deploy

type ApplyOpts struct {
	// DryRun simulates the apply without making changes.
	DryRun bool `json:"dryRun,omitempty"`
	// Wait blocks until the deployment is complete or times out.
	Wait bool `json:"wait,omitempty"`
	// WaitTimeout is the maximum time to wait for deployment completion.
	WaitTimeout time.Duration `json:"waitTimeout,omitempty"`
	// Force deletes and recreates resources that cannot be updated.
	Force bool `json:"force,omitempty"`
	// FieldManager is the field manager name for server-side apply.
	FieldManager string `json:"fieldManager,omitempty"`
}

type BlueGreenState struct {
	ActiveEnv  Environment `json:"active_env"`
	StandbyEnv Environment `json:"standby_env"`
	ActiveVer  int         `json:"active_version"`
	StandbyVer int         `json:"standby_version"`
}

type BlueGreenStrategy struct {
	// contains filtered or unexported fields
}

type CanaryConfig struct {
	InitialPercent float64       `json:"initial_percent"` // default 10
	Increment      float64       `json:"increment"`       // default 20
	Interval       time.Duration `json:"interval"`        // default 30s
	ErrorThreshold float64       `json:"error_threshold"` // default 5 (percent)
}

type CanaryStrategy struct {
	// contains filtered or unexported fields
}

type Capabilities struct {
	Add  []string `json:"add,omitempty"`
	Drop []string `json:"drop,omitempty"`
}

type ComposeSidecarSpec struct {
	Image       string            `json:"image"`
	Command     string            `json:"command,omitempty"`
	Environment map[string]string `json:"environment,omitempty"`
	Ports       []string          `json:"ports,omitempty"`
	Volumes     []string          `json:"volumes,omitempty"`
	DependsOn   []string          `json:"dependsOn,omitempty"`
}

type DeployArtifacts struct {
	// Target is the deploy target name that generated these artifacts.
	Target string `json:"target"`
	// AppName is the application name.
	AppName string `json:"appName"`
	// Namespace is the target namespace/environment.
	Namespace string `json:"namespace"`
	// Files maps relative file paths to their content.
	Files map[string][]byte `json:"files,omitempty"`
	// Objects holds structured deployment objects (e.g., k8s unstructured objects).
	Objects []any `json:"-"`
	// Metadata holds target-specific metadata.
	Metadata map[string]string `json:"metadata,omitempty"`
}

type DeployRequest struct {
	Config    *config.WorkflowConfig
	Manifest  *manifest.WorkflowManifest
	Sidecars  []*SidecarSpec
	Image     string
	Namespace string
	AppName   string
	Replicas  int
	ExtraEnv  map[string]string
	SecretRef string
	OutputDir string

	// Command overrides the container entrypoint.
	Command []string
	// Args overrides the default container arguments.
	Args []string
	// ImagePullPolicy sets the container image pull policy ("Never", "Always", "IfNotPresent").
	ImagePullPolicy string
	// Strategy sets the deployment strategy ("Recreate" or "RollingUpdate").
	Strategy string
	// ServiceAccount sets the pod service account name.
	ServiceAccount string
	// HealthPath overrides the default health check path ("/healthz").
	HealthPath string
	// ConfigMapName overrides the configmap name (default: AppName).
	ConfigMapName string
	// RunAsUser sets the pod security context runAsUser.
	RunAsUser *int64
	// RunAsNonRoot sets the pod security context runAsNonRoot.
	RunAsNonRoot *bool
	// FSGroup sets the pod security context fsGroup.
	FSGroup *int64
	// ConfigFileData is raw config YAML bytes (with env vars expanded).
	// If set, used for ConfigMap instead of marshaling Config.
	ConfigFileData []byte
}

type DeployResult struct {
	// Status is the deployment status ("success", "failed", "in_progress").
	Status string `json:"status"`
	// Message is a human-readable description of the result.
	Message string `json:"message"`
	// StartedAt is when the deployment started.
	StartedAt time.Time `json:"startedAt"`
	// CompletedAt is when the deployment finished.
	CompletedAt time.Time `json:"completedAt"`
	// Resources lists the resources that were created or updated.
	Resources []DeployedResource `json:"resources,omitempty"`
}

type DeployStatus struct {
	// AppName is the application name.
	AppName string `json:"appName"`
	// Namespace is the deployment namespace.
	Namespace string `json:"namespace"`
	// Phase is the overall deployment phase ("Running", "Pending", "Failed", "Unknown").
	Phase string `json:"phase"`
	// Ready is the number of ready replicas.
	Ready int `json:"ready"`
	// Desired is the desired number of replicas.
	Desired int `json:"desired"`
	// Message is additional status information.
	Message string `json:"message,omitempty"`
	// Resources lists individual resource statuses.
	Resources []ResourceStatus `json:"resources,omitempty"`
}

type DeployTarget interface {
	// Name returns the target identifier (e.g., "kubernetes", "ecs", "docker-compose").
	Name() string

	// Generate produces platform-specific deployment artifacts from config.
	Generate(ctx context.Context, req *DeployRequest) (*DeployArtifacts, error)

	// Apply deploys artifacts to the target platform.
	Apply(ctx context.Context, artifacts *DeployArtifacts, opts ApplyOpts) (*DeployResult, error)

	// Destroy tears down all resources for the given app.
	Destroy(ctx context.Context, appName, namespace string) error

	// Status returns current deployment status.
	Status(ctx context.Context, appName, namespace string) (*DeployStatus, error)

	// Diff compares generated artifacts against live state.
	Diff(ctx context.Context, artifacts *DeployArtifacts) (string, error)

