types

type AuditResult struct {
	SchemaVersion string               `json:"schema_version"`
	Timestamp     string               `json:"timestamp"`
	Verify        *VerifyResult        `json:"verify,omitempty"`
	Scan          *ScanResult          `json:"scan,omitempty"`
	License       *LicenseReportResult `json:"license,omitempty"`
	Drift         *DriftResult         `json:"drift,omitempty"`
	Summary       AuditSummary         `json:"summary"`
}

type AuditSummary struct {
	Result   string   `json:"result"`           // "PASS", "FAIL", "WARN"
	Checks   int      `json:"checks_run"`       // Number of sub-checks executed
	Passed   int      `json:"checks_passed"`    // Sub-checks that passed
	Failed   int      `json:"checks_failed"`    // Sub-checks that failed
	Warnings int      `json:"checks_warned"`    // Sub-checks that warned
	Errors   []string `json:"errors,omitempty"` // Non-fatal errors (e.g., network failures)
}

type BranchSpec struct {
	Ref           string        `yaml:"ref"`
	DefaultTarget string        `yaml:"default_target,omitempty"`
	Mapping       []PathMapping `yaml:"mapping"`
}

type CloneOptions struct {
	Filter     string // e.g., "blob:none"
	NoCheckout bool
	Depth      int
}

type CommitInfo struct {
	Hash      string
	ShortHash string
	Subject   string
	Author    string
	Date      string
}

type CommitOptions struct {
	Message  string
	Trailers []Trailer
}

type ComplianceDriftDirection string

type ComplianceEntry struct {
	VendorName        string                   `json:"vendor_name"`
	FromPath          string                   `json:"from_path"`
	ToPath            string                   `json:"to_path"`
	Direction         ComplianceDriftDirection `json:"direction"`
	Compliance        string                   `json:"compliance"` // "source-canonical" or "bidirectional"
	SourceHashLocked  string                   `json:"source_hash_locked"`
	SourceHashCurrent string                   `json:"source_hash_current"`
	DestHashLocked    string                   `json:"dest_hash_locked"`
	DestHashCurrent   string                   `json:"dest_hash_current"`
	Action            string                   `json:"action"` // suggested action
}

type ComplianceResult struct {
	SchemaVersion string            `json:"schema_version"`
	Timestamp     string            `json:"timestamp"`
	Entries       []ComplianceEntry `json:"entries"`
	Summary       ComplianceSummary `json:"summary"`
}

type ComplianceSummary struct {
	Total       int    `json:"total"`
	Synced      int    `json:"synced"`
	SourceDrift int    `json:"source_drift"`
	DestDrift   int    `json:"dest_drift"`
	BothDrift   int    `json:"both_drift"`
	Result      string `json:"result"` // "SYNCED" | "DRIFTED" | "CONFLICT"
}

type DependencyScan struct {
	Name            string          `json:"name"`
	Version         *string         `json:"version"`
	Commit          string          `json:"commit"`
	URL             string          `json:"url,omitempty"`
	ScanStatus      string          `json:"scan_status"` // scanned, not_scanned, error
	ScanReason      string          `json:"scan_reason,omitempty"`
	Vulnerabilities []Vulnerability `json:"vulnerabilities"`
}

type DriftDependency struct {
	Name            string      `json:"name"`
	URL             string      `json:"url"`
	Ref             string      `json:"ref"`
	LockedCommit    string      `json:"locked_commit"`
	LatestCommit    string      `json:"latest_commit,omitempty"` // Empty in offline mode
	DriftScore      float64     `json:"drift_score"`             // 0-100
	Files           []DriftFile `json:"files"`
	LocalDrift      DriftStats  `json:"local_drift"`
	UpstreamDrift   DriftStats  `json:"upstream_drift,omitempty"`
	HasConflictRisk bool        `json:"has_conflict_risk"`
}

type DriftDetail struct {
	Path     string `json:"path"`
	LockHash string `json:"lock_hash"`
	DiskHash string `json:"disk_hash"`
	Accepted bool   `json:"accepted"`
}

