activities

type AgentActivities struct {
	// Tunnel is the agent's gRPC connection to the FallBCK server (carrying its bearer
	// token); PBS backup sessions are opened through it.
	Tunnel grpc.ClientConnInterface
	// Workers bounds concurrent chunk uploads (0 = default)
	Workers int
	// Credentials fetches PBS connection details for jobs in direct mode
	// (GET /api/v1/agents/pbs-credentials with the run's ticket)
	Credentials func(ctx context.Context, ticket string) (*backup.DirectOptions, error)
	// EncryptionKey fetches the target's client-side encryption key for a run
	// (GET /api/v1/agents/encryption-key with the run's ticket)
	EncryptionKey KeyFetcher
	// RefreshTicket re-issues the run's ticket with a fresh snapshot timestamp for
	// retries (POST /api/v1/agents/ticket/refresh); nil keeps the session's timestamp
	RefreshTicket TicketRefreshFunc
	// LogTail returns the agent's recent log output, attached to failures
	LogTail func() string
	// ReportProgress posts live phase updates to the server (best-effort)
	ReportProgress ProgressFunc
	// SpoolDir stages collected data for Proxmox VE and Docker host backups (<data dir>/spool)
	SpoolDir string
	// Docker is the agent's docker_backup settings block (socket, volume access, helper image)
	Docker dockerspec.Config
	// M365Credentials fetches the tenant credentials of a Microsoft 365 job
	// (GET /api/v1/agents/m365-credentials with the run's ticket)
	M365Credentials func(ctx context.Context, ticket string) (*m365.Credentials, error)
	// SubTicket mints the ticket of one unit snapshot of a run (POST
	// /api/v1/agents/sub-ticket): the unit's group must extend the run's group
	SubTicket func(ctx context.Context, sessionTicket, group string) (ticket string, backupTime int64, err error)
	// M365StateDir holds the per-job unit indexes of Microsoft 365 jobs (<data dir>/m365-state)
	M365StateDir string
	// CacheDir holds the per-group metadata caches for change detection
	// (<data dir>/pxar-cache); empty disables change detection
	CacheDir string
	// VSSDir enables Volume Shadow Copies on Windows: paths are read through
	// shadow copies linked under this directory; empty reads the live filesystem
	VSSDir   string
	Hostname string
	Version  string
}

type AgentOpsActivities struct {
	// LogTail returns the agent's recent log output (the in-memory ring)
	LogTail func() string
	// LogLevel names the current log level for the logs answer
	LogLevel func() string
	// Detail builds the full inventory (nil: only the summary parts are known)
	Detail func(ctx context.Context) *inventory.Detail
}

type DBAgentActivities struct {
	// Tunnel is the agent's gRPC connection to the FallBCK server (PBS sessions)
	Tunnel grpc.ClientConnInterface
	// Workers bounds concurrent chunk uploads (0 = default)
	Workers int
	// Credentials fetches PBS connection details for jobs in direct mode
	Credentials func(ctx context.Context, ticket string) (*backup.DirectOptions, error)
	// EncryptionKey fetches the target's client-side encryption key for a run
	// (GET /api/v1/agents/encryption-key with the run's ticket)
	EncryptionKey KeyFetcher
	// DBPassword fetches the server-stored database password for a run
	DBPassword func(ctx context.Context, ticket string) (string, error)
	// RefreshTicket re-issues the run's ticket with a fresh snapshot timestamp for
	// retries; nil keeps the session's timestamp
	RefreshTicket TicketRefreshFunc
	// Config is the agent's db_backup configuration (defaults applied)
	Config   dbbackup.Config
	Hostname string
	Version  string
	// LogTail returns the agent's recent log output, attached to failures
	LogTail func() string
	// ReportProgress posts live phase updates to the server (best-effort)
	ReportProgress ProgressFunc
}

type K8sAgentActivities struct {
	// Tunnel is the agent's gRPC connection to the FallBCK server (resources upload)
	Tunnel grpc.ClientConnInterface
	// Clients are the in-cluster API clients
	Clients *k8sagent.Clients
	// Config supplies the server URL / TLS settings handed to worker pods
	Config      *config.AgentConfig
	ClusterName string
	// AgentNamespace is the namespace the agent pod runs in
	AgentNamespace string
	Version        string
	// Worker pod parameters (from the Helm chart)
	WorkerImage               string
	WorkerImagePullPolicy     string
	WorkerResourcesJSON       string
	WorkerSecurityContextJSON string
	// WorkerMaxProcs bounds gopbs concurrency (GOMAXPROCS) inside worker pods; 0 = 2
	WorkerMaxProcs int
	// Credentials fetches PBS connection details for jobs in direct mode
	Credentials func(ctx context.Context, ticket string) (*backup.DirectOptions, error)
	// EncryptionKey fetches the target's client-side encryption key for a run
	// (GET /api/v1/agents/encryption-key with the run's ticket)
	EncryptionKey KeyFetcher
	// VolumeTicket mints a per-volume backup ticket from the session ticket; the
	// returned snapshot timestamp is the one embedded in the ticket (fresh per attempt)
	VolumeTicket func(ctx context.Context, sessionTicket, volumeBackupID string) (ticket string, backupTime int64, err error)
	// WorkerToken mints a short-lived agent bearer for worker pods
	WorkerToken func(ctx context.Context, sessionTicket string) (string, time.Time, error)
	// RefreshTicket re-issues the session ticket with a fresh snapshot timestamp when
	// the resources upload is retried; nil keeps the session's timestamp
	RefreshTicket TicketRefreshFunc
	// Database jobs assigned to this agent (dump pods): DBPassword fetches the job's
	// server-stored password; the per-engine image templates, pod resources/security
	// context and spool size come from the Helm chart; StateSecretName holds the
	// per-job chain state in the agent namespace
	DBPassword                  func(ctx context.Context, ticket string) (string, error)
	DBWorkerImages              map[string]string
	DBWorkerResourcesJSON       string
	DBWorkerSecurityContextJSON string
	DBWorkerSpoolSize           string
	StateSecretName             string
	// SpoolDir stages the resource dump (default <data dir>/spool)
	SpoolDir string
	// LogTail returns the agent's recent log output, attached to failures
	LogTail func() string
	// ReportProgress posts live phase / per-PVC updates to the server (best-effort)
	ReportProgress ProgressFunc

	// Runs tracks in-flight run ids for the orphan sweep. It lives in a named field:
	// worker.RegisterActivity(struct) validates every exported *method* of the struct,
	// so helpers must not be methods on K8sAgentActivities.
	Runs *RunTracker
	// contains filtered or unexported fields
}

type KeyFetcher = func(ctx context.Context, ticket string) (*backup.Encryption, error)

type ProgressFunc func(ctx context.Context, ticket string, runID uuid.UUID, phase string, items map[string]rundetail.ProgressItem) error

type RunTracker struct {
	// contains filtered or unexported fields
}

type ServerActivities struct {
	DB           *db.DB
	Config       *config.ServerConfig
	TokenManager *auth.TokenManager
}

type TicketRefreshFunc func(ctx context.Context, ticket string) (ticket2 string, backupTime int64, err error)