config

type Auth struct {
	PAT            string `yaml:"pat"`
	AppID          int64  `yaml:"app_id"`
	InstallationID int64  `yaml:"installation_id"`
	PrivateKeyPath string `yaml:"private_key_path"`
	// ClientID is the GitHub App client id for the device-flow user token; empty
	// means the shared App's default (ghapp.DefaultClientID). Not a secret.
	ClientID string `yaml:"client_id"`
	// TokenPath points at the JSON sidecar holding the device-flow user access
	// and refresh tokens. Tokens rotate on refresh, so they live here, never in
	// the YAML.
	TokenPath string `yaml:"token_path"`
}

type CPUCount int64

type Cache struct {
	Enabled             bool   `yaml:"enabled"`
	Mode                string `yaml:"mode"` // local-server | off
	Storage             string `yaml:"storage"`
	Path                string `yaml:"path"`
	Listen              string `yaml:"listen"`
	AdvertiseURL        string `yaml:"advertise_url"` // URL of this cache as seen from inside runner containers
	ExternalURL         string `yaml:"external_url"`  // if set, use an already-running cache here instead of starting the embedded server
	AccessToken         string `yaml:"access_token"`  // optional shared path token for cache API URLs; generated when omitted
	SkipTokenValidation bool   `yaml:"skip_token_validation"`
	Upstream            string `yaml:"upstream"`
	// Housekeeping (garbage collection of stored entries):
	MaxAgeDays    int `yaml:"max_age_days"`    // evict entries unused this many days (0 => default; <0 => never)
	MaxSizeGB     int `yaml:"max_size_gb"`     // LRU-evict to keep total blob size under this cap (0 => unlimited)
	GCIntervalSec int `yaml:"gc_interval_sec"` // sweep cadence (0 => default 3600; <0 => disabled)
}

type Config struct {
	GitHub       GitHub       `yaml:"github"`
	Auth         Auth         `yaml:"auth"`
	Provisioning Provisioning `yaml:"provisioning"`
	Cache        Cache        `yaml:"cache"`
	GitCache     GitCache     `yaml:"git_cache"`
	Webhook      Webhook      `yaml:"webhook"`
	Metrics      Metrics      `yaml:"metrics"`
	Pools        []Pool       `yaml:"pools"`
	Log          Log          `yaml:"log"`
}

type ConnectHints struct {
	Provisioning  Provisioning
	WebhookListen string
	GitHubURL     string
	Pools         int
}

type ContainerConfig struct {
	CPUs         CPUCount  `yaml:"cpus"`
	MemoryMB     Mebibytes `yaml:"memory_mb"`
	MemorySwapMB Mebibytes `yaml:"memory_swap_mb"`
	DNS          []string  `yaml:"dns"`
}

type Containerd struct {
	Address   string `yaml:"address"`   // containerd pipe (default \\.\pipe\containerd-containerd)
	Nerdctl   string `yaml:"nerdctl"`   // path to nerdctl.exe ("" => from PATH)
	Namespace string `yaml:"namespace"` // containerd namespace (default "multirunner")
	Isolation string `yaml:"isolation"` // process | hyperv | auto (default)
}

type Docker struct {
	Host           string    `yaml:"host"`
	TLS            DockerTLS `yaml:"tls"`
	EnableDinD     bool      `yaml:"enable_dind"`
	ShareWorkspace bool      `yaml:"share_workspace"`
	Isolation      string    `yaml:"isolation"`    // process | hyperv | auto (default, windows)
	WindowsDinD    string    `yaml:"windows_dind"` // off | host-pipe | hyperv
}

type DockerTLS struct {
	CAFile   string `yaml:"ca"`
	CertFile string `yaml:"cert"`
	KeyFile  string `yaml:"key"`
}

type GitCache struct {
	Mode string `yaml:"mode"` // mirror | dotgit-cache | off
	Path string `yaml:"path"`
	// MaxAgeDays removes bare mirrors not used (cloned/fetched/bundled) within
	// this many days. 0 => use the default; negative => never prune.
	MaxAgeDays int `yaml:"max_age_days"`
}

