sbomgen

type BuildFile struct {
	FileType FileType
	FilePath string // relative path within the repo (e.g. "backend/Cargo.toml")
	RepoPath string // absolute filesystem path of the repo root (empty when not available)
}

type BuildFileProcessor interface {
	Process(files []BuildFile, ctx ProcessorContext) map[BuildFile]BuildFileRelations
}

type BuildFileRelations struct {
	// ID is an ecosystem-specific identifier for the build file.
	// For Maven this is "groupId:artifactId"; for other ecosystems it is empty.
	ID string
	// Dependencies lists all transitively reachable build files, sorted by
	// FilePath, each annotated with its hop distance from this file.
	Dependencies []BuildFileWithHopCount
}

type BuildFileWithHopCount struct {
	BuildFile
	HopCount int
}

type FileType string

type Options struct {
	// Recursive controls whether subdirectories are scanned.
	Recursive bool

	// ExcludePaths is a list of glob patterns to exclude from scanning.
	ExcludePaths []string

	// ManifestParsers enables extractors that read manifest files (e.g.
	// pyproject.toml, package.json) as package sources when no lockfile is
	// present. Additive to the default lockfile extractor set.
	ManifestParsers bool

	// ExtractArtifactIds controls whether build file artifact IDs and dependency
	// relationships are extracted and included in the SBOM. When true, extractors
	// that implement ArtifactExtractor produce file-type components and dependency
	// edges, enabling GetBuildFileTrees dependency and ID resolution.
	// Enabling this also activates manifest parsers internally, because manifest
	// extractors (e.g. PyProjectTOMLExtractor) are needed to call GetArtifact.
	// Defaults to true in DefaultOptions.
	ExtractArtifactIds bool
}

type ProcessorContext struct {
	// FileDependencies maps each file's path to the paths it directly depends
	// on, as declared in the SBOM dependencies section.
	FileDependencies map[string][]string

	// ArtifactIDs maps each file path to its ecosystem-specific artifact
	// identifier, extracted from the "datadog:maven-package" purl property on
	// file-type components. For Maven this is "groupId:artifactId"; for PyPI
	// it is the normalized package name.
	ArtifactIDs map[string]string
}

type SimpleProcessor struct{}