config

type BindingControllerTuning struct {
	// MaxMutationsPerReconcile bounds how many bindings a controller may mutate
	// during a single reconcile loop. Zero or negative disables throttling.
	MaxMutationsPerReconcile int `json:"maxMutationsPerReconcile,omitempty"`
	// ThrottleRequeueDelay defines how long to wait before retrying once the
	// controller hits the mutation budget.
	ThrottleRequeueDelay time.Duration `json:"throttleRequeueDelay,omitempty"`
}

type ConfigReloadReason string

type ControllerConfig struct {
	// StoryRun controller configuration
	StoryRun StoryRunConfig `json:"storyRun,omitempty"`

	// StepRun controller configuration
	StepRun StepRunConfig `json:"stepRun,omitempty"`

	// Story controller configuration
	Story StoryConfig `json:"story,omitempty"`

	// Engram controller configuration
	Engram EngramConfig `json:"engram,omitempty"`

	// Impulse controller configuration
	Impulse ImpulseConfig `json:"impulse,omitempty"`

	// Template controllers configuration
	Template TemplateConfig `json:"template,omitempty"`

	// Transport controller configuration
	TransportController TransportControllerConfig `json:"transportController,omitempty"`

	// MaxStoryWithBlockSizeBytes is the maximum allowed size for a Story's spec.steps.with block.
	// This prevents oversized resources from being stored in etcd.
	// +optional
	MaxStoryWithBlockSizeBytes int `json:"maxStoryWithBlockSizeBytes,omitempty"`

	DefaultEngramImage   string `json:"defaultEngramImage,omitempty"`
	DefaultImpulseImage  string `json:"defaultImpulseImage,omitempty"`
	DefaultCPURequest    string `json:"defaultCPURequest,omitempty"`
	DefaultCPULimit      string `json:"defaultCPULimit,omitempty"`
	DefaultMemoryRequest string `json:"defaultMemoryRequest,omitempty"`
	DefaultMemoryLimit   string `json:"defaultMemoryLimit,omitempty"`

	// Global Controller Configuration
	// Note: Per-controller MaxConcurrentReconciles are in StoryRun, StepRun, Story, etc.
	RequeueBaseDelay time.Duration   `json:"requeueBaseDelay,omitempty"`
	RequeueMaxDelay  time.Duration   `json:"requeueMaxDelay,omitempty"`
	CleanupInterval  metav1.Duration `json:"cleanupInterval,omitempty"`
	// MaxConcurrentReconciles provides a global fallback when per-controller values are zero.
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// ReconcileTimeout bounds the duration of a single reconcile loop.
	// Set to 0 to disable deadline (not recommended for production).
	ReconcileTimeout time.Duration `json:"reconcileTimeout,omitempty"`

	// Transport configuration for hybrid execution
	Transport TransportConfig `json:"transport,omitempty"`

	// Image Configuration
	ImagePullPolicy corev1.PullPolicy `json:"imagePullPolicy,omitempty"`

	// Resource Limits
	EngramCPURequest    string `json:"engramCpuRequest,omitempty"`
	EngramCPULimit      string `json:"engramCpuLimit,omitempty"`
	EngramMemoryRequest string `json:"engramMemoryRequest,omitempty"`
	EngramMemoryLimit   string `json:"engramMemoryLimit,omitempty"`

	// Retry and Timeout Configuration
	MaxRetries             int           `json:"maxRetries,omitempty"`
	DefaultStepTimeout     time.Duration `json:"defaultStepTimeout,omitempty"`
	ApprovalDefaultTimeout time.Duration `json:"approvalDefaultTimeout,omitempty"`
	ExternalDataTimeout    time.Duration `json:"externalDataTimeout,omitempty"`
	ConditionalTimeout     time.Duration `json:"conditionalTimeout,omitempty"`

	// Security Configuration
	RunAsNonRoot             bool     `json:"runAsNonRoot,omitempty"`
	ReadOnlyRootFilesystem   bool     `json:"readOnlyRootFilesystem,omitempty"`
	AllowPrivilegeEscalation bool     `json:"allowPrivilegeEscalation,omitempty"`
	DropCapabilities         []string `json:"dropCapabilities,omitempty"`
	RunAsUser                int64    `json:"runAsUser,omitempty"`

