buildtarget

type BuildResult struct {
	Service  string
	Tag      string
	Skipped  bool
	SkipMsg  string
	Duration time.Duration
	Err      error
	Receipt  *release.BuildReceipt
}

type Runner struct {
	// contains filtered or unexported fields
}

type Source struct {
	// Dir is the checkout's top-level directory on this machine. Local
	// state only: it is never copied into a release.
	Dir string `json:"dir"`
	// Repo is the canonical origin remote ("github.com/org/repo"); "" when
	// the checkout has no origin.
	Repo string `json:"repo,omitempty"`
	// Module is the Go module the checkout declares — the go.mod nearest the
	// cwd, at or below the top level — or "" when there is none. It is how a
	// sibling checkout is matched to the project's go.mod require.
	Module string `json:"module,omitempty"`
	// ModuleDir is that go.mod's directory relative to Dir ("." at the top
	// level). A module in a subdirectory tags its versions "<dir>/vX.Y.Z".
	ModuleDir string `json:"module_dir,omitempty"`
	// Commit is HEAD, full hex.
	Commit string `json:"commit"`
	// Dirty: tracked or untracked-unignored changes existed when the command
	// started — the same rule release provenance applies to the project.
	Dirty bool `json:"dirty"`
	// Project is true when the checkout is the project's OWN repository (a
	// ShellBuild with no cwd, or `cwd = "."`). Its commit is then the
	// release's own, which release provenance already records and checks.
	Project bool `json:"project,omitempty"`
}

type Spec struct {
	// Service is the KCL Service.name, surfaced in log lines and in the
	// per-service build-state file.
	Service string

	// Image is the rendered Service.image reference, recorded in build
	// state so a later deploy can resolve the same image. The command
	// composes its own reference in KCL.
	Image string

	// Tag is the resolved image tag, recorded in build state and in the
	// build log line. Bound into the render as the `image_tag` KCL input
	// before the command string exists, so the rendered cmd already
	// carries whatever reference KCL composed from it.
	Tag string

	// BuildCmd is the shell command to exec via `sh -c`, verbatim.
	// Required — callers should NOT construct a Spec without one.
	BuildCmd string

	// BuildCwd is the working directory the command runs from.
	// Relative paths are resolved against ProjectDir. Empty means
	// "use ProjectDir directly." Missing-on-disk is a hard failure
	// (see Runner.Build).
	BuildCwd string

	// ProjectDir is the project root containing forge.yaml — the cwd
	// the command runs from when BuildCwd is empty, and the base that
	// a relative BuildCwd resolves against.
	ProjectDir string

	// BuildEnv carries the ShellBuild's declared `env` map, merged onto
	// the process environment for the command (declared keys win).
	BuildEnv map[string]string

	// RequireReceipt opts into the immutable-release builder protocol. Legacy
	// local builds do not claim receipt-backed provenance or automatic reuse.
	RequireReceipt      bool
	ExpectedInputDigest string
}

type State struct {
	Service string `json:"service"`
	// Env is the deploy env this build belongs to. It is recorded because the
	// FILENAME cannot be parsed back into (env, service): both segments may
	// contain "-", so build-dev-k8s-gateway.json is equally readable as
	// (dev, k8s-gateway) and (dev-k8s, gateway). A reader that globs
	// "build-<env>-*.json" therefore also matches every sibling env whose name
	// extends this one, and when both declare the same image the later file
	// silently overwrites the earlier digest. Written by WriteState; verified
	// on read, so a mismatched file is skipped rather than believed.
	Env string `json:"env,omitempty"`
	// Image is the REPOSITORY, registry host included — the reference the
	// workload declared, minus any tag. There is no Registry field: the
	// registry is part of the image.
	Image    string `json:"image"`
	Tag      string `json:"tag"`
	PushedAt string `json:"pushed_at"`
	// Digest is the content-addressed manifest digest of the pushed image
	// (canonical `sha256:...`, no `@` prefix, no repo), captured best-effort
	// from the registry after the user's build_cmd builds+pushes. EMPTY when
	// the digest couldn't be resolved (local-only ref, registry unreachable,
	// or buildx/docker absent) — capture never fails the build. Mirrors
	// internal/cli.BuildState.Digest so `forge env deploy` pins the immutable
	// `<image>@<digest>` reference for external builds too, instead of
	// falling back to the mutable env tag (the stale-arch-cache footgun).
	Digest string `json:"digest,omitempty"`
	// Platforms is the OS/arch set the pushed manifest advertises, captured
	// alongside Digest. Informational; empty when the lookup failed.
	Platforms []string `json:"platforms,omitempty"`
	// Source is the git checkout the ShellBuild's command ran in — its HEAD
	// and dirty flag when the command started. Nil when the cwd is not a git
	// checkout, and on state an older forge wrote. A release cut from this
	// state checks it against the commit the project pins (see Source).
	Source *Source `json:"source,omitempty"`
}