common

type AWSCredentialProvider struct {
	// contains filtered or unexported fields
}

type BlockType byte

type CachingProvider struct {
	// contains filtered or unexported fields
}

type CallbackProvider struct {
	// contains filtered or unexported fields
}

type ChainedProvider struct {
	// contains filtered or unexported fields
}

type ClipArchiveHeader struct {
	StartBytes            [9]byte
	ClipFileFormatVersion uint8
	IndexLength           int64
	IndexPos              int64
	StorageInfoLength     int64
	StorageInfoPos        int64
	StorageInfoType       [12]byte
}

type ClipArchiveMetadata struct {
	Header      ClipArchiveHeader
	Index       *btree.BTree
	StorageInfo ClipStorageInfo
}

type ClipNode struct {
	NodeType    ClipNodeType
	Path        string
	Attr        fuse.Attr
	Target      string
	ContentHash string

	// Legacy fields (keep for back-compat):
	DataPos int64 // Position of the nodes data in the final binary
	DataLen int64 // Length of the nodes data

	// New (v2 read path):
	Remote *RemoteRef
}

type ClipNodeType string

type ClipStorageInfo interface {
	Type() string
	Encode() ([]byte, error)
}

type CredentialType string

type DockerConfigProvider struct {
	// contains filtered or unexported fields
}

type ECRProvider struct {
	// contains filtered or unexported fields
}

type ECRProviderConfig struct {
	AWSAccessKey    string
	AWSSecretKey    string
	AWSSessionToken string // optional
	AWSRegion       string
	RegistryPattern string        // optional, defaults to "*.dkr.ecr.*.amazonaws.com"
	CacheTTL        time.Duration // optional, defaults to 11 hours (ECR tokens valid for 12h)
}

type EnvProvider struct{}

type GzipCheckpoint struct {
	COff int64 // Compressed offset
	UOff int64 // Uncompressed offset
}

type GzipIndex struct {
	LayerDigest string
	Checkpoints []GzipCheckpoint // Offset checkpoints every ~2-4 MiB of uncompressed output
}

type ImageMetadata struct {
	// Image identification
	Name   string `json:"Name"`   // Full image reference (e.g., docker.io/library/alpine:3.18)
	Digest string `json:"Digest"` // Image manifest digest

	// Image configuration
	RepoTags      []string          `json:"RepoTags,omitempty"`
	Created       time.Time         `json:"Created"`
	DockerVersion string            `json:"DockerVersion,omitempty"`
	Labels        map[string]string `json:"Labels,omitempty"`
	Architecture  string            `json:"Architecture"`
	Os            string            `json:"Os"`
	Variant       string            `json:"Variant,omitempty"`
	Author        string            `json:"Author,omitempty"`

	// Runtime configuration
	Env          []string            `json:"Env,omitempty"`
	Cmd          []string            `json:"Cmd,omitempty"`
	Entrypoint   []string            `json:"Entrypoint,omitempty"`
	User         string              `json:"User,omitempty"`
	WorkingDir   string              `json:"WorkingDir,omitempty"`
	ExposedPorts map[string]struct{} `json:"ExposedPorts,omitempty"`
	Volumes      map[string]struct{} `json:"Volumes,omitempty"`
	StopSignal   string              `json:"StopSignal,omitempty"`

	// Layer information
	Layers     []string        `json:"Layers"`     // Layer digests
	LayersData []LayerMetadata `json:"LayersData"` // Detailed layer information
}

type KeychainProvider struct {
	// contains filtered or unexported fields
}

type LayerMetadata struct {
	MIMEType    string            `json:"MIMEType"`
	Digest      string            `json:"Digest"`
	Size        int64             `json:"Size"`
	Annotations map[string]string `json:"Annotations,omitempty"`
}

type Metrics struct {

	// Range GET metrics
	RangeGetBytesTotal   map[string]int64 // digest -> bytes fetched
	RangeGetRequestTotal map[string]int64 // digest -> request count

	// Inflate CPU metrics
	InflateCPUSecondsTotal float64

	// Read path metrics
	ReadHitsTotal   int64
	ReadMissesTotal int64

	// First exec metrics
	FirstExecStartTime time.Time
	FirstExecDuration  time.Duration

	// Layer metrics
	LayerAccessCount map[string]int64 // digest -> access count
	// contains filtered or unexported fields
}

type MetricsSnapshot struct {
	RangeGetBytesTotal     map[string]int64
	RangeGetRequestTotal   map[string]int64
	InflateCPUSecondsTotal float64
	ReadHitsTotal          int64
	ReadMissesTotal        int64
	FirstExecDuration      time.Duration
	LayerAccessCount       map[string]int64
}

type OCIStorageInfo struct {
	RegistryURL             string
	Repository              string
	Reference               string // tag or digest
	Layers                  []string
	GzipIdxByLayer          map[string]*GzipIndex // per-layer gzip decompression index
	ZstdIdxByLayer          map[string]*ZstdIndex // per-layer zstd index (P1)
	DecompressedHashByLayer map[string]string     // maps layer digest -> SHA256 hash of decompressed data
	ImageMetadata           *ImageMetadata        `json:"ImageMetadata,omitempty"` // Image metadata - embedded to avoid runtime lookups
}

type PublicOnlyProvider struct{}

type ReadTraceEvent struct {
	Operation        string
	Source           string
	Path             string
	LayerDigest      string
	DecompressedHash string
	Offset           int64
	Length           int64
	BytesRead        int64
	StartedAt        time.Time
	Duration         time.Duration
	CallerPID        uint32
	Success          bool
	Error            string
	Attrs            map[string]string
}

type ReadTraceObserver func(ReadTraceEvent)

type RegistryCredentialProvider interface {
	// GetCredentials returns authentication configuration for a given registry.
	//
	// Parameters:
	//   - ctx: context for cancellation and timeouts
	//   - registry: registry hostname (e.g., "ghcr.io", "registry-1.docker.io")
	//   - scope: optional repository path for per-repo tokens (e.g., "beam-cloud/clip")
	//
	// Returns:
	//   - *authn.AuthConfig: credentials if available
	//   - error: ErrNoCredentials if unavailable, or other error if lookup failed
	GetCredentials(ctx context.Context, registry string, scope string) (*authn.AuthConfig, error)

	// Name returns a human-readable name for this provider (for logging/debugging)
	Name() string
}

type RemoteRef struct {
	LayerDigest string // "sha256:..."
	UOffset     int64  // file payload start in UNCOMPRESSED tar stream
	ULength     int64  // file payload length (uncompressed)
}

type S3StorageInfo struct {
	Bucket         string
	Region         string
	Key            string
	Endpoint       string
	ForcePathStyle bool
}

type StaticProvider struct {
	// contains filtered or unexported fields
}

type StorageInfoWrapper struct {
	Type string
	Data []byte
}

type StorageMode string

type ZstdFrame struct {
	COff int64 // Compressed offset
	CLen int64 // Compressed length
	UOff int64 // Uncompressed offset
	ULen int64 // Uncompressed length
}

type ZstdIndex struct {
	LayerDigest string
	Frames      []ZstdFrame
}