	// Logs streams logs from the deployed app.
	Logs(ctx context.Context, appName, namespace string, opts LogOpts) (io.ReadCloser, error)
}

type DeployTargetRegistry struct {
	// contains filtered or unexported fields
}

type DeployedResource struct {
	Kind      string `json:"kind"`
	Name      string `json:"name"`
	Namespace string `json:"namespace,omitempty"`
	Status    string `json:"status"`
}

type DeploymentPlan struct {
	WorkflowID  string         `json:"workflow_id"`
	FromVersion int            `json:"from_version"`
	ToVersion   int            `json:"to_version"`
	Strategy    string         `json:"strategy"` // "rolling", "blue-green", "canary"
	Config      map[string]any `json:"config"`
}

type DeploymentResult struct {
	Status      string    `json:"status"` // "success", "failed", "rolled_back"
	StartedAt   time.Time `json:"started_at"`
	CompletedAt time.Time `json:"completed_at"`
	Message     string    `json:"message"`
	RolledBack  bool      `json:"rolled_back"`
}

type DeploymentStrategy interface {
	// Name returns the strategy identifier (e.g., "rolling", "blue-green", "canary").
	Name() string

	// Validate checks the strategy-specific configuration.
	Validate(config map[string]any) error

	// Execute runs the deployment according to the plan.
	Execute(ctx context.Context, plan *DeploymentPlan) (*DeploymentResult, error)
}

type ECSSidecarSpec struct {
	Image        string            `json:"image"`
	Command      []string          `json:"command,omitempty"`
	Env          map[string]string `json:"env,omitempty"`
	Essential    bool              `json:"essential"`
	PortMappings []int32           `json:"portMappings,omitempty"`
}

type Environment string

type K8sSidecarSpec struct {
	Image              string            `json:"image"`
	Command            []string          `json:"command,omitempty"`
	Args               []string          `json:"args,omitempty"`
	Env                map[string]string `json:"env,omitempty"`
	SecretEnv          []SecretEnvVar    `json:"secretEnv,omitempty"`
	Ports              []int32           `json:"ports,omitempty"`
	VolumeMounts       []VolumeMount     `json:"volumeMounts,omitempty"`
	Volumes            []Volume          `json:"volumes,omitempty"`
	ConfigMapData      map[string]string `json:"configMapData,omitempty"`
	ServiceAccountName string            `json:"serviceAccountName,omitempty"`
	RequiredSecrets    []string          `json:"requiredSecrets,omitempty"`
	SecurityContext    *SecurityContext  `json:"securityContext,omitempty"`
	ImagePullPolicy    string            `json:"imagePullPolicy,omitempty"`
}

type LogOpts struct {
	// Container filters logs to a specific container name.
	Container string `json:"container,omitempty"`
	// Follow streams logs as they are produced.
	Follow bool `json:"follow,omitempty"`
	// TailLines limits output to the last N lines.
	TailLines int64 `json:"tailLines,omitempty"`
	// Since only shows logs newer than this duration.
	Since time.Duration `json:"since,omitempty"`
	// Previous shows logs from previous container instances.
	Previous bool `json:"previous,omitempty"`
}

type ResourceStatus struct {
	Kind      string `json:"kind"`
	Name      string `json:"name"`
	Namespace string `json:"namespace,omitempty"`
	Status    string `json:"status"`
	Message   string `json:"message,omitempty"`
}

type RollingConfig struct {
	BatchSize int           `json:"batch_size"` // default 1
	Delay     time.Duration `json:"delay"`      // default 5s
}

type RollingStrategy struct {
	// contains filtered or unexported fields
}

type SecretEnvVar struct {
	EnvName    string `json:"envName"`
	SecretName string `json:"secretName"`
	SecretKey  string `json:"secretKey"`
}

type SecurityContext struct {
	RunAsUser    *int64        `json:"runAsUser,omitempty"`
	RunAsGroup   *int64        `json:"runAsGroup,omitempty"`
	Privileged   *bool         `json:"privileged,omitempty"`
	Capabilities *Capabilities `json:"capabilities,omitempty"`
}

type SidecarProvider interface {
	// Type returns the sidecar type string (e.g., "sidecar.tailscale").
	Type() string

	// Validate checks the sidecar configuration.
	Validate(cfg config.SidecarConfig) error

	// Resolve produces a platform-specific SidecarSpec from config.
	Resolve(cfg config.SidecarConfig, platform string) (*SidecarSpec, error)
}

type SidecarRegistry struct {
	// contains filtered or unexported fields
}

type SidecarSpec struct {
	Name    string
	K8s     *K8sSidecarSpec     `json:"k8s,omitempty"`
	ECS     *ECSSidecarSpec     `json:"ecs,omitempty"`
	Compose *ComposeSidecarSpec `json:"compose,omitempty"`
}

type StrategyRegistry struct {
	// contains filtered or unexported fields
}

type TrafficSplit struct {
	CanaryPercent float64 `json:"canary_percent"`
	StablePercent float64 `json:"stable_percent"`
	CanaryVersion int     `json:"canary_version"`
	StableVersion int     `json:"stable_version"`
}

type Volume struct {
	Name      string `json:"name"`
	EmptyDir  bool   `json:"emptyDir,omitempty"`
	Secret    string `json:"secret,omitempty"` //nolint:gosec // G117 — k8s secret name reference, not a secret value
	ConfigMap string `json:"configMap,omitempty"`
}

type VolumeMount struct {
	Name      string `json:"name"`
	MountPath string `json:"mountPath"`
	ReadOnly  bool   `json:"readOnly,omitempty"`
}