objectstore

type ArchiveStore interface {
	ListLogArchivePolicies(ctx context.Context) ([]store.LogArchivePolicy, error)
	RecordLogArchivePolicyRun(ctx context.Context, id, at string, watermarkNs int64, runErr string) error
	InsertLogArchiveRun(ctx context.Context, r store.LogArchiveRun) error
	FinishLogArchiveRun(ctx context.Context, r store.LogArchiveRun) error
	FailStaleLogArchiveRuns(ctx context.Context, at string) error
}

type Archiver struct {
	Store   ArchiveStore
	Clients *Resolver
	Logs    LogReader
	Logger  *slog.Logger
	Opts    Options
	Now     func() time.Time
	// contains filtered or unexported fields
}

type AssetProbeOptions struct {
	// Origin enables the CORS step.
	Origin    string
	ApplyCORS bool
	// PublicBaseURL enables the anonymous exposure step.
	PublicBaseURL string
	// KeyPrefix is the asset bucket prefix; the exposure object is written under it.
	KeyPrefix string
	// HTTPClient defaults to the SSRF-guarded client.
	HTTPClient *http.Client
	// Timeout bounds the exposure request.
	Timeout time.Duration
}

type AssetProbeResult struct {
	ProbeResult
	CORS     *CORSCheck      `json:"cors,omitempty"`
	Exposure *ExposureResult `json:"exposure,omitempty"`
}

type BucketStore interface {
	ListStorageBuckets(ctx context.Context) ([]store.StorageBucket, error)
	MarkStorageBucketSwept(ctx context.Context, id string, at time.Time) error
}

type BucketSweeper struct {
	Store    BucketStore
	Resolver *Resolver
	Logger   *slog.Logger
	Tick     time.Duration
	Now      func() time.Time
}

type BuildCache struct {
	Store    BuildCacheStore
	Resolver BuildCacheResolver
	Options  BuildCacheOptions
	Logger   *slog.Logger
	// ResolveHost is net.DefaultResolver.LookupNetIP unless a test overrides it.
	ResolveHost func(ctx context.Context, network, host string) ([]netip.Addr, error)
}

type BuildCacheOptions struct {
	Prefix          string
	ClearMaxObjects int
	StatsMaxObjects int
}

type BuildCacheResolver interface {
	Config(ctx context.Context, targetID string) (Config, store.BackupTarget, error)
	Client(ctx context.Context, targetID string) (*Client, store.BackupTarget, error)
}

type BuildCacheStore interface {
	GetBuildCacheSetting(ctx context.Context, appName string) (store.BuildCacheSetting, error)
	RecordBuildCacheResult(ctx context.Context, scope, at, result, warning string) error
	RecordBuildCacheCleared(ctx context.Context, scope, at string) error
}

type CORSCheck struct {
	Status  string   `json:"status"`
	Origin  string   `json:"origin"`
	Rule    CORSRule `json:"rule"`
	Message string   `json:"message,omitempty"`
}

type CORSRule struct {
	AllowedOrigins []string `json:"allowed_origins"`
	AllowedMethods []string `json:"allowed_methods"`
	AllowedHeaders []string `json:"allowed_headers"`
	ExposeHeaders  []string `json:"expose_headers"`
	MaxAgeSeconds  int32    `json:"max_age_seconds"`
}

type CacheStats struct {
	Prefix       string    `json:"prefix"`
	Objects      int       `json:"objects"`
	Bytes        int64     `json:"bytes"`
	LastModified time.Time `json:"last_modified,omitzero"`
	// Truncated means the listing hit the bound, so counts are lower bounds.
	Truncated bool `json:"truncated"`
}

type ClearResult struct {
	Deleted int `json:"deleted"`
	// More means the ClearMaxObjects bound was hit; run the clear again.
	More bool `json:"more"`
}