type DriftFile struct {
	Path                 string  `json:"path"`
	LocalStatus          string  `json:"local_status"`              // unchanged, modified, deleted, added
	UpstreamStatus       string  `json:"upstream_status,omitempty"` // unchanged, modified, deleted, added
	LocalLinesAdded      int     `json:"local_lines_added,omitempty"`
	LocalLinesRemoved    int     `json:"local_lines_removed,omitempty"`
	LocalDriftPct        float64 `json:"local_drift_pct"`
	UpstreamLinesAdded   int     `json:"upstream_lines_added,omitempty"`
	UpstreamLinesRemoved int     `json:"upstream_lines_removed,omitempty"`
	UpstreamDriftPct     float64 `json:"upstream_drift_pct,omitempty"`
	HasConflictRisk      bool    `json:"has_conflict_risk,omitempty"`
	DiffOutput           string  `json:"diff_output,omitempty"` // Populated only with --detail flag
}

type DriftResult struct {
	SchemaVersion string            `json:"schema_version"`
	Timestamp     string            `json:"timestamp"`
	Summary       DriftSummary      `json:"summary"`
	Dependencies  []DriftDependency `json:"dependencies"`
}

type DriftStats struct {
	FilesChanged      int     `json:"files_changed"`
	FilesUnchanged    int     `json:"files_unchanged"`
	TotalLinesAdded   int     `json:"total_lines_added"`
	TotalLinesRemoved int     `json:"total_lines_removed"`
	DriftPercentage   float64 `json:"drift_percentage"` // 0-100
}

type DriftSummary struct {
	TotalDependencies int     `json:"total_dependencies"`
	DriftedLocal      int     `json:"drifted_local"`       // Dependencies with local modifications
	DriftedUpstream   int     `json:"drifted_upstream"`    // Dependencies with upstream changes
	ConflictRisk      int     `json:"conflict_risk"`       // Dependencies with both local + upstream changes
	Clean             int     `json:"clean"`               // Dependencies with zero drift
	OverallDriftScore float64 `json:"overall_drift_score"` // Average drift score (0-100)
	Result            string  `json:"result"`              // CLEAN, DRIFTED, CONFLICT
}

type FileChecksum struct {
	Path string `json:"path"`
	Hash string `json:"hash"` // SHA-256 of file content
}

type FileStatus struct {
	Path         string          `json:"path"`
	Vendor       *string         `json:"vendor"`
	Status       string          `json:"status"` // verified, modified, added, deleted, accepted, stale, orphaned
	Type         string          `json:"type"`   // "file", "position", or "coherence"
	ExpectedHash *string         `json:"expected_hash,omitempty"`
	ActualHash   *string         `json:"actual_hash,omitempty"`
	Position     *PositionDetail `json:"position,omitempty"` // Present only for type="position"
}

type HookConfig struct {
	PreSync  string `yaml:"pre_sync,omitempty"`  // Shell command to run before sync
	PostSync string `yaml:"post_sync,omitempty"` // Shell command to run after sync
}

type HookContext struct {
	VendorName  string            // Name of the vendor being synced
	VendorURL   string            // URL of the vendor repository
	Ref         string            // Git ref being synced
	CommitHash  string            // Resolved commit hash
	RootDir     string            // Project root directory
	FilesCopied int               // Number of files copied
	DirsCreated int               // Number of directories created
	Environment map[string]string // Additional environment variables
}

type IncrementalSyncCache struct {
	VendorName string         `json:"vendor_name"`
	Ref        string         `json:"ref"`
	CommitHash string         `json:"commit_hash"`
	Files      []FileChecksum `json:"files"`
	CachedAt   string         `json:"cached_at"` // RFC3339 timestamp
}

type LicensePolicy struct {
	LicensePolicy LicensePolicyRules `yaml:"license_policy"`
}

type LicensePolicyRules struct {
	Allow   []string `yaml:"allow"`   // Licenses explicitly permitted (SPDX identifiers)
	Deny    []string `yaml:"deny"`    // Licenses explicitly blocked (SPDX identifiers)
	Warn    []string `yaml:"warn"`    // Licenses that emit warnings but do not block (SPDX identifiers)
	Unknown string   `yaml:"unknown"` // How to handle undetected licenses: "allow", "warn", or "deny"
}

type LicenseReportResult struct {
	SchemaVersion string                `json:"schema_version"`
	Timestamp     string                `json:"timestamp"`
	PolicyFile    string                `json:"policy_file"` // Path to policy file used, or "default" if none
	Summary       LicenseReportSummary  `json:"summary"`
	Vendors       []VendorLicenseStatus `json:"vendors"`
}

