config

type AI struct {
	Endpoint string            `yaml:"endpoint"`
	APIKey   string            `yaml:"apiKey"`
	Models   map[string]string `yaml:"models"`  // service model id glob → local model
	Timeout  time.Duration     `yaml:"timeout"` // longest one model call; 0 means 5m
}

type AWSIdentities struct {
	Users []User `yaml:"users"`
	Roles []Role `yaml:"roles"`
}

type CORS struct {
	Origins []string `yaml:"origins"`
	Headers []string `yaml:"headers"`
}

type Chaos struct {
	Name    string        `yaml:"name"`
	Cloud   string        `yaml:"cloud"`
	Service string        `yaml:"service"`
	Op      string        `yaml:"op"`
	Region  string        `yaml:"region"`
	Rate    float64       `yaml:"rate"` // 0..1; 0 means always
	Latency time.Duration `yaml:"latency"`
	Status  int           `yaml:"status"`
	Code    string        `yaml:"code"`
	Message string        `yaml:"message"`
}

type Docker struct {
	Host    string            `yaml:"host"`    // empty: auto-detect Docker, Podman, Colima, OrbStack
	Network string            `yaml:"network"` // default "pogi"
	Images  map[string]string `yaml:"images"`  // e.g. rds.postgres: postgres:16-alpine
}

type Email struct {
	SMTPPort int    `yaml:"smtpPort"` // 2525 by default; -1 turns it off
	Relay    string `yaml:"relay"`    // smtp://[user:pass@]host:port
}

type File struct {
	Path       string     `yaml:"-"` // where it was loaded from, for error messages
	Version    int        `yaml:"version"`
	Server     Server     `yaml:"server"`
	Services   Services   `yaml:"services"`
	Storage    Storage    `yaml:"storage"`
	IAM        IAM        `yaml:"iam"`
	Lambda     Lambda     `yaml:"lambda"`
	Docker     Docker     `yaml:"docker"`
	AI         AI         `yaml:"ai"`
	Email      Email      `yaml:"email"`
	Chaos      []Chaos    `yaml:"chaos"`
	Identities Identities `yaml:"identities"`
	Resources  Resources  `yaml:"resources"`
	Stacks     []Stack    `yaml:"stacks"`
}

type IAM struct {
	Mode               string `yaml:"mode"`
	ValidateSignatures bool   `yaml:"validateSignatures"`
}

type Identities struct {
	AWS AWSIdentities `yaml:"aws"`
}

type Item struct {
	Name  string
	Props map[string]any // everything except name
	Line  int
}

type Items []Item

type Lambda struct {
	Executor    string        `yaml:"executor"`
	WarmPool    int           `yaml:"warmPool"`
	InitTimeout time.Duration `yaml:"initTimeout"` // longest a new environment may take to start; 0 means 10s, as on AWS
}

type Resources struct {
	AWS   map[string]map[string]Items `yaml:"aws"`
	GCP   map[string]map[string]Items `yaml:"gcp"`
	Azure map[string]map[string]Items `yaml:"azure"`
	Typed []Typed                     `yaml:"typed"`
}

type Role struct {
	Name     string         `yaml:"name"`
	Account  string         `yaml:"account"`
	Trust    string         `yaml:"trust"`
	Policies []string       `yaml:"policies"`
	Inline   map[string]any `yaml:"inline"`
}

type Server struct {
	Port          int    `yaml:"port"`
	Host          string `yaml:"host"`          // anything but loopback needs AllowExternal
	Region        string `yaml:"region"`        // the partition follows the region (cn-*, us-gov-*)
	Hostname      string `yaml:"hostname"`      // localhost; aws.localhost enables virtual-host style
	TLS           TLS    `yaml:"tls"`           // empty: pogi's local CA
	CORS          CORS   `yaml:"cors"`          // extra origins allowed to call the APIs from a browser
	AllowExternal bool   `yaml:"allowExternal"` // allow a non-loopback Host
	MaxUploadMB   int    `yaml:"maxUploadMB"`   // largest upload in MiB; 0 means 10
}

type Services struct {
	Enable  []string `yaml:"enable"`
	Disable []string `yaml:"disable"`
}

type Stack struct {
	Name       string            `yaml:"name"`
	Template   string            `yaml:"template"` // path, relative to the config file
	Parameters map[string]string `yaml:"parameters"`
	Account    string            `yaml:"account"`
	Region     string            `yaml:"region"`
	Line       int               `yaml:"-"`
}

type Storage struct {
	Mode          string            `yaml:"mode"`
	Dir           string            `yaml:"dir"`
	FlushInterval time.Duration     `yaml:"flushInterval"` // hybrid
	Services      map[string]string `yaml:"services"`      // per-service mode
}

type TLS struct {
	Cert string `yaml:"cert"`
	Key  string `yaml:"key"`
}

type Typed struct {
	Type       string         `yaml:"type"`
	Name       string         `yaml:"name"` // optional logical id
	Account    string         `yaml:"account"`
	Region     string         `yaml:"region"`
	Properties map[string]any `yaml:"properties"`
	Line       int            `yaml:"-"`
}

type User struct {
	Name      string         `yaml:"name"`
	Account   string         `yaml:"account"`
	AccessKey string         `yaml:"accessKey"`
	SecretKey string         `yaml:"secretKey"`
	Policies  []string       `yaml:"policies"` // managed policy ARNs
	Inline    map[string]any `yaml:"inline"`   // policy name → policy document
	Groups    []string       `yaml:"groups"`
}