webhook

type AttemptStore interface {
	SaveDeployAttempt(ctx context.Context, a store.DeployAttempt) error
	FinishDeployAttempt(ctx context.Context, id, status string, finishedAt time.Time, errMsg string) error
}

type Config struct {
	// Secret is the shared HMAC secret configured on the GitHub webhook,
	// used to verify the X-Hub-Signature-256 header. Required: a Handler
	// built with an empty Secret rejects every request, since an empty
	// secret would make the signature check meaningless.
	Secret []byte
	// RepoURL is the git remote this handler clones on a triggering
	// push, e.g. "https://github.com/org/thesvg.org.git". Deliberately
	// server-side configuration, never taken from the webhook payload:
	// only the commit SHA (a hash, not a URL) comes from the untrusted
	// request, so a forged payload cannot redirect a clone at an
	// attacker-controlled remote.
	RepoURL string
	// Branch triggers a deploy on push. Pushes to any other branch are
	// accepted (200 OK, so GitHub does not retry) but do not deploy.
	// Defaults to DefaultBranch when empty.
	Branch string
	// ServiceName, Service, and ImageRepo are passed straight through to
	// deploy.Request; see internal/deploy for what each means. Ignored
	// when Services (below) is non-empty.
	ServiceName string
	Service     spec.Service
	ImageRepo   string

	// Services, when non-empty, switches a triggering push from a
	// single-service Deploy call to a multi-service DeploySpec fan-out
	// (deploy.MultiRequest): ServiceName above becomes the app name every
	// fanned-out service links to, and ImageRepo above becomes the image
	// repo base every fanned-out service tags under. This is still
	// single-app, env-var-configured Config, exactly like every other
	// field here (the package doc comment's own scope boundary): Services
	// is one more static, operator-configured value, not a per-push
	// choice, so it does not reopen the "no multi-tenant registry" design
	// decision that comment already makes.
	Services map[string]spec.Service
}

type DeployNotifier interface {
	Dispatch(ctx context.Context, resourceID string, ev alerting.DeployOutcome)
}

type Deployer interface {
	Deploy(ctx context.Context, req deploy.Request, progress func(build.ProgressEvent)) (string, error)
	// DeploySpec is the multi-service fan-out entry point, exercised only
	// when Config.Services is non-empty (see Config's own doc comment).
	// Same *deploy.Pipeline satisfies both methods.
	DeploySpec(ctx context.Context, req deploy.MultiRequest, progress func(serviceKey string, ev build.ProgressEvent)) ([]deploy.ServiceOutcome, error)
}

type Handler struct {
	// contains filtered or unexported fields
}

type PullRequestAction string

type PullRequestEvent struct {
	Action PullRequestAction
	Number int
	// HeadRef is the pull request's source branch name, not a full
	// "refs/heads/"-prefixed ref: unlike PushEvent.Ref, no provider's
	// pull request payload carries one, and a preview deploy only ever
	// needs the branch name to name/label the preview, not to match it
	// against a target ref.
	HeadRef string
	HeadSHA string
	// BaseRef is the pull request's target branch name, compared against
	// a connected git source's own Branch the same way PushEvent.Ref is
	// compared against Config.TargetRef: a pull request against any
	// other branch is ignored.
	BaseRef string
}

type PushEvent struct {
	Ref   string `json:"ref"`
	After string `json:"after"`
}