resolver

type Config struct {
	// Registry is the layer catalog client. Required.
	Registry registry.Client

	// Probe resolves OS aliases to AMI IDs and BaseCapabilities. Required.
	Probe *probe.Client

	// Rekor is the transparency log client for Sigstore verification.
	// Optional: when nil, bundle and Rekor entry presence are still required
	// but no live API verification is performed.
	Rekor trust.RekorClient

	// StrataVersion is written into the resolved LockFile.
	StrataVersion string

	// Warnings is an optional writer for non-fatal diagnostic messages.
	// If nil, warnings are silently discarded.
	Warnings io.Writer

	// AllowUnsignedOffline permits stage 7 to accept a layer with no Sigstore
	// bundle or Rekor entry, warning instead of refusing. It exists for one
	// caller: a resolve against the embedded, unsigned offline catalog (no
	// registry configured), where refusing every layer means the shipped
	// formations cannot be resolved even for local, non-trust use (#108). It is
	// set only on that path; a resolve against a real registry leaves it false and
	// stage 7 refuses an unsigned layer as before. An offline resolve is not a
	// trust decision and the lockfile it produces is not signed.
	AllowUnsignedOffline bool
}

type ResolutionError struct {
	Stage     string
	Code      string
	Message   string
	Available []string // e.g. available versions when a layer is not found
}

type Resolver struct {
	// contains filtered or unexported fields
}