iac

type Action string

type ApplyResult struct {
	Plan    Plan         `json:"plan"`
	Results []ItemResult `json:"results"`
	Applied int          `json:"applied"`
	Failed  int          `json:"failed"`
	Skipped int          `json:"skipped"`
}

type Change struct {
	Kind     Kind          `json:"kind"`
	Name     string        `json:"name"`
	Scope    string        `json:"scope,omitempty"`
	Action   Action        `json:"action"`
	Fields   []FieldChange `json:"fields,omitempty"`
	Kept     []FieldChange `json:"kept,omitempty"`
	Warnings []string      `json:"warnings,omitempty"`
	Reason   string        `json:"reason,omitempty"`
	// DependsOn lists the resources this item reads from, applied first.
	DependsOn []string `json:"dependsOn,omitempty"`
	Denied    bool     `json:"denied,omitempty"`
	// LiveID is the live identifier a ledger records; it never leaves the process.
	LiveID string `json:"-"`
	File   string `json:"file,omitempty"`
	Line   int    `json:"line,omitempty"`
}

type Document struct {
	File     string
	Line     int
	Kind     Kind
	Name     string
	Labels   map[string]string
	Root     *yaml.Node
	SpecNode *yaml.Node
}

type Doer interface {
	Do(ctx context.Context, method, path string, body, out any) error
}

type DriftPolicy string

type ExportFile struct {
	Name    string `json:"name"`
	Kind    Kind   `json:"kind"`
	Content string `json:"content"`
}

type ExportOptions struct {
	Project string
	App     string
	// Database and Node each export that one resource alone.
	Database string
	Node     string
	// Settings exports only the saved, non-sensitive runtime settings.
	Settings bool
	// IncludeEnvValues writes literal env values; when false every value
	// becomes a ${{ env.NAME }} placeholder.
	IncludeEnvValues bool
}

type ExportResult struct {
	Files    []ExportFile `json:"files"`
	Warnings []string     `json:"warnings,omitempty"`
}

type FieldChange struct {
	Path string `json:"path"`
	Op   string `json:"op"`
	Old  string `json:"old,omitempty"`
	New  string `json:"new,omitempty"`
}

type GitMeta struct {
	Repo     string `json:"git_repo,omitempty"`
	Ref      string `json:"git_ref,omitempty"`
	SHA      string `json:"git_sha,omitempty"`
	CIRunURL string `json:"ci_run_url,omitempty"`
}

type Issue struct {
	File    string `json:"file,omitempty"`
	Path    string `json:"path,omitempty"`
	Line    int    `json:"line"`
	Message string `json:"message"`
}

type ItemResult struct {
	Change
	Status string `json:"status"`
	Error  string `json:"error,omitempty"`
}

type Kind string

type Ledger struct {
	StackID   string
	StackName string
	// Scope is the stack scope; empty means project.
	Scope StackLevel
	// ScopeProject is the stack's own project; an admin bound it to the stack,
	// so declaring it claims it without an explicit adopt.
	ScopeProject string
	// Owned maps resource keys this stack owns to their entries.
	Owned map[string]LedgerEntry
	// Foreign maps keys owned by some other stack to that stack's id.
	Foreign map[string]string
	// Adopt lets the stack claim existing resources no stack owns.
	Adopt bool
	// AllowMassPrune confirms a prune above the guard thresholds.
	AllowMassPrune bool
	Guard          PruneGuard
}

type LedgerEntry struct {
	StackID       string `json:"stack_id"`
	Kind          Kind   `json:"kind"`
	Key           string `json:"key"`
	LiveID        string `json:"live_id"`
	SinceRevision int    `json:"since_revision"`
}