	// Job Configuration
	JobBackoffLimit                 int32                `json:"jobBackoffLimit,omitempty"`
	JobRestartPolicy                corev1.RestartPolicy `json:"jobRestartPolicy,omitempty"`
	TTLSecondsAfterFinished         int32                `json:"ttlSecondsAfterFinished,omitempty"`
	RealtimeTTLSecondsAfterFinished int32                `json:"realtimeTTLSecondsAfterFinished,omitempty"`
	StoryRunRetentionSeconds        int32                `json:"storyRunRetentionSeconds,omitempty"`
	ServiceAccountName              string               `json:"serviceAccountName,omitempty"`
	AutomountServiceAccountToken    bool                 `json:"automountServiceAccountToken,omitempty"`

	// Templating Configuration
	TemplateEvaluationTimeout time.Duration `json:"templateEvaluationTimeout,omitempty"`
	TemplateMaxOutputBytes    int           `json:"templateMaxOutputBytes,omitempty"`
	// TemplateDeterministic disables non-deterministic helpers (for example, now()).
	TemplateDeterministic bool `json:"templateDeterministic,omitempty"`
	// TemplateOffloadedPolicy controls how templates behave when offloaded data is accessed.
	TemplateOffloadedPolicy string `json:"templateOffloadedPolicy,omitempty"`
	// TemplateMaterializeEngram is the Engram name used to materialize templates that require offloaded data.
	TemplateMaterializeEngram string `json:"templateMaterializeEngram,omitempty"`

	// ReferenceCrossNamespacePolicy controls cross-namespace reference behavior.
	// Supported values: "deny", "grant", "allow".
	ReferenceCrossNamespacePolicy string `json:"referenceCrossNamespacePolicy,omitempty"`

	// Telemetry Configuration
	TelemetryEnabled        bool `json:"telemetryEnabled,omitempty"`
	TracePropagationEnabled bool `json:"tracePropagationEnabled,omitempty"`

	// Development/Debug Configuration
	EnableVerboseLogging    bool `json:"enableVerboseLogging,omitempty"`
	EnableStepOutputLogging bool `json:"enableStepOutputLogging,omitempty"`
	EnableMetrics           bool `json:"enableMetrics,omitempty"`

	// Operator-level default storage configuration (applied when Story policy is absent)
	DefaultStorageProvider     string `json:"defaultStorageProvider,omitempty"`
	DefaultS3Bucket            string `json:"defaultS3Bucket,omitempty"`
	DefaultS3Region            string `json:"defaultS3Region,omitempty"`
	DefaultS3Endpoint          string `json:"defaultS3Endpoint,omitempty"`
	DefaultS3UsePathStyle      bool   `json:"defaultS3UsePathStyle,omitempty"`
	DefaultS3AuthSecretName    string `json:"defaultS3AuthSecretName,omitempty"`
	DefaultFileStoragePath     string `json:"defaultFileStoragePath,omitempty"`
	DefaultFileVolumeClaimName string `json:"defaultFileVolumeClaimName,omitempty"`
}

type ControllerDependencies struct {
	client.Client
	APIReader         client.Reader
	Scheme            *runtime.Scheme
	ConfigResolver    *Resolver
	TemplateEvaluator *templating.Evaluator
}

type EngramConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
	// EngramControllerConfig holds configuration specific to Engram controllers.
	EngramControllerConfig EngramControllerConfig `json:"engramControllerConfig,omitempty"`
}

type EngramControllerConfig struct {
	// DefaultGRPCPort is the default port used for gRPC communication with realtime engrams.
	DefaultGRPCPort int `json:"defaultGRPCPort,omitempty"`
	// DefaultGRPCHeartbeatIntervalSeconds defines how frequently SDKs send heartbeat pings to the hub.
	DefaultGRPCHeartbeatIntervalSeconds int `json:"defaultGRPCHeartbeatIntervalSeconds,omitempty"`
	// DefaultMaxInlineSize is the default maximum size in bytes for inputs/outputs
	// to be passed directly as environment variables. Larger values will be offloaded
	// to the configured storage backend.
	DefaultMaxInlineSize int `json:"defaultMaxInlineSize,omitempty"`
	// DefaultMaxRecursionDepth is the default maximum nesting depth used while
	// hydrating or dehydrating structured payloads. Increase this when Stories
	// intentionally pass deeply nested documents, such as full Kubernetes objects,
	// through shared storage.
	DefaultMaxRecursionDepth int `json:"defaultMaxRecursionDepth,omitempty"`
	// DefaultStorageTimeout is the timeout for storage operations (upload/download) in seconds.
	// This should be tuned based on expected output sizes and S3 latency:
	//   timeout >= (max_output_mb / upload_bandwidth_mbps) * 1.5 + baseline_latency_sec
	DefaultStorageTimeoutSeconds int `json:"defaultStorageTimeoutSeconds,omitempty"`
	// DefaultGracefulShutdownTimeoutSeconds is the timeout for realtime engrams to drain
	// in-flight messages during graceful shutdown. Should be set to terminationGracePeriodSeconds - 10s
	// to leave adequate margin before Kubernetes sends SIGKILL.
	DefaultGracefulShutdownTimeoutSeconds int `json:"defaultGracefulShutdownTimeoutSeconds,omitempty"`
	// DefaultTerminationGracePeriodSeconds is the grace period for pod termination.
	// Applies to both batch Jobs and realtime Deployments.
	// Note: Cast to *int64 when assigning to PodSpec.TerminationGracePeriodSeconds.
	DefaultTerminationGracePeriodSeconds int `json:"defaultTerminationGracePeriodSeconds,omitempty"`

