forge

type Advisory struct {
	ID         string `json:"id"`
	Package    string `json:"package"`
	Ecosystem  string `json:"ecosystem"`
	Manifest   string `json:"manifest"`
	Severity   string `json:"severity"`
	Summary    string `json:"summary"`
	Vulnerable string `json:"vulnerable"`
	Patched    string `json:"patched"`
	URL        string `json:"url"`
}

type AdvisoryReader interface {
	ListAdvisories(context.Context, RepoRef) ([]Advisory, error)
}

type Approval struct {
	ID        string `json:"id"`
	ActorID   string `json:"actor_id"`
	HeadSHA   string `json:"head_sha"`
	State     string `json:"state"`
	Dismissed bool   `json:"dismissed"`
}

type Capabilities struct {
	Provider      string                       `json:"provider"`
	ServerVersion string                       `json:"server_version"`
	Features      map[string]domain.Capability `json:"features"`
}

type Change struct {
	ID               string  `json:"id"`
	Repository       RepoRef `json:"repository"`
	HeadRepository   RepoRef `json:"head_repository"`
	TargetRepository RepoRef `json:"target_repository"`
	Title            string  `json:"title"`
	Body             string  `json:"body"`
	URL              string  `json:"url"`
	HeadSHA          string  `json:"head_sha"`
	TargetSHA        string  `json:"target_sha"`
	HeadBranch       string  `json:"head_branch"`
	TargetBranch     string  `json:"target_branch"`
	AuthorID         string  `json:"author_id"`
	AuthorLogin      string  `json:"author_login"`
	AuthorType       string  `json:"author_type"`
	State            string  `json:"state"`
	Draft            bool    `json:"draft"`
	MergeSHA         string  `json:"merge_sha"`
	MergeStatus      string  `json:"merge_status"`
	OperationID      string  `json:"operation_id"`
}

type Check struct {
	ID          string     `json:"id"`
	Name        string     `json:"name"`
	PublisherID string     `json:"publisher_id"`
	HeadSHA     string     `json:"head_sha"`
	Status      string     `json:"status"`
	Conclusion  string     `json:"conclusion"`
	URL         string     `json:"url"`
	CompletedAt *time.Time `json:"completed_at,omitempty"`
}

type CheckLogReader interface {
	ReadCheckLog(context.Context, RepoRef, string) (string, error)
}

type CheckRule struct {
	Name        string `json:"name"`
	PublisherID string `json:"publisher_id"`
}

type CloseChangeRequest struct {
	Repository RepoRef `json:"repository"`
	ChangeID   string  `json:"change_id"`
	HeadBranch string  `json:"head_branch"`
	Comment    string  `json:"comment"`
}

type CommentChangeRequest struct {
	Repository RepoRef `json:"repository"`
	ChangeID   string  `json:"change_id"`
	HeadSHA    string  `json:"head_sha"`
	Comment    string  `json:"comment"`
}

type CommitProof struct {
	SHA      string   `json:"sha"`
	Parents  []string `json:"parents"`
	Message  string   `json:"message"`
	AuthorID string   `json:"author_id"`
}

type Config struct {
	OrgID         string
	ConnectionID  string
	BaseURL       string
	Token         string     `json:"-"`
	WebhookSecret string     `json:"-"`
	Client        HTTPClient `json:"-"`
	ServerVersion string
}

type CreateChangeRequest struct {
	Repository      RepoRef
	Title           string
	Body            string
	HeadBranch      string
	TargetBranch    string
	ExpectedHeadSHA string
	OperationID     string
	Draft           bool
}

type DeliveryGuard func(context.Context, PipelineRequest, DeploymentGates) error

type DeploymentGates struct {
	State          string                 `json:"state"`
	NativeEnforced domain.CapabilityState `json:"native_enforced"`
	Blockers       []string               `json:"blockers"`
	ApprovalURL    string                 `json:"approval_url"`
	Environment    string                 `json:"environment"`
	RulesHash      string                 `json:"rules_hash"`
}

