config

type AzureConfig struct {
	Account          string        `yaml:"account"`
	Container        string        `yaml:"container"`
	Endpoint         string        `yaml:"endpoint"`
	ConnectionString redact.Secret `yaml:"-"`
	// SubscriptionID and ResourceGroup locate the storage account in Azure Resource Manager,
	// the only API that reports whether the container's immutability policy is locked.
	// Optional; without them gitdr cannot confirm immutability on Azure and says unknown.
	SubscriptionID string `yaml:"subscriptionID"`
	ResourceGroup  string `yaml:"resourceGroup"`
}

type BackupConfig struct {
	Concurrency int  `yaml:"concurrency"` // parallel repos, and artifacts verify reads at once; default 4
	Resume      bool `yaml:"resume"`      // skip repos a manifest records as copied on the run date
	LFS         bool `yaml:"lfs"`         // fetch Git LFS objects; default true
	// Recopy names repositories the run copies even when their refs have not moved, each exactly
	// as the manifest names it: owner/name, or group/subgroup/name on GitLab. --recopy and
	// GITDR_BACKUP_RECOPY take a comma-separated list. A copy made earlier the same UTC date is not
	// replaced, since its keys are create-only. SPEC §11.
	Recopy []string `yaml:"recopy"`
}

type Config struct {
	Source      SourceConfig      `yaml:"source"`
	Destination DestinationConfig `yaml:"destination"`
	Backup      BackupConfig      `yaml:"backup"`
	Manifest    ManifestConfig    `yaml:"manifest"`
	Metrics     MetricsConfig     `yaml:"metrics"`
	Encryption  EncryptionConfig  `yaml:"encryption"`
	WORM        WORMConfig        `yaml:"worm"`
	Log         LogConfig         `yaml:"log"`
}

type DestinationConfig struct {
	Type      string          `yaml:"type"` // "s3" (AWS + S3-compatible) | "gcs" | "azure"
	S3        S3Config        `yaml:"s3"`
	GCS       GCSConfig       `yaml:"gcs"`
	Azure     AzureConfig     `yaml:"azure"`
	Retention RetentionConfig `yaml:"retention"`
}

type EncryptionConfig struct {
	Enabled bool          `yaml:"enabled"`
	Key     redact.Secret `yaml:"-"`
}

type GCSConfig struct {
	Bucket   string `yaml:"bucket"`
	Endpoint string `yaml:"endpoint"` // empty = real GCS; set for an emulator
}

type GitHubConfig struct {
	AppID          int64         `yaml:"appID"`
	InstallationID int64         `yaml:"installationID"`
	PrivateKeyPath string        `yaml:"privateKeyPath"`
	PrivateKey     redact.Secret `yaml:"-"` // injected from env only; never from YAML
	// TokenPath names a file holding an installation token, used instead of the App key. It
	// is a path, not a secret: the file is read by the source before every request and never
	// here, so a caller can replace it during a run. SPEC §3, "GitHub token file".
	TokenPath string `yaml:"tokenPath"`
	// MaxRateLimitWait bounds how long one run spends waiting for GitHub's rate limits, as a Go
	// duration such as 90m. Zero, the default, means the source's own: one hour. SPEC §6.
	MaxRateLimitWait time.Duration `yaml:"maxRateLimitWait"`
}

type GitLabConfig struct {
	Token redact.Secret `yaml:"-"`
}

type LogConfig struct {
	Level  string `yaml:"level"`  // debug|info|warn|error
	Format string `yaml:"format"` // json|text
}

type ManifestConfig struct {
	SigningKeyPath string        `yaml:"signingKeyPath"`
	PublicKeyPath  string        `yaml:"publicKeyPath"`
	SigningKey     redact.Secret `yaml:"-"` // injected from env only; never from YAML
}

type MetricsConfig struct {
	// TextfilePath is the .prom file node_exporter's textfile collector scrapes.
	// Empty disables metrics output.
	TextfilePath string `yaml:"textfilePath"`
}

type RetentionConfig struct {
	Mode string `yaml:"mode"` // COMPLIANCE (default) | GOVERNANCE
	Days int    `yaml:"days"` // retain-until = now + Days
}

type S3Config struct {
	Bucket       string `yaml:"bucket"`
	Region       string `yaml:"region"`
	Endpoint     string `yaml:"endpoint"`     // empty = AWS; MinIO/Wasabi/B2 set their endpoint
	UsePathStyle bool   `yaml:"usePathStyle"` // true for MinIO and most S3-compatible stores
	// MultipartThreshold and PartSize are in bytes. An object larger than the threshold (0: 4 GiB)
	// is written in parts of at least PartSize (0: 64 MiB). Each is 5 MiB to 5 GiB when set. They
	// exist so a test can write in parts without writing gigabytes.
	MultipartThreshold int64 `yaml:"multipartThreshold"`
	PartSize           int64 `yaml:"partSize"`
}

type SourceConfig struct {
	Type    string       `yaml:"type"`    // "github" (only backend in this build)
	BaseURL string       `yaml:"baseURL"` // empty = github.com; GHES sets https://host/api/v3 (M2+)
	Repo    string       `yaml:"repo"`    // single-repo selector "owner/name" (walking skeleton)
	Include []string     `yaml:"include"`
	Exclude []string     `yaml:"exclude"`
	GitHub  GitHubConfig `yaml:"github"`
	GitLab  GitLabConfig `yaml:"gitlab"`
}

type WORMConfig struct {
	// Require maps to --require-worm. Default false: if the destination is not provably
	// immutable, gitdr warns loudly and proceeds. Set true to fail closed instead.
	Require bool `yaml:"require"`
}