type LedgerRef struct {
	Kind Kind
	Key  string
}

type LedgerUpdate struct {
	Claim   []LedgerEntry
	Release []LedgerEntry
}

type Options struct {
	// Vars resolve ${{ env.NAME }} placeholders.
	Vars map[string]string
	// Source names this apply source; apps it creates carry a managed-by
	// tag and only those are ever pruned.
	Source string
	// Secrets maps "NAME" or "app/NAME" to a value to store at apply time.
	// Values never appear in a plan, result or export.
	Secrets map[string]string
	// Project limits prune to managed apps of this project, matching the
	// project filter applied to the files.
	Project string
	// Prune deletes managed resources absent from the files.
	Prune bool
	// NoDeploy skips the restart that applies an env change to a running app.
	NoDeploy bool
	// ContinueOnError keeps applying after an item fails.
	ContinueOnError bool
}

type Plan struct {
	Source  string   `json:"source,omitempty"`
	Prune   bool     `json:"prune,omitempty"`
	Changes []Change `json:"changes"`
	Summary Summary  `json:"summary"`
	Hash    string   `json:"hash"`
}

type PruneGuard struct {
	MaxPercent int
	MaxCount   int
}

type Resource struct {
	Kind   Kind
	Name   string
	Scope  string
	Doc    *Document
	Fields map[string]any
	// SecretRefs are app env names backed by the secrets store.
	SecretRefs []string
	// ExistingSecrets are SecretRefs that must already be in the store.
	ExistingSecrets []string
	Warnings        []string
}

type Revision struct {
	StackID        string         `json:"stack_id"`
	Number         int            `json:"number"`
	Status         RevisionStatus `json:"status"`
	PlanHash       string         `json:"plan_hash"`
	PlanJSON       []byte         `json:"plan,omitempty"`
	RenderedDocs   []byte         `json:"rendered_docs,omitempty"`
	RollbackOf     int            `json:"rollback_of,omitempty"`
	IdempotencyKey string         `json:"idempotency_key,omitempty"`
	Actor          string         `json:"actor"`
	TokenID        string         `json:"token_id,omitempty"`
	Git            GitMeta        `json:"git"`
	CreatedAt      time.Time      `json:"created_at"`
	FinishedAt     *time.Time     `json:"finished_at,omitempty"`
	ResultJSON     []byte         `json:"result,omitempty"`
}

type RevisionStatus string

type Source struct {
	Name string
	Data []byte
}

type Stack struct {
	ID              string      `json:"id"`
	Name            string      `json:"name"`
	ProjectID       string      `json:"project_id"`
	EnvironmentID   string      `json:"environment_id,omitempty"`
	Scope           StackLevel  `json:"scope,omitempty"`
	AllowPrune      bool        `json:"allow_prune"`
	DriftPolicy     DriftPolicy `json:"drift_policy"`
	PinnedRevision  int         `json:"pinned_revision,omitempty"` // 0 means not pinned
	RequireApproval bool        `json:"require_approval"`
	CreatedAt       time.Time   `json:"created_at"`
	CreatedBy       string      `json:"created_by"`
}

type StackDeleteMode string

type StackLevel string

type StackLock struct {
	StackID   string    `json:"stack_id"`
	Holder    string    `json:"holder"`
	Revision  int       `json:"revision"`
	ExpiresAt time.Time `json:"expires_at"`
}

type StackScope struct {
	StackID   string
	StackName string
	Revision  int
}

type StackSpec struct {
	Scope       StackLevel  `json:"scope,omitempty" yaml:"scope,omitempty"`
	Project     string      `json:"project,omitempty" yaml:"project,omitempty"`
	Environment string      `json:"environment,omitempty" yaml:"environment,omitempty"`
	Prune       bool        `json:"prune,omitempty" yaml:"prune,omitempty"`
	Drift       DriftPolicy `json:"drift,omitempty" yaml:"drift,omitempty"`
}

type State struct {
	// contains filtered or unexported fields
}

type StatusError struct {
	Status  int
	Message string
}

type Summary struct {
	Create int `json:"create"`
	Update int `json:"update"`
	Delete int `json:"delete"`
	Noop   int `json:"noop"`
	Error  int `json:"error"`
}