declarative

type Action string

type ApplicationSpec struct {
	Image     string            `yaml:"image" json:"image"`
	Tag       string            `yaml:"tag,omitempty" json:"tag,omitempty"`
	Digest    string            `yaml:"digest,omitempty" json:"digest,omitempty"` // sha256:… (immutable pin)
	Command   []string          `yaml:"command,omitempty" json:"command,omitempty"`
	Ports     []PortSpec        `yaml:"ports,omitempty" json:"ports,omitempty"`
	Env       map[string]string `yaml:"env,omitempty" json:"env,omitempty"`
	SecretEnv []string          `yaml:"secretEnv,omitempty" json:"secretEnv,omitempty"`
	Mounts    []MountSpec       `yaml:"mounts,omitempty" json:"mounts,omitempty"`
	Resources *ResourceSpec     `yaml:"resources,omitempty" json:"resources,omitempty"`
	// ContainerLabels are user-defined Docker labels stamped on the app's
	// container(s) — for label-driven tools like Traefik. Reserved keys
	// (io.miabi.*, com.docker.*) are stripped on apply (a manifest is
	// machine-authored, so import is fail-soft rather than erroring).
	ContainerLabels map[string]string `yaml:"containerLabels,omitempty" json:"containerLabels,omitempty"`
	// Stack optionally names the owning Stack resource.
	Stack string `yaml:"stack,omitempty" json:"stack,omitempty"`
	// ExternalLabel pins the subdomain used for external access
	// (`<label>.<base-domain>`). Optional — when unset Miabi generates a
	// stable label; pinning it keeps the public URL deterministic across applies.
	// The label is platform-wide unique: if it is already claimed by another app,
	// it is ignored and a generated label is used instead (the apply still
	// succeeds), so a copy-pasted manifest never fails on a label clash.
	ExternalLabel string `yaml:"externalLabel,omitempty" json:"externalLabel,omitempty"`
}

type Change struct {
	Action Action      `json:"action"`
	Kind   Kind        `json:"kind"`
	Name   string      `json:"name"`
	Reason string      `json:"reason,omitempty"`
	Fields []FieldDiff `json:"fields,omitempty"`
}

type ConnView struct {
	Host     string
	Port     string
	User     string
	Password string
	Name     string
	URI      string
}

type DatabaseSpec struct {
	Engine    string `yaml:"engine" json:"engine"`                       // postgres|mysql|mariadb|redis
	Version   string `yaml:"version,omitempty" json:"version,omitempty"` // e.g. "16-alpine"
	Placement string `yaml:"placement,omitempty" json:"placement,omitempty"`
}

type DomainSpec struct {
	TLS      string `yaml:"tls,omitempty" json:"tls,omitempty"` // acme|custom (default acme)
	Wildcard bool   `yaml:"wildcard,omitempty" json:"wildcard,omitempty"`
}

type Edge struct {
	From string   `json:"from"`
	To   string   `json:"to"`
	Type EdgeType `json:"type"`
}

type EdgeType string

type FieldDiff struct {
	Field string `json:"field"`
	From  string `json:"from"`
	To    string `json:"to"`
}

type Kind string

type Meta struct {
	Name string `yaml:"name" json:"name"`
	// UID is the resource's portable identifier (its Miabi uid). Written on
	// export so a restore into another install — or a rename in a manifest — keeps
	// identity. Optional in hand-authored manifests; matched ahead of name when set.
	UID         string            `yaml:"uid,omitempty" json:"uid,omitempty"`
	Labels      map[string]string `yaml:"labels,omitempty" json:"labels,omitempty"`
	Annotations map[string]string `yaml:"annotations,omitempty" json:"annotations,omitempty"`
}

type MountSpec struct {
	Volume   string `yaml:"volume" json:"volume"`
	Path     string `yaml:"path" json:"path"`
	ReadOnly bool   `yaml:"readOnly,omitempty" json:"readOnly,omitempty"`
}