type DeploymentStatus struct {
	WorkflowSHA    string    `json:"workflow_sha"`
	CreatedAt      time.Time `json:"created_at"`
	ID             string    `json:"id"`
	State          string    `json:"state"`
	SourceSHA      string    `json:"source_sha"`
	ArtifactDigest string    `json:"artifact_digest"`
	Environment    string    `json:"environment"`
	CorrelationID  string    `json:"correlation_id"`
	WorkflowID     string    `json:"workflow_id"`
	WorkflowPath   string    `json:"workflow_path"`
	Ref            string    `json:"ref"`
	Event          string    `json:"event"`
	RunAttempt     int64     `json:"run_attempt"`
	URL            string    `json:"url"`
	Health         string    `json:"health"`
	ObservedAt     time.Time `json:"observed_at"`
	UpdatedAt      time.Time `json:"updated_at"`
}

type Event struct {
	DeliveryID string
	Kind       string
	Repository RepoRef
	ChangeID   string
	HeadSHA    string
}

type ExecutionCheck struct {
	ID          string `json:"id"`
	SHA         string `json:"sha"`
	Name        string `json:"name"`
	State       string `json:"state"`
	PublisherID string `json:"publisher_id"`
	OperationID string `json:"operation_id"`
}

type ExecutionCheckRequest struct {
	Repository  RepoRef
	SHA         string
	Name        string
	State       string
	OperationID string
	CheckID     string
}

type File struct {
	Path    string
	SHA     string
	Content []byte
}

type FileEdit struct {
	Path    string
	Content []byte
	Delete  bool
}

type ForgeBranchRefresher interface {
	RefreshAppBranch(context.Context, RefreshBranchRequest) error
}

type ForgeChangeCloser interface {
	CloseChange(context.Context, CloseChangeRequest) (Change, error)
}

type ForgeChangeCommenter interface {
	CommentChange(context.Context, CommentChangeRequest) (Change, error)
}

type ForgeChanges interface {
	CreateChange(context.Context, CreateChangeRequest) (Change, error)
	FindChangeByOperation(ctx context.Context, repository RepoRef, operationID, headBranch, targetBranch string) (*Change, error)
	UpdateAppBranch(context.Context, UpdateBranchRequest) (string, error)
	ReadChange(context.Context, RepoRef, string) (Change, error)
	RequestReview(context.Context, RepoRef, string, []string) error
}

type ForgeCommits interface {
	ReadCommitProof(context.Context, RepoRef, string) (CommitProof, error)
}

type ForgeDelivery interface {
	ListAllowedWorkflows(context.Context, RepoRef) ([]Workflow, error)
	TriggerOrObservePipeline(context.Context, PipelineRequest) (DeploymentStatus, error)
	ReadDeploymentGates(context.Context, RepoRef, string) (DeploymentGates, error)
	ReadDeploymentStatus(context.Context, RepoRef, string) (DeploymentStatus, error)
	RequestAllowedRecovery(context.Context, PipelineRequest) (DeploymentStatus, error)
}

type ForgeEvents interface {
	VerifyWebhook(http.Header, []byte) error
	DecodeEvent(http.Header, []byte) (Event, error)
	ReconcileChanges(context.Context, RepoRef, string) (domain.Page[Change], error)
	ListChecks(context.Context, RepoRef, string) ([]Check, error)
	ListBotWork(context.Context, RepoRef) ([]Change, error)
}

type ForgeExecutionChecks interface {
	WriteExecutionCheck(context.Context, ExecutionCheckRequest) (ExecutionCheck, error)
	ReadExecutionCheck(context.Context, RepoRef, string) (ExecutionCheck, error)
}

type ForgeFreshness interface {
	Behind(context.Context, RepoRef, string, string) (int, error)
}

type ForgeInventory interface {
	ProbeCapabilities(context.Context) (Capabilities, error)
	ListRepositories(context.Context, InventoryRequest) (domain.Page[Repository], error)
	GetRepository(context.Context, RepoRef) (Repository, error)
	ReadFileAtRef(context.Context, RepoRef, string, string) (File, error)
	ResolveRef(context.Context, RepoRef, string) (string, error)
}

