composition

type CompositionEngine struct {
	// contains filtered or unexported fields
}

type CompositionResult struct {
	// EnabledModules in dependency order (deploy first → deploy last).
	EnabledModules []string
	// ModuleSettings maps module name → merged settings (perma + flexible + context override).
	ModuleSettings map[string]map[string]any
	// Warnings are non-fatal issues (e.g., addon requires higher tier).
	Warnings []string
	// Identity holds the resolved identity configuration.
	Identity *IdentityConfig
	// Placement holds the resolved S1 capability bindings (nil for S2/S3
	// placements, which StackKits-OSS does not realize — see Warnings).
	Placement *placement.Result
	// ControlPlaneHandoffs records enabled package/runtime profiles whose
	// realization is intentionally owned by Admin/TechStack rather than the
	// local OSS resolver.
	ControlPlaneHandoffs []ControlPlaneHandoff
}

type ControlPlaneHandoff struct {
	UseCase              string   `json:"useCase" yaml:"useCase"`
	Tool                 string   `json:"tool" yaml:"tool"`
	RuntimeProfile       string   `json:"runtimeProfile" yaml:"runtimeProfile"`
	Realization          string   `json:"realization,omitempty" yaml:"realization,omitempty"`
	Reason               string   `json:"reason" yaml:"reason"`
	ProductMCP           string   `json:"productMcp,omitempty" yaml:"productMcp,omitempty"`
	RequiresControlPlane bool     `json:"requiresControlPlane,omitempty" yaml:"requiresControlPlane,omitempty"`
	RequiresLocalBridge  bool     `json:"requiresLocalBridge,omitempty" yaml:"requiresLocalBridge,omitempty"`
	PlacementModes       []string `json:"placementModes,omitempty" yaml:"placementModes,omitempty"`
	Contexts             []string `json:"contexts,omitempty" yaml:"contexts,omitempty"`
}

type DependencyGraph struct {
	// contains filtered or unexported fields
}

type IdentityConfig struct {
	// AdminEmail is the primary admin user email.
	AdminEmail string
	// AdminPassword is the generated admin password (plaintext, for initial setup only).
	AdminPassword string
	// PocketIDEnabled indicates whether PocketID OIDC provider is enabled.
	PocketIDEnabled bool
	// TinyAuthEnabled indicates whether TinyAuth ForwardAuth is enabled.
	TinyAuthEnabled bool
	// OIDCIssuerURL is the PocketID issuer URL (e.g., https://id.example.com).
	OIDCIssuerURL string
	// OIDCClientID is the generated OAuth2 client ID for TinyAuth→PocketID.
	OIDCClientID string
	// OIDCClientSecret is the generated OAuth2 client secret for TinyAuth→PocketID.
	OIDCClientSecret string
	// TinyAuthOAuthEnabled indicates TinyAuth should use PocketID as OAuth provider.
	TinyAuthOAuthEnabled bool
	// TinyAuthSessionSecret is a random secret for TinyAuth cookie signing.
	TinyAuthSessionSecret string
	// PocketIDAppURL is the external URL of the PocketID instance.
	PocketIDAppURL string
	// SecureCookie is resolved from context (local=false, cloud=true).
	SecureCookie bool
	// AuthMode is the TinyAuth authentication mode.
	AuthMode string
}

type IdentityMetadata struct {
	PocketIDEnabled      bool   `json:"pocketIdEnabled"`
	TinyAuthEnabled      bool   `json:"tinyAuthEnabled"`
	TinyAuthOAuthEnabled bool   `json:"tinyAuthOAuthEnabled"`
	AuthMode             string `json:"authMode,omitempty"`
	OIDCIssuerURL        string `json:"oidcIssuerUrl,omitempty"`
	SecureCookie         bool   `json:"secureCookie"`
}

type Metadata struct {
	SchemaVersion        string                `json:"schemaVersion"`
	StackKit             string                `json:"stackkit,omitempty"`
	InstallMode          string                `json:"installMode,omitempty"`
	PlacementMode        string                `json:"placementMode,omitempty"`
	EnabledModules       []string              `json:"enabledModules,omitempty"`
	Warnings             []string              `json:"warnings,omitempty"`
	ApplicationHandoffs  []ControlPlaneHandoff `json:"applicationHandoffs,omitempty"`
	Identity             *IdentityMetadata     `json:"identity,omitempty"`
	Placement            any                   `json:"placement,omitempty"`
	GeneratedArtifact    string                `json:"generatedArtifact"`
	ManagedBy            string                `json:"managedBy"`
	RuntimeDecisionPath  string                `json:"runtimeDecisionPath"`
	ContainsSecretValues bool                  `json:"containsSecretValues"`
}

type ValidationError struct {
	Module  string
	Message string
}