trust

type FileStatus struct {
	// Path is the repository-relative path of the file devvault actually
	// found, which for a fallback candidate differs from Expected.
	Path string
	// Expected is the repository-relative path devvault manages.
	Expected string
	State    State
	// Enforced reports whether drift in this file blocks execution.
	Enforced bool
	// Digest is "sha256:<hex>" of the current content, empty when missing.
	Digest string
	// MatchesTemplate reports whether the content on disk is byte-identical to
	// what devvault would render from the trusted config right now. It answers
	// a different question than State: State is the security verdict — did
	// anything change since devvault generated the file or the user approved
	// it — while MatchesTemplate is the consistency one: does the file still
	// follow the config. The two come apart after a config change: a file that
	// carries an approval stays StateOK because nothing was smuggled into it,
	// but it no longer matches the config, and `devvault sync` is the way back.
	//
	// It is false wherever devvault has no rendered content for the path it
	// found, so it reads as "not known to follow the config", never as "known
	// to differ": a missing file, a repository-supplied fallback such as
	// ./docker-compose.yml or .devcontainer/Dockerfile, and every unexpected
	// entry inside .devvault/scripts. HasTemplate tells those apart from a real
	// mismatch.
	MatchesTemplate bool
}

type ProjectReport struct {
	Report
	// Project is the registry key, empty for a directory that is not
	// registered.
	Project string
	// Registered reports whether devvault has a place to store approvals for
	// this directory.
	Registered bool
}

type Report struct {
	Files []FileStatus
	// Trusted is false as soon as one enforced file drifted or is unmanaged.
	Trusted bool
}

type ReviewItem struct {
	File FileStatus
	// Diff is a unified diff between the repository content and the content
	// devvault would generate. It is empty when Note explains why there is
	// none.
	Diff string
	// Note replaces the diff when comparing is impossible or pointless.
	Note string
	// Size is the size of the repository file in bytes.
	Size int64
	// Approved reports that this exact content carries the user's approval and
	// only fell behind the config. The diff below is then not evidence that
	// someone changed the file — it is what `devvault sync` would write.
	Approved bool
}

type State string

type UntrustedError struct {
	// Project is the registry key used in the suggested commands.
	Project string
	// Registered reports whether an approval could be stored at all.
	Registered bool
	Files      []FileStatus
}