config

type APIConfig struct {
	Enabled  bool
	Port     int
	APIKey   string
	ReadOnly bool
}

type AttestationConfig struct {
	KeyBased struct {
		Key         string // Base64-encoded key content
		KeyPassword string
	}
	RekorURL     string
	FulcioURL    string
	UseKeyless   bool
	OIDCIssuer   string
	OIDCClientID string
}

type Config struct {
	RegsyncPath   string
	Queue         QueueConfig
	Worker        WorkerConfig
	Scanner       ScannerConfig
	Attestation   AttestationConfig
	StateStore    StateStoreConfig
	API           APIConfig
	Observability ObservabilityConfig
}

type Defaults struct {
	Parallel              int           `yaml:"parallel"`
	RescanInterval        string        `yaml:"x-rescanInterval,omitempty"`
	WorkerPollInterval    string        `yaml:"x-worker-poll-interval,omitempty"`
	SCAIValidityExtension string        `yaml:"x-scaiValidityExtension,omitempty"`
	Policy                *PolicyConfig `yaml:"x-policy,omitempty"`
}

type ObservabilityConfig struct {
	LogLevel        string
	MetricsPort     int
	HealthCheckPort int
}

type PolicyConfig struct {
	Expression     string `yaml:"expression"`
	FailureMessage string `yaml:"failureMessage,omitempty"`
}

type QueueConfig struct {
	BufferSize int
}

type RegistryCredential struct {
	Registry      string `yaml:"registry"`
	User          string `yaml:"user"`
	Pass          string `yaml:"pass"`
	RepoAuth      bool   `yaml:"repoAuth"`
	ReqPerSec     int    `yaml:"reqPerSec"`
	ReqConcurrent int    `yaml:"reqConcurrent"`
}

type RegsyncConfig struct {
	Version  int                  `yaml:"version"`
	Creds    []RegistryCredential `yaml:"creds"`
	Defaults Defaults             `yaml:"defaults"`
	Sync     []SyncEntry          `yaml:"sync"`
}

type ScannerConfig struct {
	ServerAddr    string
	Token         string
	CustomHeaders map[string]string
	Timeout       time.Duration
	Insecure      bool
	RegsyncPath   string       // Path to suppline.yml for registry credentials
	Logger        *slog.Logger // Logger instance for structured logging
}

type StateStoreConfig struct {
	Type           string
	PostgresURL    string
	SQLitePath     string
	RescanInterval time.Duration
}

type SyncEntry struct {
	Source                string                `yaml:"source"`
	Target                string                `yaml:"target"`
	Type                  string                `yaml:"type"`
	Schedule              string                `yaml:"schedule,omitempty"`
	Platform              string                `yaml:"platform,omitempty"`
	Tags                  *TagFilter            `yaml:"tags,omitempty"`
	Tolerate              []types.CVEToleration `yaml:"x-tolerate,omitempty"` // Using canonical type
	RescanInterval        string                `yaml:"x-rescanInterval,omitempty"`
	SCAIValidityExtension string                `yaml:"x-scaiValidityExtension,omitempty"`
	Policy                *PolicyConfig         `yaml:"x-policy,omitempty"`
}

type TagFilter struct {
	SemverRange []string `yaml:"semverRange,omitempty"`
	Deny        []string `yaml:"deny,omitempty"`
}

type WorkerConfig struct {
	PollInterval  time.Duration
	RetryAttempts int
	RetryBackoff  time.Duration
}