pin

type CommitOptions struct {
	// OnProgress is called at each phase boundary. Nil means no progress.
	OnProgress func(phase string)
}

type Entry struct {
	NWO          string     `json:"nwo"`
	Ref          string     `json:"ref"`
	SHA          string     `json:"sha,omitempty"`
	ObservedSHA  string     `json:"observed_sha,omitempty"`
	Resolution   Resolution `json:"resolution"`
	Issue        string     `json:"issue,omitempty"`
	Reason       string     `json:"reason,omitempty"`
	Suggestion   string     `json:"suggestion,omitempty"`
	AutoFixedRef string     `json:"auto_fixed_ref,omitempty"` // original ref before sane-release rewrite
	OnBranch     string     `json:"on_branch,omitempty"`
	Tag          string     `json:"tag,omitempty"`
	Workflows    []string   `json:"workflows"`
	RequiredBy   []string   `json:"required_by,omitempty"`
	Direct       bool       `json:"direct"`
	FullScan     bool       `json:"full_scan,omitempty"`
}

type PlanOptions struct {
	Resolver  *resolve.Resolver
	Tagger    *tag.Lister
	Store     *lockfile.State
	Pool      *pinpool.Pool
	RepoOwner string // for same-owner narrowing skip
	RepoName  string
	Version   string // CLI version for the record
	// NoNarrow disables tag narrowing: mutable version refs (v4, v3.1)
	// are kept as the lock comment instead of being resolved to full
	// patch tags (v4.2.1). Bare-SHA reverse lookup still applies.
	NoNarrow bool

	// AcceptMoved treats ref-moved and unreachable-pin findings as
	// resolvable: affected deps are pruned from the inventory and
	// re-resolved to their current live SHA.
	AcceptMoved bool

	// Relock treats ref-moved findings (a branch or partial-version ref
	// that legitimately advanced) as resolvable, re-pinning them to the
	// current live SHA. Unlike AcceptMoved it leaves unreachable-pin
	// findings untouched so possible tampering stays a hard error.
	Relock bool

	// OnProgress is called at each phase boundary with a human-readable
	// label (e.g. "Resolving actions/checkout"). Nil means no progress.
	OnProgress func(phase string)
	// contains filtered or unexported fields
}

type Record struct {
	Entries   []Entry
	Workflows []WorkflowPlan // internal, omitted from JSON
	Repo      *RepoInfo
	Version   string
	Created   time.Time
}

type RepoInfo struct {
	Owner string `json:"owner,omitempty"`
	Name  string `json:"name,omitempty"`
	Host  string `json:"host,omitempty"`
}

type Resolution string

type Summary struct {
	Workflows     int  `json:"workflows"`
	Actions       int  `json:"actions"`
	Valid         bool `json:"valid"`
	Pinned        int  `json:"pinned"`
	AlreadyPinned int  `json:"already_pinned"`
	FullScan      int  `json:"full_scan"`
	Investigate   int  `json:"needs_investigation"`
	Skipped       int  `json:"skipped"`
	Unresolved    int  `json:"unresolved"`
}

type WorkflowPlan struct {
	Path     string
	Rewrites map[string]string
}