type LicenseReportSummary struct {
	TotalVendors int    `json:"total_vendors"`
	Allowed      int    `json:"allowed"`
	Denied       int    `json:"denied"`
	Warned       int    `json:"warned"`
	Unknown      int    `json:"unknown"`
	Result       string `json:"result"` // PASS, FAIL, WARN
}

type LockConflict struct {
	LineNumber int    // Line where the conflict marker starts
	OursRaw    string // Content from the "ours" side (between <<<<<<< and =======)
	TheirsRaw  string // Content from the "theirs" side (between ======= and >>>>>>>)
}

type LockDetails struct {
	Name        string            `yaml:"name"`
	Ref         string            `yaml:"ref"`
	CommitHash  string            `yaml:"commit_hash"`
	LicensePath string            `yaml:"license_path"` // Automatically managed
	Updated     string            `yaml:"updated"`
	FileHashes  map[string]string `yaml:"file_hashes,omitempty"` // path -> SHA-256 hash

	// Metadata fields (schema v1.1)
	LicenseSPDX      string `yaml:"license_spdx,omitempty"`       // SPDX license identifier
	SourceVersionTag string `yaml:"source_version_tag,omitempty"` // Git tag matching commit (if any)
	VendoredAt       string `yaml:"vendored_at,omitempty"`        // ISO 8601 timestamp of initial vendoring
	VendoredBy       string `yaml:"vendored_by,omitempty"`        // Git user identity who performed the vendoring
	LastSyncedAt     string `yaml:"last_synced_at,omitempty"`     // ISO 8601 timestamp of most recent sync

	// Position extraction metadata (spec 071)
	Positions []PositionLock `yaml:"positions,omitempty"` // Position-extracted mappings with source hashes

	// Multi-remote provenance (schema v1.3)
	SourceURL string `yaml:"source_url,omitempty"` // Which URL actually served the content (empty = primary URL)

	// Accepted drift metadata (CLI-003)
	AcceptedDrift map[string]string `yaml:"accepted_drift,omitempty"` // path -> SHA-256 of accepted local content

	// Internal vendor metadata (spec 070)
	Source           string            `yaml:"source,omitempty"`             // "internal" for internal vendors
	SourceFileHashes map[string]string `yaml:"source_file_hashes,omitempty"` // source path -> SHA-256
}

type LockMergeConflict struct {
	VendorName string      // Vendor name in conflict
	Ref        string      // Ref in conflict
	Ours       LockDetails // Lock entry from "ours" side
	Theirs     LockDetails // Lock entry from "theirs" side
}

type LockMergeResult struct {
	Merged    VendorLock          // Successfully merged lock
	Conflicts []LockMergeConflict // Entries requiring manual resolution
}

type OutdatedResult struct {
	Dependencies []UpdateCheckResult `json:"dependencies"`
	TotalChecked int                 `json:"total_checked"`
	Outdated     int                 `json:"outdated"`
	UpToDate     int                 `json:"up_to_date"`
	Skipped      int                 `json:"skipped"`
}

type ParallelOptions struct {
	Enabled    bool // Whether parallel processing is enabled
	MaxWorkers int  // Maximum concurrent workers (0 = use NumCPU)
}

type PathConflict struct {
	Path     string
	Vendor1  string
	Vendor2  string
	Mapping1 PathMapping
	Mapping2 PathMapping
}

type PathMapping struct {
	From    string   `yaml:"from"`
	To      string   `yaml:"to"`
	Exclude []string `yaml:"exclude,omitempty"`
}

type PolicyViolation struct {
	VendorName string `json:"vendor_name"`
	Type       string `json:"type"` // "drift" or "stale"
	Message    string `json:"message"`
	Severity   string `json:"severity"` // "error" (blocks commit) or "warning" (report only)
}

type PositionDetail struct {
	From       string `json:"from"`        // Source path with position (e.g., "api/constants.go:L4-L6")
	To         string `json:"to"`          // Destination path with optional position
	SourceHash string `json:"source_hash"` // SHA-256 of extracted content at sync time
}

type PositionLock struct {
	From       string `yaml:"from"`        // Source path with position (e.g., "api/constants.go:L4-L6")
	To         string `yaml:"to"`          // Destination path with optional position
	SourceHash string `yaml:"source_hash"` // SHA-256 of extracted content
}

type PositionSpec struct {
	StartLine int // 1-indexed
	EndLine   int // 1-indexed, 0 means same as StartLine (single line)
	StartCol  int // 1-indexed byte offset, 0 means no column specified
	EndCol    int // 1-indexed inclusive byte offset, 0 means no column specified
	ToEOF     bool
}

type ProgressTracker interface {
	// Increment advances progress by one unit with an optional status message
	Increment(message string)

