compose

type Dependency struct {
	Service   string
	Condition string
}

type Finding struct {
	Code     string   `json:"code"`
	Severity Severity `json:"severity"`
	Service  string   `json:"service,omitempty"`
	Path     string   `json:"path,omitempty"`
	Message  string   `json:"message"`
}

type HealthFlags struct {
	Test          []string
	Interval      time.Duration
	Timeout       time.Duration
	StartPeriod   time.Duration
	StartInterval time.Duration
	Retries       uint64
	Disable       bool
}

type Input struct {
	Content   string
	StackUUID string
	Variables map[string]string
	Policy    Policy
	// Raw enables the raw compose mode (§9): transformations that rename or
	// rewrite are skipped, security boundaries stay.
	Raw bool
}

type LimitFlags struct {
	Memory            int64
	MemoryReservation int64
	MemorySwap        int64
	CPUs              float64
	CPUShares         int64
	CPUSet            string
	Pids              int64
}

type MagicRef struct {
	// Name is the full variable name as referenced.
	Name string
	Type MagicType
	// ID is the component identifier ([A-Z0-9_]+). The same ID means the
	// same value across the whole stack (§4.1).
	ID string
	// Length is the generation length (§4.2); 0 for FQDN/URL.
	Length int
	// Port is the internal port for FQDN/URL variants (§4.2); 0 if absent.
	Port int
	// Credential marks the types stored is_secret = true (§4.3).
	Credential bool
}

type MagicType string

type MountPlan struct {
	Type     string // volume | bind | tmpfs
	Source   string // docker volume name, or host path for binds
	Target   string
	ReadOnly bool
	// Ext carries the managed file/directory extensions (§5.1), nil if none.
	Ext *VolumeExtensions
}

type Plan struct {
	StackUUID string
	// NetworkName is the isolated bridge network of the stack (§2.1).
	NetworkName string
	// ExtraNetworks are the additional file-declared networks, prefixed
	// (§2.1): docker name -> declared name.
	ExtraNetworks map[string]string
	// Volumes maps declared named volumes to their docker names (§2.4).
	Volumes map[string]string
	// SeedVolumes maps the docker name of a volume declaring
	// `x-akerdock: preview_seed: clone` to its DECLARED name (ADR-029): a
	// preview deployment seeds it, still empty, from the production volume
	// `<app-uuid>_<declared>` before the mounting service first starts.
	SeedVolumes map[string]string
	// ExternalVolumes maps `external: true` volumes to their real docker
	// names: mounted verbatim, never created, never prefixed. This is how an
	// adopted stack keeps its data across the normalizing redeployment
	// (§20.7, INV-008).
	ExternalVolumes map[string]string
	// Services in topological start order (§2.6).
	Services []ServicePlan
	// Canonical is the transformed compose, traced in deployment logs (§2).
	Canonical string
}

type Policy struct {
	AllowPrivileged      bool
	AllowDevices         bool
	AllowSecurityOpt     bool
	AllowExternalObjects bool
	// ExtraCapAdd extends the default allowlist (NET_BIND_SERVICE, CHOWN,
	// SETUID, SETGID).
	ExtraCapAdd []string
	// AllowedBindRoots are the absolute host directories under which bind
	// mounts are allowed. Empty = every absolute bind is denied.
	AllowedBindRoots []string
}

type Result struct {
	Project  *types.Project
	Plan     *Plan
	Findings []Finding
}

type ServiceExtensions struct {
	ExcludeFromHC bool
	// AccessPublicRoutes are narrow unauthenticated paths owned by this
	// routed service (ADR-049).
	AccessPublicRoutes []accessroute.Route
	// ZeroDowntime is nil when unset (default: eligible), false when the
	// stack cannot tolerate two simultaneous instances (ADR-015).
	ZeroDowntime *bool
	// Pre/PostDeploymentCommand are the stack-level hooks (deployment-engine
	// §10, applied per service): pre runs in the EXISTING container of this
	// service before any build or mutation; post runs in its CANDIDATE once
	// healthy, before its switch — a failing post never switches this service.
	PreDeploymentCommand  string
	PostDeploymentCommand string
}

type ServicePlan struct {
	Name          string
	ContainerName string
	// CandidateName is the zero-downtime candidate (§2.2).
	CandidateName string
	// Aliases on the stack network (§2.1): short service name + prefixed.
	Aliases []string
	// ExtraNetworks this service attaches to (docker names).
	ExtraNetworks []string
	Image         string
	// Build is true when the service builds from the clone (§1.3).
	Build bool
	// BuildImage is the local image name for built services (§2.2), tag
	// applied at deploy time with the commit sha.
	BuildImage string
	Mounts     []MountPlan
	DependsOn  []Dependency
	Restart    string
	// OneShot marks restart:no jobs (§7.3) — run at their topological
	// position, success required.
	OneShot bool
	// Pre/PostCommand are the per-service hooks (x-akerdock, §10 semantics):
	// pre in the existing container before any mutation, post in the healthy
	// candidate before its switch.
	PreCommand         string
	PostCommand        string
	AccessPublicRoutes []accessroute.Route
	ExcludeFromHC      bool
	ZeroDowntimeOptOut bool
	// HasHostPorts makes the service ineligible to zero-downtime (§8.4):
	// two instances cannot bind the same host port.
	HasHostPorts bool
	// DefaultRoutePort is the first exposed port (§6) — the routing default.
	DefaultRoutePort int
	Health           *HealthFlags
	Limits           LimitFlags
	// IsDatabase/DatabaseEngine come from image detection (§10).
	IsDatabase     bool
	DatabaseEngine string
	Service        types.ServiceConfig
}

type Severity string

type VolumeExtensions struct {
	IsDirectory bool
	// Content creates the host file with variable interpolation; editable in
	// the UI afterwards.
	Content  string
	FileMode string
	OwnerUID *int64
	GroupGID *int64
}