updater

type Config struct {
	CheckInterval time.Duration
	Repo          string // "owner/repo"
	InstallDir    string
	Version       string // updater's own version (used for user-agent)

	// PinnedVersion locks the updater to a specific release tag
	// (e.g. "v1.10.5"). When set, the updater installs exactly that
	// version — regardless of whether it is newer, older, or already
	// current — and will not chase the latest release. An empty
	// string (default) preserves the existing "always follow latest"
	// behaviour. Set to an empty string to un-pin and resume
	// auto-updating to the latest stable.
	PinnedVersion string

	// SkipAttestation disables SLSA attestation verification of
	// checksums.txt. This is the ONLY way to bypass attestation: when
	// false (the default) and the gh CLI is absent, verification fails
	// closed and the update is refused. Intended for test environments
	// where the test repos do not have real attestations. Leaving it
	// false in production keeps provenance verification mandatory.
	// The SHA256 checksums.txt match is always enforced regardless of
	// this flag.
	SkipAttestation bool

	// StatePath, when non-empty, points to a JSON control file
	// {"enabled": bool} that gates the AUTOMATIC update loop and is
	// re-read on every tick. When the file is absent or {"enabled":
	// false} the loop performs NO updates — so any deployment that sets
	// StatePath is OFF BY DEFAULT until explicitly enabled (e.g. via
	// `pilotctl update enable`). A manual one-shot RunOnce always runs,
	// ignoring this gate. An empty StatePath preserves the legacy
	// always-on loop behaviour for backward compatibility.
	StatePath string
}

type GitHubAsset struct {
	Name               string `json:"name"`
	BrowserDownloadURL string `json:"browser_download_url"`
}

type GitHubRelease struct {
	TagName string        `json:"tag_name"`
	Assets  []GitHubAsset `json:"assets"`
}

type Semver struct {
	Major int
	Minor int
	Patch int
}

type Service struct{}

type Updater struct {
	// contains filtered or unexported fields
}