config

type ControllerConfig struct {
	// StoryRun controller configuration
	StoryRun StoryRunConfig `json:"storyRun,omitempty"`

	// StepRun controller configuration
	StepRun StepRunConfig `json:"stepRun,omitempty"`

	// Story controller configuration
	Story StoryConfig `json:"story,omitempty"`

	// Engram controller configuration
	Engram EngramConfig `json:"engram,omitempty"`

	// Impulse controller configuration
	Impulse ImpulseConfig `json:"impulse,omitempty"`

	// Template controllers configuration
	Template TemplateConfig `json:"template,omitempty"`

	// MaxStoryWithBlockSizeBytes is the maximum allowed size for a Story's spec.steps.with block.
	// This prevents oversized resources from being stored in etcd.
	// +optional
	MaxStoryWithBlockSizeBytes int `json:"maxStoryWithBlockSizeBytes,omitempty"`

	DefaultEngramImage    string `json:"defaultEngramImage,omitempty"`
	DefaultImpulseImage   string `json:"defaultImpulseImage,omitempty"`
	DefaultEngramGRPCPort int    `json:"defaultEngramGRPCPort,omitempty"`
	DefaultCPURequest     string `json:"defaultCPURequest,omitempty"`
	DefaultCPULimit       string `json:"defaultCPULimit,omitempty"`
	DefaultMemoryRequest  string `json:"defaultMemoryRequest,omitempty"`
	DefaultMemoryLimit    string `json:"defaultMemoryLimit,omitempty"`

	// Global Controller Configuration
	MaxConcurrentReconciles int             `json:"maxConcurrentReconciles,omitempty"`
	RequeueBaseDelay        time.Duration   `json:"requeueBaseDelay,omitempty"`
	RequeueMaxDelay         time.Duration   `json:"requeueMaxDelay,omitempty"`
	HealthCheckInterval     time.Duration   `json:"healthCheckInterval,omitempty"`
	CleanupInterval         metav1.Duration `json:"cleanupInterval,omitempty"`

	// ReconcileTimeout bounds the duration of a single reconcile loop.
	// Set to 0 to disable deadline (not recommended for production).
	ReconcileTimeout time.Duration `json:"reconcileTimeout,omitempty"`

	// Image Configuration
	ImagePullPolicy corev1.PullPolicy `json:"imagePullPolicy,omitempty"`

	// Resource Limits
	EngramCPURequest    string `json:"engramCpuRequest,omitempty"`
	EngramCPULimit      string `json:"engramCpuLimit,omitempty"`
	EngramMemoryRequest string `json:"engramMemoryRequest,omitempty"`
	EngramMemoryLimit   string `json:"engramMemoryLimit,omitempty"`

	// Retry and Timeout Configuration
	MaxRetries             int           `json:"maxRetries,omitempty"`
	ExponentialBackoffBase time.Duration `json:"exponentialBackoffBase,omitempty"`
	ExponentialBackoffMax  time.Duration `json:"exponentialBackoffMax,omitempty"`
	DefaultStepTimeout     time.Duration `json:"defaultStepTimeout,omitempty"`
	ApprovalDefaultTimeout time.Duration `json:"approvalDefaultTimeout,omitempty"`
	ExternalDataTimeout    time.Duration `json:"externalDataTimeout,omitempty"`
	ConditionalTimeout     time.Duration `json:"conditionalTimeout,omitempty"`

	// Loop Processing Configuration
	MaxLoopIterations    int `json:"maxLoopIterations,omitempty"`
	DefaultLoopBatchSize int `json:"defaultLoopBatchSize,omitempty"`
	MaxLoopBatchSize     int `json:"maxLoopBatchSize,omitempty"`
	MaxLoopConcurrency   int `json:"maxLoopConcurrency,omitempty"`
	MaxConcurrencyLimit  int `json:"maxConcurrencyLimit,omitempty"`