type ForgeMerge interface {
	RequestNativeMergeOrQueue(context.Context, MergeRequest) (MergeResult, error)
	ReadMergeResult(context.Context, RepoRef, string) (MergeResult, error)
}

type ForgePipelineControl interface {
	CancelPipeline(context.Context, PipelineRequest) (DeploymentStatus, error)
}

type ForgeProtection interface {
	ReadEffectiveRules(context.Context, RepoRef, string) (Rules, error)
	EvaluateNativeEligibility(context.Context, RepoRef, string) (NativeEligibility, error)
	ReadApprovals(context.Context, RepoRef, string) ([]Approval, error)
	ReadQueueState(context.Context, RepoRef, string) (QueueState, error)
}

type ForgeQueueControl interface {
	CancelNativeQueue(context.Context, QueueCancelRequest) (QueueState, error)
}

type ForgeQueuePrerequisites interface {
	EvaluateQueuePrerequisites(context.Context, RepoRef, string) (NativeEligibility, CheckRule, error)
}

type ForgeSource interface {
	ReadSourceManifest(context.Context, RepoRef, string) (SourceManifest, error)
}

type ForgeTrainGate interface {
	ReadTrainGate(context.Context, RepoRef, string) (TrainGate, error)
	ReleaseTrainGate(context.Context, TrainGateRequest) (TrainGate, error)
}

type HTTPClient interface {
	Do(*http.Request) (*http.Response, error)
}

type InventoryRequest struct {
	Namespace string
	Cursor    string
	Limit     int
}

type Issue struct {
	Number string   `json:"number"`
	Title  string   `json:"title"`
	Body   string   `json:"body"`
	URL    string   `json:"url"`
	Labels []string `json:"labels"`
}

type IssueReader interface {
	ListIssues(context.Context, RepoRef) ([]Issue, error)
}

type MergeEvidence struct {
	TrainGate      *TrainGate        `json:"train_gate,omitempty"`
	ExecutionCheck CheckRule         `json:"execution_check"`
	Change         Change            `json:"change"`
	Rules          Rules             `json:"rules"`
	Checks         []Check           `json:"checks"`
	Approvals      []Approval        `json:"approvals"`
	Native         NativeEligibility `json:"native"`
	Queue          QueueState        `json:"queue"`
	Capabilities   Capabilities      `json:"capabilities"`
	ObservedAt     time.Time         `json:"observed_at"`
	TargetChecks   []Check           `json:"target_checks,omitempty"`
	UpToDate       bool              `json:"up_to_date,omitempty"`
}

type MergeRequest struct {
	Repository        RepoRef
	ChangeID          string
	ExpectedHeadSHA   string
	ExpectedTargetSHA string
	RulesHash         string
	GateID            string
	Method            string
	OperationID       string
	Queue             bool
	ReforgeEnforced   bool
}

type MergeResult struct {
	State    string `json:"state"`
	NativeID string `json:"native_id"`
	MergeSHA string `json:"merge_sha"`
	HeadSHA  string `json:"head_sha"`
	URL      string `json:"url"`
}

type NativeEligibility struct {
	State      string   `json:"state"`
	Blockers   []string `json:"blockers"`
	Protection []string `json:"protection,omitempty"`
	HeadSHA    string   `json:"head_sha"`
	TargetSHA  string   `json:"target_sha"`
}

type PermissionLinker interface {
	PermissionsURL(context.Context) (string, error)
}

type PipelineRequest struct {
	WorkflowSHA    string            `json:"workflow_sha"`
	RulesHash      string            `json:"rules_hash"`
	Repository     RepoRef           `json:"repository"`
	WorkflowID     string            `json:"workflow_id"`
	WorkflowPath   string            `json:"workflow_path"`
	ConfigSHA256   string            `json:"config_sha256"`
	Ref            string            `json:"ref"`
	SourceSHA      string            `json:"source_sha"`
	ArtifactDigest string            `json:"artifact_digest"`
	Environment    string            `json:"environment"`
	CorrelationID  string            `json:"correlation_id"`
	Inputs         map[string]string `json:"inputs"`
	ObserveOnly    bool              `json:"observe_only"`
	RunID          string            `json:"run_id"`
	RequestedAt    time.Time         `json:"requested_at"`
}