type Plan struct {
	Changes []Change `json:"changes"`
}

type PlanOptions struct {
	// Prune emits deletes for actual resources absent from desired.
	Prune bool
	// PruneManagedBy, when non-empty, restricts prune to actual resources whose
	// LabelManagedBy label equals it — so a GitOps prune never deletes a
	// hand-created or otherwise-owned resource. Empty prunes any orphan.
	PruneManagedBy string
	// PruneGitOpsSource, when non-empty, restricts prune to actual resources whose
	// LabelGitOpsSource label equals it — so one GitOps project's reconcile only
	// prunes its own resources and never another project's (which live in the same
	// workspace snapshot). Empty leaves prune unscoped by source. Resources without
	// a source label (e.g. hand-created or pre-labeling) are never matched, so a
	// scoped prune never deletes them.
	PruneGitOpsSource string
	// IncludeNoop keeps in-sync resources in the plan (useful for status views).
	IncludeNoop bool
}

type PortSpec struct {
	Container int    `yaml:"container" json:"container"`
	Protocol  string `yaml:"protocol,omitempty" json:"protocol,omitempty"` // tcp|udp (default tcp)
	Scheme    string `yaml:"scheme,omitempty" json:"scheme,omitempty"`     // http|https (default http)
	// ExternalAccess publishes this port on `<externalLabel>.<base-domain>` over
	// HTTPS via the reverse proxy (the base domain must be configured platform-wide).
	ExternalAccess bool `yaml:"externalAccess,omitempty" json:"externalAccess,omitempty"`
	// Publish binds this container port to a host port on the node (raw TCP/UDP).
	// HostPort requests a specific host port; 0 auto-allocates from the pool.
	Publish  bool `yaml:"publish,omitempty" json:"publish,omitempty"`
	HostPort int  `yaml:"hostPort,omitempty" json:"hostPort,omitempty"`
}

type ProjectSpec struct {
	Description string     `yaml:"description,omitempty" json:"description,omitempty"`
	Resources   []Resource `yaml:"-" json:"resources,omitempty"`
}

type RenderContext struct {
	Inputs    map[string]string
	Databases map[string]ConnView
	Apps      map[string]string // app name -> network alias
	Secrets   map[string]string // secret name -> value
}

type Renderer struct {
	// contains filtered or unexported fields
}

type Resource struct {
	APIVersion string `yaml:"apiVersion" json:"apiVersion"`
	Kind       Kind   `yaml:"kind" json:"kind"`
	Metadata   Meta   `yaml:"metadata" json:"metadata"`

	Application *ApplicationSpec `yaml:"-" json:"application,omitempty"`
	Stack       *StackSpec       `yaml:"-" json:"stack,omitempty"`
	Database    *DatabaseSpec    `yaml:"-" json:"database,omitempty"`
	Volume      *VolumeSpec      `yaml:"-" json:"volume,omitempty"`
	Route       *RouteSpec       `yaml:"-" json:"route,omitempty"`
	Secret      *SecretSpec      `yaml:"-" json:"secret,omitempty"`
	Domain      *DomainSpec      `yaml:"-" json:"domain,omitempty"`
	Project     *ProjectSpec     `yaml:"-" json:"project,omitempty"`
}

type ResourceSet struct {
	// contains filtered or unexported fields
}

type ResourceSpec struct {
	Memory string `yaml:"memory,omitempty" json:"memory,omitempty"` // e.g. "512Mi"
	CPU    string `yaml:"cpu,omitempty" json:"cpu,omitempty"`       // e.g. "0.5"
	// GPU is the number of whole GPU units the app requests (0 = none). GPUKind
	// narrows the request to a vendor/model ("nvidia", "NVIDIA A100-…").
	GPU     int    `yaml:"gpu,omitempty" json:"gpu,omitempty"`
	GPUKind string `yaml:"gpuKind,omitempty" json:"gpuKind,omitempty"`
}

type RouteSpec struct {
	Hosts []string `yaml:"hosts" json:"hosts"`
	App   string   `yaml:"app" json:"app"` // target application name
	Port  int      `yaml:"port,omitempty" json:"port,omitempty"`
	Path  string   `yaml:"path,omitempty" json:"path,omitempty"`
	TLS   string   `yaml:"tls,omitempty" json:"tls,omitempty"` // acme|custom|off (default acme)
}

type SecretSpec struct {
	Value    string `yaml:"value,omitempty" json:"value,omitempty"`
	Generate bool   `yaml:"generate,omitempty" json:"generate,omitempty"`
	Length   int    `yaml:"length,omitempty" json:"length,omitempty"`
}

type StackSpec struct {
	Description string `yaml:"description,omitempty" json:"description,omitempty"`
}

type VolumeSpec struct {
	Size string `yaml:"size,omitempty" json:"size,omitempty"` // e.g. "5Gi" (0/empty = unbounded)
}