ruby

type ContextFileReader interface {
	// FileExists reports whether path resolves to a regular file in the
	// build context.
	FileExists(path string) bool

	// ReadFile reads a regular file's content from the build context.
	ReadFile(path string) ([]byte, error)

	// IsIgnored reports whether the path is excluded by .dockerignore.
	// Implementations that don't model .dockerignore should return
	// (false, nil); a non-nil error reduces to "treat as ignored" so we
	// don't reason over inputs the build process cannot see.
	IsIgnored(path string) (bool, error)
}

type GemfileFacts struct {
	// RubyConstraint holds the value passed to the top-level ruby "..."
	// directive, when present. Quotes are stripped.
	RubyConstraint string

	// Sources lists every URL passed to a top-level source "..." directive,
	// preserving Gemfile order.
	Sources []string

	// GitGems lists gem entries that pin to a git: or github: source. Order
	// matches first appearance.
	GitGems []string

	// HasDevGroup is true when the Gemfile contains a `group :development do`
	// block (multi-group declarations like `group :development, :test do`
	// also count).
	HasDevGroup bool

	// HasTestGroup is true when the Gemfile contains a `group :test do` block
	// (multi-group declarations like `group :development, :test do` also count).
	HasTestGroup bool
}

type LockfileFacts struct {
	// BundledWith is the value of the BUNDLED WITH block (may be empty for
	// legacy Bundler 1.x lockfiles that do not include the block).
	BundledWith string

	// RubyVersion is the value of the RUBY VERSION block (may be empty).
	RubyVersion string

	// Platforms lists every entry in the PLATFORMS block.
	Platforms []string

	// Sources lists every remote: URL declared by GEM/GIT/PATH/PLUGIN SOURCE
	// blocks, in the order they appear.
	Sources []string

	// DirectDeps maps gem name to version constraint, from the DEPENDENCIES
	// block. The value preserves the constraint as written in the lockfile
	// (for example "~> 8.0", ">= 1.2.3", or empty when no constraint is
	// listed).
	DirectDeps map[string]string

	// Specs maps gem name to exact version, derived from each block's specs:
	// section. Platform-suffixed gem names like "nokogiri (1.13.6-x86_64-linux)"
	// are normalized to "nokogiri" -> "1.13.6".
	Specs map[string]string

	// HasGitGems is true when at least one GIT block is present.
	HasGitGems bool

	// HasPathGems is true when at least one PATH block is present.
	HasPathGems bool

	// NativeExtGems lists gems detected as native-extension gems via the
	// curated list. Order matches first appearance in the lockfile.
	NativeExtGems []string
}

type RubyFacts struct {
	// Lockfile holds parsed Gemfile.lock data, or nil when no observable
	// lockfile is present.
	Lockfile *LockfileFacts

	// Gemfile holds parsed Gemfile data, or nil when no observable Gemfile is
	// present.
	Gemfile *GemfileFacts

	// RubyVersion is the project's resolved Ruby version, in priority order:
	//
	//  1. .ruby-version
	//  2. .tool-versions (the `ruby` line)
	//  3. Lockfile.RubyVersion (RUBY VERSION block)
	//
	// Empty when none of the sources yield a value.
	RubyVersion string

	// HasEncryptedCredentials reports whether the project ships any of the
	// canonical Rails encrypted-credentials files (config/credentials.yml.enc
	// or config/credentials/<env>.yml.enc for one of the standard envs).
	// Rules that need to know whether RAILS_MASTER_KEY is actually load-bearing
	// at build time (e.g. asset-precompile-without-dummy-key) consult this.
	HasEncryptedCredentials bool

	// EncryptedCredentialsPaths records the observed credentials files in the
	// build context. Order matches the probe order. Empty when no credentials
	// files are observable.
	EncryptedCredentialsPaths []string
}