ownapplication

type AdoptionCheckpoint struct {
	APIVersion            string    `json:"apiVersion"`
	Name                  string    `json:"name"`
	ContainerID           string    `json:"containerId"`
	PlanDigest            string    `json:"planDigest"`
	OperationID           string    `json:"operationId"`
	OriginalRunning       bool      `json:"originalRunning"`
	OriginalRestartPolicy string    `json:"originalRestartPolicy"`
	DataSource            string    `json:"dataSource,omitempty"`
	DataVolume            string    `json:"dataVolume,omitempty"`
	DataDigest            string    `json:"dataDigest,omitempty"`
	Phase                 string    `json:"phase"`
	Error                 string    `json:"error,omitempty"`
	At                    time.Time `json:"at"`
	// RetainUntil ends the --restore-original window of an adopted original.
	RetainUntil time.Time `json:"retainUntil,omitzero"`
}

type AdoptionData struct {
	Source    string `json:"source"`
	MountPath string `json:"mountPath"`
	Volume    string `json:"volume"`
	Measured  bool   `json:"measured"`
	Files     int64  `json:"files,omitempty"`
	Bytes     int64  `json:"bytes,omitempty"`
	FreeBytes int64  `json:"freeBytes,omitempty"`
	Digest    string `json:"digest,omitempty"`
}

type AdoptionHooks struct {
	BeforeCreate  func(contract.Application) error
	AfterMutation func()
}

type AdoptionRequest struct {
	Phase     string // inspect, plan, adopt, verify, restore-original or release-original
	Container string
	// SecretEnv marks further variable names as credentials. Every value is
	// already hidden; a marked name is also classified as a secret.
	SecretEnv     []string
	Name          string
	HTTPPort      int
	NoOutbound    bool
	MemoryMiB     int
	CPUs          float64
	PlanDigest    string
	OperationID   string
	OwnerApproved bool
	// HelperImage is the installed, digest-pinned backup helper that measures,
	// copies and checksums data. Empty only for an offline plan.
	HelperImage  string
	Installation contract.Installation
	// Offline plans against an explicit installation file: no node custody,
	// no secret commitment and no data measurement.
	Offline bool
}

type AdoptionResult struct {
	APIVersion    string                `json:"apiVersion"`
	Phase         string                `json:"phase"`
	ContainerID   string                `json:"containerId"`
	ContainerName string                `json:"containerName"`
	Name          string                `json:"name,omitempty"`
	Admissible    bool                  `json:"admissible"`
	PlanDigest    string                `json:"planDigest,omitempty"`
	Rows          []AdoptionRow         `json:"rows"`
	Application   *contract.Application `json:"application,omitempty"`
	// HiddenKeys names every environment variable whose value moved into
	// secret custody (all non-empty values); SecretKeys the ones classified as
	// credentials by name or --secret-env. Values never appear.
	HiddenKeys []string `json:"hiddenKeys"`
	SecretKeys []string `json:"secretKeys"`
	// Outcome is the machine outcome a control plane notifies on: inspected,
	// planned, refused, adopted, rolled_back, rollback_failed, verified,
	// unhealthy, restored, released.
	Outcome string `json:"outcome"`
	// RetainUntil is the end of the window in which --restore-original
	// returns to the original; the original is never deleted automatically.
	RetainUntil      *time.Time               `json:"retainUntil,omitempty"`
	OutboundInternet bool                     `json:"outboundInternet"`
	PublishedPorts   []contract.PublishedPort `json:"publishedPorts"`
	Data             *AdoptionData            `json:"data,omitempty"`
	// DowntimeSeconds estimates the downtime of the recreation (stop, copy,
	// start); the stability window follows it with the application running.
	DowntimeSeconds int64               `json:"downtimeSeconds,omitempty"`
	ReviewDigest    string              `json:"reviewDigest,omitempty"`
	Checkpoint      *AdoptionCheckpoint `json:"checkpoint,omitempty"`
	OwnApplication  *Result             `json:"ownApplication,omitempty"`
	OriginalState   string              `json:"originalState,omitempty"`
	PortProbes      map[string]string   `json:"portProbes,omitempty"`
	Notice          string              `json:"notice"`
}

