spec

type APIGatewayAPI struct {
	// Name of the API
	Name string `json:"name"`

	// Type (REST, HTTP, WebSocket)
	Type string `json:"type,omitempty"`
}

type AWSResources struct {
	// RDS instances
	RDS []RDSInstance `json:"rds,omitempty"`

	// DynamoDB tables
	DynamoDB []DynamoDBTable `json:"dynamodb,omitempty"`

	// SQS queues
	SQS []SQSQueue `json:"sqs,omitempty"`

	// SNS topics
	SNS []SNSTopic `json:"sns,omitempty"`

	// S3 buckets
	S3 []S3Bucket `json:"s3,omitempty"`

	// Bedrock models
	Bedrock []BedrockModel `json:"bedrock,omitempty"`

	// Lambda functions
	Lambda []LambdaFunction `json:"lambda,omitempty"`

	// ElastiCache clusters (Redis/Memcached)
	ElastiCache []ElastiCacheCluster `json:"elasticache,omitempty"`

	// Kinesis streams
	Kinesis []KinesisStream `json:"kinesis,omitempty"`

	// EventBridge event buses
	EventBridge []EventBridgeBus `json:"eventbridge,omitempty"`

	// SecretsManager secrets
	SecretsManager []SecretsManagerSecret `json:"secretsmanager,omitempty"`

	// API Gateway APIs
	APIGateway []APIGatewayAPI `json:"apigateway,omitempty"`

	// CloudFront distributions
	CloudFront []CloudFrontDistribution `json:"cloudfront,omitempty"`

	// VPC binding
	VPC string `json:"vpc,omitempty"`

	// Subnets
	Subnets []string `json:"subnets,omitempty"`

	// SecurityGroups
	SecurityGroups []string `json:"securityGroups,omitempty"`
}

type AzureFunction struct {
	// Name of the function app
	Name string `json:"name"`

	// Runtime (e.g., "dotnet", "node", "python", "java")
	Runtime string `json:"runtime,omitempty"`
}

type AzureKeyVault struct {
	// Name of the vault
	Name string `json:"name"`
}

type AzureRedisCache struct {
	// Name of the cache
	Name string `json:"name"`

	// Port number
	Port int `json:"port,omitempty"`
}

type AzureResources struct {
	// CosmosDB accounts
	CosmosDB []CosmosDBAccount `json:"cosmosdb,omitempty"`

	// ServiceBus namespaces
	ServiceBus []ServiceBusNamespace `json:"servicebus,omitempty"`

	// BlobStorage accounts
	BlobStorage []BlobStorageAccount `json:"blobstorage,omitempty"`

	// Functions apps
	Functions []AzureFunction `json:"functions,omitempty"`

	// RedisCache instances
	RedisCache []AzureRedisCache `json:"rediscache,omitempty"`

	// KeyVault instances
	KeyVault []AzureKeyVault `json:"keyvault,omitempty"`

	// EventHubs namespaces
	EventHubs []EventHubsNamespace `json:"eventhubs,omitempty"`

	// SQLDatabase instances
	SQLDatabase []AzureSQLDatabase `json:"sqldatabase,omitempty"`

	// VNet binding
	VNet string `json:"vnet,omitempty"`

	// Subnets
	Subnets []string `json:"subnets,omitempty"`
}

type AzureSQLDatabase struct {
	// Name of the database
	Name string `json:"name"`

	// Server name
	Server string `json:"server,omitempty"`

	// Port number
	Port int `json:"port,omitempty"`
}

type BedrockModel struct {
	// ModelID is the Bedrock model identifier
	ModelID string `json:"modelId"`
}

type BigQueryDataset struct {
	// Name of the dataset
	Name string `json:"name"`
}

type BlobStorageAccount struct {
	// Name of the storage account
	Name string `json:"name"`

	// Containers in this account
	Containers []string `json:"containers,omitempty"`
}

type CassandraCluster struct {
	// Name of the cluster
	Name string `json:"name"`

	// Contact points (comma-separated hosts)
	ContactPoints string `json:"contactPoints,omitempty"`