	// Security Configuration
	RunAsNonRoot             bool     `json:"runAsNonRoot,omitempty"`
	ReadOnlyRootFilesystem   bool     `json:"readOnlyRootFilesystem,omitempty"`
	AllowPrivilegeEscalation bool     `json:"allowPrivilegeEscalation,omitempty"`
	DropCapabilities         []string `json:"dropCapabilities,omitempty"`
	RunAsUser                int64    `json:"runAsUser,omitempty"`

	// Job Configuration
	JobBackoffLimit              int32                `json:"jobBackoffLimit,omitempty"`
	JobRestartPolicy             corev1.RestartPolicy `json:"jobRestartPolicy,omitempty"`
	TTLSecondsAfterFinished      int32                `json:"ttlSecondsAfterFinished,omitempty"`
	ServiceAccountName           string               `json:"serviceAccountName,omitempty"`
	AutomountServiceAccountToken bool                 `json:"automountServiceAccountToken,omitempty"`

	// CEL Configuration
	CELEvaluationTimeout   time.Duration `json:"celEvaluationTimeout,omitempty"`
	CELMaxExpressionLength int           `json:"celMaxExpressionLength,omitempty"`
	CELEnableMacros        bool          `json:"celEnableMacros,omitempty"`

	// Telemetry Configuration
	TelemetryEnabled        bool `json:"telemetryEnabled,omitempty"`
	TracePropagationEnabled bool `json:"tracePropagationEnabled,omitempty"`

	// Development/Debug Configuration
	EnableVerboseLogging    bool `json:"enableVerboseLogging,omitempty"`
	EnableStepOutputLogging bool `json:"enableStepOutputLogging,omitempty"`
	EnableMetrics           bool `json:"enableMetrics,omitempty"`

	// Operator-level default storage configuration (applied when Story policy is absent)
	DefaultStorageProvider  string `json:"defaultStorageProvider,omitempty"`
	DefaultS3Bucket         string `json:"defaultS3Bucket,omitempty"`
	DefaultS3Region         string `json:"defaultS3Region,omitempty"`
	DefaultS3Endpoint       string `json:"defaultS3Endpoint,omitempty"`
	DefaultS3UsePathStyle   bool   `json:"defaultS3UsePathStyle,omitempty"`
	DefaultS3AuthSecretName string `json:"defaultS3AuthSecretName,omitempty"`
}

type ControllerDependencies struct {
	client.Client
	Scheme         *runtime.Scheme
	ConfigResolver *Resolver
	CELEvaluator   cel.Evaluator
}

type EngramConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
	// EngramControllerConfig holds configuration specific to Engram controllers.
	EngramControllerConfig EngramControllerConfig `json:"engramControllerConfig,omitempty"`
}

type EngramControllerConfig struct {
	// DefaultGRPCPort is the default port used for gRPC communication with realtime engrams.
	DefaultGRPCPort int `json:"defaultGRPCPort,omitempty"`
	// DefaultMaxInlineSize is the default maximum size in bytes for inputs/outputs
	// to be passed directly as environment variables. Larger values will be offloaded
	// to the configured storage backend.
	DefaultMaxInlineSize int `json:"defaultMaxInlineSize,omitempty"`
	// DefaultStorageTimeout is the timeout for storage operations (upload/download) in seconds.
	// This should be tuned based on expected output sizes and S3 latency:
	//   timeout >= (max_output_mb / upload_bandwidth_mbps) * 1.5 + baseline_latency_sec
	DefaultStorageTimeoutSeconds int `json:"defaultStorageTimeoutSeconds,omitempty"`
	// DefaultGracefulShutdownTimeoutSeconds is the timeout for streaming engrams to drain
	// in-flight messages during graceful shutdown. Should be set to terminationGracePeriodSeconds - 10s
	// to leave adequate margin before Kubernetes sends SIGKILL.
	DefaultGracefulShutdownTimeoutSeconds int `json:"defaultGracefulShutdownTimeoutSeconds,omitempty"`
	// DefaultTerminationGracePeriodSeconds is the grace period for pod termination.
	// Applies to both batch Jobs and streaming Deployments.
	DefaultTerminationGracePeriodSeconds int64 `json:"defaultTerminationGracePeriodSeconds,omitempty"`

