integrity

type CheckResult struct {
	// Path is the filesystem path that was verified.
	Path string
	// Expected is the hex-encoded SHA-256 checksum that was expected.
	Expected string
	// Actual is the hex-encoded SHA-256 checksum that was computed.
	Actual string
	// OK is true when Expected matches Actual (or when establishing a new baseline).
	OK bool
}

type Config struct {
	// Enabled controls whether integrity verification is active.
	// Default: true (set by ApplyDefaults).
	Enabled bool `yaml:"enabled"`

	// BinaryPath is the path to the plexd binary to verify.
	BinaryPath string `yaml:"binary_path"`

	// HooksDir is the directory containing hook scripts to verify.
	HooksDir string `yaml:"hooks_dir"`

	// VerifyInterval is the interval between integrity verification runs.
	// Must be at least 30s when enabled.
	// Default: 5m
	VerifyInterval time.Duration `yaml:"verify_interval"`

	// WatchEnabled controls whether inotify file watching is active.
	// When enabled, file changes in HooksDir trigger immediate checksum
	// recomputation instead of waiting for the next periodic verification.
	// Default: true (set by ApplyDefaults).
	WatchEnabled bool `yaml:"watch_enabled"`
}

type Store struct {
	// contains filtered or unexported fields
}

type Verifier struct {
	// contains filtered or unexported fields
}

type ViolationReporter interface {
	ReportViolation(ctx context.Context, nodeID string, report api.IntegrityViolationReport) error
}