types

type BusinessClassification struct {
	// Business unit owning the service (e.g., "payments", "platform")
	BusinessUnit string `json:"businessUnit,omitempty"`
	// Service owner team or individual
	ServiceOwner string `json:"serviceOwner,omitempty"`
	// Business criticality level
	Criticality Criticality `json:"criticality,omitempty"`
	// SLA requirement tier
	SLARequirement SLARequirement `json:"slaRequirement,omitempty"`
}

type CatalogStatus string

type ConfigMapSummary struct {
	Name string   `json:"name"`
	Keys []string `json:"keys"` // ConfigMap key names (not full data)
}

type ContainerStatus struct {
	Name         string `json:"name"`
	Image        string `json:"image"`
	Ready        bool   `json:"ready"`
	RestartCount int32  `json:"restartCount"`
	State        string `json:"state"` // running, waiting, terminated
}

type Criticality string

type DeduplicationInfo struct {
	// True if this signal is a duplicate of an active remediation
	IsDuplicate bool `json:"isDuplicate,omitempty"`

	// Timestamp when this signal fingerprint was first seen
	// DD-GATEWAY-011: Made optional (moved to status.deduplication)
	FirstOccurrence metav1.Time `json:"firstOccurrence,omitempty"`

	// Timestamp when this signal fingerprint was last seen
	// DD-GATEWAY-011: Made optional (moved to status.deduplication)
	LastOccurrence metav1.Time `json:"lastOccurrence,omitempty"`

	// Total count of occurrences of this signal
	// DD-GATEWAY-011: Made optional (moved to status.deduplication)
	OccurrenceCount int `json:"occurrenceCount,omitempty"`

	// Optional correlation ID for grouping related signals
	CorrelationID string `json:"correlationId,omitempty"`

	// Reference to previous RemediationRequest CRD (if duplicate)
	PreviousRemediationRequestRef string `json:"previousRemediationRequestRef,omitempty"`
}

type DeploymentDetails struct {
	Name              string            `json:"name"`
	Replicas          int32             `json:"replicas"`
	ReadyReplicas     int32             `json:"readyReplicas"`
	AvailableReplicas int32             `json:"availableReplicas"`
	Strategy          string            `json:"strategy"` // RollingUpdate, Recreate
	Labels            map[string]string `json:"labels,omitempty"`
}

type DetectedLabels struct {
	// ========================================
	// DETECTION FAILURE TRACKING (DD-WORKFLOW-001 v2.2)
	// ========================================
	// Lists field names where detection QUERY failed (RBAC, timeout, network error).
	// If a field is in this array, its value should be ignored.
	// If empty/nil, all detections succeeded.
	// Only accepts valid field names: gitOpsManaged, gitOpsTool, pdbProtected, hpaEnabled,
	// stateful, helmManaged, networkIsolated, serviceMesh, resourceQuotaConstrained
	// +kubebuilder:validation:items:Enum={gitOpsManaged,gitOpsTool,pdbProtected,hpaEnabled,stateful,helmManaged,networkIsolated,serviceMesh,resourceQuotaConstrained}
	FailedDetections []string `json:"failedDetections,omitempty"`

	// ========================================
	// GITOPS MANAGEMENT
	// ========================================
	// True if namespace/deployment is managed by GitOps controller
	// Detection: ArgoCD annotations, Flux labels
	GitOpsManaged bool `json:"gitOpsManaged"`
	// GitOps tool managing this resource
	// +kubebuilder:validation:Enum=argocd;flux;""
	GitOpsTool string `json:"gitOpsTool,omitempty"`

	// ========================================
	// WORKLOAD PROTECTION
	// ========================================
	// True if PodDisruptionBudget exists for this workload
	PDBProtected bool `json:"pdbProtected"`
	// True if HorizontalPodAutoscaler targets this workload
	HPAEnabled bool `json:"hpaEnabled"`

	// ========================================
	// WORKLOAD CHARACTERISTICS
	// ========================================
	// True if StatefulSet or has PVCs attached
	Stateful bool `json:"stateful"`
	// True if managed by Helm (has helm.sh/chart label)
	HelmManaged bool `json:"helmManaged"`

	// ========================================
	// SECURITY POSTURE
	// ========================================
	// True if NetworkPolicy exists in namespace
	NetworkIsolated bool `json:"networkIsolated"`
	// Service mesh if detected (from sidecar or namespace labels)
	// +kubebuilder:validation:Enum=istio;linkerd;""
	ServiceMesh string `json:"serviceMesh,omitempty"`

	// ========================================
	// RESOURCE CONSTRAINTS (#366, DD-HAPI-018 v1.4)
	// ========================================
	// True if any ResourceQuota exists in namespace
	ResourceQuotaConstrained bool `json:"resourceQuotaConstrained"`
}

type EnrichmentResults struct {
	// Kubernetes resource context (classification-focused: namespace, workload labels, owner chain)
	KubernetesContext *KubernetesContext `json:"kubernetesContext,omitempty"`

