cmd

type ExitError struct {
	Code int
	Err  error
}

type GovernanceReconcileOpts struct {
	DryRun  bool
	Apply   bool
	Source  string // override governance source repo URL
	Ref     string // override governance source ref
	Path    string // override governance clusters file path
	Config  *config.Config
	CICtx   *ci.CIContext // nil = not in CI (source resolution skips CI layer)
	Verbose bool
}

type ReleaseCreateRequest struct {
	Ctx             context.Context
	RootDir         string
	Config          *config.Config
	Tag             string
	Ref             string // commit/branch the forge mints a synthesized tag from (e.g. dev-{sha8} on a push)
	Name            string
	NotesFile       string
	SecuritySummary string
	Draft           bool
	Prerelease      bool
	Assets          []string
	RegistryLinks   bool
	CatalogLinks    bool
	SkipSync        bool
	ReadOnly        bool // run_from: read-only mode — evaluate + narrate but do not mutate
	Verbose         bool
	Writer          io.Writer
}

type SecurityScanRequest struct {
	Ctx            context.Context
	RootDir        string
	Config         *config.Config
	Image          string // explicit image ref; empty = auto-resolve from manifest
	OutputDir      string // empty = from Config.Security.OutputDir
	SBOM           bool
	FailOnCritical bool
	Skip           bool
	Detail         string // none|counts|detailed|full; empty = from config
	Strict         bool
	Verbose        bool
	Writer         io.Writer
}

type SilentExitError struct {
	Code int
}