	// Port number (default: 9042)
	Port int `json:"port,omitempty"`

	// Keyspace
	Keyspace string `json:"keyspace,omitempty"`
}

type CloudFrontDistribution struct {
	// ID of the distribution
	ID string `json:"id"`

	// Domain name
	Domain string `json:"domain,omitempty"`
}

type CloudFunction struct {
	// Name of the function
	Name string `json:"name"`

	// Runtime (e.g., "go121", "python311", "nodejs18")
	Runtime string `json:"runtime,omitempty"`
}

type CloudRunService struct {
	// Name of the service
	Name string `json:"name"`

	// Region where deployed
	Region string `json:"region,omitempty"`
}

type CloudSQLInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// DatabaseType (mysql, postgres)
	DatabaseType string `json:"databaseType,omitempty"`
}

type CloudflareD1 struct {
	// Name of the database
	Name string `json:"name"`
}

type CloudflareDurableObject struct {
	// Name of the Durable Object class
	Name string `json:"name"`
}

type CloudflareKV struct {
	// Name of the KV namespace
	Name string `json:"name"`
}

type CloudflareQueue struct {
	// Name of the queue
	Name string `json:"name"`
}

type CloudflareResources struct {
	// Zone is the DNS zone
	Zone string `json:"zone,omitempty"`

	// Workers lists Cloudflare Workers
	Workers []CloudflareWorker `json:"workers,omitempty"`

	// R2Buckets lists R2 storage buckets
	R2Buckets []R2Bucket `json:"r2Buckets,omitempty"`

	// KV lists KV namespaces
	KV []CloudflareKV `json:"kv,omitempty"`

	// D1 lists D1 databases
	D1 []CloudflareD1 `json:"d1,omitempty"`

	// Queues lists Cloudflare Queues
	Queues []CloudflareQueue `json:"queues,omitempty"`

	// DurableObjects lists Durable Object namespaces
	DurableObjects []CloudflareDurableObject `json:"durableObjects,omitempty"`
}

type CloudflareWorker struct {
	// Name of the worker
	Name string `json:"name"`

	// Route pattern
	Route string `json:"route,omitempty"`
}

type Connection struct {
	// Port is the target port number
	Port int `json:"port"`

	// Protocol is the connection protocol (http, grpc, tcp, sql, amqp, redis)
	Protocol string `json:"protocol"`

	// Description explains the purpose of this connection
	Description string `json:"description,omitempty"`
}

type ConsulInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// Address (e.g., "consul.example.com:8500")
	Address string `json:"address,omitempty"`
}

type ContainerImage struct {
	// Name is the image name without tag (e.g., "nginx", "ghcr.io/org/app")
	Name string `json:"name"`

	// Tag is the image tag (e.g., "v1.2.3", "latest")
	Tag string `json:"tag,omitempty"`

	// Digest is the image digest for pinning (e.g., "sha256:abc123...")
	Digest string `json:"digest,omitempty"`
}

type CosmosDBAccount struct {
	// Name of the account
	Name string `json:"name"`

	// API type (sql, mongodb, cassandra, gremlin, table)
	API string `json:"api,omitempty"`
}

type Deployments struct {
	// Helm maps helm release name to helm chart reference
	Helm map[string]HelmDeployment `json:"helm,omitempty"`

	// Terraform maps terraform module name to terraform reference
	Terraform map[string]TerraformDeployment `json:"terraform,omitempty"`
}

type DynamoDBTable struct {
	// Name of the table
	Name string `json:"name"`
}

type ElastiCacheCluster struct {
	// Name of the cluster
	Name string `json:"name"`

	// Engine (redis, memcached)
	Engine string `json:"engine,omitempty"`

	// Port number
	Port int `json:"port,omitempty"`
}

type ElasticsearchCluster struct {
	// Name of the cluster
	Name string `json:"name"`

