v1alpha1

type AffectedResource struct {
	// apiVersion is the resource API version when known.
	// +optional
	APIVersion string `json:"apiVersion,omitempty"`

	// kind is the resource kind (e.g. Deployment, Pod, Node).
	// +kubebuilder:validation:Required
	Kind string `json:"kind"`

	// name is the resource name.
	// +kubebuilder:validation:Required
	Name string `json:"name"`

	// namespace is the resource namespace. Empty for cluster-scoped resources.
	// +optional
	Namespace string `json:"namespace,omitempty"`

	// uid is the Kubernetes UID when known.
	// +optional
	UID string `json:"uid,omitempty"`
}

type AttributeMatch struct {
	// key is the attribute name, e.g. "http.status_code" or "service.name".
	// Dotted OTel semantic-convention keys are supported as-is.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	Key string `json:"key"`

	// op is the predicate operator applied to the attribute value.
	//   Equals      — attribute value equals `value`
	//   NotEquals   — attribute value does not equal `value`
	//   Contains    — attribute value contains `value` as a substring
	//   NotContains — attribute value does not contain `value`
	//   Regex       — attribute value matches the RE2 regex in `value`
	//   Exists      — attribute is present with a non-empty value (`value` ignored)
	//   NotExists   — attribute is absent or empty (`value` ignored)
	//   Gte/Lte/Gt/Lt — numeric comparison against `value` (parses both sides as float64)
	// +kubebuilder:validation:Enum=Equals;NotEquals;Contains;NotContains;Regex;Exists;NotExists;Gte;Lte;Gt;Lt
	// +kubebuilder:default=Equals
	Op string `json:"op"`

	// value is the comparison target. Ignored for Exists/NotExists.
	// +optional
	Value string `json:"value,omitempty"`
}

type IncidentObjectRef struct {
	// apiVersion is the resource API version.
	// +optional
	APIVersion string `json:"apiVersion,omitempty"`

	// kind is the Kubernetes kind.
	// +kubebuilder:validation:Required
	Kind string `json:"kind"`

	// namespace is empty for cluster-scoped resources.
	// +optional
	Namespace string `json:"namespace,omitempty"`

	// name is the Kubernetes object name.
	// +kubebuilder:validation:Required
	Name string `json:"name"`

	// uid is the Kubernetes UID when known.
	// +optional
	UID string `json:"uid,omitempty"`
}

type IncidentReport struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of IncidentReport
	// +required
	Spec IncidentReportSpec `json:"spec"`

	// status defines the observed state of IncidentReport
	// +optional
	Status IncidentReportStatus `json:"status,omitzero"`
}

type IncidentReportList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []IncidentReport `json:"items"`
}

type IncidentReportSpec struct {
	// agentRef is the name of the RCAAgent that created this report.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	AgentRef string `json:"agentRef"`

	// fingerprint is the canonical identity for an incident.
	// It is stable across repeated signals for the same underlying issue.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	Fingerprint string `json:"fingerprint"`

	// incidentType is the durable incident category.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	IncidentType string `json:"incidentType"`

	// scope describes the primary object or workload the incident belongs to.
	// +optional
	Scope IncidentScope `json:"scope,omitempty"`
}

type IncidentReportStatus struct {
	// severity is the incident severity level assigned by the incident engine.
	// +kubebuilder:validation:Enum=P1;P2;P3;P4
	// +required
	Severity string `json:"severity,omitempty"`

	// phase is the current lifecycle phase of the incident.
	// +kubebuilder:validation:Enum=Detecting;Active;Resolved
	// +required
	Phase string `json:"phase,omitempty"`

	// incidentType is the category of incident detected by the incident engine.
	// The value is self-describing from the raw event type (e.g. CrashLoopBackOff,
	// OOMKilled, ImagePullBackOff, NodeNotReady) rather than a fixed enum.
	// +required
	IncidentType string `json:"incidentType,omitempty"`

	// summary is the short dashboard-friendly summary for the current incident state.
	// +optional
	Summary string `json:"summary,omitempty"`