	// DefaultMaxRecvMsgBytes is the default max gRPC message size for receiving.
	DefaultMaxRecvMsgBytes int `json:"defaultMaxRecvMsgBytes,omitempty"`
	// DefaultMaxSendMsgBytes is the default max gRPC message size for sending.
	DefaultMaxSendMsgBytes int `json:"defaultMaxSendMsgBytes,omitempty"`
	// DefaultDialTimeoutSeconds is the client-side timeout for establishing a gRPC connection.
	DefaultDialTimeoutSeconds int `json:"defaultDialTimeoutSeconds,omitempty"`
	// DefaultChannelBufferSize is the in-memory channel buffer size for SDK streams.
	DefaultChannelBufferSize int `json:"defaultChannelBufferSize,omitempty"`
	// DefaultReconnectMaxRetries is the number of retries on transient gRPC connection errors.
	DefaultReconnectMaxRetries int `json:"defaultReconnectMaxRetries,omitempty"`
	// DefaultReconnectBaseBackoffMillis is the base backoff delay for reconnect attempts.
	DefaultReconnectBaseBackoffMillis int `json:"defaultReconnectBaseBackoffMillis,omitempty"`
	// DefaultReconnectMaxBackoffSeconds is the max backoff delay for reconnect attempts.
	DefaultReconnectMaxBackoffSeconds int `json:"defaultReconnectMaxBackoffSeconds,omitempty"`
	// DefaultHangTimeoutSeconds is the timeout for detecting a hung gRPC stream (no heartbeats).
	// Set to 0 to disable the hang watchdog.
	DefaultHangTimeoutSeconds int `json:"defaultHangTimeoutSeconds,omitempty"`
	// DefaultMessageTimeoutSeconds is the timeout for individual message operations.
	DefaultMessageTimeoutSeconds int `json:"defaultMessageTimeoutSeconds,omitempty"`
}

type GRPCConfig struct {
	// EnableDownstreamTargets controls whether the operator computes and injects
	// `BUBU_DOWNSTREAM_TARGETS` into batch-mode StepRuns that are upstream of
	// any realtime-mode Engrams in a Story.
	EnableDownstreamTargets bool `json:"enableDownstreamTargets,omitempty"`
	// DefaultTLSSecret provides a fallback TLS Secret when Engrams do not specify one.
	DefaultTLSSecret string `json:"defaultTLSSecret,omitempty"`
}

type ImpulseConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
}

type OperatorConfig struct {
	Controller ControllerConfig `json:"controller,omitempty"`
}

type OperatorConfigManager struct {
	// contains filtered or unexported fields
}

type QueueConfig struct {
	// Concurrency limits the number of running StepRuns in this queue.
	// Zero disables queue-level limiting.
	Concurrency int32 `json:"concurrency,omitempty"`

	// DefaultPriority applies when a Story does not set a priority explicitly.
	DefaultPriority int32 `json:"defaultPriority,omitempty"`

	// PriorityAgingSeconds increases effective priority based on time spent queued.
	// Zero or negative disables aging.
	PriorityAgingSeconds int32 `json:"priorityAgingSeconds,omitempty"`
}

type RateLimiterConfig struct {
	// BaseDelay is the base delay for exponential backoff
	BaseDelay time.Duration `json:"baseDelay,omitempty"`

