimum key sizes in bits
	MinimumKeySize map[string]int `json:"minimum_key_size"`

	// RequireCertificatePinning indicates whether certificate pinning is required
	RequireCertificatePinning bool `json:"require_certificate_pinning"`

	// RequireRevocationCheck indicates whether certificate revocation checking is required
	RequireRevocationCheck bool `json:"require_revocation_check"`

	// MinimumVersions maps component types to their minimum allowed versions
	MinimumVersions map[string]string `json:"minimum_versions"`

	// LastUpdateTime is when the policy was last updated
	LastUpdateTime time.Time `json:"last_update_time"`

	// PolicyVersion is the version of the security policy
	PolicyVersion string `json:"policy_version"`

	// PolicySignature is the cryptographic signature of the policy
	PolicySignature string `json:"policy_signature"`

	// RequireSignatureVerification indicates whether signature verification is required
	RequireSignatureVerification bool `json:"require_signature_verification"`
}

type SignatureAlgorithm string

type SignatureGenerator struct {
	// Algorithm is the signature algorithm used
	Algorithm SignatureAlgorithm
	// PrivateKey is the private key used for signing
	PrivateKey interface{}
}

type SignatureVerifier struct {
	// contains filtered or unexported fields
}

type StagedApplyOptions struct {
	// ArchivePath is the path to the downloaded ZIP bundle.
	ArchivePath string

	// DestDir is the install directory the bundle replaces. May not
	// exist yet on a first install — the function handles both cases.
	DestDir string

	// Validate runs against the staged directory before the dest swap.
	// nil means no validation. Return non-nil error to abort the apply
	// without touching dest. The staged dir is removed on validation
	// error so partial extracts don't leak.
	Validate func(stagedDir string) error

	// KeepBackup keeps the dest.bak.<ts> directory after a successful
	// apply. Default false: backup is removed once the new dest is in
	// place. Set true if the operator passed --backup explicitly.
	KeepBackup bool
}

type TemplateInfo struct {
	ID          string            `json:"id"`
	Name        string            `json:"name"`
	Version     string            `json:"version"`
	Category    string            `json:"category"`
	Author      string            `json:"author"`
	Description string            `json:"description"`
	Tags        []string          `json:"tags"`
	Severity    string            `json:"severity"`
	Metadata    map[string]string `json:"metadata"`
	FilePath    string            `json:"file_path"`
	Size        int64             `json:"size"`
	Checksum    string            `json:"checksum"`
	LastUpdated time.Time         `json:"last_updated"`
}

type TemplateManifest struct {
	Version     string                  `json:"version"`
	LastUpdated time.Time               `json:"last_updated"`
	Templates   map[string]TemplateInfo `json:"templates"`
	Categories  map[string][]string     `json:"categories"`
	Statistics  map[string]interface{}  `json:"statistics"`
	Repository  RepositoryInfo          `json:"repository"`
}

type TemplatesComponentInfo struct {
	Version       string   `json:"version"`
	MinVersion    string   `json:"min_version"`
	Required      bool     `json:"required"`
	ChangelogURL  string   `json:"changelog_url"`
	Checksum      string   `json:"checksum"`
	Categories    []string `json:"categories"`
	TemplateCount int      `json:"template_count"`
}

type TransactionComponent string

type TransactionStatus string

type UpdateApplier struct {
	// InstallDir is the directory where the tool is installed
	InstallDir string
	// TempDir is the directory for temporary files during update
	TempDir string
	// BackupDir is the directory for backups during update
	BackupDir string
	// CurrentVersions contains the current versions of components
	CurrentVersions map[string]version.Version
	// Logger is the logger for update operations
	Logger io.Writer
}

type UpdateCheck struct {
	CheckTime        time.Time
	UpdatesAvailable bool
	Components       map[string]*ComponentUpdate
}

type UpdateComponent struct {
	ID      string
	Version string
}

type UpdateComponents struct {
	Binary    UpdateComponent
	Templates UpdateComponent
	Modules   []UpdateComponent
}

type UpdateDownloader struct {
	// contains filtered or unexported fields
}

type UpdateError struct {
	Component string
	Operation string
	Message   string
	Err       error
	Fatal     bool
	Retry     bool
}

type UpdateExecutionOptions struct {
	// InstallDir is the directory where the tool is installed
	InstallDir string
	// TempDir is the directory for temporary files during update
	TempDir string
	// BackupDir is the directory for backups during update
	BackupDir string
	// LogDir is the directory for log files
	LogDir string
	// CurrentVersions contains the current versions of components
	CurrentVersions map[string]version.Version
	// Logger is the logger for update operations
	Logger io.Writer
	// MinLogLevel is the minimum log level to output
	MinLogLevel LogLevel
	// IncludeLogDetails determines whether to include details in log output
	IncludeLogDetails bool
	// NotificationHandlers is the list of notification handlers
	NotificationHandlers []NotificationHandler
	// User is the user performing the update
	User string
	// PreUpdateHooks are functions to run before the update
	PreUpdateHooks []UpdateHook
	// PostUpdateHooks are functions to run after the update
	PostUpdateHooks []UpdateHook
	// VerificationHooks are functions to run for verification
	VerificationHooks []VerificationHook
}

