v1alpha1

type Action struct {
	Name     ObjectName ``                                                                                                         /* 186-byte string literal not displayed */
	On       ObjectName `json:"on" doc:"The name of the dependency whose events run this action, one of the Sensor's on entries."` // the dependency (Dependency.Name) this fires on
	Workflow ObjectName ``                                                                                                         // start a WorkflowRun of this Workflow
	/* 336-byte string literal not displayed */
	Function ObjectName `` // invoke this Function with the CloudEvent
	/* 387-byte string literal not displayed */
	Input json.RawMessage `` // object; literals or ${{ event.* }} (checked at reconcile)
	/* 499-byte string literal not displayed */
}

type App struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       AppSpec   `json:"spec"`
	Status     AppStatus `json:"status,omitempty"`
}

type AppBackupSchedule struct {
	Name               ObjectName `json:"name,omitempty"`
	Ref                ObjectName `json:"ref,omitempty"`
	BackupScheduleSpec `json:",inline"`
}

type AppChild struct {
	Kind   Kind          `json:"kind" doc:"The object's kind."`
	Name   ObjectName    `json:"name" doc:"The object's name: a ref entry's target, and for a defined ConfigMap its stored name."`
	State  AppChildState `` /* 388-byte string literal not displayed */
	Reason string        `` /* 315-byte string literal not displayed */
}

type AppChildState string

type AppEventSource struct {
	Name            ObjectName `json:"name,omitempty"`
	Ref             ObjectName `json:"ref,omitempty"`
	EventSourceSpec `json:",inline"`
}

type AppFunction struct {
	Name         ObjectName `json:"name,omitempty"`
	Ref          ObjectName `json:"ref,omitempty"`
	FunctionSpec `json:",inline"`
}

type AppHook struct {
	Function ObjectName `` /* 402-byte string literal not displayed */
}

type AppHookCall struct {
	Point      string     `json:"point" enum:"preApply,postApply" doc:"The hook list the call was made for."`
	Function   ObjectName `json:"function" doc:"The hook Function that was called."`
	Invocation ObjectName `` /* 144-byte string literal not displayed */
	Phase      Phase      `json:"phase" doc:"Ready when the call succeeded and Failed when it did not; no other phase appears here."`
	EndTime    Timestamp  `json:"endTime" doc:"When the call ended."`
}

type AppHookInput struct {
	Event       string     `` /* 192-byte string literal not displayed */
	App         ObjectName `json:"app" doc:"The App's name."`
	From        ObjectName `json:"from,omitempty" doc:"The App's current revision when this one was created, empty on an install."`
	To          ObjectName `json:"to" doc:"This revision's name."`
	FromVersion string     `json:"fromVersion,omitempty" doc:"The spec.version of the from revision, empty on an install or when it sets none."`
	ToVersion   string     `json:"toVersion,omitempty" doc:"This revision's spec.version, empty when it sets none."`
}

type AppHooks struct {
	PreApply  []AppHook `` /* 501-byte string literal not displayed */
	PostApply []AppHook `` /* 304-byte string literal not displayed */
}

type AppPlan struct {
	// Revision is empty for an unchanged spec.
	Revision ObjectName `` /* 201-byte string literal not displayed */
	Parts    []PlanPart `` /* 205-byte string literal not displayed */
	Hooks    []string   `` /* 196-byte string literal not displayed */
}

type AppRequirement struct {
	App ObjectName `` /* 158-byte string literal not displayed */
	// Version is an npm-style range such as ^2.0.0; empty accepts any version, even none.
	Version string `` /* 254-byte string literal not displayed */
}

type AppRequirementState struct {
	App     ObjectName `json:"app" doc:"The required App, as its spec.requires entry names it."`
	Version string     `json:"version,omitempty" doc:"The required App's spec.version, empty when it sets none or does not exist."`
	Met     bool       `` /* 127-byte string literal not displayed */
}

type AppRevision struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       AppRevisionSpec   `json:"spec"`
	Status     AppRevisionStatus `json:"status,omitempty"`
}

type AppRevisionSpec struct {
	App    ObjectRef `json:"app" doc:"The App this revision belongs to."`
	Number int64     `` /* 221-byte string literal not displayed */
	Spec   AppSpec   `json:"spec" doc:"The App's spec when this revision was created, without spec.paused. It never changes."`
	// HookInput is the data of this revision's hook calls, set by the stamp when the spec has a hook (ADR-0214
	// Decision 2).
	HookInput *AppHookInput `` /* 160-byte string literal not displayed */
}

