deploy

type Actor struct {
	ID    string
	Email string
	Role  string
	// Can reports whether the actor holds a permission; nil means "bootstrap: allow all".
	Can func(perm string) bool
}

type AppStatus struct {
	App           string   `json:"app"`
	Release       string   `json:"release"`
	ContainerID   string   `json:"container_id"`
	ContainerName string   `json:"container_name"`
	Image         string   `json:"image"`
	State         string   `json:"state"`
	Hardened      bool     `json:"hardened"`
	Problems      []string `json:"problems,omitempty"`
}

type AppView struct {
	ID          string           `json:"id"`
	Name        string           `json:"name"`
	Hostname    string           `json:"hostname"`
	URL         string           `json:"url,omitempty"`
	Port        int64            `json:"port"`
	MemoryBytes int64            `json:"memory_bytes"`
	NanoCPUs    int64            `json:"nano_cpus"`
	PidsLimit   int64            `json:"pids_limit"`
	Overrides   docker.Overrides `json:"overrides"`
	ScanPolicy  string           `json:"scan_policy"`
	CreatedAt   string           `json:"created_at"`
	UpdatedAt   string           `json:"updated_at"`
	GitSource   *GitSourceView   `json:"git_source,omitempty"`
}

type Broker struct {
	// contains filtered or unexported fields
}

type CreateAppRequest struct {
	Name        string           `json:"name"`
	Hostname    string           `json:"hostname"`
	Port        int              `json:"port"`
	MemoryBytes int64            `json:"memory_bytes"`
	NanoCPUs    int64            `json:"nano_cpus"`
	PidsLimit   int64            `json:"pids_limit"`
	Overrides   docker.Overrides `json:"overrides"`
	// ScanPolicy is off | warn | block (default warn).
	ScanPolicy string `json:"scan_policy,omitempty"`
}

type DeployRequest struct {
	Trigger       string `json:"trigger"` // manual | webhook | poll | rollback
	CommitSHA     string `json:"commit_sha,omitempty"`
	CommitMessage string `json:"commit_message,omitempty"`
	// ImageRef deploys a pre-built image for apps without a git source.
	ImageRef string `json:"image_ref,omitempty"`
}

type DeploymentView struct {
	ID            string `json:"id"`
	App           string `json:"app"`
	Trigger       string `json:"trigger"`
	Actor         string `json:"actor"`
	CommitSHA     string `json:"commit_sha"`
	CommitMessage string `json:"commit_message"`
	ImageRef      string `json:"image_ref"`
	State         string `json:"state"`
	Error         string `json:"error,omitempty"`
	ContainerName string `json:"container_name,omitempty"`
	ReleaseID     string `json:"release_id,omitempty"`
	CreatedAt     string `json:"created_at"`
	StartedAt     string `json:"started_at,omitempty"`
	FinishedAt    string `json:"finished_at,omitempty"`
}

type ErrIllegalTransition struct{ From, To State }

type GitSourceResult struct {
	GitSourceView
	WebhookSecret string `json:"webhook_secret"`
}

type GitSourceView struct {
	Provider        string `json:"provider"`
	RepoURL         string `json:"repo_url"`
	Branch          string `json:"branch"`
	BaseDir         string `json:"base_dir"`
	Dockerfile      string `json:"dockerfile"`
	DeployKeyPublic string `json:"deploy_key_public"`
	WebhookURL      string `json:"webhook_url"`
	PollInterval    int64  `json:"poll_interval_seconds"`
	LastSeenCommit  string `json:"last_seen_commit"`
}

type LogLine struct {
	Seq    int64  `json:"seq"`
	TS     string `json:"ts"`
	Stream string `json:"stream"`
	Line   string `json:"line"`
}

type Logs struct {
	Store  *store.Store
	Broker *Broker
	// Redact is applied to every line before persistence (nil = identity).
	Redact func(string) string
	// MaxLines caps persisted lines per deployment (oldest trimmed). Default 5000.
	MaxLines int64
	Logger   *slog.Logger
	Now      func() time.Time
	// contains filtered or unexported fields
}