	// Business classification from SP categorization phase
	// BR-SP-002, BR-SP-080, BR-SP-081: Business unit, criticality, SLA
	// Passed through to HolmesGPT-API for workflow filtering and Rego approval decisions
	BusinessClassification *BusinessClassification `json:"businessClassification,omitempty"`
}

type IngressRule struct {
	Host string `json:"host"`
	Path string `json:"path"`
}

type IngressSummary struct {
	Name  string        `json:"name"`
	Hosts []string      `json:"hosts"`
	Rules []IngressRule `json:"rules,omitempty"`
}

type KubernetesContext struct {
	// Namespace context (nil for cluster-scoped resources like Node)
	Namespace *NamespaceContext `json:"namespace,omitempty"`
	// Target workload context (kind, name, labels, annotations)
	Workload *WorkloadDetails `json:"workload,omitempty"`
	// Owner chain from target to top-level controller
	// DD-WORKFLOW-001 v1.8: Used for historical remediation context
	OwnerChain []OwnerChainEntry `json:"ownerChain,omitempty"`
	// Custom labels extracted via Rego policies (BR-SP-102)
	// DD-WORKFLOW-001 v1.9: map[string][]string (subdomain -> list of values)
	CustomLabels map[string][]string `json:"customLabels,omitempty"`
	// DegradedMode indicates context was built with partial data
	// DD-4: K8s Enrichment Failure Handling (target resource not found)
	DegradedMode bool `json:"degradedMode,omitempty"`
}

type NamespaceContext struct {
	// Namespace name
	Name string `json:"name"`
	// Namespace labels (used by environment, priority, business classifiers)
	Labels map[string]string `json:"labels,omitempty"`
	// Namespace annotations (used by business classifier for kubernaut.ai/ labels)
	Annotations map[string]string `json:"annotations,omitempty"`
}

type NodeCondition struct {
	Type   string `json:"type"`   // Ready, MemoryPressure, DiskPressure
	Status string `json:"status"` // True, False, Unknown
}

type NodeDetails struct {
	Name        string            `json:"name"`
	Labels      map[string]string `json:"labels,omitempty"`
	Capacity    ResourceList      `json:"capacity"`
	Allocatable ResourceList      `json:"allocatable"`
	Conditions  []NodeCondition   `json:"conditions,omitempty"`
}

type OwnerChainEntry struct {
	// Namespace of the owner resource (empty for cluster-scoped resources like Node)
	Namespace string `json:"namespace,omitempty"`
	// Kind of the owner resource (e.g., ReplicaSet, Deployment, StatefulSet, DaemonSet)
	Kind string `json:"kind"`
	// Name of the owner resource
	Name string `json:"name"`
}

type PodDetails struct {
	Name              string            `json:"name"`
	Phase             string            `json:"phase"` // Running, Pending, Failed
	Labels            map[string]string `json:"labels,omitempty"`
	Annotations       map[string]string `json:"annotations,omitempty"`
	Containers        []ContainerStatus `json:"containers,omitempty"`
	RestartCount      int32             `json:"restartCount"`
	CreationTimestamp string            `json:"creationTimestamp"`
}

type ResourceList struct {
	CPU    string `json:"cpu"`    // e.g., "4000m"
	Memory string `json:"memory"` // e.g., "16Gi"
}

type SLARequirement string

type ServicePort struct {
	Name       string `json:"name"`
	Port       int32  `json:"port"`
	TargetPort string `json:"targetPort"`
	Protocol   string `json:"protocol"` // TCP, UDP
}

type ServiceSummary struct {
	Name      string        `json:"name"`
	Type      string        `json:"type"` // ClusterIP, NodePort, LoadBalancer
	ClusterIP string        `json:"clusterIP"`
	Ports     []ServicePort `json:"ports,omitempty"`
}

type StructuredDescription struct {
	What          string `json:"what" yaml:"what"`
	WhenToUse     string `json:"whenToUse" yaml:"whenToUse"`
	WhenNotToUse  string `json:"whenNotToUse,omitempty" yaml:"whenNotToUse,omitempty"`
	Preconditions string `json:"preconditions,omitempty" yaml:"preconditions,omitempty"`
}

type WorkloadDetails struct {
	// Resource kind (e.g., "Deployment", "StatefulSet", "Node", "Pod")
	Kind string `json:"kind"`
	// Resource name
	Name string `json:"name"`
	// Resource labels (primary classification input for Rego policies)
	Labels map[string]string `json:"labels,omitempty"`
	// Resource annotations (used by business classifier for kubernaut.ai/ labels)
	Annotations map[string]string `json:"annotations,omitempty"`
}