type UpdateExecutor struct {
	// InstallDir is the directory where the tool is installed
	InstallDir string
	// TempDir is the directory for temporary files during update
	TempDir string
	// BackupDir is the directory for backups during update
	BackupDir string
	// LogDir is the directory for log files
	LogDir string
	// CurrentVersions contains the current versions of components
	CurrentVersions map[string]version.Version
	// Logger is the logger for update operations
	Logger *UpdateLogger
	// AuditLogger is the logger for audit events
	AuditLogger *AuditLogger
	// NotificationManager is the manager for notifications
	NotificationManager *NotificationManager
	// Verifier is the integrity verifier
	Verifier *IntegrityVerifier
	// User is the user performing the update
	User string
	// PreUpdateHooks are functions to run before the update
	PreUpdateHooks []UpdateHook
	// PostUpdateHooks are functions to run after the update
	PostUpdateHooks []UpdateHook
	// VerificationHooks are functions to run for verification
	VerificationHooks []VerificationHook
}

type UpdateHook func(ctx context.Context, transaction *UpdateTransaction) error

type UpdateInfo struct {
	Component      string
	CurrentVersion version.Version
	LatestVersion  version.Version
	ChangeType     version.VersionChangeType
	ChangelogURL   string
	ReleaseDate    time.Time
	ReleaseNotes   string
	DownloadURL    string
	Signature      string
	ChecksumSHA256 string
	Required       bool // Indicates if this update is required
	SecurityFixes  bool // Indicates if this update contains security fixes
}

type UpdateLogger struct {
	// Writer is the writer for log output
	Writer io.Writer
	// JSONWriter is the writer for JSON log output
	JSONWriter io.Writer
	// MinLevel is the minimum log level to output
	MinLevel LogLevel
	// IncludeDetails determines whether to include details in log output
	IncludeDetails bool
}

type UpdateManager struct {
	// contains filtered or unexported fields
}

type UpdateManifest struct {
	Signature  string
	Components UpdateComponents
}

type UpdateNotifier interface {
	HandleUpdateCheck(ctx context.Context, versionInfo *UpdateVersionInfo) error
	NotifyUpdateSuccess(ctx context.Context, fromVersion, toVersion string) error
	NotifyUpdateFailure(ctx context.Context, fromVersion, toVersion string, err error) error
}

type UpdateOperation struct {
	// Component is the component being updated
	Component TransactionComponent
	// ComponentID is the ID of the component (e.g., module ID)
	ComponentID string
	// SourcePath is the path to the source files
	SourcePath string
	// DestinationPath is the path to the destination files
	DestinationPath string
	// BackupPath is the path to the backup files
	BackupPath string
	// Status is the status of the operation
	Status TransactionStatus
	// Error is any error that occurred during the operation
	Error error
	// Timestamp is the time the operation was performed
	Timestamp time.Time
}

type UpdateOptions struct {
	Components        []string
	ForceUpdate       bool
	SkipVerification  bool
	SkipBackup        bool
	DryRun            bool
	Verbose           bool
	AutoConfirm       bool
	IncludePrerelease bool
	MaxRetries        int
	Timeout           time.Duration
	ProgressCallback  func(*UpdateProgress)
	ErrorCallback     func(*UpdateError) bool // Return true to continue
}

type UpdatePackage struct {
	PackagePath string
	Reader      *zip.ReadCloser
	Manifest    PackageManifest
	Verified    bool
}

type UpdatePermissions struct {
	CanWriteExecutable bool
	CanWriteDirectory  bool
	RequiresElevation  bool
	RunningAsRoot      bool
	Platform           string
}

type UpdateProgress struct {
	Component     string
	Operation     string
	Progress      float64
	Total         int64
	Current       int64
	Message       string
	StartTime     time.Time
	EstimatedTime time.Duration
}

type UpdateRequest struct {
	Components []string `json:"components,omitempty"` // ["core", "templates", "modules"]
	Force      bool     `json:"force,omitempty"`
	DryRun     bool     `json:"dry_run,omitempty"`
}

type UpdateResponse struct {
	Status   string         `json:"status"`
	Updates  []UpdateResult `json:"updates"`
	Messages []string       `json:"messages,omitempty"`
}

type UpdateResult struct {
	Component  string `json:"component"`
	OldVersion string `json:"old_version"`
	NewVersion string `json:"new_version"`
	Status     string `json:"status"`
	Message    string `json:"message,omitempty"`
}

type UpdateStatistics struct {
	TotalUpdates       int            `json:"total_updates"`
	SuccessfulUpdates  int            `json:"successful_updates"`
	FailedUpdates      int            `json:"failed_updates"`
	LastUpdateTime     time.Time      `json:"last_update_time"`
	AverageUpdateTime  time.Duration  `json:"average_update_time"`
	TotalDownloadSize  int64          `json:"total_download_size"`
	UpdatesByComponent map[string]int `json:"updates_by_component"`
	ErrorsByType       map[string]int `json:"errors_by_type"`
}

