k8s

type AppKey struct {
	Namespace string
	Identity  string
}

type AppLifecycle struct {
	State        string     `json:"state"` // active | graveyard
	LastSeen     time.Time  `json:"last_seen"`
	MissingSince *time.Time `json:"missing_since,omitempty"`
}

type AppManifest struct {
	Lifecycle           AppLifecycle          `json:"lifecycle"`
	Observed            AppObserved           `json:"observed"`
	IdentityCache       IdentityCache         `json:"identity_cache"`
	IdentityCacheStatus CacheStatus           `json:"identity_cache_status"`
	EnrichmentMeta      map[string]EnrichMeta `json:"enrichment_meta,omitempty"`
}

type AppObserved struct {
	Namespace    string   `json:"namespace"`
	Name         string   `json:"name"`
	Images       []string `json:"images"`
	ImageDigests []string `json:"image_digests"`
}

type AppRecord struct {
	Key           AppKey
	FriendlyName  string // from catalog, or derived from identity
	Category      string // from CategoryResolver
	Tier          Tier
	Description   string // from catalog
	Components    []ComponentRef
	WorkloadKinds []string // deduped: ["Deployment"], ["StatefulSet", "Deployment"] → ["Mixed"]
	Images        []ImageRef
	Version       string         // resolved via strict precedence
	Hosts         []string       // deduplicated, sorted hostnames from routes
	Exposure      ExposureResult // classified from exposure rules
	Replicas      string         // "ready/desired" format
	Status        Status
	Collision     bool             // true if identity was disambiguated via #shortUID
	Sources       []DeclaredSource // authoritative repo paths from Flux graph
	HomepageURL   string
	DocsURL       string
	SourceURL     string
}

type CacheStatus struct {
	State           string     `json:"state"`            // fresh | stale
	Reason          string     `json:"reason,omitempty"` // why stale
	LastAttemptedAt *time.Time `json:"last_attempted_at,omitempty"`
}

type Catalog struct {
	Apps      []CatalogApp     `yaml:"apps"`
	Graveyard []GraveyardEntry `yaml:"graveyard"`
}

type CatalogApp struct {
	Match        CatalogMatch `yaml:"match"`
	FriendlyName string       `yaml:"friendly_name"`
	Description  string       `yaml:"description"`
	Tier         string       `yaml:"tier"`   // "app", "platform", "hidden"
	Ignore       bool         `yaml:"ignore"` // suppress from output entirely
	HomepageURL  string       `yaml:"homepage_url"`
	DocsURL      string       `yaml:"docs_url"`
	SourceURL    string       `yaml:"source_url"`
}

type CatalogMatch struct {
	Namespace string `yaml:"namespace"`
	Identity  string `yaml:"identity"`
}

type CategoryResolver struct {
	// contains filtered or unexported fields
}

type Client struct {
	Config        *rest.Config
	Clientset     kubernetes.Interface
	GatewayClient gatewayclient.Interface
	ClusterName   string // resolved from actual auth path, not blindly from input
	// contains filtered or unexported fields
}

type ComponentRef struct {
	Name string        // e.g. "core", "registry", "jobservice"
	Kind string        // e.g. "Deployment", "StatefulSet"
	Role ComponentRole // classified role (database, cache, primary, etc.)
}

type ComponentRole string

type DeclaredSource struct {
	Kind     string // overlay, helmrelease, kustomization, policy
	RepoPath string // repo-relative authoritative path
	Relation string // deploys, configures, secures, depends_on
	Primary  bool
}

type DiscoveryResult struct {
	Apps       []AppRecord
	Platform   []AppRecord
	Unresolved []AppRecord
	Graveyard  []GraveyardEntry
	ObservedAt time.Time
	Cluster    string
}

type DiscoveryStatus struct {
	Complete bool   `json:"complete"`
	Source   string `json:"source,omitempty"` // live_cluster
}

type Endpoint struct {
	IP   string
	Port int
}

type EnrichBasis struct {
	ImageDigest string `json:"image_digest,omitempty"`
}

type EnrichMeta struct {
	Source    string       `json:"source"` // oci_label, helm_chart, annotation
	UpdatedAt string       `json:"updated_at"`
	Basis     *EnrichBasis `json:"basis,omitempty"` // invalidation key
}

type ExposureLevel string

type ExposureRef struct {
	Kind    string // "HTTPRoute", "Ingress"
	Host    string
	Name    string
	Gateway string // HTTPRoute: parentRef gateway name, for exposure classification
	Class   string // Ingress: ingress class, for exposure classification
	Group   string // the app group the route declares, when a group source is configured
}

type ExposureResult struct {
	Declared   ExposureLevel `json:"declared"`
	Observed   ExposureLevel `json:"observed,omitempty"` // future: from external probe
	Gateway    string        `json:"gateway,omitempty"`
	Endpoint   string        `json:"endpoint,omitempty"`
	Confidence string        `json:"confidence"` // exact | inferred | fallback | unknown
	RuleIndex  int           `json:"rule_index"` // which rule matched (-1 if none)
}

type GraveyardEntry struct {
	Name      string `yaml:"name"`
	Namespace string `yaml:"namespace"`
	Category  string `yaml:"category"`
	Reason    string `yaml:"reason"`
	DocsURL   string `yaml:"docs_url"`
}

type IdentityCache struct {
	DisplayName string `json:"display_name,omitempty"`
	Description string `json:"description,omitempty"`
	Homepage    string `json:"homepage,omitempty"`
	Version     string `json:"version,omitempty"`
}

type ImageRef struct {
	Repository string // e.g. "docker.io/library/redis"
	Tag        string // e.g. "7.4.2", "latest"
	Digest     string // e.g. "sha256:abc..." (if available from pod spec)
}

type InventoryManifest struct {
	SchemaVersion   int                    `json:"schema_version"`
	Cluster         string                 `json:"cluster"`
	GeneratedAt     time.Time              `json:"generated_at"`
	DiscoveryStatus DiscoveryStatus        `json:"discovery_status"`
	Apps            map[string]AppManifest `json:"apps"` // key: namespace/identity
}

type Status string

type Tier string

type WorkloadIdentity struct {
	Key     AppKey
	Source  string // "label/instance", "label/name", "helm", "ownerRef", "name"
	RootUID string // UID of the root owner (for collision detection)
}