config

type AdminConfig struct {
	Socket string `yaml:"socket"`
	Listen string `yaml:"listen"`
}

type AuthConfig struct {
	BearerTokens BearerTokenConfig `yaml:"bearer_tokens"`
}

type BearerTokenConfig struct {
	Enabled bool   `yaml:"enabled"`
	Secret  string `yaml:"secret"` // JWT signing secret (or load from env)
}

type Config struct {
	HTTP        HTTPConfig        `yaml:"http"`
	Metrics     MetricsConfig     `yaml:"metrics"`
	Auth        AuthConfig        `yaml:"auth"`
	Admin       AdminConfig       `yaml:"admin"`
	PKI         PKIConfig         `yaml:"pki"`
	Scheduler   SchedulerConfig   `yaml:"scheduler"`
	Logging     LoggingConfig     `yaml:"logging"`
	Postgres    PostgresConfig    `yaml:"postgres"`
	GitLab      GitLabConfig      `yaml:"-"`
	ObjectStore ObjectStoreConfig `yaml:"object_store"`
	FilePath    string            `yaml:"-"`
}

type GitLabConfig struct {
	Domain string
	Token  string
}

type HTTPConfig struct {
	Listen       string        `yaml:"listen"`
	ReadTimeout  time.Duration `yaml:"read_timeout"`
	WriteTimeout time.Duration `yaml:"write_timeout"`
	IdleTimeout  time.Duration `yaml:"idle_timeout"`
}

type LoggingConfig struct {
	Level string `yaml:"level"`
}

type MetricsConfig struct {
	Listen string `yaml:"listen"`
}

type ObjectStoreConfig struct {
	Endpoint  string `yaml:"endpoint"`
	Bucket    string `yaml:"bucket"`
	AccessKey string `yaml:"access_key"`
	SecretKey string `yaml:"secret_key"`
	Secure    bool   `yaml:"secure"`
	Region    string `yaml:"region,omitempty"`
}

type PKIConfig struct {
	BundleDir   string        `yaml:"bundle_dir"`
	Certificate string        `yaml:"certificate"`
	Key         string        `yaml:"key"`
	RenewBefore time.Duration `yaml:"renew_before"`
	CAEndpoint  string        `yaml:"ca_endpoint"`
}

type PostgresConfig struct {
	DSN string `yaml:"dsn"`
}

type SchedulerConfig struct {
	HousekeepingInterval time.Duration `yaml:"housekeeping_interval"`
	DiskPruneInterval    time.Duration `yaml:"disk_prune_interval"`
	// TTL is the retention period for logs, events, diffs, and artifact bundles.
	// Data older than this will be purged by the TTL worker. Default: 30 days.
	TTL time.Duration `yaml:"ttl"`
	// TTLInterval is how often the TTL worker runs cleanup. Default: 1 hour.
	TTLInterval time.Duration `yaml:"ttl_interval"`
	// DropPartitions enables dropping entire monthly partitions for expired data
	// instead of row-by-row deletion. More efficient for large datasets.
	DropPartitions bool `yaml:"drop_partitions"`
	// WaveSchedulerInterval is how often the wave scheduler checks for queued runs.
	// Set to 0 to disable the wave scheduler. Default: 5 seconds.
	WaveSchedulerInterval time.Duration `yaml:"wave_scheduler_interval"`
	// StaleJobRecoveryInterval is how often stale Running jobs are recovered.
	// Set to 0 to disable stale-job recovery. Default: 30 seconds.
	StaleJobRecoveryInterval time.Duration `yaml:"stale_job_recovery_interval"`
	// NodeStaleAfter is the heartbeat age threshold after which a node is considered stale.
	// Default: 1 minute.
	NodeStaleAfter time.Duration `yaml:"node_stale_after"`
}