	// reason is the machine-oriented Kubernetes reason when available.
	// +optional
	Reason string `json:"reason,omitempty"`

	// message is the detailed message for the most recent signal.
	// +optional
	Message string `json:"message,omitempty"`

	// firstObservedAt is when the incident fingerprint was first seen in the current lifecycle.
	// +optional
	FirstObservedAt *metav1.Time `json:"firstObservedAt,omitempty"`

	// activeAt is when the incident crossed the stabilization window and became Active.
	// +optional
	ActiveAt *metav1.Time `json:"activeAt,omitempty"`

	// lastObservedAt is when the most recent confirming signal was received.
	// +optional
	LastObservedAt *metav1.Time `json:"lastObservedAt,omitempty"`

	// startTime is when the incident was first detected.
	// Deprecated: use firstObservedAt. Retained only for compatibility with older clients.
	// +required
	StartTime *metav1.Time `json:"startTime,omitempty"`

	// resolvedTime is when the incident was resolved. Empty while still active.
	// Deprecated: use resolvedAt. Retained only for compatibility with older clients.
	// +optional
	ResolvedTime *metav1.Time `json:"resolvedTime,omitempty"`

	// resolvedAt is when the incident was resolved.
	// +optional
	ResolvedAt *metav1.Time `json:"resolvedAt,omitempty"`

	// signalCount is the number of confirming signals recorded in the current lifecycle.
	// +optional
	SignalCount int64 `json:"signalCount,omitempty"`

	// stabilizationWindowSeconds is the required continuous observation window before Active.
	// +optional
	StabilizationWindowSeconds int64 `json:"stabilizationWindowSeconds,omitempty"`

	// notified indicates whether the notification layer (Slack / PagerDuty) has
	// already fired for this incident. Used to suppress duplicate alerts.
	// +optional
	Notified bool `json:"notified,omitempty"`

	// affectedResources lists the Kubernetes resources involved in this incident.
	// +required
	// +listType=atomic
	AffectedResources []AffectedResource `json:"affectedResources,omitempty"`

	// correlatedSignals is the list of raw signals that triggered this incident
	// (e.g. "CrashLoopBackOff (restarts: 8)", "OOMKilled (exit code 137)").
	// +required
	// +listType=atomic
	CorrelatedSignals []string `json:"correlatedSignals,omitempty"`

	// timeline is the ordered sequence of events that make up this incident.
	// +required
	// +listType=atomic
	Timeline []TimelineEvent `json:"timeline,omitempty"`

	// conditions represent the current state of the IncidentReport resource.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// incidentGraph is the serialized incident topology graph — nodes for
	// the affected Kubernetes resources + services observed via OTel spans,
	// and edges for ownership, scheduling, and service-to-service calls. It
	// is written by the controller on transition to Active and pruned by the
	// retention subsystem after incidentRetention/4 to keep etcd footprint
	// bounded. Clients should treat the payload as opaque JSON; the
	// schema is defined by internal/correlator/graph.IncidentGraph.
	// +optional
	IncidentGraph *runtime.RawExtension `json:"incidentGraph,omitempty"`
}

type IncidentScope struct {
	// level is one of Cluster, Namespace, Workload, or Pod.
	// +kubebuilder:validation:Enum=Cluster;Namespace;Workload;Pod
	// +optional
	Level string `json:"level,omitempty"`

	// namespace is populated for namespace-, workload-, and pod-scoped incidents.
	// +optional
	Namespace string `json:"namespace,omitempty"`

	// workloadRef points at the top-level workload when the issue belongs to one.
	// +optional
	WorkloadRef *IncidentObjectRef `json:"workloadRef,omitempty"`

	// resourceRef points at the primary affected object.
	// +optional
	ResourceRef *IncidentObjectRef `json:"resourceRef,omitempty"`
}

type NotificationsConfig struct {
	// Slack holds the configuration for Slack notifications.
	// +optional
	Slack *SlackConfig `json:"slack,omitempty"`

