gitlab

type API interface {
	// ListRepos returns all projects under the configured group,
	// normalized into the git_repository contract. Implementations must
	// page transparently — callers receive the full list in one slice.
	ListRepos(ctx context.Context) ([]Repo, error)
	// ListMembers returns all members of the configured group, normalized
	// into the directory_user contract. Implementations must page
	// transparently — callers receive the full list in one slice.
	ListMembers(ctx context.Context) ([]Member, error)
	// ListMergedPullRequests returns the group's merge requests merged
	// inside [start, end], normalized into the pull_request contract.
	// Implementations must page transparently and may over-return —
	// the plugin re-applies the window, so it owns the period semantics
	// regardless of which API implementation is wired in.
	ListMergedPullRequests(ctx context.Context, start, end time.Time) ([]PullRequest, error)
	// ListDeployments returns the group's deployments created inside
	// [start, end], failed ones included, normalized into the deployment
	// contract. Implementations must page transparently and may
	// over-return; the plugin re-applies the window.
	ListDeployments(ctx context.Context, start, end time.Time) ([]Deployment, error)
}

type Deployment struct {
	Repository string
	// ID is the vendor-native deployment identifier as a string.
	ID  string
	SHA string
	// Environment is the environment name exactly as GitLab reports it.
	Environment string
	// EnvironmentTier is GitLab's environment tier ("production",
	// "staging", …). Empty when the project never set one, in which case
	// the plugin falls back to the environment name for is_production.
	EnvironmentTier string
	Creator         string
	CreatedAt       time.Time
	// Status is the raw GitLab deployment status (created / running /
	// success / failed / canceled / blocked), normalized by the plugin
	// into the deployment type's closed vocabulary.
	Status string
}

type Member struct {
	Username   string
	Name       string
	Email      string
	MFAEnabled bool
	IsAdmin    bool
	IsActive   bool
}

type Options struct {
	API API
	// Now is injected so tests can produce deterministic CollectedAt
	// values. Production callers leave it nil → time.Now().UTC().
	Now func() time.Time
}

type Plugin struct {
	// contains filtered or unexported fields
}

type PullRequest struct {
	// Repository is the project's full path ("group/project"), the same
	// form git_repository uses for name, so the two types join.
	Repository string
	// Number is the MR iid — the per-project number a customer quotes in
	// a waiver, not the instance-wide id.
	Number       int
	Author       string
	MergedBy     string
	TargetBranch string
	// MergeCommitSHA is the commit the MR produced on the target branch;
	// the adapter substitutes the squash commit when the project squashes
	// and GitLab therefore reports no merge commit.
	MergeCommitSHA string
	MergedAt       time.Time
	// Approvers carries the usernames GitLab reports in approved_by,
	// verbatim — the plugin de-duplicates and drops blanks. Empty when
	// the approvals endpoint could not be read (graceful degradation) or
	// when nobody approved.
	Approvers []string
	// ChecksPassed is true when the newest pipeline attached to the MR
	// succeeded. GitLab exposes no per-check aggregate comparable to
	// GitHub's check runs, so the head pipeline is the CI signal.
	ChecksPassed bool
}

type Repo struct {
	Name            string
	DefaultBranch   string
	ProtectionOn    bool
	RequiredReviews int

	RequiresSignedCommits   bool
	RequiresLinearHistory   bool
	AllowsForcePush         bool
	DismissStaleReviews     bool
	RequireCodeOwnerReviews bool

	IsPrivate bool
	Archived  bool

	SecretScanningEnabled   bool
	PushProtectionEnabled   bool
	DependabotAlertsEnabled bool
	CodeScanningEnabled     bool
}