	// DefaultMaxRecvMsgBytes is the default max gRPC message size for receiving.
	DefaultMaxRecvMsgBytes int `json:"defaultMaxRecvMsgBytes,omitempty"`
	// DefaultMaxSendMsgBytes is the default max gRPC message size for sending.
	DefaultMaxSendMsgBytes int `json:"defaultMaxSendMsgBytes,omitempty"`
	// DefaultDialTimeoutSeconds is the client-side timeout for establishing a gRPC connection.
	DefaultDialTimeoutSeconds int `json:"defaultDialTimeoutSeconds,omitempty"`
	// DefaultChannelBufferSize is the in-memory channel buffer size for SDK streams.
	DefaultChannelBufferSize int `json:"defaultChannelBufferSize,omitempty"`
	// DefaultReconnectMaxRetries is the number of retries on transient gRPC connection errors.
	DefaultReconnectMaxRetries int `json:"defaultReconnectMaxRetries,omitempty"`
	// DefaultReconnectBaseBackoffMillis is the base backoff delay for reconnect attempts.
	DefaultReconnectBaseBackoffMillis int `json:"defaultReconnectBaseBackoffMillis,omitempty"`
	// DefaultReconnectMaxBackoffSeconds is the max backoff delay for reconnect attempts.
	DefaultReconnectMaxBackoffSeconds int `json:"defaultReconnectMaxBackoffSeconds,omitempty"`
	// DefaultHangTimeoutSeconds is the timeout for detecting a hung gRPC stream (no heartbeats).
	DefaultHangTimeoutSeconds int `json:"defaultHangTimeoutSeconds,omitempty"`
	// DefaultMessageTimeoutSeconds is the timeout for individual message operations.
	DefaultMessageTimeoutSeconds int `json:"defaultMessageTimeoutSeconds,omitempty"`
}

type ImpulseConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
}

type OperatorConfig struct {
	Controller ControllerConfig `json:"controller,omitempty"`
}

type OperatorConfigManager struct {
	// contains filtered or unexported fields
}

type RateLimiterConfig struct {
	// BaseDelay is the base delay for exponential backoff
	BaseDelay time.Duration `json:"baseDelay,omitempty"`

	// MaxDelay is the maximum delay for exponential backoff
	MaxDelay time.Duration `json:"maxDelay,omitempty"`
}

type ResolvedExecutionConfig struct {
	Image                        string
	ImagePullPolicy              corev1.PullPolicy
	Resources                    corev1.ResourceRequirements
	Storage                      *v1alpha1.StoragePolicy
	ServiceAccountName           string
	AutomountServiceAccountToken bool
	RunAsNonRoot                 bool
	ReadOnlyRootFilesystem       bool
	AllowPrivilegeEscalation     bool
	RunAsUser                    int64
	BackoffLimit                 int32
	TTLSecondsAfterFinished      int32
	RestartPolicy                corev1.RestartPolicy
	DefaultStepTimeout           time.Duration
	MaxRetries                   int
	BackoffBase                  time.Duration
	BackoffMax                   time.Duration
	Secrets                      map[string]string

	// Health check probes (from template, can be disabled at instance level)
	LivenessProbe  *corev1.Probe
	ReadinessProbe *corev1.Probe
	StartupProbe   *corev1.Probe

	// Service configuration (from template)
	ServicePorts       []corev1.ServicePort
	ServiceLabels      map[string]string
	ServiceAnnotations map[string]string
}

type Resolver struct {
	// contains filtered or unexported fields
}

type StepRunConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
}

type StoryConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
}

type StoryRunConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`

	// MaxInlineInputsSize is the maximum size in bytes for StoryRun spec.inputs.
	// Payloads larger than this will be rejected by the controller if webhooks are disabled.
	MaxInlineInputsSize int `json:"maxInlineInputsSize,omitempty"`
}

type TemplateConfig struct {
	// MaxConcurrentReconciles is the maximum number of concurrent reconciles
	MaxConcurrentReconciles int `json:"maxConcurrentReconciles,omitempty"`

	// RateLimiter configuration
	RateLimiter RateLimiterConfig `json:"rateLimiter,omitempty"`
}