type AdoptionRow struct {
	// Code is the stable machine code of the row (docs/APPLICATION_ADOPTION.md
	// "Plan row codes"); Values carries its structured facts. Reason is the
	// English explanation of the same row.
	Code     string            `json:"code"`
	Values   map[string]string `json:"values,omitempty"`
	Field    string            `json:"field"`
	Status   string            `json:"status"`
	Observed string            `json:"observed,omitempty"`
	Adopted  string            `json:"adopted,omitempty"`
	Reason   string            `json:"reason,omitempty"`
	// contains filtered or unexported fields
}

type CheckpointVolume struct {
	LiveName     string `json:"liveName"`
	RollbackName string `json:"rollbackName"`
	Files        int64  `json:"files"`
	Bytes        int64  `json:"bytes"`
	Digest       string `json:"digest"`
}

type DataCheckpoint struct {
	State         string             `json:"state"`
	OperationID   string             `json:"operationId"`
	Image         string             `json:"image"`
	ResolvedImage string             `json:"resolvedImage"`
	HelperImage   string             `json:"helperImage"`
	PlanHash      string             `json:"planHash"`
	Volumes       []CheckpointVolume `json:"volumes"`
	At            time.Time          `json:"at"`
}

type ImageUpdateCheckpoint struct {
	OperationID string   `json:"operationId"`
	Volumes     []string `json:"volumes"`
	// State is planned (dry run) or the recorded checkpoint state: taken,
	// restoring, retained (update verified; the copy stays until discarded or replaced by
	// the next checkpoint), restored, kept (a rollback did not restore it; the
	// copy is the only intact data and blocks new updates) or discarded.
	State string `json:"state"`
	// RetainedBytes is the size of the retained copy on the node.
	RetainedBytes  int64    `json:"retainedBytes,omitempty"`
	RestoreCommand []string `json:"restoreCommand,omitempty"`
	DiscardCommand []string `json:"discardCommand,omitempty"`
}

type ImageUpdateImage struct {
	Image    string `json:"image"`
	Version  string `json:"version,omitempty"`
	Resolved string `json:"resolvedImage,omitempty"`
}

type ImageUpdateRequest struct {
	Name          string
	Tag           string
	AllowMajor    bool
	DryRun        bool
	ResolvedImage string
	OperationID   string
	ReviewDigest  string
	OwnerApproved bool
	HelperImage   string
	PlanHash      string
}

type ImageUpdateResult struct {
	APIVersion   string                 `json:"apiVersion"`
	Name         string                 `json:"name"`
	Outcome      string                 `json:"outcome"`
	Reason       string                 `json:"reasonCode,omitempty"`
	Message      string                 `json:"message,omitempty"`
	TargetCheck  string                 `json:"targetCheck"`
	AllowMajor   bool                   `json:"allowMajor"`
	Prior        ImageUpdateImage       `json:"prior"`
	Target       ImageUpdateImage       `json:"target"`
	ReviewDigest string                 `json:"reviewDigest,omitempty"`
	OperationID  string                 `json:"operationId,omitempty"`
	Checkpoint   *ImageUpdateCheckpoint `json:"checkpoint,omitempty"`
	// ReplacesCheckpoint is the retained copy a tag update's dry run will
	// replace once its own checkpoint reads back: its state and size.
	ReplacesCheckpoint *ImageUpdateCheckpoint `json:"replacesCheckpoint,omitempty"`
	Update             *Result                `json:"update,omitempty"`
	Rollback           *Result                `json:"rollback,omitempty"`
}

type Operation struct {
	Firewall       *ownappfirewall.Receipt `json:"firewall,omitempty"`
	FirewallAction string                  `json:"firewallAction,omitempty"`
	ID             string                  `json:"id"`
	Action         string                  `json:"action"`
	RequestDigest  string                  `json:"requestDigest"`
	ReviewDigest   string                  `json:"reviewDigest"`
	Status         string                  `json:"status"`
	At             time.Time               `json:"at"`
}