	// PagerDuty holds the configuration for PagerDuty notifications.
	// +optional
	PagerDuty *PagerDutyConfig `json:"pagerduty,omitempty"`
}

type OTelConfig struct {
	// Endpoint is the OTLP gRPC collector address (e.g. "otel-collector.observability.svc.cluster.local:4317").
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	Endpoint string `json:"endpoint"`

	// ServiceName is the service.name resource attribute. Defaults to "rca-operator".
	// +optional
	ServiceName string `json:"serviceName,omitempty"`

	// SamplingRate is the trace sampling ratio as a string (e.g. "1.0"). Defaults to "1.0".
	// +optional
	SamplingRate string `json:"samplingRate,omitempty"`

	// Insecure disables TLS on the gRPC connection (typical for in-cluster collectors).
	// +optional
	Insecure bool `json:"insecure,omitempty"`
}

type PagerDutyConfig struct {
	// SecretRef is the name of the Kubernetes Secret containing the PagerDuty Events API v2 key.
	// The secret must have a key named "apiKey".
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:example=pd-api-key
	SecretRef string `json:"secretRef"`

	// Severity is the minimum incident severity that triggers a PagerDuty page.
	// +kubebuilder:validation:Enum=P1;P2;P3;P4
	// +kubebuilder:default=P2
	// +optional
	Severity string `json:"severity,omitempty"`
}

type RCAAgent struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of RCAAgent
	// +required
	Spec RCAAgentSpec `json:"spec"`

	// status defines the observed state of RCAAgent
	// +optional
	Status RCAAgentStatus `json:"status,omitzero"`
}

type RCAAgentList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []RCAAgent `json:"items"`
}

type RCAAgentSpec struct {

	// watchNamespaces specifies the namespaces that the RCAAgent should monitor.
	// +kubebuilder:validation:Required
	// +kubebuilder:default={"default"}
	// +kubebuilder:example={"production","staging"}
	WatchNamespaces []string `json:"watchNamespaces,omitempty"`

	// Notifications holds the configuration for sending incident notifications.
	// +optional
	Notifications *NotificationsConfig `json:"notifications,omitempty"`

	// IncidentRetention specifies how long to keep Resolved IncidentReport CRs before pruning.
	// Supported suffixes: m (minutes), h (hours), d (days), for example "5m", "12h", "30d".
	// +kubebuilder:validation:Pattern=`^[1-9][0-9]*(m|h|d)$`
	// +kubebuilder:default="30d"
	// +optional
	IncidentRetention string `json:"incidentRetention,omitempty"`

	// IncidentRetentionDays is deprecated. Use incidentRetention instead.
	// This field is retained for backward compatibility.
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:default=30
	// +optional
	IncidentRetentionDays int `json:"incidentRetentionDays,omitempty"`

	// OTel holds optional OpenTelemetry configuration for exporting traces to an OTLP collector.
	// +optional
	OTel *OTelConfig `json:"otel,omitempty"`

	// SignalMappings allows overriding the default event-type → incident-type mapping.
	// +optional
	SignalMappings []SignalMappingConfig `json:"signalMappings,omitempty"`
}

type RCAAgentStatus struct {

	// conditions represent the current state of the RCAAgent resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// Standard condition types include:
	// - "Available": the resource is fully functional
	// - "Progressing": the resource is being created or updated
	// - "Degraded": the resource failed to reach or maintain its desired state
	//
	// The status of each condition is one of True, False, or Unknown.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type RCACorrelationRule struct {
	metav1.TypeMeta `json:",inline"`

	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// +required
	Spec RCACorrelationRuleSpec `json:"spec"`
}

type RCACorrelationRuleList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []RCACorrelationRule `json:"items"`
}

type RCACorrelationRuleSpec struct {
	// priority controls evaluation order. Higher values are evaluated first.
	// The first rule whose conditions match wins.
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:default=100
	Priority int `json:"priority"`

	// agentSelector restricts which RCAAgents this rule applies to.
	// A nil selector matches all agents.
	// +optional
	AgentSelector *metav1.LabelSelector `json:"agentSelector,omitempty"`

