cistate

type BuildState struct {
	ProducedImages bool   `json:"produced_images"`
	PublishedCount int    `json:"published_count"`
	ManifestPath   string `json:"manifest_path,omitempty"`
}

type CIState struct {
	Provider   string `json:"provider"`
	PipelineID string `json:"pipeline_id"`
	Ref        string `json:"ref,omitempty"`
	Branch     string `json:"branch,omitempty"`
	Tag        string `json:"tag,omitempty"`
	SHA        string `json:"sha"`

	Project     string `json:"project,omitempty"`      // repo/project name ({project})
	Modality    string `json:"modality,omitempty"`     // lifecycle mode ({modality})
	PipelineURL string `json:"pipeline_url,omitempty"` // forge pipeline URL ({pipeline_url})
	CommitTitle string `json:"commit_title,omitempty"` // HEAD commit subject ({commit_title})
	Version     string `json:"version,omitempty"`      // detected version string ({version})

	// StartedAt is stamped (unix seconds) on the run's FIRST state write — the
	// audition, in practice — and rides the state artifact across jobs. narrate
	// derives DurationSecs from it at gather time; {duration} renders from the
	// recorded value, so the render itself stays deterministic.
	StartedAt    int64 `json:"started_at,omitempty"`
	DurationSecs int   `json:"duration_secs,omitempty"`
}

type ExternalRetentionRecord struct {
	Registry string   `json:"registry"`
	Prefix   string   `json:"prefix"`
	Total    int      `json:"total"`
	Pruned   int      `json:"pruned"`
	Kept     int      `json:"kept"`
	Errors   []string `json:"errors,omitempty"`
}

type LocalRetentionRecord struct {
	Dir           string `json:"dir"`
	EntriesBefore int    `json:"entries_before"`
	Pruned        int    `json:"pruned"`
	PrunedBytes   int64  `json:"pruned_bytes"`
}

type ReleaseState struct {
	Eligible bool `json:"eligible"`
}

type RetentionState struct {
	Local    *LocalRetentionRecord    `json:"local,omitempty"`
	External *ExternalRetentionRecord `json:"external,omitempty"`
}

type SecurityState struct{}

type State struct {
	Version    int                    `json:"version"`
	CI         CIState                `json:"ci"`
	Runner     runner.ExecutionReport `json:"runner,omitempty"`
	Build      BuildState             `json:"build"`
	Security   SecurityState          `json:"security"`
	Release    ReleaseState           `json:"release"`
	Subsystems []SubsystemState       `json:"subsystems,omitempty"`
	Retention  RetentionState         `json:"retention,omitempty"`
}

type SubsystemState struct {
	Name         string `json:"name"`
	Attempted    bool   `json:"attempted"`
	Completed    bool   `json:"completed"`
	Skipped      bool   `json:"skipped"`
	AllowFailure bool   `json:"allow_failure"` // true = non-vital; failure produces warning, not fail
	Required     bool   `json:"required"`      // true = failure is a hard pipeline fail
	Outcome      string `json:"outcome"`       // success | failed | skipped | warning | not_applicable | cancelled
	Reason       string `json:"reason,omitempty"`
	// Blocking is the CONTROL truth about this subsystem's subject: may that subject
	// continue producing distributable artifacts? A phase that consumes this NEVER
	// branches on anything else. It is deliberately separate from Outcome (what happened)
	// and Required (a forge-status policy). A remediated source is Blocking (the fix lives
	// in Replacement, not in this subject), so it must never build.
	Blocking bool `json:"blocking,omitempty"`
	// Replacement is LINEAGE, never control: the commit that supersedes this subject when a
	// fix was produced (the remediation candidate). Consumed by narrate / publish / the forge
	// status renderer / webhooks — never by the orchestrator's build decision.
	Replacement string `json:"replacement,omitempty"`
	// Contract marks a verdict-about-the-candidate record (e.g. the audition
	// contract) as opposed to work a job performed. Job-end Outcomes rendering
	// excludes contracts — the job's exit already states its verdict.
	Contract bool `json:"contract,omitempty"`
	// Results is the subsystem's recorded FACTS — flat key→value pairs a subsystem
	// computed during the run (test: passed/failed/total/coverage; security:
	// blocking/low/…; publish: tags/registries). Consumed by the stencil fact
	// resolver as {<domain>.<key>} tokens. Riding the subsystem shard keeps facts
	// union-safe across forwarded job artifacts (same guarantee as Outcome). Generic
	// by design: any subsystem (any modality) records facts without a schema change.
	Results map[string]string `json:"results,omitempty"`
}