scafctl

type RootOptions struct {
	// IOStreams overrides the default os.Stdin/Stdout/Stderr streams.
	// When nil, standard OS streams are used.
	IOStreams *terminal.IOStreams

	// ExitFunc overrides os.Exit. When non-nil it is passed through
	// writer.WithExitFunc so that ErrorWithCode/ErrorWithExit call
	// this function instead of terminating the process. Useful for
	// in-process test execution where panicking or returning an error
	// is preferred over killing the process.
	ExitFunc func(code int)

	// ConfigPath overrides the --config flag default.
	ConfigPath string

	// BinaryName overrides the default CLI binary name used by this command
	// tree: root command Use field, subcommand Short descriptions, env var
	// prefix, telemetry service name, and version output. Solution discovery
	// and cache paths are wired through settings.Run.BinaryName.
	// When empty, defaults to settings.CliBinaryName ("scafctl").
	BinaryName string

	// PreRunHook is called within PersistentPreRun after scafctl's standard
	// setup (config, logger, auth, telemetry) is complete but before the
	// command's own RunE executes. The context on cmd is fully initialized.
	// When nil, no additional hook runs.
	PreRunHook func(cmd *cobra.Command, args []string) error

	// VersionExtra is additional version info displayed alongside scafctl's
	// own version. When non-nil, the version command shows both the
	// embedder's and scafctl's versions.
	VersionExtra *settings.VersionInfo

	// ConfigDefaults is an optional YAML byte slice providing embedder-level
	// configuration defaults. These are merged after scafctl's built-in
	// defaults but before the user's config file, environment variables,
	// and CLI flags.
	//
	// Merge precedence (lowest to highest):
	//  1. scafctl built-in defaults (setDefaults)
	//  2. ConfigDefaults (this field)
	//  3. User config file (~/.config/<binary>/config.yaml)
	//  4. Environment variables
	//  5. CLI flags
	ConfigDefaults []byte

	// AuthPluginDirs specifies directories to scan for auth handler plugin
	// binaries. Discovered plugins are registered in the auth.Registry
	// alongside built-in handlers during PersistentPreRunE.
	AuthPluginDirs []string

	// BuiltinAuthHandlers are pre-built auth handler instances that the
	// embedder compiles into the binary. They are registered eagerly at
	// startup before config-based or plugin handlers, and appear in
	// 'auth list' immediately.
	BuiltinAuthHandlers []auth.Handler

	// ActionDiscoveryFileNames overrides the file names used by "run action"
	// auto-discovery. When empty, the defaults from
	// settings.ActionFileNamesFor are used.
	ActionDiscoveryFileNames []string

	// OfficialProviders overrides the default official provider registry used
	// for auto-resolution. When nil and DisableOfficialProviders is false,
	// the default registry (all first-party providers) is used.
	// Embedders can supply a custom registry via official.NewRegistryFrom to
	// extend or replace the default set.
	OfficialProviders *official.Registry

	// OfficialAuthHandlers overrides the default official auth handler registry
	// used for auto-resolution. When nil and DisableOfficialAuthHandlers is
	// false, the default registry (4 extracted first-party auth handlers) is
	// used. Embedders can supply a custom registry via
	// authofficial.NewRegistryFrom to extend or replace the default set.
	OfficialAuthHandlers *authofficial.Registry

	// PluginSignaturePolicy overrides the plugin signature verification policy.
	// When nil, the policy is derived from the app configuration
	// (config.Plugins.Signatures). Embedders can supply a policy directly
	// to enforce stricter verification without relying on user config.
	PluginSignaturePolicy *plugin.SignaturePolicy

	// ClusterResolver resolves Kubernetes/OpenShift cluster names to
	// connection details. When non-nil it is attached to the command context
	// so cluster-aware commands can map a positional cluster name to its API
	// server URL, auth type, and OIDC audience. When nil, those commands fall
	// back to explicit --server flags and auto-detection. scafctl ships no
	// cluster data; embedders with a cluster registry provide the
	// implementation.
	ClusterResolver kube.ClusterResolver
}