definition

type AckSet map[string]bool

type AppRegistration struct {
	Slug    string    `yaml:"slug"`
	Source  AppSource `yaml:"source"`
	Enabled bool      `yaml:"enabled"`
}

type AppSource struct {
	Repo    string `yaml:"repo,omitempty"`
	Ref     string `yaml:"ref,omitempty"`
	Path    string `yaml:"path,omitempty"`
	Managed bool   `yaml:"managed,omitempty"`
}

type Binding struct {
	Value  string
	Secret string
	Env    string
	App    string
	Cert   string
}

type Build struct {
	Language string            `yaml:"language,omitempty"`
	Version  string            `yaml:"version,omitempty"`
	Dir      string            `yaml:"dir,omitempty"`  // repo-relative subdir to build from (default ".")
	Base     string            `yaml:"base,omitempty"` // generic only
	Install  string            `yaml:"install,omitempty"`
	BuildCmd string            `yaml:"build,omitempty"`
	Start    []string          `yaml:"start,omitempty"`
	Env      map[string]string `yaml:"env,omitempty"`
	Packages []string          `yaml:"packages,omitempty"`
	Output   string            `yaml:"output,omitempty"` // build output dir to ship (e.g. static: "dist")
	Nonroot  *bool             `yaml:"run_as_nonroot,omitempty"`
}

type CertBinding struct {
	Hostname   string `yaml:"hostname"`
	Subdomain  string `yaml:"subdomain,omitempty"`   // XOR hostname: expands to <subdomain>.<namespace apex>
	BaseDomain string `yaml:"base_domain,omitempty"` // per-item namespace NAME override (only with subdomain)
	Mount      string `yaml:"mount"`
	CA         string `yaml:"ca,omitempty"` // "" = default issuer; else a named CA from config.yaml edge.cas
}

type Compose struct {
	Source   string             `yaml:"source,omitempty"`
	Services map[string]Service `yaml:"services,omitempty"`
	Path     string             `yaml:"path,omitempty"`
	Inline   string             `yaml:"inline,omitempty"`
}

type ConfigFile struct {
	Repo     string             `yaml:"repo,omitempty"`
	Template string             `yaml:"template,omitempty"`
	Mount    string             `yaml:"mount"`
	Bindings map[string]Binding `yaml:"bindings,omitempty"`
}

type DefaultScaling struct {
	Max int `yaml:"max,omitempty"`
	Min int `yaml:"min,omitempty"`
}

type Defaults struct {
	Scaling     *DefaultScaling `yaml:"scaling,omitempty"`
	SelfHealing *bool           `yaml:"self_healing,omitempty"` // enable/disable the supervisor
	AutoDeploy  *bool           `yaml:"auto_deploy,omitempty"`  // default git auto-deploy (widening → ack)
}

type Definition struct {
	APIVersion string   `yaml:"apiVersion"`
	Kind       string   `yaml:"kind"`
	Metadata   Metadata `yaml:"metadata"`
	Spec       Spec     `yaml:"spec"`
}

type Edge struct {
	// BaseDomain names which operator-declared namespace (config.yaml edge.base_domains[].name)
	// this app's `subdomain:` shorthands expand under. "" = the default (edge.base_domain). It
	// is a NAME referencing operator config, never an apex the app can invent — an undeclared
	// name fails the deploy (the name lives in config.yaml, not this repo). A route/cert_binding
	// may override it per-item.
	BaseDomain string    `yaml:"base_domain,omitempty"`
	Routes     []Route   `yaml:"routes,omitempty"`
	L4Routes   []L4Route `yaml:"l4_routes,omitempty"`
}

type EnvValue struct {
	Value  string
	Secret string
}

type Git struct {
	Repo       string `yaml:"repo"`
	Ref        string `yaml:"ref"`
	AutoDeploy bool   `yaml:"auto_deploy"`
}

type Host struct {
	APIVersion string   `yaml:"apiVersion"`
	Kind       string   `yaml:"kind"`
	Spec       HostSpec `yaml:"spec"`
}

type HostSpec struct {
	Apps          []AppRegistration `yaml:"apps,omitempty"`
	Defaults      *Defaults         `yaml:"defaults,omitempty"`
	Orchestration *Orchestration    `yaml:"orchestration,omitempty"`
}

type L4Route struct {
	Listen   int    `yaml:"listen"`        // the host port the L4 LB binds
	Protocol string `yaml:"protocol"`      // tcp | udp
	Service  string `yaml:"service"`       // selector → the service whose replicas receive traffic
	Port     int    `yaml:"port"`          // the service's internal container port
	TLS      string `yaml:"tls,omitempty"` // "" | passthrough (terminate not yet supported)
	LB       string `yaml:"lb,omitempty"`  // "" (round_robin) | least_conn | hash_client_ip
}