type AppRevisionStatus struct {
	Status `json:",inline"`
	// StartedAt is when the requirements were met, the stamp time when none waited; nil while the revision waits; the
	// rollout deadline (ADR-0212 Decision 6) needs it (ADR-0219 Decision 3).
	StartedAt *Timestamp `` /* 380-byte string literal not displayed */
	// Hooks records every hook call of the revision, retries included, in call order (ADR-0214 Decision 6).
	Hooks []AppHookCall `` /* 205-byte string literal not displayed */
}

type AppRoute struct {
	Name      ObjectName `json:"name,omitempty"`
	Ref       ObjectName `json:"ref,omitempty"`
	RouteSpec `json:",inline"`
}

type AppSelfHeal struct {
	Kind Kind       `json:"kind" doc:"The kind of the part written back."`
	Name ObjectName `json:"name" doc:"The name of the part written back."`
	At   Timestamp  `json:"at" doc:"When funcd wrote it back."`
}

type AppSensor struct {
	Name       ObjectName `json:"name,omitempty"`
	Ref        ObjectName `json:"ref,omitempty"`
	SensorSpec `json:",inline"`
}

type AppSite struct {
	Name     ObjectName `json:"name,omitempty"`
	Ref      ObjectName `json:"ref,omitempty"`
	SiteSpec `json:",inline"`
}

type AppSpec struct {
	// Version is a free label; a requirement's range matches it only when it is a SemVer 2.0.0 version (ADR-0219).
	Version string `` /* 304-byte string literal not displayed */
	// Paused stops every write of the App (ADR-0212); it is not part of an AppRevision.
	Paused bool `` /* 353-byte string literal not displayed */
	// Requires names the shared Apps of this namespace that this App needs before it rolls out (ADR-0219).
	Requires []AppRequirement `` /* 400-byte string literal not displayed */
	KV       []KVStoreEntry   `` /* 268-byte string literal not displayed */
	Buckets  []BucketEntry    `` /* 273-byte string literal not displayed */
	// SQL declares the App's SQL databases (ADR-0236), stores like kv and buckets.
	SQL          []SQLDatabaseEntry `` /* 276-byte string literal not displayed */
	Functions    []AppFunction      `` /* 412-byte string literal not displayed */
	Workflows    []AppWorkflow      `` /* 434-byte string literal not displayed */
	EventSources []AppEventSource   `json:"eventSources,omitempty" doc:"The EventSources that the App declares or refers to; no two entries name the same one."`
	Sensors      []AppSensor        `json:"sensors,omitempty" doc:"The Sensors that the App declares or refers to; no two entries name the same one."`
	Routes       []AppRoute         `` /* 230-byte string literal not displayed */
	Sites        []AppSite          `` /* 323-byte string literal not displayed */
	Lakes        []LakeEntry        `` /* 241-byte string literal not displayed */
	ConfigMaps   []ConfigMapEntry   `` /* 310-byte string literal not displayed */
	// BackupSchedules backs up the App's stores (ADR-0222 Decision 2); an entry with an empty scope backs up this App.
	BackupSchedules []AppBackupSchedule `` /* 272-byte string literal not displayed */
	// Secrets declares the Secrets the parts name, never their values (ADR-0213 Decision 6).
	Secrets []SecretDeclaration `` /* 321-byte string literal not displayed */
	// Hooks names the Functions of this App called before its parts change and after a new revision is current
	// (ADR-0214).
	Hooks *AppHooks `` /* 367-byte string literal not displayed */
}

type AppStatus struct {
	Status          `json:",inline"`
	CurrentRevision ObjectName `` /* 213-byte string literal not displayed */
	LatestRevision  ObjectName `` /* 174-byte string literal not displayed */
	// Version is the spec.version of the current revision.
	Version      string       `json:"version,omitempty" doc:"The spec.version of the current revision."`
	Children     []AppChild   `` /* 303-byte string literal not displayed */
	LastSelfHeal *AppSelfHeal `json:"lastSelfHeal,omitempty" doc:"The last part that funcd wrote back after another writer changed or deleted it, and when."`
	// Requires is the state of each spec.requires entry, in its order (ADR-0219 Decision 5).
	Requires []AppRequirementState `json:"requires,omitempty" doc:"The state of each spec.requires entry, in its order."`
	// RequiredBy is every App of the namespace whose spec.requires names this one, sorted by name.
	RequiredBy []ObjectName `json:"requiredBy,omitempty" doc:"The Apps of this namespace whose spec.requires names this App, sorted by name."`
	// Plan is what the write would do (ADR-0220 Decision 5), set only in a dry-run answer and never stored.
	Plan *AppPlan `` /* 220-byte string literal not displayed */
}