	// Host address
	Host string `json:"host,omitempty"`

	// Port number (default: 9200)
	Port int `json:"port,omitempty"`
}

type Endpoint struct {
	// Port number
	Port int `json:"port"`

	// Protocol (http, grpc, tcp)
	Protocol string `json:"protocol"`

	// Description of the endpoint
	Description string `json:"description,omitempty"`
}

type EtcdCluster struct {
	// Name of the cluster
	Name string `json:"name"`

	// Endpoints (comma-separated)
	Endpoints string `json:"endpoints,omitempty"`
}

type EventBridgeBus struct {
	// Name of the event bus
	Name string `json:"name"`
}

type EventHubsNamespace struct {
	// Name of the namespace
	Name string `json:"name"`

	// Hubs in this namespace
	Hubs []string `json:"hubs,omitempty"`
}

type FirestoreDatabase struct {
	// Name of the database (default: "(default)")
	Name string `json:"name"`
}

type GCPResources struct {
	// CloudSQL instances
	CloudSQL []CloudSQLInstance `json:"cloudsql,omitempty"`

	// PubSub topics
	PubSub []PubSubTopic `json:"pubsub,omitempty"`

	// GCS buckets
	GCS []GCSBucket `json:"gcs,omitempty"`

	// CloudRun services
	CloudRun []CloudRunService `json:"cloudrun,omitempty"`

	// CloudFunctions
	CloudFunctions []CloudFunction `json:"cloudfunctions,omitempty"`

	// Memorystore instances (Redis)
	Memorystore []MemorystoreInstance `json:"memorystore,omitempty"`

	// BigQuery datasets
	BigQuery []BigQueryDataset `json:"bigquery,omitempty"`

	// SecretManager secrets
	SecretManager []GCPSecret `json:"secretmanager,omitempty"`

	// Firestore databases
	Firestore []FirestoreDatabase `json:"firestore,omitempty"`

	// Spanner instances
	Spanner []SpannerInstance `json:"spanner,omitempty"`

	// VPC network
	VPCNetwork string `json:"vpcNetwork,omitempty"`
}

type GCPSecret struct {
	// Name of the secret
	Name string `json:"name"`
}

type GCSBucket struct {
	// Name of the bucket
	Name string `json:"name"`
}

type GenericResources struct {
	// Redis instances
	Redis []RedisInstance `json:"redis,omitempty"`

	// Kafka clusters
	Kafka []KafkaCluster `json:"kafka,omitempty"`

	// Elasticsearch clusters
	Elasticsearch []ElasticsearchCluster `json:"elasticsearch,omitempty"`

	// MongoDB instances
	MongoDB []MongoDBInstance `json:"mongodb,omitempty"`

	// PostgreSQL databases
	PostgreSQL []PostgreSQLDatabase `json:"postgresql,omitempty"`

	// MySQL databases
	MySQL []MySQLDatabase `json:"mysql,omitempty"`

	// RabbitMQ instances
	RabbitMQ []RabbitMQInstance `json:"rabbitmq,omitempty"`

	// Cassandra clusters
	Cassandra []CassandraCluster `json:"cassandra,omitempty"`

	// Memcached instances
	Memcached []MemcachedInstance `json:"memcached,omitempty"`

	// Minio (S3-compatible) instances
	Minio []MinioInstance `json:"minio,omitempty"`

	// NATS servers
	NATS []NATSServer `json:"nats,omitempty"`

	// etcd clusters
	Etcd []EtcdCluster `json:"etcd,omitempty"`

	// Vault (HashiCorp) instances
	Vault []VaultInstance `json:"vault,omitempty"`

	// Consul instances
	Consul []ConsulInstance `json:"consul,omitempty"`
}

type GitRepo struct {
	// URL is the full repository URL (e.g., "https://github.com/org/repo")
	URL string `json:"url"`

	// Path is the relative path within the repo (for monorepos)
	Path string `json:"path,omitempty"`

	// Ref is the git reference (branch, tag, or commit)
	Ref string `json:"ref,omitempty"`

	// Commit is the specific commit SHA (for pinning)
	Commit string `json:"commit,omitempty"`
}

type HelmDeployment struct {
	// Chart is the chart name or URL
	Chart string `json:"chart"`

