bootstrap

type Dispatcher struct {
	Engine *Engine

	// Drivers overrides the driver lookup (nil → the package registry,
	// driver.Get) — same seam as provision.Dispatcher.
	Drivers func(name string) (driver.Factory, bool)

	// InventoryPublish is inventory::publish, refreshed after a standalone
	// `lo bootstrap` too (same tail as provision::dispatch — fail-soft,
	// probed: bash only calls it when the inventory lib is loaded, so a
	// nil hook is SKIPPED).
	InventoryPublish func(ctx context.Context, domain, clusterYAML, kubeconfig string)
}

type Engine struct {
	Paths  *config.Paths
	Runner execx.Runner
	Stdout io.Writer
	Stderr io.Writer

	// ApplyOne overrides the per-entry apply (tests stub it exactly like
	// the bats redefine bootstrap::_apply_one). nil → the real applyOne.
	// Returns the entry's exit code (0 ok, non-zero failed).
	ApplyOne func(ctx context.Context, job Job, stdout, stderr io.Writer) int

	// Interactive/Ask are the batched-recreate prompt's tty seams (bash:
	// bootstrap::_interactive / bootstrap::_ask). One place touches
	// /dev/tty, which is what makes the prompt TEXT assertable in a test.
	Interactive func() bool
	Ask         func(prompt string) bool

	// Sleep is the retry/backoff seam (tests install clock.NoSleep). nil =
	// clock.Sleep, which ends with the context.
	Sleep clock.SleepFunc

	// SopsDecrypt decrypts one restore.d/*.sops.yaml in memory (nil → the
	// secrets package's sops library decrypt — NEVER a sops|kubectl pipe).
	SopsDecrypt func(path string) ([]byte, error)
}

type Entry struct {
	// Raw is the compact-JSON entry as resolved (used verbatim in the
	// "addon not found" error, like bash's ${entry}).
	Raw string
	// Name is the entry identity: basename / map-key, or the explicit
	// `name:` override.
	Name string
	// Dir is the resolved addon directory (never changed by `name:`).
	Dir string
	// Inline is the merged inline helm values as YAML ("" when none;
	// "null" for an explicit `values: null`, matching yq -r).
	Inline string
	// EnvLines is the newline-separated KEY=value envsubst overrides
	// ("" when none) — the exact shape bash hands _apply_one.
	EnvLines string
	// Wait marks a global barrier gate (`wait: true`).
	Wait bool
	// Deps are the dependsOn entry names, in order.
	Deps []string
	// Explicit reports whether Name came from an explicit `name:` override
	// (a name collision on it is a hard error, not a tolerated clash).
	Explicit bool
	// Builtin reports a bare framework-addon entry (Dir resolved through
	// internal/assets: the project's .lok8s/addons/<name> when present, else
	// the copy embedded in the binary) as opposed to a cluster-local target
	// or an absolute path.
	Builtin bool
}

type Job struct {
	Name     string
	Dir      string
	Kind     string
	Provider string
	// Kubeconfig is the --kubeconfig path threaded through every kubectl.
	Kubeconfig string
	// Inline is the merged inline helm values ("" when none).
	Inline string
	// Wait is set when the scheduler wants the post-apply readiness wait:
	// a dep-target or a wait-gate. A pure leaf runs without it.
	Wait bool
	// Hosted marks a hosted cluster: the platform owns the CNI and the
	// cloud integration, so those addons are skipped.
	Hosted bool
	// BootstrapOnly is LOK8S_BOOTSTRAP_ONLY=1: the KubeOne driver did not
	// apply cilium/ccm on this run, so the engine reconciles them.
	BootstrapOnly bool
	// EnvLines is the newline-separated KEY=value envsubst overrides.
	EnvLines string
	// Force re-applies under LOK8S_FORCE_RECREATE=1 semantics (the
	// resolve-parked foreground heal).
	Force bool
	// NonInteractive marks a backgrounded apply (bash: the exported
	// LOK8S_NONINTERACTIVE=1 on every concurrent subshell — no shared
	// /dev/tty, so kapply never prompts and never draws).
	NonInteractive bool
}