type Pipeline struct {
	Store   *store.Store
	Docker  *docker.Client
	Builder build.Builder
	Routes  *proxy.Writer
	Keeper  *secrets.Keeper
	// Redactor is the process-wide redactor: every secret value the pipeline decrypts is
	// registered here before it can appear anywhere (golden rule 3).
	Redactor *secrets.Redactor
	Logs     *Logs
	Audit    audit.Sink
	Cfg      config.Config
	Logger   *slog.Logger
	Now      func() time.Time
	// TestContainers labels containers redoubt.test=1 (test-suite only).
	TestContainers bool
	HealthTimeout  time.Duration
	CloneMaxBytes  int64
	// AllowLocalRepos permits file:// / path repositories (dev mode and tests only).
	AllowLocalRepos bool
	// KeepReleases is how many non-active release images are retained for rollback (default 3).
	KeepReleases int
	// Scanner runs the Trivy/Syft gate before a container starts (nil = scanning disabled).
	Scanner scan.Scanner
}

type Poller struct {
	Service *Service
	Logger  *slog.Logger
	// Tick is the scheduler resolution (default 30s); each source is checked when its own
	// interval has elapsed since its last check.
	Tick time.Duration
	// Resolve is overridable for tests; defaults to git.ResolveBranchHead.
	Resolve func(ctx context.Context, src git.Source) (string, error)
	// contains filtered or unexported fields
}

type ReleaseView struct {
	ID           string `json:"id"`
	App          string `json:"app"`
	DeploymentID string `json:"deployment_id"`
	ImageRef     string `json:"image_ref"`
	ImageDigest  string `json:"image_digest,omitempty"`
	Active       bool   `json:"active"`
	SBOMPath     string `json:"sbom_path,omitempty"`
	ScanSummary  string `json:"scan_summary,omitempty"`
	CreatedAt    string `json:"created_at"`
}

type RollbackRequest struct {
	ReleaseID string `json:"release_id,omitempty"`
}

type SecretMeta struct {
	Name      string `json:"name"`
	Version   int64  `json:"version"`
	UpdatedAt string `json:"updated_at"`
}

type Service struct {
	Store    *store.Store
	Queue    *queue.Client
	Keeper   *secrets.Keeper
	Redactor *secrets.Redactor
	Routes   *proxy.Writer
	Docker   *docker.Client
	Logs     *Logs
	Audit    audit.Sink
	Cfg      config.Config
	Logger   *slog.Logger
	Now      func() time.Time
	// AllowLocalRepos permits file:// repositories (dev/tests).
	AllowLocalRepos bool
	// PublicBaseURL is used to render webhook URLs (e.g. https://redoubt.example.com).
	PublicBaseURL string
}

type SetGitSourceRequest struct {
	Provider     string `json:"provider"`
	RepoURL      string `json:"repo_url"`
	Branch       string `json:"branch"`
	BaseDir      string `json:"base_dir"`
	Dockerfile   string `json:"dockerfile"`
	PollInterval int64  `json:"poll_interval_seconds"`
	// Token is an optional HTTPS access token (write-only; stored as the reserved secret
	// REDOUBT_GIT_TOKEN, never returned).
	Token string `json:"token,omitempty"`
}

type State string

type Static struct {
	Docker *docker.Client
	Routes *proxy.Writer
	Audit  audit.Sink
	Cfg    config.Config
	Logger *slog.Logger
	// Now is overridable for tests.
	Now func() time.Time
	// TestContainers marks every container with redoubt.test=1 (set only by the test-suite).
	TestContainers bool
	// HealthTimeout bounds how long Deploy waits for the container to become healthy.
	HealthTimeout time.Duration
}

type StaticRequest struct {
	App   string `json:"app"`
	Image string `json:"image"`
	Host  string `json:"host"`
	Port  int    `json:"port"`
	// Overrides are the audited escape hatches (see docker.Overrides).
	Overrides docker.Overrides `json:"overrides"`
}

type StaticResult struct {
	App           string           `json:"app"`
	Release       string           `json:"release"`
	ContainerID   string           `json:"container_id"`
	ContainerName string           `json:"container_name"`
	Network       string           `json:"network"`
	Host          string           `json:"host"`
	URL           string           `json:"url"`
	Warnings      []docker.Warning `json:"warnings,omitempty"`
}

type Worker struct {
	river.WorkerDefaults[queue.DeployArgs]
	P *Pipeline
}