binmgr

type Asset struct {
	// URL is the download URL (a raw binary, or a .tar.gz/.tgz/.zip archive).
	URL string `json:"url"`
	// SHA256 is the expected hex digest of the downloaded file (preferred).
	SHA256 string `json:"sha256"`
	// SHA512 is the expected hex sha512 digest — the strongest supported check,
	// used when SHA256 is empty. The integrity check some vendors publish (e.g.
	// Apache dist ships only .sha512).
	SHA512 string `json:"sha512,omitempty"`
	// MD5 is the expected hex md5 digest — a weak fallback for tools that publish
	// only .md5 sidecars (e.g. SeaweedFS). Used when SHA256/SHA512 are empty.
	// At least one of SHA256/SHA512/MD5 MUST be set: an asset with none is
	// REFUSED (fail-closed), never installed unverified.
	MD5 string `json:"md5,omitempty"`
	// Binary is the path to the executable WITHIN an archive (e.g.
	// "gitea/gitea"); empty means the download is itself the raw binary.
	Binary string `json:"binary,omitempty"`
	// Tree requests whole-archive ("recursive") extraction instead of pulling a
	// single Binary member: the entire .tar.gz/.zip tree is unpacked into the
	// tool's cache dir, preserving modes and symlinks. Use it for tools that need
	// their full layout to run (a Go toolchain's bin/+pkg/+src/, an SDK, …).
	Tree bool `json:"tree,omitempty"`
	// Entrypoint is the executable's slash-separated path within the extracted
	// tree (e.g. "go/bin/go"); required when Tree is set, ignored otherwise.
	Entrypoint string `json:"entrypoint,omitempty"`
}

type GitHubSpec struct {
	// Name is the logical tool name — the cache key and the cached binary name.
	Name string
	// Repo is "owner/repo" (e.g. "go-gitea/gitea").
	Repo string
	// Version is a release tag (e.g. "v1.26.1"); "" or "latest" = latest release.
	Version string
	// Member is the executable's path within a .tar.gz/.zip asset; "" means the
	// matched asset is the raw binary (Gitea, Zot).
	Member string
	// Tree requests whole-archive extraction (Asset.Tree) instead of pulling a
	// single Member: the matched .tar.gz/.zip is unpacked in full, for tools that
	// need their sibling layout to run (e.g. ollama + its ggml runner libs).
	// Requires Entrypoint; Member is ignored.
	Tree bool
	// Entrypoint is the executable's slash path within the extracted tree (e.g.
	// "ollama"); required when Tree is set.
	Entrypoint string
	// AssetMatch overrides the default platform matcher for tools whose asset
	// names don't carry the standard os/arch tokens.
	AssetMatch func(assetName, goos, goarch string) bool
}

type ManagedSpec struct {
	// Name is the cache key and the resulting executable's basename.
	Name string
	// DestDir is where the executable is installed (a stable path a fast cache
	// check can find without network). "" = binmgr's CacheDir().
	DestDir string
	// ReleaseRepo is "owner/repo" whose latest release carries a prebuilt blob
	// named <name>-<goos>-<goarch>.gz (built from permissive source in CI). "" =
	// no prebuilt step.
	ReleaseRepo string
	// Deps are provisioned first, into the same DestDir (e.g. podman → vfkit,
	// gvproxy on macOS). Best-effort.
	Deps []ManagedSpec
	// Build builds the component from source into dest when no prebuilt blob is
	// available (the licensing-policy fallback: permissive source + toolchain).
	// nil = fetch-only.
	Build func(ctx context.Context, dest string) error
	// Log receives progress lines. Optional.
	Log func(string)
}

type Process struct {
	Path string
	Cmd  *exec.Cmd
}

type RunSpec struct {
	Tool       Tool          // the binary to Ensure + run
	Args       []string      // command-line args
	Env        []string      // extra env, appended to the parent environment
	Dir        string        // working directory ("" inherits)
	Stdout     io.Writer     // default os.Stdout
	Stderr     io.Writer     // default os.Stderr
	HealthURL  string        // optional: GET until it answers (< 500) to consider ready
	HealthWait time.Duration // max wait for readiness (default 30s)
}

type Tool struct {
	Name    string           `json:"name"`
	Version string           `json:"version"`
	Assets  map[string]Asset `json:"assets"`
}

type URLSpec struct {
	// Name is the logical tool name — the cache key and cached binary name.
	Name string
	// Version is required (no "latest" auto-resolution — there's no API to query).
	Version string
	// URLTemplate is the download URL with {version}/{goos}/{goarch}/{ext} tokens.
	URLTemplate string
	// ChecksumURLTemplate (optional) is the sha256 sidecar URL template; when
	// empty, ResolveURL tries "<download-url>.sha256". The body may be a bare
	// digest or a "<digest>  <file>" line — the first 64-hex run is taken.
	ChecksumURLTemplate string
	// Member is the executable's path within a .tar.gz/.zip; "" = raw binary.
	Member string
	// ArchAlias maps runtime.GOARCH into the vendor's token (e.g. amd64→x86_64).
	ArchAlias func(goarch string) string
	// OSAlias maps runtime.GOOS into the vendor's token.
	OSAlias func(goos string) string
}