admin

type AdminBatchCoordinator interface {
	Submit(ctx context.Context, libraryRelPath string, targetRate, targetBits int) (AdminBatchSubmitResult, error)
	Cancel(idHex string) error
	ListBatches(limit int) ([]AdminBatchRow, error)
	Throughput() AdminBatchThroughput
}

type AdminBatchInsufficientDiskSpace struct {
	ProjectedBytes int64
	RequiredBytes  int64
	AvailableBytes int64
}

type AdminBatchRow struct {
	ID             string    `json:"id"`
	Path           string    `json:"path"`
	TargetRate     int       `json:"targetRate"`
	TargetBits     int       `json:"targetBits"`
	Status         string    `json:"status"`
	TotalFiles     int       `json:"totalFiles"`
	ProcessedFiles int       `json:"processedFiles"`
	FailedFiles    int       `json:"failedFiles"`
	Error          string    `json:"error,omitempty"`
	CreatedAt      time.Time `json:"createdAt"`
	UpdatedAt      time.Time `json:"updatedAt"`
}

type AdminBatchSubmitResult struct {
	BatchID            string `json:"batchID"`
	Path               string `json:"path"`
	TargetRate         int    `json:"targetRate"`
	TargetBits         int    `json:"targetBits"`
	TotalFiles         int    `json:"totalFiles"`
	AlreadyCovered     int    `json:"alreadyCovered"`
	ProjectedSizeBytes int64  `json:"projectedSizeBytes"`
	AvailableBytes     int64  `json:"availableBytes"`
	EnqueuedCount      int    `json:"enqueuedCount"`
}

type AdminBatchThroughput struct {
	JobsPerHour float64 `json:"jobsPerHour"`
	EtaSeconds  float64 `json:"etaSeconds"`
	Samples     int     `json:"samples"`
}

type AdminVariantDeleteRequest struct {
	All    bool
	Prefix string
	Path   string
}

type AdminVariantDeleteResponse struct {
	DeletedCount int      `json:"deletedCount"`
	FreedBytes   int64    `json:"freedBytes"`
	DeletedPaths []string `json:"deletedPaths"`
}

type AdminVariantDeleter interface {
	Delete(ctx context.Context, req AdminVariantDeleteRequest) (AdminVariantDeleteResponse, error)
}

type Deps struct {
	CfgHolder *config.RuntimeConfig // live config snapshot holder
	CfgPath   string                // path to bridge.yaml, for Config.Save()
	Auth      *auth.Store           // token list / mint / revoke
	Manifest  *manifest.Store
	Scanner   *manifest.Scanner
	Resolver  *bridgefs.Resolver

	// Fingerprint is the TLS cert SHA-256 in colon-hex form. Shown in the
	// pairing modal and the dashboard.
	Fingerprint string

	// StartedAt is used to render uptime. Typically time.Now().UTC() at
	// the moment the serve command completes its init.
	StartedAt time.Time

	// Restart is called when the operator clicks "Restart now" on a
	// restart-required settings edit. Nil means os.Exit(0) — fine when
	// running under launchd/systemd which will relaunch.
	Restart func()

	// ScanCtx is the parent context for admin-triggered scans. serveCmd
	// should pass the same context it passes to scanner.RunPeriodic so a
	// shutdown cancels any admin-triggered scan along with the periodic
	// one. Nil defaults to context.Background() — only acceptable for
	// tests that don't care about goroutine cleanup.
	ScanCtx context.Context

	// Updater is the optional read-side of the update poller. Wired via
	// an adapter in cmd/bridge/main.go so this package doesn't import
	// internal/updater. Nil-safe — when absent, the dashboard's update
	// tile shows "not configured" and the /api/updates endpoint
	// returns the same fallback shape.
	Updater UpdateProvider

	// BackupSources is the resolved set of state-file paths the
	// admin's "Snapshot now" button hands to `backup.Snapshot`.
	// Injected from `cmd/bridge/main.go` via the same
	// `buildBackupSources` helper the CLI uses, so paths can't drift
	// between the two surfaces (CodeRabbit + Gemini both flagged the
	// prior local helper as a divergence risk on PR #44). Zero-value
	// is treated as "feature not wired" and the API endpoints return
	// 503 — fine for tests that don't construct the admin server
	// with backup wiring.
	BackupSources backup.Sources

	// Tailscale is the read+refresh side of the Tailscale HTTPS
	// auto-pilot. Nil-safe — when absent, the dashboard's Tailscale
	// tile shows "not configured" and the /api/tailscale endpoints
	// return the same fallback shape. Wired via an adapter in
	// cmd/bridge/main.go so this package doesn't import
	// internal/tailscale or the cmd/bridge auto-pilot type.
	Tailscale TailscaleProvider

	// Pairing backs the admin-approval pairing flow. Optional — when
	// nil, /api/pairing returns an empty list and the approve / decline
	// handlers reply 503 (so a misconfigured deployment surfaces a
	// distinct error rather than silently dropping operator clicks).
	// The iOS-facing /v1/pairing/* endpoints are gated by the api
	// package's own pairing wiring; both sides receive the same Store
	// from cmd/bridge/main.go.
	Pairing *pairing.Store

	// UpscalePrecheck probes whether the upscale feature can run on
	// this host (sox on PATH, --version returns within 2 s). Wired
	// to `transcode.PrecheckSox` via a closure in cmd/bridge/main.go
	// so this package doesn't import internal/transcode (matches the
	// MBIDProbe / UpdateProvider decoupling pattern). Nil-safe — when
	// absent the Settings response omits the `upscaleSoxAvailable`
	// field and the UI hides the warning banner.
	UpscalePrecheck func() error