type GitHub struct {
	URL   string   `yaml:"url"`
	Scope Scope    `yaml:"scope"`
	Owner string   `yaml:"owner"`
	Repo  string   `yaml:"repo"`
	Repos []string `yaml:"repos"` // only for scope=repos: "repo" or "owner/repo"
}

type Log struct {
	Level  string `yaml:"level"`
	Format string `yaml:"format"`
}

type Mebibytes int64

type Metrics struct {
	Listen string `yaml:"listen"` // empty disables it
}

type Pool struct {
	Name                   string          `yaml:"name"`
	OS                     string          `yaml:"os"`      // linux | windows
	Backend                string          `yaml:"backend"` // docker (default) | containerd | qemu
	Size                   int             `yaml:"size"`
	ImageTier              string          `yaml:"image_tier"`
	Image                  string          `yaml:"image"`
	Container              ContainerConfig `yaml:"container"`
	QEMU                   QEMU            `yaml:"qemu"`
	Containerd             Containerd      `yaml:"containerd"`
	RunnerGroupID          int64           `yaml:"runner_group_id"`
	Labels                 []string        `yaml:"labels"`
	Repository             string          `yaml:"repository"`
	Workflows              []string        `yaml:"workflows"`
	WorkflowEvent          string          `yaml:"workflow_event"`
	WorkflowActor          string          `yaml:"workflow_actor"`
	WorkflowRef            string          `yaml:"workflow_ref"`
	WorkFolder             string          `yaml:"work_folder"`
	NamePrefix             string          `yaml:"name_prefix"`
	Docker                 Docker          `yaml:"docker"`
	ToolCache              ToolCache       `yaml:"tool_cache"`
	MaxConsecutiveFailures int             `yaml:"max_consecutive_failures"`
	// ScaleSet names the runner scale set that feeds this pool when
	// provisioning is "scaleset". Each pool needs its own, because a scale set
	// carries one set of labels and therefore one runner OS.
	ScaleSet string `yaml:"scale_set"`
	// RunnerGroup is the runner group the scale set is created in. Empty means
	// the default group.
	RunnerGroup string `yaml:"runner_group"`
}

type Provisioning string

type QEMU struct {
	Golden  string `yaml:"golden"`   // path to the golden qcow2 (built by `multirunner bake`)
	WorkDir string `yaml:"work_dir"` // where per-job overlays/ISOs are written
	MemMB   int    `yaml:"mem_mb"`
	CPUs    int    `yaml:"cpus"`
	Accel   string `yaml:"accel"` // "" = auto (hardware acceleration on x86-64; TCG on ARM)
	// Housekeeping (golden eval license + rebuilds):
	BakeISO       string   `yaml:"bake_iso"`        // Windows ISO for rebuilds (enables auto-rebuild)
	BakeISOSHA256 string   `yaml:"bake_iso_sha256"` // optional expected SHA256 of bake_iso
	RunnerVersion string   `yaml:"runner_version"`  // runner version to bake
	RunnerSHA256  string   `yaml:"runner_sha256"`   // required with a non-default runner_version
	Licensed      bool     `yaml:"licensed"`        // real key/KMS -> skip eval housekeeping
	Tools         []string `yaml:"tools"`           // golden selectors: dotnet[:major] | node[:major] | go | buildtools[:line]
}

type RepoRef struct {
	Owner string
	Repo  string
}

type Scope string

type ToolCache struct {
	Mode     string `yaml:"mode"` // shared-volume | off
	Volume   string `yaml:"volume"`
	ReadOnly bool   `yaml:"readonly"`
}

type Webhook struct {
	Listen          string `yaml:"listen"`
	Path            string `yaml:"path"`
	Secret          string `yaml:"secret"`
	PollIntervalSec int    `yaml:"poll_interval_sec"` // 0 = default 300s; <0 disables polling
}