setup

type ASC struct {
	// BaseURL defaults to ASCBaseURL; tests point it at a double.
	BaseURL  string
	IssuerID string
	KeyID    string
	Key      *ecdsa.PrivateKey
	HTTPC    oidc.Doer
	// Now is the clock (test override); defaults to time.Now.
	Now func() time.Time
}

type ASCBundleID struct {
	// ResourceID is the opaque ASC resource id (not the identifier).
	ResourceID string
	Identifier string
	Name       string
}

type ASCLocalization struct {
	ResourceID  string
	Locale      string
	Name        string
	Description string
}

type ASCSubscription struct {
	ResourceID string
	ProductID  string
	Name       string
	Period     string
	GroupLevel int
}

type ASCSubscriptionGroup struct {
	ResourceID    string
	ReferenceName string
}

type Action string

type AppleCatalog struct {
	ASC *ASC
	// AppID is the ASC app resource id the subscription group hangs off.
	AppID string
	// Territory is the base territory whose price-point ladder the base price
	// is resolved against; defaults to "USA".
	Territory string
	// NotificationURL is moth's App Store Server Notification V2 endpoint; when
	// set, Sync attempts to register it (guided fallback on 404).
	NotificationURL string
	// CurrentNotificationURL is the URL moth has already registered (from its
	// stored config). Apple exposes no read for it, so Sync diffs against this
	// value to stay idempotent, re-registering only on a change. On a
	// successful registration Sync updates it to NotificationURL.
	CurrentNotificationURL string
}

type AppleSetup struct {
	Projects adminv1connect.ProjectServiceClient
	Prompt   *Prompter
	Out      io.Writer
	// ASC is the App Store Connect client, authenticated with the
	// operator's API key (used in-process only, never stored).
	ASC   *ASC
	HTTPC oidc.Doer
	// AppleTokenBase is Apple's OAuth base URL (test override; the dry-run
	// verification posts to {base}/auth/token).
	AppleTokenBase string
	// BaseURL is the moth instance base URL (return-URL construction).
	BaseURL string

	// Inputs; empty ones are prompted for.
	Slug       string
	BundleID   string
	TeamID     string
	ServicesID string
	// RotateKey forces creating a fresh Sign in with Apple key even when
	// the project already stores one.
	RotateKey bool
	// UseUnofficialAPI is a documented stub: the spike evaluated driving
	// the developer portal's unofficial API (fastlane/spaceship precedent)
	// for Services ID + return-URL registration and deliberately did not
	// ship it — it is unversioned, ToS-gray and breaks silently. The flag
	// exists so scripts written against a future implementation fail
	// loudly today instead of half-running.
	UseUnofficialAPI bool
}

type BillingPeriod string

type BillingSetup struct {
	Projects     adminv1connect.ProjectServiceClient
	Products     adminv1connect.ProductServiceClient
	BillingCreds adminv1connect.BillingCredentialsServiceClient
	Prompt       *Prompter
	Out          io.Writer
	// BaseURL is the moth instance base URL, used to build the notification
	// endpoints (/billing/apple/notifications/{slug}, /billing/google/rtdn/{slug}).
	BaseURL string

	// Slug identifies the project.
	Slug string
	// Yes skips the "push to the live stores?" confirmation (non-interactive).
	Yes bool

	// --- Apple ---
	// ASC is the App Store Connect API client (catalog push); nil skips the
	// Apple catalog push (credentials are still stored, push becomes guided).
	ASC *ASC
	// AppleAppID is the ASC app resource id the subscription group hangs off.
	AppleAppID string
	// Apple In-App-Purchase key material (stored into moth, used to verify).
	AppleIAPKeyID    string
	AppleIAPIssuerID string
	AppleBundleID    string
	AppleAppAppleID  string
	AppleIAPKey      *ecdsa.PrivateKey // parsed .p8; nil skips the Apple verify probe
	AppleIAPKeyP8    []byte            // raw .p8 to store encrypted; empty keeps the stored one
	// AppleNotificationSecret is the App Store Server Notifications shared secret
	// (stored encrypted; empty keeps the stored one).
	AppleNotificationSecret string
	// AppleServerAPIBase overrides the App Store Server API host the verify probe
	// reaches (test double). Empty uses billing's production host.
	AppleServerAPIBase string