type AppWorkflow struct {
	Name         ObjectName `json:"name,omitempty"`
	Ref          ObjectName `json:"ref,omitempty"`
	WorkflowSpec `json:",inline"`
}

type AssignmentEntry struct {
	Principal *PrincipalRef `json:"principal,omitempty" doc:"Who the entry grants its role to. When unset, spec.principal."`
	RoleRef   RoleRef       `json:"roleRef" doc:"The role the entry grants."`
	Scope     *ScopeRef     `json:"scope,omitempty" doc:"Where the entry's role applies. When unset, spec.scope."`
}

type AuthMode string

type Backup struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       BackupSpec   `json:"spec"`
	Status     BackupStatus `json:"status,omitempty"`
}

type BackupEncryption struct {
	Recipients []string `` /* 387-byte string literal not displayed */
}

type BackupMember struct {
	Kind  Kind       `json:"kind" doc:"The member's kind: KVStore, Bucket, Lake, SQLDatabase, or Function for a Function's local volume."`
	Name  ObjectName `json:"name" doc:"The member's name: the store's, or for a volume, its Function's."`
	Bytes int64      `json:"bytes,omitempty" doc:"The size of the member's sealed copy on the target, in bytes."`
	// Volume, with Kind Function, names the Function's local volume the member is (ADR-0262 Decision 11).
	Volume ObjectName `json:"volume,omitempty" doc:"With kind Function, the name of the Function's local volume that the member is."`
}

type BackupSchedule struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       BackupScheduleSpec   `json:"spec"`
	Status     BackupScheduleStatus `json:"status,omitempty"`
}

type BackupScheduleSpec struct {
	Schedule   string           `` /* 338-byte string literal not displayed */
	TimeZone   string           `json:"timeZone,omitempty" doc:"The IANA time zone of schedule, such as Europe/Paris; UTC when empty."`
	TTL        Duration         `` /* 270-byte string literal not displayed */
	Paused     bool             `` /* 211-byte string literal not displayed */
	Scope      BackupScope      `` /* 437-byte string literal not displayed */
	Target     BackupTarget     `json:"target" doc:"Where each Backup writes its copy: an S3 bucket and the Secret of its write key."`
	Encryption BackupEncryption `` /* 163-byte string literal not displayed */
}

type BackupScheduleStatus struct {
	Status               `json:",inline"`
	LastScheduleTime     *Timestamp `` /* 178-byte string literal not displayed */
	LastSuccessTime      *Timestamp `json:"lastSuccessTime,omitempty" doc:"When the newest of the schedule's Succeeded Backups that still exist completed."`
	EarliestRestorePoint *Timestamp `` /* 164-byte string literal not displayed */
	Active               ObjectName `json:"active,omitempty" doc:"A Backup of the schedule that is Pending or Running, empty when none is."`
	RPORisk              bool       `` /* 364-byte string literal not displayed */
}

type BackupScope struct {
	KVStores  []ObjectName `json:"kvStores,omitempty" doc:"KVStores of the namespace to copy, by name, each once."`
	Buckets   []ObjectName `` /* 208-byte string literal not displayed */
	Lakes     []ObjectName `` /* 321-byte string literal not displayed */
	Databases []ObjectName `` /* 173-byte string literal not displayed */
	// Volumes are local Function volumes, each "<function>/<name>" (ADR-0262 Decision 11).
	Volumes       []string          `` /* 228-byte string literal not displayed */
	App           ObjectName        `` /* 239-byte string literal not displayed */
	ResourceGroup ResourceGroupName `` /* 216-byte string literal not displayed */
}

type BackupSpec struct {
	Schedule ObjectName `` /* 260-byte string literal not displayed */
	TTL      Duration   `` /* 203-byte string literal not displayed */
}