	// SetTotal updates the total expected units (for dynamic totals)
	SetTotal(total int)

	// Complete marks the operation as successfully finished
	Complete()

	// Fail marks the operation as failed with an error
	Fail(err error)
}

type ScanResult struct {
	SchemaVersion string           `json:"schema_version"`
	Timestamp     string           `json:"timestamp"`
	Summary       ScanSummary      `json:"summary"`
	Dependencies  []DependencyScan `json:"dependencies"`
}

type ScanSummary struct {
	TotalDependencies int        `json:"total_dependencies"`
	Scanned           int        `json:"scanned"`
	NotScanned        int        `json:"not_scanned"`
	Vulnerabilities   VulnCounts `json:"vulnerabilities"`
	Result            string     `json:"result"` // PASS, FAIL, WARN
	FailOnThreshold   string     `json:"fail_on_threshold,omitempty"`
	ThresholdExceeded bool       `json:"threshold_exceeded,omitempty"`
}

type StatusResult struct {
	Vendors          []VendorStatusDetail `json:"vendors"`
	Summary          StatusSummary        `json:"summary"`
	PolicyViolations []PolicyViolation    `json:"policy_violations,omitempty"` // All violations across vendors (GRD-002)
}

type StatusSummary struct {
	TotalVendors   int    `json:"total_vendors"`
	TotalFiles     int    `json:"total_files"`
	Verified       int    `json:"verified"`
	Modified       int    `json:"modified"`
	Added          int    `json:"added"`
	Deleted        int    `json:"deleted"`
	Accepted       int    `json:"accepted"`        // Files with accepted drift (CLI-003)
	Stale          int    `json:"stale"`           // Vendors behind upstream
	UpstreamErrors int    `json:"upstream_errors"` // Vendors where ls-remote failed
	StaleConfigs   int    `json:"stale_configs"`   // Config mapping dests with no lock FileHashes entry (VFY-001)
	OrphanedLock   int    `json:"orphaned_lock"`   // Lock FileHashes entries with no config mapping dest (VFY-001)
	Result         string `json:"result"`          // PASS, FAIL, WARN
}

type SyncStatus struct {
	AllSynced      bool
	VendorStatuses []VendorStatus
}

type Trailer struct {
	Key   string
	Value string
}

type UpdateCheckResult struct {
	VendorName  string `json:"vendor_name"`
	Ref         string `json:"ref"`
	CurrentHash string `json:"current_hash"`
	LatestHash  string `json:"latest_hash"`
	LastUpdated string `json:"last_updated"`
	UpToDate    bool   `json:"up_to_date"`
}

type VendorConfig struct {
	Policy  *VendorPolicy `yaml:"policy,omitempty" json:"policy,omitempty"` // Global policy defaults
	Vendors []VendorSpec  `yaml:"vendors"`
}

type VendorDiff struct {
	VendorName  string
	Ref         string
	OldHash     string
	NewHash     string
	OldDate     string
	NewDate     string
	Commits     []CommitInfo
	CommitCount int
}

type VendorLicenseStatus struct {
	Name     string `json:"name"`
	URL      string `json:"url"`
	License  string `json:"license"`  // Detected SPDX license identifier
	Decision string `json:"decision"` // "allow", "deny", or "warn"
	Reason   string `json:"reason"`   // Human-readable reason for the decision
}

type VendorLock struct {
	SchemaVersion string        `yaml:"schema_version,omitempty"`
	Vendors       []LockDetails `yaml:"vendors"`
}

type VendorPolicy struct {
	BlockOnDrift     *bool `yaml:"block_on_drift,omitempty" json:"block_on_drift,omitempty"`
	BlockOnStale     *bool `yaml:"block_on_stale,omitempty" json:"block_on_stale,omitempty"`
	MaxStalenessDays *int  `yaml:"max_staleness_days,omitempty" json:"max_staleness_days,omitempty"`
}