	// Version is the chart version
	Version string `json:"version,omitempty"`

	// Repo is the Helm repository URL
	Repo string `json:"repo,omitempty"`

	// ValuesFile is the path to values file (relative to system spec)
	ValuesFile string `json:"valuesFile,omitempty"`

	// Services lists which services this chart deploys
	Services []string `json:"services,omitempty"`
}

type KafkaCluster struct {
	// Name of the cluster
	Name string `json:"name"`

	// Bootstrap servers (comma-separated)
	BootstrapServers string `json:"bootstrapServers,omitempty"`
}

type KinesisStream struct {
	// Name of the stream
	Name string `json:"name"`
}

type LambdaFunction struct {
	// Name of the function
	Name string `json:"name"`

	// Runtime (e.g., "go1.x", "python3.9", "nodejs18.x")
	Runtime string `json:"runtime,omitempty"`
}

type MemcachedInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// Host address
	Host string `json:"host,omitempty"`

	// Port number (default: 11211)
	Port int `json:"port,omitempty"`
}

type MemorystoreInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// Port number
	Port int `json:"port,omitempty"`
}

type MinioInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// Endpoint URL
	Endpoint string `json:"endpoint,omitempty"`

	// Buckets
	Buckets []string `json:"buckets,omitempty"`
}

type MongoDBInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// Host address
	Host string `json:"host,omitempty"`

	// Port number (default: 27017)
	Port int `json:"port,omitempty"`

	// Database name
	Database string `json:"database,omitempty"`
}

type MySQLDatabase struct {
	// Name of the database
	Name string `json:"name"`

	// Host address
	Host string `json:"host,omitempty"`

	// Port number (default: 3306)
	Port int `json:"port,omitempty"`
}

type NATSServer struct {
	// Name of the server
	Name string `json:"name"`

	// URL (e.g., "nats://localhost:4222")
	URL string `json:"url,omitempty"`
}

type Network struct {
	// Description of the network
	Description string `json:"description,omitempty"`

	// CIDR block for the network
	CIDR string `json:"cidr,omitempty"`

	// Rules defines firewall/security group rules
	Rules []NetworkRule `json:"rules,omitempty"`
}

type NetworkRule struct {
	// Direction is "inbound" or "outbound"
	Direction string `json:"direction"`

	// FromService is the source service (for inbound rules)
	FromService string `json:"fromService,omitempty"`

	// ToService is the target service (for outbound rules)
	ToService string `json:"toService,omitempty"`

	// Port number
	Port int `json:"port"`

	// Protocol (tcp, udp)
	Protocol string `json:"protocol"`

	// Action is "allow" or "deny"
	Action string `json:"action"`
}

type Owner struct {
	// Name is the display name (e.g., "Payments Team")
	Name string `json:"name"`

	// Email is the team contact email
	Email string `json:"email,omitempty"`

	// Slack is the Slack channel or handle (e.g., "#payments-eng")
	Slack string `json:"slack,omitempty"`

	// Pager is the PagerDuty/Opsgenie service or escalation policy ID
	Pager string `json:"pager,omitempty"`
}

type PostgreSQLDatabase struct {
	// Name of the database
	Name string `json:"name"`

	// Host address
	Host string `json:"host,omitempty"`

	// Port number (default: 5432)
	Port int `json:"port,omitempty"`
}

type PubSubTopic struct {
	// Name of the topic
	Name string `json:"name"`
}

type R2Bucket struct {
	// Name of the bucket
	Name string `json:"name"`
}

type RDSInstance struct {
	// Name or identifier of the RDS instance
	Name string `json:"name"`

	// Engine (mysql, postgres, aurora-mysql, etc.)
	Engine string `json:"engine,omitempty"`

	// Port number
	Port int `json:"port,omitempty"`
}

type RabbitMQInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// Host address
	Host string `json:"host,omitempty"`

