oci

type BuildOptions struct {
	// Name is the artifact name (defaults to repository's last segment if empty).
	Name string
	// SourcePath is the directory containing Kubernetes manifest files (required).
	SourcePath string
	// RegistryEndpoint is the registry host:port (required, protocol prefixes are stripped).
	RegistryEndpoint string
	// Repository is the repository path (defaults to source directory basename if empty).
	Repository string
	// Version is the artifact tag (required, can be any non-empty string such as "dev", "latest", or a semantic version).
	Version string
	// GitOpsEngine specifies the GitOps engine for which to optimize the artifact structure.
	// When set to GitOpsEngineFlux, files are placed at the root.
	// When set to GitOpsEngineArgoCD, files are placed under a prefix directory.
	// When empty or GitOpsEngineNone, files are placed at both locations for compatibility (default).
	GitOpsEngine v1alpha1.GitOpsEngine
	// Username is the optional username for registry authentication.
	// When provided with Password, enables basic authentication for the registry push.
	Username string
	// Password is the optional password for registry authentication.
	// When provided with Username, enables basic authentication for the registry push.
	Password string
}

type BuildResult struct {
	// Artifact contains the complete OCI artifact metadata after successful push.
	Artifact v1alpha1.OCIArtifact
}

type Reference struct {
	Host       string
	Port       int32
	Repository string
	Variant    string
	Ref        string
}

type RegistryVerifier interface {
	// VerifyAccess checks if the registry is accessible and we have push permissions.
	// Returns nil if access is verified, or an actionable error if not.
	VerifyAccess(ctx context.Context, opts VerifyOptions) error
}

type ValidatedBuildOptions struct {
	// Name is the normalized artifact name.
	Name string
	// SourcePath is the absolute path to the manifest directory.
	SourcePath string
	// RegistryEndpoint is the normalized registry host:port.
	RegistryEndpoint string
	// Repository is the normalized repository path.
	Repository string
	// Version is the validated version string.
	Version string
	// GitOpsEngine specifies the target GitOps engine for artifact structure optimization.
	GitOpsEngine v1alpha1.GitOpsEngine
	// Username is the optional username for registry authentication.
	Username string
	// Password is the optional password for registry authentication.
	Password string
}

type VerifyOptions struct {
	// RegistryEndpoint is the registry host[:port] (e.g., "ghcr.io" or "localhost:5000").
	RegistryEndpoint string
	// Repository is the repository path to check access for.
	Repository string
	// Username is the optional username for authentication.
	Username string
	// Password is the optional password/token for authentication.
	Password string
	// Insecure allows HTTP connections (for local registries).
	Insecure bool
}

type WorkloadArtifactBuilder interface {
	// Build validates the supplied options, constructs an OCI artifact from manifests,
	// and pushes it to the registry. Returns BuildResult with artifact metadata on success.
	Build(ctx context.Context, opts BuildOptions) (BuildResult, error)
}