type VendorSpec struct {
	Name       string        `yaml:"name"`
	URL        string        `yaml:"url"`
	Mirrors    []string      `yaml:"mirrors,omitempty"` // Fallback URLs, tried in declaration order after URL
	License    string        `yaml:"license"`
	Groups     []string      `yaml:"groups,omitempty"`     // Optional groups for batch operations
	Hooks      *HookConfig   `yaml:"hooks,omitempty"`      // Optional pre/post sync hooks
	Policy     *VendorPolicy `yaml:"policy,omitempty"`     // Per-vendor policy overrides
	Source     string        `yaml:"source,omitempty"`     // "" (external, default) or "internal"
	Compliance string        `yaml:"compliance,omitempty"` // "" (source-canonical) or "bidirectional"
	Specs      []BranchSpec  `yaml:"specs"`
}

type VendorStatus struct {
	Name          string
	Ref           string
	IsSynced      bool
	MissingPaths  []string // Paths that should exist but don't
	FileCount     int      // Number of file-level mappings
	PositionCount int      // Number of position-level mappings from lockfile
}

type VendorStatusDetail struct {
	Name       string `json:"name"`
	Ref        string `json:"ref"`
	CommitHash string `json:"commit_hash"`

	// Offline (verify) results
	FilesVerified int      `json:"files_verified"`
	FilesModified int      `json:"files_modified"`
	FilesAdded    int      `json:"files_added"`
	FilesDeleted  int      `json:"files_deleted"`
	FilesAccepted int      `json:"files_accepted"` // Files with accepted drift (CLI-003)
	ModifiedPaths []string `json:"modified_paths,omitempty"`
	AddedPaths    []string `json:"added_paths,omitempty"`
	DeletedPaths  []string `json:"deleted_paths,omitempty"`
	AcceptedPaths []string `json:"accepted_paths,omitempty"`

	// Per-file drift details with hash comparison (GRD-001).
	// Populated for modified and accepted files when offline checks run.
	DriftDetails []DriftDetail `json:"drift_details,omitempty"`

	// Lock age metadata for staleness policy evaluation (GRD-003).
	// LastUpdated is the RFC3339 timestamp from LockDetails.Updated, recording when
	// the lock entry was last written. Used by PolicyService to compare against
	// MaxStalenessDays when the vendor is behind upstream.
	LastUpdated string `json:"last_updated,omitempty"`

	// Remote (outdated) results — nil when --offline
	UpstreamHash    string `json:"upstream_hash,omitempty"`
	UpstreamStale   *bool  `json:"upstream_stale,omitempty"`   // nil = not checked
	UpstreamSkipped bool   `json:"upstream_skipped,omitempty"` // true = ls-remote failed

	// Policy violations for this vendor (GRD-002).
	// Populated when policy section is present in vendor.yml.
	PolicyViolations []PolicyViolation `json:"policy_violations,omitempty"`
}

type VerifyResult struct {
	SchemaVersion  string            `json:"schema_version"`
	Timestamp      string            `json:"timestamp"`
	Summary        VerifySummary     `json:"summary"`
	Files          []FileStatus      `json:"files"`
	InternalStatus []ComplianceEntry `json:"internal_status,omitempty"` // Spec 070: internal vendor drift
}

type VerifySummary struct {
	TotalFiles int    `json:"total_files"`
	Verified   int    `json:"verified"`
	Modified   int    `json:"modified"`
	Added      int    `json:"added"`
	Deleted    int    `json:"deleted"`
	Accepted   int    `json:"accepted"` // Files with accepted drift (CLI-003)
	Stale      int    `json:"stale"`    // Config mappings not present in lock FileHashes
	Orphaned   int    `json:"orphaned"` // Lock FileHashes entries not present in config mappings
	Result     string `json:"result"`   // PASS, FAIL, WARN
}

type VulnCounts struct {
	Critical int `json:"critical"`
	High     int `json:"high"`
	Medium   int `json:"medium"`
	Low      int `json:"low"`
	Unknown  int `json:"unknown"`
	Total    int `json:"total"`
}

type Vulnerability struct {
	ID           string   `json:"id"`
	Aliases      []string `json:"aliases"`
	Severity     string   `json:"severity"`
	CVSSScore    float64  `json:"cvss_score,omitempty"`
	Summary      string   `json:"summary"`
	Details      string   `json:"details,omitempty"` // Extended description from OSV.dev
	FixedVersion string   `json:"fixed_version,omitempty"`
	References   []string `json:"references"`
}