	// MaxDelay is the maximum delay for exponential backoff
	MaxDelay time.Duration `json:"maxDelay,omitempty"`
}

type ResolvedExecutionConfig struct {
	// Image is the container image selected after merging template and instance overrides.
	Image string
	// ImagePullPolicy is the policy controllers should use when creating pods.
	ImagePullPolicy corev1.PullPolicy
	// Resources represents the pod-level resource requirements.
	Resources corev1.ResourceRequirements
	// NodeSelector constrains scheduling to nodes with matching labels.
	NodeSelector map[string]string
	// Tolerations allow scheduling onto tainted nodes.
	Tolerations []corev1.Toleration
	// Affinity expresses node and pod affinity rules.
	Affinity *corev1.Affinity
	// MaxInlineSize controls when payloads are offloaded to shared storage.
	MaxInlineSize int
	// Storage captures any resolved storage offload configuration (e.g. S3).
	Storage *v1alpha1.StoragePolicy
	// Cache captures output caching behavior for the step.
	Cache *v1alpha1.CachePolicy
	// ServiceAccountName is the ServiceAccount pods should run as.
	ServiceAccountName string
	// AutomountServiceAccountToken indicates whether automountServiceAccountToken should be set.
	AutomountServiceAccountToken bool
	// RunAsNonRoot enforces non-root execution when true.
	RunAsNonRoot bool
	// ReadOnlyRootFilesystem enforces a read-only root filesystem when true.
	ReadOnlyRootFilesystem bool
	// AllowPrivilegeEscalation toggles privilege escalation in the container security context.
	AllowPrivilegeEscalation bool
	// DropCapabilities are dropped from the container security context.
	DropCapabilities []string
	// RunAsUser specifies the UID the pod should run as.
	RunAsUser int64
	// BackoffLimit is the Job backoff limit.
	BackoffLimit int32
	// TTLSecondsAfterFinished controls Job TTL cleanup.
	TTLSecondsAfterFinished int32
	// RestartPolicy is the pod restart policy associated with the Job.
	RestartPolicy corev1.RestartPolicy
	// DefaultStepTimeout is the reconciler-imposed execution timeout.
	DefaultStepTimeout time.Duration
	// MaxRetries controls how many retry attempts are permitted.
	MaxRetries int
	// Secrets contains resolved secret key/value mappings for the step.
	Secrets map[string]string
	// DebugLogs toggles verbose logging inside engrams/impulses.
	DebugLogs bool

	// Health check probes (from template, can be disabled at instance level)
	LivenessProbe  *corev1.Probe
	ReadinessProbe *corev1.Probe
	StartupProbe   *corev1.Probe

	// Service configuration (from template)
	ServicePorts []corev1.ServicePort
	// ServiceLabels augments the generated Service metadata.
	ServiceLabels map[string]string
	// ServiceAnnotations augments the generated Service metadata.
	ServiceAnnotations map[string]string
}

type Resolver struct {
	// contains filtered or unexported fields
}

type SchedulingConfig struct {
	// GlobalConcurrency limits the total number of running StepRuns across the cluster.
	// Zero disables the global limit.
	GlobalConcurrency int32 `json:"globalConcurrency,omitempty"`

	// Queues defines per-queue concurrency and priority defaults.
	Queues map[string]QueueConfig `json:"queues,omitempty"`
}

type StepRunConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
}

type StoryConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`

	// Binding config controls TransportBinding fan-out during reconciles.
	Binding BindingControllerTuning `json:"binding,omitempty"`
}

type StoryRunConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`

	// MaxInlineInputsSize is the maximum size in bytes for StoryRun spec.inputs.
	// Payloads larger than this will be rejected by the controller if webhooks are disabled.
	MaxInlineInputsSize int `json:"maxInlineInputsSize,omitempty"`

	// Binding config controls TransportBinding fan-out during reconciles.
	Binding BindingControllerTuning `json:"binding,omitempty"`

	// Scheduling controls global and per-queue execution limits.
	Scheduling SchedulingConfig `json:"scheduling,omitempty"`
}

type TemplateConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
}

type TransportConfig struct {
	GRPC              GRPCConfig    `json:"grpc,omitempty"`
	HeartbeatInterval time.Duration `json:"heartbeatInterval,omitempty"`
}

type TransportControllerConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`

	// HeartbeatTimeout is how long the operator waits before marking a transport binding stale.
	HeartbeatTimeout time.Duration `json:"heartbeatTimeout,omitempty"`
}