	// --- Google ---
	// GoogleSA is the parsed Play Developer service account (catalog push +
	// verify); nil skips the Google catalog push and verify.
	GoogleSA *billing.GoogleServiceAccount
	// GoogleServiceAccountJSON is the raw SA JSON to store encrypted; empty keeps
	// the stored one.
	GoogleServiceAccountJSON []byte
	GooglePackageName        string
	// GooglePubsubTopic is the RTDN Cloud Pub/Sub topic (projects/X/topics/Y or a
	// bare topic id), stored into moth and wired to the RTDN push subscription.
	GooglePubsubTopic string
	// GoogleRTDNSecret authenticates the RTDN push webhook (stored encrypted;
	// empty keeps the stored one).
	GoogleRTDNSecret string
	// GoogleCatalogBaseURL overrides the Android Publisher host (catalog + verify;
	// test double).
	GoogleCatalogBaseURL string
	// GoogleTokenURL overrides the OAuth2 token endpoint the SA authenticates
	// against (test double). Empty uses the SA's token_uri.
	GoogleTokenURL string
	// GooglePubSubTokens is a pubsub-scoped token source for creating the RTDN
	// topic + push subscription; nil emits guided steps instead (the
	// androidpublisher-scoped billing SA cannot create Pub/Sub resources).
	GooglePubSubTokens TokenSource
	// PubSubBaseURL overrides the Cloud Pub/Sub host (test double).
	PubSubBaseURL string
	// GoogleCloudProject is the GCP project the RTDN topic/subscription live in;
	// defaults to the SA's project_id.
	GoogleCloudProject string

	// --- Stripe ---
	// Stripe enables the Stripe leg even when no secret key is provided this
	// run (credentials kept, push skipped with a warning). A non-empty
	// StripeSecretKey enables it implicitly.
	Stripe bool
	// StripeSecretKey is the project's restricted/secret key (sk_/rk_). It is
	// stored encrypted into moth's billing config AND used in-process for the
	// catalog push, webhook provisioning and verify probe — unlike ASC, the
	// same key drives provisioning and runtime. Empty keeps the stored one
	// (and skips the live Stripe calls: moth never returns stored secrets).
	StripeSecretKey string
	// StripeBaseURL overrides the Stripe API host (test double).
	StripeBaseURL string

	HTTPC billing.Doer
}

type Check struct {
	Name   string `json:"name"`
	Status Status `json:"status"`
	// Detail says what was observed.
	Detail string `json:"detail,omitempty"`
	// Remediation says what to do about a WARN/FAIL.
	Remediation string `json:"remediation,omitempty"`
}

type DesiredCatalog struct {
	// GroupReference is the App Store Connect subscription group reference
	// name; all tiers share one group. Ignored by Google (no group concept).
	GroupReference string
	Tiers          []DesiredTier
}

type DesiredTier struct {
	// ProductID is the store product identifier, identical in App Store
	// Connect and Google Play.
	ProductID string
	// Reference is the internal reference name (Apple subscription "name",
	// never shown to customers).
	Reference string
	// DisplayName is the customer-facing localized name.
	DisplayName string
	// Description is the customer-facing localized description.
	Description string
	// Period is the renewal cadence.
	Period BillingPeriod
	// Price is the base (base-territory / base-region) price.
	Price Money
	// Locale is the BCP-47 localization locale, e.g. "en-US".
	Locale string
	// GroupLevel is the Apple ranking within the subscription group (1 = top
	// tier). Ignored by Google.
	GroupLevel int
	// Intro is an optional introductory offer / free trial.
	Intro *IntroOffer
	// StripePriceID / StripeProductID are the Stripe resources moth currently
	// records for this tier ("" when never provisioned). Unlike the Apple and
	// Google SKUs, Stripe ids are generated by provisioning rather than
	// authored, so the Stripe sync diffs against these and writes fresh ids
	// back through ProductResult. Ignored by Apple and Google.
	StripePriceID   string
	StripeProductID string
}

type Doctor struct {
	// BaseURL is the instance URL the checks reach it at (the context URL).
	BaseURL      string
	HTTPC        oidc.Doer
	Session      adminv1connect.SessionServiceClient
	Settings     adminv1connect.InstanceSettingsServiceClient
	Projects     adminv1connect.ProjectServiceClient
	BillingCreds adminv1connect.BillingCredentialsServiceClient
	Products     adminv1connect.ProductServiceClient

	// Slug selects a project for the provider checks; empty runs the
	// instance-level checks only.
	Slug string
	// SMTPTestTo, when set, sends a real test email to that address.
	SMTPTestTo string
	// AppleKeyPath optionally points at the project's Sign in with Apple
	// .p8 so the Apple dry-run can happen: moth stores the key encrypted
	// and never returns it, so a remote doctor cannot mint a client secret
	// without it.
	AppleKeyPath string
	// GoogleAuthURL and AppleTokenBase are test overrides.
	GoogleAuthURL  string
	AppleTokenBase string