type UpdateSummary struct {
	Results         []ManagerUpdateResult
	TotalDuration   time.Duration
	Success         bool
	RestartRequired bool
}

type UpdateTransaction struct {
	// ID is the unique identifier for the transaction
	ID string
	// PackageID is the ID of the update package
	PackageID string
	// Status is the status of the transaction
	Status TransactionStatus
	// Operations is the list of operations in the transaction
	Operations []*UpdateOperation
	// StartTime is the time the transaction started
	StartTime time.Time
	// EndTime is the time the transaction ended
	EndTime time.Time
	// Logger is the logger for transaction operations
	Logger io.Writer
	// SessionDir is the directory for temporary files during the transaction
	SessionDir string
	// BackupDir is the directory for backups during the transaction
	BackupDir string
}

type UpdateVersionInfo struct {
	CurrentVersion  string
	LatestVersion   string
	UpdateAvailable bool
	RequiredUpdate  bool
	SecurityFixes   bool
	ReleaseDate     string
	ChangelogURL    string
	DownloadURL     string
	Updates         []UpdateInfo
}

type UpdaterConfig struct {
	// Download settings
	Timeout    time.Duration
	ProxyURL   string
	UserAgent  string
	MaxRetries int

	// Installation paths
	TemplateDirectory string
	ModuleDirectory   string
	BackupDirectory   string
	BackupEnabled     bool

	// Binary update settings
	BinaryUpdateEnabled bool
	BinaryRepo          string
	BinaryUpdateURL     string

	// Template update settings
	TemplateUpdateEnabled bool
	TemplateRepos         []RepositoryConfig

	// Module update settings
	ModuleUpdateEnabled bool
	ModuleRepos         []RepositoryConfig

	// Security settings
	VerifySignatures     bool
	TrustedKeys          []string
	ChecksumVerification bool

	// General settings
	AutoUpdate          bool
	UpdateCheckInterval time.Duration
}

type VerificationHook func(ctx context.Context, pkg *UpdatePackage) (*VerificationResult, error)

type VerificationResult struct {
	// Success indicates whether the verification was successful
	Success bool
	// Message contains a human-readable message about the verification
	Message string
	// Details contains additional details about the verification
	Details map[string]interface{}
}

type Verifier struct {
	// contains filtered or unexported fields
}

type VersionCheckRequest struct {
	ClientID        string            `json:"clientId"`
	CurrentVersions map[string]string `json:"currentVersions"`
	Components      []string          `json:"components"`
	Timestamp       time.Time         `json:"timestamp"`
	Signature       string            `json:"signature,omitempty"`
}

type VersionCheckResponse struct {
	Versions        map[string]DetailedVersionInfo `json:"versions"`
	ServerTimestamp time.Time                      `json:"serverTimestamp"`
	Signature       string                         `json:"signature,omitempty"`
}

type VersionCheckService struct {
	BaseURL         string
	HTTPClient      *http.Client
	ClientID        string
	SecretKey       []byte
	CurrentVersions map[string]version.Version
	MaxClockSkew    time.Duration
}

type VersionChecker struct {
	UpdateServerURL string
	HTTPClient      *http.Client
	CurrentVersions map[string]version.Version
	Notifier        UpdateNotifier
}

type VersionInfo struct {
	Current         string    `json:"current"`
	Latest          string    `json:"latest,omitempty"`
	UpdateAvailable bool      `json:"update_available"`
	ReleaseDate     time.Time `json:"release_date,omitempty"`
	Changelog       string    `json:"changelog_url,omitempty"`
}

type VersionManifest struct {
	Core struct {
		Version        string    `json:"version"`
		ReleaseDate    time.Time `json:"releaseDate"`
		ChangelogURL   string    `json:"changelogURL"`
		ReleaseNotes   string    `json:"releaseNotes"`
		DownloadURL    string    `json:"downloadURL"`
		Signature      string    `json:"signature"`
		ChecksumSHA256 string    `json:"checksumSHA256"`
	} `json:"core"`
	Templates struct {
		Version        string    `json:"version"`
		ReleaseDate    time.Time `json:"releaseDate"`
		ChangelogURL   string    `json:"changelogURL"`
		DownloadURL    string    `json:"downloadURL"`
		Signature      string    `json:"signature"`
		ChecksumSHA256 string    `json:"checksumSHA256"`
	} `json:"templates"`
	Modules []struct {
		ID             string    `json:"id"`
		Name           string    `json:"name"`
		Version        string    `json:"version"`
		ReleaseDate    time.Time `json:"releaseDate"`
		ChangelogURL   string    `json:"changelogURL"`
		DownloadURL    string    `json:"downloadURL"`
		Signature      string    `json:"signature"`
		ChecksumSHA256 string    `json:"checksumSHA256"`
	} `json:"modules"`
}

type WebhookNotificationHandler struct {
	// URL is the URL of the webhook
	URL string
	// Headers are the HTTP headers to include in the webhook request
	Headers map[string]string
}