appstore

type AppInfo struct {
	ID              string   `json:"id"`
	AppVersion      string   `json:"app_version"`
	ManifestVersion int      `json:"manifest_version"`
	Methods         []string `json:"methods"`
	Protection      string   `json:"protection"`
	Ready           bool     `json:"ready"`
	Suspended       bool     `json:"suspended,omitempty"` // crash-loop budget spent
}

type Config struct {
	// InstallRoot is where the app store keeps each installed app's
	// pinned manifest, binary, data, identity, and audit log.
	// Default: ~/.pilot/apps.
	InstallRoot string

	// CatalogPubkey is the ed25519 public key the app store uses to
	// verify the signed catalog Merkle root. In production this is
	// compile-time-embedded into the daemon binary (see
	// EmbeddedCatalogPubkey). For dev mode, leave zero and pass a
	// dev key via NewServiceWithKey.
	CatalogPubkey []byte

	// Logger optionally redirects internal messages. When nil the
	// service logs via the standard log package.
	Logger *log.Logger

	// RescanInterval controls how often the supervisor re-walks
	// InstallRoot looking for newly-landed apps (e.g. dropped by
	// `pilotctl appstore install` while the daemon is running).
	// Zero defaults to 30s. Set very short (e.g. 100ms) in tests.
	RescanInterval time.Duration

	// AuditLogMaxBytes is the per-app supervisor.log size threshold
	// at which a single-step rotation fires (active → .1). Zero
	// defaults to maxAuditLogSize (10MB). Tests set this low to
	// exercise the rotation path without writing megabytes.
	AuditLogMaxBytes int64
}

type Deps struct {
	Streams  any // coreapi.Streams — Dial, Listen, SendDatagram
	Identity any // coreapi.Identity — NodeID, Address, PublicKey, Sign
	Resolver any
	Events   any // coreapi.EventBus — Publish, Subscribe
	Logger   any
	Trust    any
}

type Service struct {
	// contains filtered or unexported fields
}