	// UpscaleStats returns a snapshot of the long-lived
	// transcode pool's counters (workers, queue length, in-
	// flight jobs, lifetime totals). Wired via a closure in
	// cmd/bridge/main.go so the admin package stays decoupled
	// from internal/transcode. The closure returns nil when
	// the feature is off (Pool isn't instantiated); the admin
	// endpoint then omits the `pool` field instead of
	// surfacing zero-padded clutter ("0/0 queue, 0 inflight"
	// would suggest the pool exists but is idle, which is
	// semantically wrong).
	UpscaleStats func() *UpscalePoolStats

	// ProjectedSize estimates the on-disk size of a FLAC
	// variant produced from (sourceSize, sourceRate, sourceBits)
	// at (targetRate, targetBits). Wired to
	// `transcode.ProjectedSize` (with `DefaultCompressionFactor`
	// baked in) via a closure in cmd/bridge/main.go so the admin
	// package doesn't import internal/transcode. Mirrors the
	// UpscaleStats / UpscalePrecheck decoupling pattern.
	//
	// Nil when upscale is disabled — the projection endpoint
	// surfaces a clean 503 in that case.
	ProjectedSize func(sourceSize int64, sourceRate, sourceBits, targetRate, targetBits int) int64

	// AvailableDiskSpace probes free bytes on the volume holding
	// `dir`. Wired to `transcode.AvailableDiskSpace`. Nil-safe
	// alongside ProjectedSize (both wired together when upscale
	// is enabled, both nil when disabled).
	AvailableDiskSpace func(dir string) (int64, error)

	// BatchCoordinator is the v1.3 admin Library Inspector's gateway
	// to the transcode.Coordinator. Wired to a closure-based adapter
	// in cmd/bridge/main.go (same decoupling pattern as
	// UpscaleStats / UpscaleEnqueuer). Nil-safe — when absent the
	// admin Library Inspector renders the folder tree but the
	// "Upscale this folder" trigger surfaces a 503.
	BatchCoordinator AdminBatchCoordinator

	// VariantDeleter is the admin-side gateway to the same
	// list/unlink/DeleteVariant/SSE-publish pipeline that powers
	// the public `DELETE /v1/upscale/variants` endpoint. Wired in
	// cmd/bridge to an adapter around `api.Server.RunVariantDelete`
	// so the admin console and the iOS app go through exactly one
	// code path on the way out — no risk of drift between the two
	// destructive surfaces. Nil-safe: when absent (upscale disabled
	// on this bridge OR pre-feature build) the admin handler
	// surfaces 503 service_unavailable, matching the
	// `BatchCoordinator == nil` shape on the same page.
	VariantDeleter AdminVariantDeleter

	// IsSupervised reports whether the current process is running
	// under launchd / systemd / Windows SCM — i.e. whether
	// `os.Exit(0)` will trigger an automatic relaunch. Threaded
	// through to `settingsResponse.IsSupervised` so the admin UI
	// can show "Restart now" (auto-relaunch promised) versus
	// "Stop now (manual restart required)" (operator must run the
	// service back up themselves). Wired in `cmd/bridge/main.go`
	// from `supervision.IsSupervised()`. Defaults to false in
	// test harnesses, which yields the conservative — never-
	// promise-relaunch — UI wording, never the lying one.
	IsSupervised bool
}

type Server struct {
	// contains filtered or unexported fields
}

type TailscaleProvider interface {
	Status() TailscaleStatus
	RefreshNow(ctx context.Context) TailscaleStatus
}

type TailscaleStatus struct {
	CLIAvailable      bool       `json:"cliAvailable"`
	NodeName          string     `json:"nodeName,omitempty"`
	MagicDNSName      string     `json:"magicDNSName,omitempty"`
	HTTPSCertsEnabled bool       `json:"httpsCertsEnabled"`
	CertPresent       bool       `json:"certPresent"`
	CertNotAfter      *time.Time `json:"certNotAfter,omitempty"`
	CertPath          string     `json:"certPath,omitempty"`
	MagicDNSURL       string     `json:"magicDNSURL,omitempty"`
	LastError         string     `json:"lastError,omitempty"`
	LastChecked       *time.Time `json:"lastChecked,omitempty"`
}

type UpdateProvider interface {
	Status() UpdateStatus
	CheckNow(ctx context.Context) UpdateStatus
	Install(ctx context.Context, force bool) (UpdateStatus, error)
	Rollback(force bool) error
}

type UpdateStatus struct {
	CurrentVersion   string    `json:"currentVersion"`
	LatestVersion    string    `json:"latestVersion,omitempty"`
	UpdateAvailable  bool      `json:"updateAvailable"`
	ReleaseNotesURL  string    `json:"releaseNotesURL,omitempty"`
	Channel          string    `json:"channel"`
	LastCheck        time.Time `json:"lastCheck,omitempty"`
	LastError        string    `json:"lastError,omitempty"`
	MinClientVersion string    `json:"minClientVersion,omitempty"`
	CanInstall       bool      `json:"canInstall"`
	// DeferredReason is the most-recent gate-refusal explanation
	// from the auto-installer. Empty when the previous cycle
	// either installed the candidate, found no candidate, or
	// hadn't yet polled. Currently the only populated reason is
	// the MinClientVersion compat gate ("would orphan device(s):
	// X"); future gates can extend the same field. Surfaced in
	// the dashboard as a yellow "held update" card.
	DeferredReason string `json:"deferredReason,omitempty"`
}

type UpscalePoolStats struct {
	Workers  int    `json:"workers"`
	QueueCap int    `json:"queueCap"`
	QueueLen int    `json:"queueLen"`
	Inflight int    `json:"inflight"`
	Enqueued uint64 `json:"enqueued"`
	Done     uint64 `json:"done"`
	Failed   uint64 `json:"failed"`
}