lockfile

type ContentFile struct {
	// Path is the relative path within the skill directory, using either
	// native or slash separators.
	Path string
	// Content is the raw file bytes.
	Content []byte
}

type Entry struct {
	// Name is the skill's unique name.
	Name string `yaml:"name"`
	// Version is the skill's declared version, if any (from SKILL.md frontmatter).
	Version string `yaml:"version,omitempty"`
	// Source is exactly what the user (or the registry resolver) originally
	// requested — a plain registry name, an OCI reference, or a git://
	// reference. It is never rewritten; upgrade re-resolves this value to
	// check for newer content.
	Source string `yaml:"source"`
	// ResolvedReference is the concrete OCI reference or git:// URL that
	// Source resolved to at install time.
	ResolvedReference string `yaml:"resolvedReference,omitempty"`
	// Digest pins the exact content installed: an OCI "sha256:..." manifest
	// digest or a full git commit hash.
	Digest string `yaml:"digest"`
	// ContentDigest is a deterministic SHA-256 dirhash of the materialized
	// skill file set, used for on-disk integrity verification.
	ContentDigest string `yaml:"contentDigest,omitempty"`
	// Provenance records the verified signer identity of the installed
	// artifact — the trust-on-first-use anchor later installs, syncs, and
	// upgrades are checked against. Nil for entries recorded before
	// verification existed and for unsigned entries (see Unsigned); an
	// entry never carries both.
	Provenance *Provenance `yaml:"provenance,omitempty"`
	// Unsigned is true when the artifact carried no signature and the user
	// explicitly accepted that with --allow-unsigned. It is a recorded
	// trust decision, not an omission: replacing an unsigned entry with a
	// signed one clears it, and a signed entry never becomes unsigned
	// without the same explicit flag.
	Unsigned bool `yaml:"unsigned,omitempty"`
	// RequiredBy lists parent skill names for transitively materialized
	// dependencies (skills declared via toolhive.requires).
	RequiredBy []string `yaml:"requiredBy,omitempty"`
	// Explicit is true when the user directly installed this skill; explicit
	// entries are exempt from cascade removal when RequiredBy becomes empty.
	Explicit bool `yaml:"explicit,omitempty"`
	// Extra round-trips fields this binary does not know about, so a
	// Load→modify→Save cycle by an older binary preserves rather than strips
	// them. It applies per entry: an entry this binary rewrites (reinstall,
	// upgrade) is built fresh, so its unknown fields — which described the
	// previous install — are intentionally dropped along with it.
	Extra map[string]any `yaml:",inline"`
}

type Lockfile struct {
	// Version is the lock file schema version.
	Version int `yaml:"version"`
	// Skills is the set of pinned skill installations, sorted by name for
	// stable diffs.
	Skills []Entry `yaml:"skills,omitempty"`
	// Extra round-trips unknown top-level fields, mirroring Entry.Extra.
	Extra map[string]any `yaml:",inline"`
}

type Provenance struct {
	// SignerIdentity is the certificate subject identity: for GitHub
	// Actions certificates, the workflow path relative to the repository;
	// otherwise the certificate SAN verbatim (a URI, email, or SPIFFE ID).
	SignerIdentity string `yaml:"signerIdentity"`
	// CertIssuer is the OIDC issuer that authenticated the signer.
	CertIssuer string `yaml:"certIssuer"`
	// RepositoryURI is the source repository from the Fulcio certificate
	// extensions, when present.
	RepositoryURI string `yaml:"repositoryUri,omitempty"`
	// SigstoreURL is the Sigstore instance the signature chains to.
	SigstoreURL string `yaml:"sigstoreUrl,omitempty"`
}

type Root struct {
	// contains filtered or unexported fields
}