type Metadata struct {
	Slug string `yaml:"slug"`
}

type NofileLimit struct {
	Soft int `yaml:"soft"`
	Hard int `yaml:"hard"`
}

type OpsInterface struct {
	Enabled      bool   `yaml:"enabled"`
	BaseURL      string `yaml:"base_url,omitempty"`
	SecretHeader string `yaml:"secret_header,omitempty"`
	Secret       string `yaml:"secret,omitempty"` // reference to a declared secret NAME (value resolved at deploy); never the value
	Mode         string `yaml:"mode,omitempty"`   // auto | rich | basic
	BasePath     string `yaml:"base_path,omitempty"`
	Adapter      string `yaml:"adapter,omitempty"`
}

type Orchestration struct {
	DeployOrder []OrderEdge `yaml:"deploy_order,omitempty"`
	SetupOrder  []string    `yaml:"setup_order,omitempty"`
}

type OrderEdge struct {
	Deploy string `yaml:"deploy"`
	After  string `yaml:"after"`
}

type Plan struct {
	NewApp  bool
	Changes []string // changed field paths (the file is never secret-bearing, so nothing to mask)
}

type Port struct {
	Internal  int    `yaml:"internal"`
	Publish   bool   `yaml:"publish"`
	Public    bool   `yaml:"public"`
	Protocol  string `yaml:"protocol,omitempty"`  // "" (=tcp) | "tcp" | "udp"
	Published int    `yaml:"published,omitempty"` // host port (default = internal); maps host→container so a non-root container can bind a privileged host port
}

type Route struct {
	Hostname        string `yaml:"hostname"`
	Subdomain       string `yaml:"subdomain,omitempty"`   // XOR hostname: expands to <subdomain>.<namespace apex>
	BaseDomain      string `yaml:"base_domain,omitempty"` // per-item namespace NAME override (only with subdomain)
	Service         string `yaml:"service"`
	Port            int    `yaml:"port"`
	PathPrefix      string `yaml:"path_prefix"`
	HSTS            bool   `yaml:"hsts"`
	SecurityHeaders bool   `yaml:"security_headers"`
	RedirectHTTP    bool   `yaml:"redirect_http"`
	UpstreamScheme  string `yaml:"upstream_scheme,omitempty"` // "" (=http) | http | https — how the edge dials the upstream
	CA              string `yaml:"ca,omitempty"`              // "" = default issuer; else a named CA from config.yaml edge.cas
}

type Scaling struct {
	Service            string  `yaml:"service"`
	Enabled            bool    `yaml:"enabled"`
	Min                int     `yaml:"min"`
	Max                int     `yaml:"max"`
	UpCPUPct           float64 `yaml:"up_cpu_pct"`
	DownCPUPct         float64 `yaml:"down_cpu_pct"`
	UpMemPct           float64 `yaml:"up_mem_pct"`
	DownMemPct         float64 `yaml:"down_mem_pct"`
	PerReplicaMemMiB   int     `yaml:"per_replica_mem_mib"`
	PerReplicaCPUMilli int     `yaml:"per_replica_cpu_milli"`
	BreachForSecs      int     `yaml:"breach_for_secs,omitempty"`    // sustain window before acting (default 60)
	CooldownUpSecs     int     `yaml:"cooldown_up_secs,omitempty"`   // min seconds between scale-ups (default 60)
	CooldownDownSecs   int     `yaml:"cooldown_down_secs,omitempty"` // min seconds between scale-downs (default 300; >= up)
	// Metrics are OPTIONAL custom scaling signals in ADDITION to CPU/mem. Each reads a per-service
	// number from a source and scales UP when the value is at/above `up`, permits DOWN below `down`
	// (up>down is the dead band). Two sources: "ops" (queue depth from the app's own ops interface)
	// and "edge" (latency / request-rate MEASURED by Mooring's edge — for an I/O-bound service whose
	// CPU/mem stay low under load). For a service-TOTAL like queue depth or req/s the value is divided
	// by the running replica count, so setting `up` to the desired per-replica target gives
	// target-tracking through the same engine.
	Metrics []ScalingMetric `yaml:"metrics,omitempty"`
}

type ScalingMetric struct {
	Name   string `yaml:"name"`   // signal name / display label (unique within the service)
	Source string `yaml:"source"` // "ops" (app's ops interface) | "edge" (Mooring-measured at the edge)
	// Select picks which value to read.
	//   source: ops  → "" = the BACKLOG (sum of pending counters across every queue, EXCLUDING
	//                  cumulative lifetime totals like completed/failed so a monotonic counter can't
	//                  cause a runaway). A name sums the counters of a queue OR counter called that.
	//   source: edge → "p95_latency_ms" (service p95 request latency; absolute) or "req_per_sec"
	//                  (request rate, tracked per replica). Measured by the edge — the app can't fake it.
	Select string  `yaml:"select,omitempty"`
	Up     float64 `yaml:"up"`   // scale up when the (per-replica, for totals) value is >= this
	Down   float64 `yaml:"down"` // permit scale-down when the value is < this
}

type ScheduledTask struct {
	Name    string `yaml:"name"`
	Service string `yaml:"service"`
	Every   string `yaml:"every"` // interval (e.g. "24h", "15m"); floored at 1m
}

type Secret struct {
	Name     string `yaml:"name"`
	Generate string `yaml:"generate"`
}