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	Endpoint        string
	Region          string
	Bucket          string
	AccessKeyID     string
	SecretAccessKey string
	PathStyle       bool
	// MaxAttempts bounds SDK retries per request; zero means 3.
	MaxAttempts int
	// HTTPClient defaults to netguard.NewClient(), which refuses internal addresses.
	HTTPClient *http.Client
}

type CostEstimate struct {
	Estimated      bool       `json:"estimated"`
	PriceTableDate string     `json:"price_table_date"`
	StoredBytes    int64      `json:"stored_bytes"`
	EgressGB       float64    `json:"egress_gb"`
	Current        CostLine   `json:"current"`
	Compare        []CostLine `json:"compare"`
	OverrideEnvs   []string   `json:"override_envs"`
	Notes          []string   `json:"notes"`
}

type CostLine struct {
	Preset       string  `json:"preset"`
	StorageUSD   float64 `json:"storage_usd"`
	EgressUSD    float64 `json:"egress_usd"`
	TotalUSD     float64 `json:"total_usd"`
	FreeEgressGB float64 `json:"free_egress_gb"`
}

type DumpRequest struct {
	TargetID string
	AppName  string
	From     time.Time
	To       time.Time
}

type ExposureResult struct {
	URL string `json:"url"`
	// Public is true when the anonymous request got a 2xx, so anyone can read objects through that URL.
	Public bool   `json:"public"`
	Status int    `json:"status,omitempty"`
	Error  string `json:"error,omitempty"`
}

type HealthSource struct {
	Store interface {
		ListLogArchivePolicies(ctx context.Context) ([]store.LogArchivePolicy, error)
	}
}

type ListPage struct {
	Objects []Object `json:"objects"`
	Next    string   `json:"next,omitempty"`
}

type LogReader interface {
	DistinctLogResources(ctx context.Context, fromNs, toNs int64) ([]string, error)
	StreamLogs(ctx context.Context, resourceID string, fromNs, toNs int64, maxLines int, fn func(telemetry.LogEntry) error) (telemetry.LogStreamResult, error)
}

type Object struct {
	Key          string    `json:"key"`
	Size         int64     `json:"size"`
	LastModified time.Time `json:"last_modified"`
}

type ObjectInfo struct {
	Size         int64
	ContentType  string
	ETag         string
	LastModified time.Time
}

type Options struct {
	Prefix            string
	MaxLinesPerObject int
	MaxWindowsPerRun  int
	Lag               time.Duration
	MaxBackfill       time.Duration
	MaxDumpRange      time.Duration
	Tick              time.Duration
}

type Preset struct {
	ID    string `json:"id"`
	Label string `json:"label"`
	// EndpointTemplate may contain {account_id} and {region}. Empty means the
	// SDK resolves the endpoint (AWS) or the caller supplies one.
	EndpointTemplate string `json:"endpoint_template,omitempty"`
	DefaultRegion    string `json:"default_region,omitempty"`
	PathStyle        bool   `json:"path_style"`
	NeedsAccountID   bool   `json:"needs_account_id"`
	NeedsRegion      bool   `json:"needs_region"`
	NeedsEndpoint    bool   `json:"needs_endpoint"`
	// Provider is the backup target provider this preset is stored as.
	Provider string `json:"provider"`
}

type PresignedUpload struct {
	URL       string            `json:"url"`
	Method    string            `json:"method"`
	Headers   map[string]string `json:"headers"`
	ExpiresAt time.Time         `json:"expires_at"`
}

type ProbeResult struct {
	OK      bool   `json:"ok"`
	Reason  string `json:"reason,omitempty"`
	Message string `json:"message,omitempty"`
	// Fix names the typed remedy the UI offers for Reason (see FixFor).
	Fix   string      `json:"fix,omitempty"`
	Steps []ProbeStep `json:"steps"`
}

type ProbeStep struct {
	Name  string `json:"name"`
	OK    bool   `json:"ok"`
	Error string `json:"error,omitempty"`
}

type Resolved struct {
	Endpoint string
	Region   string
}

type Resolver struct {
	Store   TargetStore
	Secrets SecretsResolver
	// HTTPClient overrides the SSRF-guarded default, for tests.
	HTTPClient *http.Client
	// MaxAttempts bounds SDK retries per request; zero means the default.
	MaxAttempts int
}

type SecretsResolver interface {
	Resolve(ctx context.Context, serviceName, envKey string) (string, error)
}

type SweepResult struct {
	Deleted int64 `json:"deleted"`
	Bytes   int64 `json:"bytes"`
}

type TargetStore interface {
	GetBackupTarget(ctx context.Context, id string) (store.BackupTarget, error)
	GetStorageOptions(ctx context.Context, targetID string) (store.StorageOptions, bool, error)
}

type UploadRequest struct {
	Key         string
	ContentType string
	Size        int64
	TTL         time.Duration
}