securegit 0.8.5

use schemars::JsonSchema;
use serde::{Deserialize, Serialize};

// ---- Security tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ScanParams {
    /// Directory to scan (defaults to working directory)
    pub path: Option<String>,
    /// Minimum severity to include: "critical", "high", "medium", "low"
    pub min_severity: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ScanStagedParams {
    /// Minimum severity to include
    pub min_severity: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct SafeCommitParams {
    /// Commit message
    pub message: String,
    /// Maximum severity to allow (blocks if findings >= this level)
    pub max_severity: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ReviewParams {
    /// File path to review for security issues
    pub file: String,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct FindingsParams {
    /// Filter by minimum severity
    pub min_severity: Option<String>,
    /// Filter by file path pattern
    pub file_pattern: Option<String>,
}

// ---- Git read tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct LogParams {
    /// Maximum number of commits to show
    pub max_count: Option<usize>,
    /// Filter by author
    pub author: Option<String>,
    /// Show commits after this date
    pub since: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct DiffParams {
    /// Commit or range (e.g., "HEAD~3", "main..feature")
    pub commit: Option<String>,
    /// Show staged changes
    pub cached: Option<bool>,
    /// Show only file names
    pub name_only: Option<bool>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct BlameParams {
    /// File to blame
    pub file: String,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ShowParams {
    /// Commit, tag, or object to show
    pub object: Option<String>,
    /// Show diffstat only
    pub stat: Option<bool>,
}

// ---- Git write tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct AddParams {
    /// Files to stage
    pub files: Vec<String>,
    /// Stage all changes
    pub all: Option<bool>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct CommitParams {
    /// Commit message
    pub message: String,
    /// Allow empty commit
    pub allow_empty: Option<bool>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct CheckoutParams {
    /// Branch, tag, or commit to checkout
    pub target: String,
    /// Create a new branch
    pub create: Option<bool>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct BranchCreateParams {
    /// Branch name
    pub name: String,
    /// Start point (commit or branch)
    pub start_point: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct BranchDeleteParams {
    /// Branch name to delete
    pub name: String,
    /// Force delete
    pub force: Option<bool>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct MergeParams {
    /// Branch to merge
    pub branch: String,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct StashSaveParams {
    /// Stash message
    pub message: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct StashPopParams {
    /// Stash index to pop
    pub index: Option<usize>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct TagCreateParams {
    /// Tag name
    pub name: String,
    /// Tag message (creates annotated tag)
    pub message: Option<String>,
    /// Target commit
    pub target: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct UndoParams {
    /// Specific operation ID to undo
    pub op_id: Option<String>,
}

// ---- Push tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct PushParams {
    /// Remote name (default: "origin")
    pub remote: Option<String>,
    /// Branch to push (default: current branch)
    pub branch: Option<String>,
    /// Force push
    pub force: Option<bool>,
    /// Set upstream tracking
    pub set_upstream: Option<bool>,
}

// ---- Backup tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct BackupAddParams {
    /// Destination name (e.g., "nas", "s3", "usb")
    pub name: String,
    /// Destination path/remote (rsync path, rclone remote, or local path)
    pub destination: String,
    /// Backend type: local, rsync, rclone (auto-detected if omitted)
    pub backend_type: Option<String>,
    /// Auto-backup after every push
    pub auto: Option<bool>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct BackupRemoveParams {
    /// Destination name to remove
    pub name: String,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct BackupPushParams {
    /// Destination name (default: all)
    pub name: Option<String>,
    /// Include all branches (default: current branch only)
    pub all_branches: Option<bool>,
}

// ---- Platform tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct PrListParams {
    /// Filter by state: open, closed, all (default: open)
    pub state: Option<String>,
    /// Target a registered server by name (default: auto-detect from remote)
    pub server: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct PrViewParams {
    /// Pull request number
    pub number: u64,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct CiStatusParams {
    /// Branch to check (default: current)
    pub branch: Option<String>,
    /// Target a registered server by name (default: auto-detect from remote)
    pub server: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ReleaseListParams {
    /// Number of releases to show (default: 10)
    pub count: Option<usize>,
    /// Target a registered server by name (default: auto-detect from remote)
    pub server: Option<String>,
}

// ---- Worktree tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct WorktreeAddParams {
    /// Worktree name (used as identifier)
    pub name: String,
    /// Path for the new worktree (defaults to .worktrees/<name>)
    pub path: Option<String>,
    /// Branch to checkout (created from HEAD if it doesn't exist)
    pub branch: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct WorktreeRemoveParams {
    /// Worktree name to remove
    pub name: String,
    /// Force removal even with uncommitted changes
    pub force: Option<bool>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct WorktreeLockParams {
    /// Worktree name to lock
    pub name: String,
    /// Reason for locking
    pub reason: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct WorktreeUnlockParams {
    /// Worktree name to unlock
    pub name: String,
}

