ir

type EnvVar struct {
	Name  string
	Value string
	Line  int
}

type KeyValue struct {
	Key   string
	Value string
	Line  int
}

type Mount struct {
	// Source is the host path or volume name, empty for anonymous mounts.
	Source string
	// Destination is the path inside the container.
	Destination string
	// Options are the comma-separated options after the second colon,
	// e.g. `ro`, `Z`, `z`, `U`.
	Options []string
	Type    MountType
	// UnitRef is the referenced Quadlet unit for a `foo.volume` source,
	// otherwise empty.
	UnitRef string
	// Line is where this mount was declared, for citing in findings.
	Line int
	// Raw is the original value, so a fix can rewrite it precisely.
	Raw string
}

type MountType string

type Port struct {
	HostIP        string
	HostPort      int
	ContainerPort int
	Protocol      string
	Line          int
	Raw           string
}

type Project struct {
	// Root is the directory the units came from, for reporting.
	Root string
	// Units are the project's units in a deterministic order.
	Units []*Unit
}

type SourceEntry struct {
	Section string
	Key     string
	Value   string
	Line    int
}

type SourceFile interface {
	// Values returns every value of a key within a section, in file order.
	Values(section, key string) []string
	// Render writes the file back out.
	Render() string
}

type Unit struct {
	// Path is the file this unit came from, or a synthetic name when the
	// unit was generated by conversion rather than read from disk.
	Path string
	// Name is the file's base name without its extension: `web.container`
	// has the name `web`.
	Name string
	Kind UnitKind

	// Image is the `Image=` value for a container unit.
	Image string
	// Mounts are the decomposed `Volume=` entries.
	Mounts []Mount
	// Ports are the decomposed `PublishPort=` entries.
	Ports []Port
	// Networks are the raw `Network=` values.
	Networks []string
	// Environment holds `Environment=` entries in declaration order.
	Environment []EnvVar
	// User and Group are the `User=` and `Group=` values.
	User  string
	Group string
	// GroupAdd holds the `GroupAdd=` values.
	GroupAdd []string
	// UserNS is the `UserNS=` value.
	UserNS string
	// AutoUpdate is the `AutoUpdate=` value.
	AutoUpdate string
	// Pod is the `Pod=` value, naming the pod unit this container joins.
	Pod string
	// Notify is the `Notify=` value.
	Notify string
	// Restart is `Restart=` from the `[Service]` section.
	Restart string
	// HasInstall records whether an `[Install]` section is present at all,
	// even empty. QD022 turns on that distinction.
	HasInstall bool
	// InstallKeys are the keys found in `[Install]`.
	InstallKeys []KeyValue
	// HasHealthCmd records whether a healthcheck is configured, which
	// `Notify=healthy` requires.
	HasHealthCmd bool

	// Source is the parsed file, retained so fixes can rewrite it and rules
	// can reach keys the IR does not model. Nil for generated units.
	Source SourceFile

	// Entries is every assignment in the file, with its section and line, so
	// rules can examine keys the IR does not model. QD042 needs this to spot
	// a key that is not modelled *because* it is not a real key.
	Entries []SourceEntry
	// contains filtered or unexported fields
}

type UnitKind string