type SelfHealing struct {
	SustainTicks    int  `yaml:"sustain_ticks,omitempty"`     // failing ticks before the first remediation (anti-flap)
	AttemptCap      int  `yaml:"attempt_cap,omitempty"`       // remediations per window before the circuit opens
	StabilizeTicks  int  `yaml:"stabilize_ticks,omitempty"`   // healthy ticks required to declare RECOVERED
	OOMStrikeCap    int  `yaml:"oom_strike_cap,omitempty"`    // OOM-classified failures before short-circuiting the ladder
	WindowSeconds   int  `yaml:"window_seconds,omitempty"`    // attempt-window length; attempts reset after it elapses
	BackoffBaseSecs int  `yaml:"backoff_base_secs,omitempty"` // exponential backoff base between attempts
	BackoffMaxSecs  int  `yaml:"backoff_max_secs,omitempty"`  // backoff ceiling
	RedeployEnabled bool `yaml:"redeploy_enabled,omitempty"`  // rung-3 redeploy (≥1 GB host AND opt-in here)
}

type Service struct {
	Image        string              `yaml:"image,omitempty"` // image XOR build
	Build        *Build              `yaml:"build,omitempty"`
	Ports        []Port              `yaml:"ports,omitempty"`
	Volumes      []Volume            `yaml:"volumes,omitempty"`
	Env          map[string]EnvValue `yaml:"env,omitempty"` // KEY: literal | {secret: NAME}
	SecretFiles  []string            `yaml:"secret_files,omitempty"`
	ConfigFiles  []ConfigFile        `yaml:"config_files,omitempty"`
	CertBindings []CertBinding       `yaml:"cert_bindings,omitempty"`
	Command      []string            `yaml:"command,omitempty"`
	Healthcheck  []string            `yaml:"healthcheck,omitempty"`
	Restart      string              `yaml:"restart,omitempty"`
	DependsOn    []string            `yaml:"depends_on,omitempty"`
	OpsInterface *OpsInterface       `yaml:"ops_interface,omitempty"` // per-service ops endpoint (§4); probed for RICH health/queues/metrics
	// MemLimit sets a cgroup memory cap per replica (e.g. "768m", "1g"). It also makes the
	// autoscaler's up_mem_pct/down_mem_pct per-service: docker reports it as the container's
	// mem limit, so the trigger measures RSS against THIS budget, not the host's total RAM.
	// MemReservation is the optional soft reservation. Both empty → unbounded (host RAM), as today.
	MemLimit       string `yaml:"mem_limit,omitempty"`
	MemReservation string `yaml:"mem_reservation,omitempty"`
	// StopGracePeriod widens the SIGTERM→SIGKILL window on stop (scale-down / redeploy)
	// from docker's 10s default, so the app can drain long in-flight requests, e.g. "60s",
	// "1m30s". Empty = docker default. Pairs with the app's graceful-shutdown hooks.
	StopGracePeriod string `yaml:"stop_grace_period,omitempty"`
	// Ulimits sets per-container resource limits (currently only `nofile`, the open
	// file-descriptor cap). Raise it for services that hold many concurrent sockets
	// beyond the docker daemon default of 1024 (e.g. an MQTT broker whose
	// max_connections is otherwise clamped to the fd limit). nil = daemon default.
	Ulimits *Ulimits `yaml:"ulimits,omitempty"`
}

type Setup struct {
	Script   string   `yaml:"script"`
	Trigger  string   `yaml:"trigger"`
	Produces []string `yaml:"produces,omitempty"`
}

type Spec struct {
	Compose      Compose       `yaml:"compose"`
	Secrets      []Secret      `yaml:"secrets,omitempty"`
	Edge         Edge          `yaml:"edge"`
	Scaling      []Scaling     `yaml:"scaling,omitempty"` // one policy per service (auto-scale several services in one app)
	SelfHealing  *SelfHealing  `yaml:"self_healing,omitempty"`
	OpsInterface *OpsInterface `yaml:"ops_interface,omitempty"`

	// ScheduledTasks run a declared service's command on an interval (cron jobs). The
	// referenced service becomes SCHEDULED-ONLY: it is generated into the compose but not
	// started by `up` (a profile) — Mooring runs it as a fresh one-shot `compose run --rm`
	// container on each tick. No exec into a running container; no shell.
	ScheduledTasks []ScheduledTask `yaml:"scheduled_tasks,omitempty"`
	Git            *Git            `yaml:"git,omitempty"`
	Setup          *Setup          `yaml:"setup,omitempty"`
}

type Store struct {
	// contains filtered or unexported fields
}

type Ulimits struct {
	Nofile *NofileLimit `yaml:"nofile,omitempty"`
}

type VersionMeta struct {
	ID        int64
	Note      string
	CreatedAt int64
	Commit    string
}

type Volume struct {
	Name     string `yaml:"name"`
	Source   string `yaml:"source"`
	Target   string `yaml:"target"`
	ReadOnly bool   `yaml:"read_only"`
}

type Widening struct {
	Field  string
	Detail string
}