// ---- Server management tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ServerAddParams {
    /// Server name (used as identifier, e.g. "my-gitlab")
    pub name: String,
    /// Platform type: "github" or "gitlab"
    pub platform: String,
    /// API base URL (e.g. "https://gitlab.example.com/api/v4")
    pub api_url: String,
    /// Authentication token (stored encrypted, never returned)
    pub token: String,
    /// Enable as push target (default: true)
    pub push_enabled: Option<bool>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ServerRemoveParams {
    /// Server name to remove
    pub name: String,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct ServerPushParams {
    /// Specific server names to push to (default: all push-enabled)
    pub servers: Option<Vec<String>>,
    /// Branch to push (default: current branch)
    pub branch: Option<String>,
    /// Force push
    pub force: Option<bool>,
}

// ---- Repository creation parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct CreateRepoParams {
    /// Repository name (e.g. "my-project")
    pub name: String,
    /// Target a registered server by name (default: auto-detect from remote)
    pub server: Option<String>,
    /// Namespace: GitHub org or GitLab group path (default: user's personal namespace)
    pub namespace: Option<String>,
    /// Create as private repository (default: false)
    pub private: Option<bool>,
    /// Repository description
    pub description: Option<String>,
}

// ---- HuggingFace tool parameters ----

#[derive(Debug, Deserialize, JsonSchema)]
pub struct HfPullParams {
    /// HuggingFace model ID (e.g., "meta-llama/Llama-3.2-1B")
    pub model_id: String,
    /// Revision (branch, tag, commit SHA). Default: "main"
    pub revision: Option<String>,
    /// Include only files matching these globs (e.g., ["*.safetensors"])
    pub include: Option<Vec<String>>,
    /// Exclude files matching these globs (e.g., ["*.bin"])
    pub exclude: Option<Vec<String>>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct HfPushParams {
    /// Local path to model files
    pub path: String,
    /// Target HuggingFace repository ID (e.g., "myorg/my-model")
    pub repo_id: String,
    /// HuggingFace organization (prepended to repo_id if provided)
    pub hf_org: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct HfSearchParams {
    /// Search query
    pub query: String,
    /// Filter by pipeline task (e.g., "text-generation", "image-classification")
    pub task: Option<String>,
    /// Filter by library (e.g., "transformers", "diffusers")
    pub library: Option<String>,
    /// Maximum number of results (default: 10)
    pub limit: Option<usize>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct HfInfoParams {
    /// HuggingFace model ID
    pub model_id: String,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct HfScanParams {
    /// HuggingFace model ID or local path to scan
    pub model_id: String,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct HfPipelineTriggerParams {
    /// Model ID to harden
    pub model_id: String,
    /// GitLab server name from registry (default: "gpubox")
    pub server: Option<String>,
    /// GitLab project ID for the pipeline
    pub project_id: Option<u64>,
    /// Pipeline trigger token (falls back to SECUREGIT_PIPELINE_TOKEN env)
    pub token: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct HfPipelineStatusParams {
    /// Specific pipeline ID to check (omit for recent pipelines)
    pub pipeline_id: Option<u64>,
    /// GitLab server name from registry (default: "gpubox")
    pub server: Option<String>,
}

#[derive(Debug, Deserialize, JsonSchema)]
pub struct HfFullPipelineParams {
    /// Model ID on HuggingFace (e.g., "Qwen/Qwen2.5-7B-Instruct")
    pub model_id: String,
    /// HuggingFace organization for output (e.g., "ArmyknifeLabs")
    pub hf_org: Option<String>,
    /// AutoTrain hardware tier (default: "a10g-large")
    pub hf_hardware: Option<String>,
    /// Minimum fix rate to pass verification (0.0-1.0, default: 0.30)
    pub min_fix_rate: Option<f64>,
    /// Comma-separated probe filter (default: all)
    pub probes: Option<String>,
    /// Training epochs (default: 3)
    pub epochs: Option<u32>,
    /// Fail pipeline if regressions detected (default: true)
    pub fail_on_regression: Option<bool>,
}

#[derive(Debug, Serialize)]
pub struct HfFullPipelineResult {
    pub original_model: String,
    pub hardened_model: String,
    pub model_url: String,
    pub total_findings: u64,
    pub fix_rate: f64,
    pub verdict: String,
    pub regression_count: u64,
    pub status: String,
}

// ---- Response types ----

#[derive(Debug, Serialize)]
pub struct ScanResult {
    pub scanned_files: usize,
    pub findings_count: usize,
    pub findings: Vec<FindingResult>,
}

#[derive(Debug, Serialize)]
pub struct FindingResult {
    pub id: String,
    pub title: String,
    pub severity: String,
    pub file: Option<String>,
    pub line: Option<usize>,
    pub description: String,
}