type Provider interface {
	ForgeInventory
	ForgeEvents
	ForgeChanges
	ForgeProtection
	ForgeMerge
	ForgeDelivery
}

type QueueCancelRequest struct {
	Repository      RepoRef
	ChangeID        string
	QueueID         string
	ExpectedHeadSHA string
	OperationID     string
}

type QueueState struct {
	ID        string `json:"id"`
	State     string `json:"state"`
	HeadSHA   string `json:"head_sha"`
	TestedSHA string `json:"tested_sha"`
	TargetSHA string `json:"target_sha"`
}

type RefreshBranchRequest struct {
	Repository        RepoRef
	ChangeID          string
	HeadBranch        string
	TargetBranch      string
	ExpectedHeadSHA   string
	ExpectedTargetSHA string
	OperationID       string
}

type RepoRef struct {
	NativeID string `json:"native_id"`
	FullName string `json:"full_name"`
}

type Repository struct {
	RepoRef
	URL           string   `json:"url"`
	CloneURL      string   `json:"clone_url"`
	DefaultBranch string   `json:"default_branch"`
	Archived      bool     `json:"archived"`
	Private       bool     `json:"private"`
	Permissions   []string `json:"permissions"`
}

type Rules struct {
	State                domain.CapabilityState `json:"state"`
	Reason               string                 `json:"reason"`
	Hash                 string                 `json:"hash"`
	ObservedAt           time.Time              `json:"observed_at"`
	RequiredChecks       []CheckRule            `json:"required_checks"`
	RequiredApprovals    int                    `json:"required_approvals"`
	DismissStaleReviews  bool                   `json:"dismiss_stale_reviews"`
	RequireCodeOwners    bool                   `json:"require_code_owners"`
	CodeOwnersEnforced   domain.CapabilityState `json:"code_owners_enforced"`
	RequireStrictTarget  bool                   `json:"require_strict_target"`
	StrictTargetEnforced domain.CapabilityState `json:"strict_target_enforced"`
	RequireQueue         bool                   `json:"require_queue"`
	AllowedMergeMethods  []string               `json:"allowed_merge_methods"`
	ActorCanBypass       bool                   `json:"actor_can_bypass"`
	Unprotected          bool                   `json:"unprotected,omitempty"`
}

type SourceEntry struct {
	Path string `json:"path"`
	SHA  string `json:"sha"`
	Mode string `json:"mode"`
	Type string `json:"type"`
	Size int64  `json:"size,omitempty"`
}

type SourceManifest struct {
	Repository   RepoRef       `json:"repository"`
	CommitSHA    string        `json:"commit_sha"`
	TreeSHA      string        `json:"tree_sha"`
	ObjectFormat string        `json:"object_format"`
	Proof        string        `json:"proof"`
	Entries      []SourceEntry `json:"entries"`
	Complete     bool          `json:"complete"`
}

type TrainGate struct {
	QueueID        string `json:"queue_id"`
	PipelineID     string `json:"pipeline_id"`
	JobID          string `json:"job_id"`
	HeadSHA        string `json:"head_sha"`
	TargetSHA      string `json:"target_sha"`
	SHA            string `json:"sha"`
	CIConfigSHA256 string `json:"ci_config_sha256"`
	Name           string `json:"name"`
	PublisherID    string `json:"publisher_id"`
	State          string `json:"state"`
	ChecksReady    bool   `json:"checks_ready"`
}

type TrainGateRequest struct {
	RulesHash   string    `json:"rules_hash"`
	Repository  RepoRef   `json:"repository"`
	ChangeID    string    `json:"change_id"`
	Gate        TrainGate `json:"gate"`
	OperationID string    `json:"operation_id"`
}

type UpdateBranchRequest struct {
	Repository     RepoRef
	Branch         string
	ExpectedOldSHA string
	BaseSHA        string
	Message        string
	Edits          []FileEdit
	OperationID    string
}

type Workflow struct {
	ID   string `json:"id"`
	Name string `json:"name"`
	Ref  string `json:"ref"`
	Path string `json:"path"`
	URL  string `json:"url"`
}