	// Port number (default: 5672)
	Port int `json:"port,omitempty"`

	// Vhost
	Vhost string `json:"vhost,omitempty"`
}

type RedisInstance struct {
	// Name or identifier
	Name string `json:"name"`

	// Host address
	Host string `json:"host,omitempty"`

	// Port number (default: 6379)
	Port int `json:"port,omitempty"`
}

type S3Bucket struct {
	// Name of the bucket
	Name string `json:"name"`
}

type SNSTopic struct {
	// Name of the topic
	Name string `json:"name"`
}

type SQSQueue struct {
	// Name of the queue
	Name string `json:"name"`
}

type SecretsManagerSecret struct {
	// Name of the secret
	Name string `json:"name"`
}

type Service struct {
	// Description of the service
	Description string `json:"description,omitempty"`

	// Owner references an owner ID from system.owners
	Owner string `json:"owner,omitempty"`

	// Repo is the source code repository
	Repo *GitRepo `json:"repo,omitempty"`

	// Image is the container image specification
	Image ContainerImage `json:"image"`

	// Registry is the container registry path (e.g., "ghcr.io/org/repo")
	Registry string `json:"registry,omitempty"`

	// EnvVars documents environment variables for discovering this service
	EnvVars *ServiceEnvVars `json:"envVars,omitempty"`

	// Connections maps target service name to connection details
	Connections map[string]Connection `json:"connections,omitempty"`

	// Exposes defines ports/protocols this service exposes
	Exposes []Endpoint `json:"exposes,omitempty"`

	// AWS contains AWS-specific resource bindings
	AWS *AWSResources `json:"aws,omitempty"`

	// GCP contains GCP-specific resource bindings
	GCP *GCPResources `json:"gcp,omitempty"`

	// Azure contains Azure-specific resource bindings
	Azure *AzureResources `json:"azure,omitempty"`

	// Cloudflare contains Cloudflare resource bindings
	Cloudflare *CloudflareResources `json:"cloudflare,omitempty"`

	// Resources contains provider-agnostic resource bindings
	Resources *GenericResources `json:"resources,omitempty"`
}

type ServiceBusNamespace struct {
	// Name of the namespace
	Name string `json:"name"`

	// Queues in this namespace
	Queues []string `json:"queues,omitempty"`

	// Topics in this namespace
	Topics []string `json:"topics,omitempty"`
}

type ServiceEnvVars struct {
	// URL is the env var name for the full service URL (e.g., "PAYMENTS_URL")
	URL string `json:"url,omitempty"`

	// Host is the env var name for the service host (e.g., "PAYMENTS_SERVICE_HOST")
	Host string `json:"host,omitempty"`

	// Port is the env var name for the service port (e.g., "PAYMENTS_SERVICE_PORT")
	Port string `json:"port,omitempty"`
}

type SpannerInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// Database name
	Database string `json:"database,omitempty"`
}

type System struct {
	// Name is the system identifier (e.g., "payments-platform")
	Name string `json:"name"`

	// Description provides context about the system
	Description string `json:"description,omitempty"`

	// Version of this system spec document
	Version string `json:"version,omitempty"`

	// Owners maps owner ID to owner details for team ownership
	Owners map[string]Owner `json:"owners,omitempty"`

	// Services maps service name to service definition
	Services map[string]Service `json:"services"`

	// Networks maps network name to network definition (future)
	Networks map[string]Network `json:"networks,omitempty"`

	// Deployments maps deployment strategies (helm, terraform) (future)
	Deployments *Deployments `json:"deployments,omitempty"`
}

type TerraformDeployment struct {
	// Source is the module source (local path, git URL, registry)
	Source string `json:"source"`

	// Version is the module version (for registry modules)
	Version string `json:"version,omitempty"`

	// Path is the path within the source (for git sources)
	Path string `json:"path,omitempty"`

	// Resources lists which infrastructure resources this module manages
	Resources []string `json:"resources,omitempty"`
}

type VaultInstance struct {
	// Name of the instance
	Name string `json:"name"`

	// Address (e.g., "https://vault.example.com:8200")
	Address string `json:"address,omitempty"`
}

type Warning struct {
	// Code is a short identifier (e.g., "no-connections", "isolated-service")
	Code string
	// Service is the service name this warning applies to (empty for system-level)
	Service string
	// Message is the human-readable warning description
	Message string
}