projectgitops

type Command struct {
	Path string
	Args []string
	Dir  string
	Env  []string
}

type CommandResult struct {
	Stdout string
	Stderr string
}

type CommandRunner interface {
	Run(context.Context, Command) (CommandResult, error)
}

type Conventions struct {
	CommitType               string
	CommitScope              string
	AllowedChangeTypes       []string
	DefaultChangeType        string
	RequireTicket            bool
	BranchNameTemplate       string
	TicketRefPattern         string
	TicketURLTemplate        string
	CommitSummaryTemplate    string
	PullRequestTitleTemplate string
	PullRequestBodyTemplate  string
	WhatChangedTemplate      string
	HowVerifiedTemplate      string
	TestsTemplate            string
}

type DirtyWorktreeScopeError struct {
	Paths []string
}

type GeneratedArtifactVerifier struct {
	Paths            []string
	Command          string
	RequiredBeforePR bool
}

type Options struct {
	Enabled          bool
	CommitAfterTask  bool
	PushAfterTask    bool
	DraftPRAfterPush bool
	// MarkPRAfterFinalize, when true (the default), flips the draft PR to "ready
	// for review" (gh pr ready <number>) right after ensureDraftPR creates it.
	// This surfaces the PR for reviewers/CI immediately instead of leaving it in
	// draft. Only fires when DraftPRAfterPush is also true (nothing to mark
	// otherwise). Failure to mark ready is a SOFT warning (the PR is already
	// created successfully) — it never terminalizes the run. Idempotent: gh pr
	// ready on an already-ready PR is a no-op.
	MarkPRAfterFinalize          bool
	RequireCleanBeforeTask       bool
	CleanupWorktreeAfterPlanDone bool
	RemoteName                   string
	// DefaultBranch is the project's default branch (main, master, develop, ...).
	// Resolution order: per-project override → remote HEAD symbolic-ref → "main".
	// Used as the fetch+rebase base before push and as the squash reset base, so
	// the PR diff is always computed against the real current default branch and
	// never against a stale local remote-tracking ref (MASS-3997 PR #3540).
	DefaultBranch              string
	BranchPrefix               string
	BranchNamePattern          string
	CommitAuthorName           string
	CommitAuthorEmailEnv       string
	CommitAuthorEmailFile      string
	SignCommits                bool
	SSHPrivateKeyPath          string
	SSHPublicKeyPath           string
	SSHKnownHostsPath          string
	GitHubTokenEnv             string
	GitHubTokenFile            string
	GitHubCLIPath              string
	GitHubAuthPreflight        bool
	DirtyScopeSupportPathspecs []string
	Conventions                Conventions
	Verification               VerificationProfile
	PostPRChecks               PostPRChecks
	// WhitespaceWarningOnDiffCheck converts `git diff --cached --check` failures
	// (trailing whitespace, missing/extra final newline, blank lines at EOF) into
	// soft warning evidence instead of a hard terminal block. Per the automation
	// pipeline policy this whitespace/newline drift is a forbidden soft blocker.
	// Defaults to true in NewWithRunner so production behavior is policy-compliant.
	WhitespaceWarningOnDiffCheck bool
	// PushMaxAttempts bounds in-function retries for `git push` on transient
	// network errors (5xx, timeout, rate limit) before surfacing the failure to
	// the chain retry budget. Defaults to 3 in NewWithRunner; set to 1 to disable.
	PushMaxAttempts int
	// PushBackoffBase is the base delay for push retry backoff (exponential).
	// Defaults to 5s in NewWithRunner.
	PushBackoffBase time.Duration
	// PRCreateMaxAttempts bounds in-function retries for `gh pr create` on
	// transient network errors. Defaults to 3 in NewWithRunner; set to 1 to disable.
	PRCreateMaxAttempts int
	// PRCreateBackoffBase is the base delay for pr-create retry backoff (exponential).
	// Defaults to 5s in NewWithRunner.
	PRCreateBackoffBase time.Duration
	// BypassRepoCommitHooks appends --no-verify to every git commit the service
	// issues. Opt-in: repos with a reliable pre-commit hook leave this false (the
	// default) and the hook gates commits as intended. Repos whose hook breaks
	// automation on internals (e.g. mass-monorepo Husky → scripts/dev-precommit.sh
	// --hook with `set -euo pipefail` running lint-staged + typecheck, failing on
	// pnpm warnings/env quirks the automation cannot satisfy) set this true. The
	// pipeline runs its own verifiers via runPostCommitVerification, so the repo
	// hook is redundant double-validation for automation when enabled.
	BypassRepoCommitHooks bool
}

type PostPRChecks struct {
	Enabled         bool
	RequiredOnly    bool
	Watch           bool
	FailFast        bool
	IntervalSeconds int
}

type PostTaskInput struct {
	WorkDir          string
	ProjectID        string
	PlanID           string
	TaskID           string
	TaskRef          string
	TaskTitle        string
	TicketRef        string
	ChangeType       string
	BranchName       string
	BaseRef          string
	AutomationID     string
	AutomationRunID  string
	OperatorID       string
	CommitBody       string
	AllowedPathspecs []string
	ReviewRefs       []string
	VerifierRefs     []string
	TestResults      []string
}

type PostTaskResult struct {
	Skipped        bool
	NoChanges      bool
	CommitRef      string
	PushRef        string
	PullRequestRef string
	EvidenceRefs   []string
}

type RenderedOutput struct {
	CommitSubject    string
	CommitBody       string
	PullRequestTitle string
	PullRequestBody  string
}

type Service struct {
	// contains filtered or unexported fields
}

type VerificationFailureError struct {
	CommandHash string
	CommandRef  string
	Phase       string
	// Source identifies which verifier loop produced the failure so downstream
	// classifiers can route bootstrap (environment/install) failures to the
	// infrastructure-retry lane instead of the code-repair lane. Values:
	//   "bootstrap" - runPreCommitVerification BootstrapCommands loop
	//   "generated" - runPreCommitVerification GeneratedArtifacts loop
	//   "verify"    - runPostCommitVerification AlwaysBeforePR loop (default)
	// An empty Source is treated as "verify" for backward compatibility.
	Source string
	// IsToolUnavailable marks a failure where the leading binary of the verifier
	// command was not on PATH (Phase "tool-unavailable"). It still blocks PR
	// creation (it is a verification failure), but FailureCategory routes it to
	// the environment/tooling lane via ErrVerifierToolUnavailable so the chain
	// recovery treats it as a tooling gap rather than a code defect the repair
	// agent cannot fix (FM-5).
	IsToolUnavailable bool
	// Output captures the verifier command's combined stdout+stderr (truncated
	// to verifierOutputCap). Without this, the repair agent is told "fix the
	// typecheck" but never sees the actual compiler errors (file paths, line
	// numbers, error codes) — so it reproduces the same broken code and loops
	// (the MASS-3839 att=7 typecheck loop). The output flows through evidence
	// refs → resume instructions → the repair prompt so the agent can fix the
	// real errors, not guess at them.
	Output string
}

type VerificationProfile struct {
	BootstrapCommands  []string
	AlwaysBeforePR     []string
	AutofixCommands    []string
	GeneratedArtifacts []GeneratedArtifactVerifier
	Env                map[string]string
}