config

type Base struct {
	ParentImage string `toml:"parent_image"`
	From        string `toml:"from"`
	SetupScript string `toml:"setup_script"`
	Description string `toml:"description"`
}

type Checkpoint struct {
	DatasetPrefix string `toml:"dataset_prefix" env:"PIXELS_CHECKPOINT_DATASET_PREFIX"`
}

type Config struct {
	Backend    string         `toml:"backend"    env:"PIXELS_BACKEND"` // "truenas" or "incus"
	TrueNAS    TrueNAS        `toml:"truenas"`
	Incus      Incus          `toml:"incus"`
	Defaults   Defaults       `toml:"defaults"`
	SSH        SSH            `toml:"ssh"`
	Checkpoint Checkpoint     `toml:"checkpoint"`
	Provision  Provision      `toml:"provision"`
	Network    Network        `toml:"network"`
	MCP        MCP            `toml:"mcp"`
	RawEnv     map[string]any `toml:"env"`

	// Resolved env vars (not from TOML directly).
	Env        map[string]string `toml:"-"` // image vars → /etc/environment
	EnvForward map[string]string `toml:"-"` // session vars → SSH SetEnv
}

type Defaults struct {
	Image   string   `toml:"image"    env:"PIXELS_DEFAULT_IMAGE"`
	CPU     string   `toml:"cpu"      env:"PIXELS_DEFAULT_CPU"`
	Memory  int64    `toml:"memory"   env:"PIXELS_DEFAULT_MEMORY"` // MiB
	Pool    string   `toml:"pool"     env:"PIXELS_DEFAULT_POOL"`
	NICType string   `toml:"nic_type"` // "macvlan" or "bridged"
	Parent  string   `toml:"parent"`   // parent interface (e.g. "eno1", "br0")
	Network string   `toml:"network"`  // Incus network name (e.g. "incusbr0")
	DNS     []string `toml:"dns"`      // nameservers to write into containers
}

type Incus struct {
	Socket     string `toml:"socket"      env:"PIXELS_INCUS_SOCKET"`
	Remote     string `toml:"remote"      env:"PIXELS_INCUS_REMOTE"`
	ClientCert string `toml:"client_cert" env:"PIXELS_INCUS_CLIENT_CERT"`
	ClientKey  string `toml:"client_key"  env:"PIXELS_INCUS_CLIENT_KEY"`
	ServerCert string `toml:"server_cert" env:"PIXELS_INCUS_SERVER_CERT"`
	Project    string `toml:"project"     env:"PIXELS_INCUS_PROJECT"`
}

type MCP struct {
	Prefix           string          `toml:"prefix"             env:"PIXELS_MCP_PREFIX"`
	BasePrefix       string          `toml:"base_prefix"        env:"PIXELS_MCP_BASE_PREFIX"`
	DefaultImage     string          `toml:"default_image"      env:"PIXELS_MCP_DEFAULT_IMAGE"`
	IdleStopAfter    string          `toml:"idle_stop_after"    env:"PIXELS_MCP_IDLE_STOP_AFTER"`
	HardDestroyAfter string          `toml:"hard_destroy_after" env:"PIXELS_MCP_HARD_DESTROY_AFTER"`
	ReapInterval     string          `toml:"reap_interval"      env:"PIXELS_MCP_REAP_INTERVAL"`
	StateFile        string          `toml:"state_file"         env:"PIXELS_MCP_STATE_FILE"`
	PIDFile          string          `toml:"pid_file"           env:"PIXELS_MCP_PID_FILE"`
	ExecTimeoutMax   string          `toml:"exec_timeout_max"   env:"PIXELS_MCP_EXEC_TIMEOUT_MAX"`
	ListenAddr       string          `toml:"listen_addr"        env:"PIXELS_MCP_LISTEN_ADDR"`
	EndpointPath     string          `toml:"endpoint_path"      env:"PIXELS_MCP_ENDPOINT_PATH"`
	Bases            map[string]Base `toml:"bases"`
}

type Network struct {
	Egress string   `toml:"egress" env:"PIXELS_NETWORK_EGRESS"`
	Allow  []string `toml:"allow"`
}

type Provision struct {
	Enabled  *bool `toml:"enabled"  env:"PIXELS_PROVISION_ENABLED"`
	DevTools *bool `toml:"devtools" env:"PIXELS_PROVISION_DEVTOOLS"`
}

type SSH struct {
	User           string `toml:"user"             env:"PIXELS_SSH_USER"`
	Key            string `toml:"key"              env:"PIXELS_SSH_KEY"`
	StrictHostKeys *bool  `toml:"strict_host_keys" env:"PIXELS_SSH_STRICT_HOST_KEYS"`
}

type TrueNAS struct {
	Host               string `toml:"host"                env:"PIXELS_TRUENAS_HOST"`
	Port               int    `toml:"port"                env:"PIXELS_TRUENAS_PORT"`
	Username           string `toml:"username"            env:"PIXELS_TRUENAS_USERNAME"`
	APIKey             string `toml:"api_key"             env:"PIXELS_TRUENAS_API_KEY"`
	InsecureSkipVerify *bool  `toml:"insecure_skip_verify" env:"PIXELS_TRUENAS_INSECURE"`
}