type BackupStatus struct {
	Status `json:",inline"`
	// Phase shadows Status.Phase, as WorkflowRunStatus's: Pending → Running → Succeeded | Failed.
	Phase          RunPhase       `` /* 311-byte string literal not displayed */
	StartTime      *Timestamp     `json:"startTime,omitempty" doc:"When the run began."`
	CompletionTime *Timestamp     `json:"completionTime,omitempty" doc:"When the run ended, Succeeded or Failed."`
	ExpireTime     *Timestamp     `` /* 239-byte string literal not displayed */
	Target         string         `` /* 138-byte string literal not displayed */
	Path           string         `json:"path,omitempty" doc:"The copy's directory on the target, <namespace>/<backup>-<uid>/."`
	Members        []BackupMember `` /* 220-byte string literal not displayed */
	// Recipients are the fingerprints of the recipients the run sealed to (ADR-0204 Decision 3).
	Recipients []string `` /* 254-byte string literal not displayed */
}

type BackupTarget struct {
	URL               string     `` /* 470-byte string literal not displayed */
	CredentialsSecret ObjectName `` /* 213-byte string literal not displayed */
}

type BlobEvent struct {
	Name   ObjectName `` /* 148-byte string literal not displayed */
	Prefix string     `` // only objects under this key prefix fire ("" = whole bucket)
	/* 308-byte string literal not displayed */
	On []BlobEventType `` // default [Created] (set in normalize); only Created supported in V1
	/* 213-byte string literal not displayed */
}

type BlobEventType string

type BlobRef struct {
	Bucket ObjectName `json:"bucket" doc:"The Bucket that holds the Site's bundles, in the Site's namespace."`
	Prefix string     `` /* 280-byte string literal not displayed */
}

type BlobServiceSpec struct {
	Binding string `json:"binding" pattern:"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$"`
}

type BlobSource struct {
	Bucket ObjectName `` // the ADR-0080 Bucket resource to watch (this namespace)
	/* 172-byte string literal not displayed */
	Events []BlobEvent `json:"events" doc:"The source's events: at least one, with unique names, each watching the objects under its prefix."` // ≥1; unique names
}

type Bucket struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       BucketSpec   `json:"spec"`
	Status     BucketStatus `json:"status,omitempty"`
}

type BucketEntry struct {
	Name ObjectName `json:"name,omitempty"`
	Ref  ObjectName `json:"ref,omitempty"`
	// Deletion is retain (or empty, the default: the Bucket and its objects outlive the App) or delete.
	Deletion   DeletionPolicy `json:"deletion,omitempty"`
	BucketSpec `json:",inline"`
}

type BucketPrefix struct {
	// Name is the key prefix; a DNS-1123 label, unique within the bucket. The medallion layer.
	Name string `` /* 164-byte string literal not displayed */
	// Owner is the single writer, a Function or a Lake in this bucket's namespace, named with its kind (ADR-0275).
	// Zero ⇒ no writer (read-only).
	Owner PrefixOwner `` /* 387-byte string literal not displayed */
	// Quota caps the prefix's total size (ADR-0292); a Lake's prefix quota is the Lake's cap.
	Quota SizeQuota `` /* 292-byte string literal not displayed */
}

type BucketQuota struct {
	SizeQuota `json:",inline"`
	// MaxObjectBytes caps one object (a write past it gets 413, ADR-0148); 0 ⇒ only s3gateway.maxUploadBytes applies.
	MaxObjectBytes int64 `` /* 343-byte string literal not displayed */
}

type BucketSpec struct {
	// Prefixes are the bucket's sub-domains (ADR-0080): the medallion layers, each a key prefix with a
	// single-writer Owner. Prefix names are unique within the bucket (so a prefix has exactly one owner
	// by construction). Empty ⇒ a bucket with no writable sub-domains.
	Prefixes []BucketPrefix `` /* 237-byte string literal not displayed */
	// Quota caps the bucket's total size and each object (ADR-0292).
	Quota BucketQuota `` /* 172-byte string literal not displayed */
}

type BucketStatus struct {
	Status `json:",inline"`
}

type BuiltinStep struct {
	// Wait is a timer: a duration string ("30s", ADR-0194) or a ${{ }} goja Select expression evaluating
	// to one. The step blocks in-engine for the duration (on the run context, so the
	// run-timeout interrupts it), then passes its flowing input through as output. A normal step —
	// Running then Succeeded; no special state.
	Wait string `` /* 299-byte string literal not displayed */
	// Pass is a ${{ }} goja Select expression over the step's flowing input + prior step outputs;
	// its result is the step's output. No dispatch.
	Pass string `` /* 261-byte string literal not displayed */
}