	// trigger is the event type that initiates rule evaluation.
	// +kubebuilder:validation:Required
	Trigger RuleTrigger `json:"trigger"`

	// conditions are additional signals that must be present in the correlation
	// buffer for the rule to fire. All conditions must match (AND logic).
	// +optional
	Conditions []RuleCondition `json:"conditions,omitempty"`

	// fires defines the incident properties when this rule matches.
	// +kubebuilder:validation:Required
	Fires RuleFires `json:"fires"`
}

type RuleCondition struct {
	// eventType is the signal type that must be present.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	EventType string `json:"eventType"`

	// scope defines the relationship between the trigger event and this condition.
	// +kubebuilder:validation:Enum=samePod;sameNode;sameNamespace;sameTrace;any
	// +kubebuilder:default=samePod
	Scope string `json:"scope"`

	// negate inverts the condition: when true the rule fires only if this signal
	// is NOT present in the buffer.
	// +optional
	Negate bool `json:"negate,omitempty"`

	// attributes is an optional list of key/value predicates evaluated against
	// candidate events that implement the AttributesEvent interface (OTel span
	// and log signals). All predicates must match (AND logic). Events that do
	// not expose attributes are treated as having no attributes — any predicate
	// other than `NotExists` fails for such events.
	// +optional
	Attributes []AttributeMatch `json:"attributes,omitempty"`
}

type RuleFires struct {
	// incidentType is the canonical incident category.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	IncidentType string `json:"incidentType"`

	// severity is the incident priority level.
	// +kubebuilder:validation:Enum=P1;P2;P3;P4
	// +kubebuilder:validation:Required
	Severity string `json:"severity"`

	// summary is a Go text/template rendered with event context.
	// Available variables: {{.PodName}}, {{.Namespace}}, {{.NodeName}}, {{.EventType}}.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	Summary string `json:"summary"`

	// resource overrides the default resource for incident dedup.
	// Use "node" for node-scoped, "deployment" for deployment-scoped, or leave empty for pod-scoped.
	// +optional
	Resource string `json:"resource,omitempty"`

	// scope overrides the incident scope level.
	// +kubebuilder:validation:Enum=Pod;Workload;Namespace;Cluster
	// +optional
	Scope string `json:"scope,omitempty"`
}

type RuleTrigger struct {
	// eventType is one of the watcher EventType constants (e.g. CrashLoopBackOff, OOMKilled).
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	EventType string `json:"eventType"`
}

type SignalMappingConfig struct {
	// EventType is the watcher event type to override (e.g. "CrashLoopBackOff").
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	EventType string `json:"eventType"`

	// IncidentType overrides the default incident type.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	IncidentType string `json:"incidentType"`

	// Severity overrides the default severity.
	// +kubebuilder:validation:Enum=P1;P2;P3;P4
	// +optional
	Severity string `json:"severity,omitempty"`

	// Scope overrides the default scope level.
	// +kubebuilder:validation:Enum=Pod;Workload;Namespace;Cluster
	// +optional
	Scope string `json:"scope,omitempty"`
}

type SlackConfig struct {
	// WebhookSecretRef is the name of the Kubernetes Secret containing the Slack webhook URL.
	// The secret must have a key named "webhookURL".
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:example=slack-webhook
	WebhookSecretRef string `json:"webhookSecretRef"`

	// Channel is the Slack channel to post notifications to (e.g. #incidents).
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:example="#incidents"
	Channel string `json:"channel"`

	// MentionOnP1 is the Slack user or group handle to mention on P1 incidents (e.g. @oncall).
	// +optional
	// +kubebuilder:example="@oncall"
	MentionOnP1 string `json:"mentionOnP1,omitempty"`
}

type TimelineEvent struct {
	// time is the wall-clock time of the event (RFC3339).
	// +kubebuilder:validation:Required
	Time metav1.Time `json:"time"`

	// event is a human-readable description of what happened.
	// +kubebuilder:validation:Required
	Event string `json:"event"`
}