	// AppleIAPKeyPath optionally points at the project's App Store Server API
	// In-App-Purchase .p8 so the billing check can probe the App Store Server
	// API (moth stores the key encrypted and never returns it).
	AppleIAPKeyPath string
	// GoogleServiceAccountPath optionally points at the Play Developer API
	// service-account JSON so the billing check can probe the Play API.
	GoogleServiceAccountPath string
	// StripeSecretKey optionally supplies the project's Stripe secret key so
	// the billing check can probe the Stripe API (moth stores the key
	// encrypted and never returns it, like the other store secrets).
	StripeSecretKey string
	// AppleServerAPIBase, GoogleAPIBase, GoogleTokenURL and StripeAPIBase are
	// test overrides for the billing store probes.
	AppleServerAPIBase string
	GoogleAPIBase      string
	GoogleTokenURL     string
	StripeAPIBase      string
}

type ExecRunner struct{}

type GoogleCatalog struct {
	// BaseURL defaults to billing.GooglePlayBaseURL; tests point it at a double.
	BaseURL     string
	PackageName string
	Tokens      TokenSource
	HTTPC       billing.Doer
	// RegionCode is the base region whose price the base plan is created with;
	// defaults to "US".
	RegionCode string
	// BasePlanID is the base-plan id created per subscription; defaults to
	// "base" (Google requires lowercase/digits/hyphen).
	BasePlanID string
}

type GoogleSetup struct {
	Projects adminv1connect.ProjectServiceClient
	Prompt   *Prompter
	Out      io.Writer
	Runner   Runner    // gcloud + keytool; ExecRunner in the CLI
	HTTPC    oidc.Doer // verification probes
	// AuthURL is Google's OAuth authorization endpoint (test override).
	AuthURL string
	// BaseURL is the moth instance base URL (redirect URI construction).
	BaseURL string

	// Inputs; empty ones are prompted for.
	Slug           string
	GCPProject     string
	IOSBundleID    string
	AndroidPackage string
	AndroidSHA1    string
	AndroidSHA256  string
	Keystore       string // compute fingerprints from this keystore
	KeystorePass   string
	// Pre-supplied client IDs skip the guided console visit.
	WebClientID     string
	IOSClientID     string
	AndroidClientID string
	WebClientSecret string
}

type IntroOffer struct {
	// Period is the intro duration (one billing period of Period length).
	Period BillingPeriod
	// FreeTrial makes the intro a free trial (Price ignored).
	FreeTrial bool
	// Price is the introductory amount when not a free trial.
	Price Money
}

type ManualStep struct {
	Title string
	// Reason says why the API cannot perform it.
	Reason string
	// URL is the console page to open, if any.
	URL string
	// Instructions are the exact lines/values to enter.
	Instructions []string
}

type Money struct {
	Currency string
	Micros   int64
}

type NotificationResult struct {
	// Kind is a stable slug, e.g. "apple_server_notification_url" or
	// "google_rtdn_topic".
	Kind     string
	Action   Action
	Endpoint string
	Detail   string
}

type ProductResult struct {
	// ProductID is moth's / the store product id (for Stripe, the moth tier
	// identifier — Stripe ids are generated, not authored).
	ProductID string
	// StoreID is the store's own resource id to map back into moth's product
	// (Apple subscription resource id; Google == ProductID; Stripe recurring
	// Price "price_...").
	StoreID string
	// StoreParentID is the parent resource StoreID hangs off, when the store
	// has a two-level catalog identity (Stripe: the Product "prod_..." owning
	// the Price in StoreID). Empty for Apple and Google.
	StoreParentID string
	Action        Action
	Detail        string
}

type Prompter struct {
	// contains filtered or unexported fields
}

type PubSub struct {
	// BaseURL defaults to the Cloud Pub/Sub API host; tests override it.
	BaseURL string
	Project string
	Tokens  TokenSource
	HTTPC   billing.Doer
}

type Report struct {
	Checks []Check `json:"checks"`
}

type Runner interface {
	// LookPath reports where name resolves on PATH, or an error.
	LookPath(name string) (string, error)
	// Output runs the command with the extra "KEY=value" environment
	// variables (nil for none — secrets travel through the environment,
	// never the world-readable argv) and returns its combined output; a
	// non-zero exit is an error that carries the output for diagnostics.
	Output(ctx context.Context, env []string, name string, args ...string) ([]byte, error)
}

type Status string

type StripeCatalog struct {
	// BaseURL defaults to billing.StripeAPIBaseURL; tests point it at a double.
	BaseURL string
	// SecretKey is the project's sk_/rk_ secret key.
	SecretKey string
	HTTPC     billing.Doer
	Now       func() time.Time
}

type SyncResult struct {
	// Store is billing.StoreApple or billing.StoreGoogle.
	Store         string
	Products      []ProductResult
	Notifications []NotificationResult
	// ManualSteps are the guided-fallback steps the API could not perform.
	ManualSteps []ManualStep
}

type TokenSource interface {
	Token(ctx context.Context) (string, error)
}