manifest

type Config struct {
	// Project-wide identifier for resource labeling (io.dockform.identifier)
	Identifier string `yaml:"identifier" validate:"required"`

	// Global settings
	Sops      *SopsConfig     `yaml:"sops"`
	Discovery DiscoveryConfig `yaml:"discovery"`

	// Multi-context support (maps context name to config)
	Contexts    map[string]ContextConfig    `yaml:"contexts" validate:"required"`
	Deployments map[string]DeploymentConfig `yaml:"deployments"`

	// Explicit overrides (optional - discovery finds most of this automatically)
	// Stack keys are in "context/stack" format (e.g., "hetzner-one/traefik")
	Stacks map[string]Stack `yaml:"stacks" validate:"dive"`

	// Computed
	BaseDir  string `yaml:"-"`
	Targeted bool   `yaml:"-"` // True when config was filtered by --stack/--context/--deployment

	// Discovered resources (populated by convention discovery)
	DiscoveredStacks   map[string]Stack       `yaml:"-"` // context/stack -> Stack
	DiscoveredFilesets map[string]FilesetSpec `yaml:"-"` // context/stack/fileset -> FilesetSpec
}

type ContextConfig struct {
	Host     string                          `yaml:"host"`     // Optional Docker host override (e.g., ssh://user@host); when set, uses DOCKER_HOST instead of DOCKER_CONTEXT
	Volumes  map[string]TopLevelResourceSpec `yaml:"volumes"`  // Explicit volumes to create
	Networks map[string]NetworkSpec          `yaml:"networks"` // Explicit networks to create
}

type DeploymentConfig struct {
	Description string   `yaml:"description"`
	Contexts    []string `yaml:"contexts"` // Target all stacks in these contexts
	Stacks      []string `yaml:"stacks"`   // Target specific stacks (context/stack format)
}

type DiscoveryConfig struct {
	ComposeFiles    []string `yaml:"compose_files"`    // Default: [compose.yaml, compose.yml, docker-compose.yaml, docker-compose.yml]
	SecretsFile     string   `yaml:"secrets_file"`     // Default: secrets.env
	EnvironmentFile string   `yaml:"environment_file"` // Default: environment.env
	VolumesDir      string   `yaml:"volumes_dir"`      // Default: volumes
}

type Environment struct {
	Files  []string `yaml:"files"`
	Inline []string `yaml:"inline"`
}

type FilesetSpec struct {
	Source          string         `yaml:"source"`
	TargetVolume    string         `yaml:"target_volume"`
	TargetPath      string         `yaml:"target_path"`
	RestartServices RestartTargets `yaml:"restart_services"`
	ApplyMode       string         `yaml:"apply_mode"`
	Exclude         []string       `yaml:"exclude"`
	Ownership       *Ownership     `yaml:"ownership"`

	// Computed fields
	SourceAbs string `yaml:"-"`
	Context   string `yaml:"-"` // Which context this belongs to
	Stack     string `yaml:"-"` // Which stack this belongs to (for restart discovery)
}

type NetworkSpec struct {
	Driver       string            `yaml:"driver"`
	Options      map[string]string `yaml:"options"`
	Internal     bool              `yaml:"internal"`
	Attachable   bool              `yaml:"attachable"`
	IPv6         bool              `yaml:"ipv6"`
	Subnet       string            `yaml:"subnet"`
	Gateway      string            `yaml:"gateway"`
	IPRange      string            `yaml:"ip_range"`
	AuxAddresses map[string]string `yaml:"aux_addresses"`
}

type Ownership struct {
	User             string `yaml:"user"`              // numeric UID string preferred; allow names
	Group            string `yaml:"group"`             // numeric GID string preferred; allow names
	FileMode         string `yaml:"file_mode"`         // octal string "0644" or "644"
	DirMode          string `yaml:"dir_mode"`          // octal string "0755" or "755"
	PreserveExisting bool   `yaml:"preserve_existing"` // if true, only apply to new/updated paths
}

type Project struct {
	Name string `yaml:"name"`
}

type RestartTargets struct {
	Attached bool
	Services []string
}

type Secrets struct {
	Sops []string `yaml:"sops"`
}

type SopsAgeConfig struct {
	KeyFile    string   `yaml:"key_file"`
	Recipients []string `yaml:"recipients"`
}

type SopsConfig struct {
	Age *SopsAgeConfig `yaml:"age"`
	// Recipients is deprecated; kept for migration error messaging
	Recipients []string       `yaml:"recipients"`
	Pgp        *SopsPgpConfig `yaml:"pgp"`
}

type SopsPgpConfig struct {
	KeyringDir   string   `yaml:"keyring_dir"`
	UseAgent     bool     `yaml:"use_agent"`
	PinentryMode string   `yaml:"pinentry_mode"`
	Recipients   []string `yaml:"recipients"`
	Passphrase   string   `yaml:"passphrase"`
}

type Stack struct {
	// Core fields (set by discovery, can be overridden explicitly for non-standard setups)
	Root    string   `yaml:"root"`     // Stack directory (usually set by discovery)
	Files   []string `yaml:"files"`    // Compose files (usually set by discovery)
	EnvFile []string `yaml:"env-file"` // Env files

	// Override fields (typically set in stacks: block to augment discovered stacks)
	Profiles    []string               `yaml:"profiles"`    // Compose profiles to activate
	Environment *Environment           `yaml:"environment"` // Additional environment config
	Secrets     *Secrets               `yaml:"secrets"`     // Additional SOPS secrets
	Project     *Project               `yaml:"project"`     // Compose project name override
	Filesets    map[string]FilesetSpec `yaml:"filesets"`    // Fileset overrides/declarations

	// Computed fields
	Context     string   `yaml:"-"` // Which context this belongs to (from key prefix)
	EnvInline   []string `yaml:"-"` // Merged inline env vars
	SopsSecrets []string `yaml:"-"` // Merged SOPS secret paths
	RootAbs     string   `yaml:"-"` // Absolute path to stack root
}

type TopLevelResourceSpec struct{}