type Record struct {
	TransitionFrom        *contract.Bundle `json:"transitionFrom,omitempty"`
	SecretsKept           bool             `json:"secretsKept,omitempty"`
	Generation            string           `json:"generation"`
	Bundle                contract.Bundle  `json:"bundle"`
	PreviousImage         string           `json:"previousImage,omitempty"`
	PreviousResolvedImage string           `json:"previousResolvedImage,omitempty"`
	// PreviousImages and PreviousResolvedImages carry the rollback custody of a
	// project, keyed by service name.
	PreviousImages         map[string]string `json:"previousImages,omitempty"`
	PreviousResolvedImages map[string]string `json:"previousResolvedImages,omitempty"`
	State                  string            `json:"state"`
	// Checkpoint is the data checkpoint of the latest tag update; its retained
	// copies stay until a later checkpoint or a data-deleting removal.
	Checkpoint *DataCheckpoint `json:"checkpoint,omitempty"`
	Revision   string          `json:"revision"`
	Operation  Operation       `json:"operation"`
}

type Request struct {
	Action           string                `json:"action"`
	Name             string                `json:"name"`
	Application      *contract.Application `json:"application,omitempty"`
	KeepSecrets      bool                  `json:"keepSecrets,omitempty"`
	ResolvedImage    string                `json:"resolvedImage,omitempty"`
	ResolvedImages   map[string]string     `json:"resolvedImages,omitempty"`
	SecretMaterial   map[string]string     `json:"-"`
	SecretCommitment string                `json:"secretCommitment,omitempty"`
	DeleteData       bool                  `json:"deleteData,omitempty"`
	OperationID      string                `json:"operationId,omitempty"`
	ReviewDigest     string                `json:"reviewDigest,omitempty"`
	DryRun           bool                  `json:"dryRun,omitempty"`
	OwnerApproved    bool                  `json:"-"`
	// ImageTag and AllowMajor name a tag update (UpdateImage); Checkpoint names
	// the data checkpoint a rollback restores (RollbackWithCheckpoint). Each is
	// part of the request and so of the review digest.
	ImageTag   string `json:"imageTag,omitempty"`
	AllowMajor bool   `json:"allowMajor,omitempty"`
	Checkpoint string `json:"checkpoint,omitempty"`
}

type Result struct {
	FirewallRulesetDigest string                 `json:"firewallRulesetDigest,omitempty"`
	FirewallPolicyDigest  string                 `json:"firewallPolicyDigest,omitempty"`
	APIVersion            string                 `json:"apiVersion"`
	NetworkNotice         string                 `json:"networkNotice"`
	Action                string                 `json:"action"`
	DryRun                bool                   `json:"dryRun"`
	ReviewDigest          string                 `json:"reviewDigest,omitempty"`
	Record                Record                 `json:"record"`
	Compose               string                 `json:"compose,omitempty"`
	Route                 *accessgatetable.Route `json:"route,omitempty"`
	BackupVolumes         []string               `json:"backupVolumes"`
	Observation           json.RawMessage        `json:"observation,omitempty"`
	ObservationError      string                 `json:"observationError,omitempty"`
	// Outcome is the stable outcome code of this call: reviewed (dry run or
	// render), observed or observation_unavailable (status, logs), and for an
	// executed mutation created, updated, rolled_back, started, stopped,
	// restarted or removed. A refused, pending or denied call carries that
	// outcome with a stable reasonCode and the message in reason (OutcomeFor).
	Outcome    string `json:"outcome,omitempty"`
	ReasonCode string `json:"reasonCode,omitempty"`
	Reason     string `json:"reason,omitempty"`
}

type State struct {
	APIVersion   string                                        `json:"apiVersion"`
	Applications map[string]Record                             `json:"applications"`
	Signature    localevidence.OwnerLifecycleMutationSignature `json:"signature"`
}