type ByteSize string

type Condition struct {
	Type               ConditionType   `json:"type" doc:"What the condition reports, such as Ready."`
	Status             ConditionStatus `json:"status" doc:"Whether the condition holds."`
	ObservedGeneration int64           `json:"observedGeneration,omitempty" doc:"The object's generation when funcd set the condition."`
	LastTransitionTime Timestamp       `json:"lastTransitionTime,omitzero" doc:"When the status last changed."`
	Reason             string          `json:"reason,omitempty" doc:"A short CamelCase reason for the status."`
	Message            string          `json:"message,omitempty" doc:"A sentence that explains the status."`
}

type ConditionStatus string

type ConditionType string

type Conditions []Condition

type ConfigMap struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       ConfigMapSpec `json:"spec"`
}

type ConfigMapEntry struct {
	Name          ObjectName `json:"name,omitempty"`
	Ref           ObjectName `json:"ref,omitempty"`
	ConfigMapSpec `json:",inline"`
}

type ConfigMapSpec struct {
	Data map[string]string `` /* 486-byte string literal not displayed */
}

type DeletionPolicy string

type Dependency struct {
	Name   ObjectName `json:"name" doc:"The dependency's name, unique among the Sensor's dependencies; an action's on names it."`
	Source ObjectName `json:"source" doc:"The name of an EventSource in the Sensor's namespace."` // the EventSource name
	Event  ObjectName ``                                                                          // the named event of that source
	/* 126-byte string literal not displayed */
}

type Duration time.Duration

type EdgeAuth struct {
	Mode AuthMode `` /* 265-byte string literal not displayed */
}

type EdgeDefaults struct {
	// Auth is the namespace-default edge auth stance (ADR-0113, F77); a Route overrides it. nil ⇒
	// open (the phased default — a namespace opts into default-deny by setting Auth.Mode=authenticated).
	Auth *EdgeAuth `` /* 284-byte string literal not displayed */
}

type EgressPolicy struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       EgressPolicySpec `json:"spec"`
}

type EgressPolicySpec struct {
	// Rules is the allow-list; each grants egress to its `to` on its `ports`. At least one required.
	Rules []EgressRule `` /* 270-byte string literal not displayed */
	// AppliesTo scopes every rule to these Functions (by name, this namespace); empty ⇒ the whole namespace.
	AppliesTo []ObjectName `` /* 153-byte string literal not displayed */
}

type EgressRule struct {
	// To is the destination match; at least one of domains/cidrs is required (Validate enforces).
	To EgressTo `` /* 201-byte string literal not displayed */
	// Ports are the destination ports (1..65535); empty ⇒ any port to the matched destination.
	Ports []int `json:"ports,omitempty" doc:"The destination ports the rule allows, each 1 to 65535, at most 32; empty allows every port."`
}

type EgressTo struct {
	Domains []string `` /* 403-byte string literal not displayed */
	CIDRs   []string `` /* 249-byte string literal not displayed */
}

type EventSource struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       EventSourceSpec   `json:"spec"`
	Status     EventSourceStatus `json:"status,omitempty"`
}

type EventSourceSpec struct {
	// Timer is the timer source kind (V1): named events, each on its own interval or cron schedule. The webhook
	// source kind is a named follow-on (it needs an eventing-ingress gateway decision).
	Timer *TimerSource `` /* 177-byte string literal not displayed */
	// Blob is the object-store source kind (ADR-0119, F83): named events that fire on object-created under
	// a watched Bucket prefix, detected by a poll watcher over the ADR-0007 blob.Bucket List seam.
	Blob *BlobSource `` /* 291-byte string literal not displayed */
	// SQL is the SQL change-feed source kind (ADR-0235, F132): named events that fire on a row change of a table of
	// a SQLDatabase in this namespace, from the changes its engine posts to funcd.
	SQL *SQLSource `` /* 342-byte string literal not displayed */
}

type EventSourceStatus struct {
	Status `json:",inline"`
}

type ExposureMode string

type FieldDiff struct {
	Field string
	Want  string
	Got   string
}

type Function struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       FunctionSpec   `json:"spec"`
	Status     FunctionStatus `json:"status,omitempty"`
}

type FunctionBindings struct {
	// KV binds an alias to a (store, table) sub-domain of a KVStore in this namespace, read through ctx.kv (ADR-0073);
	// writes need the table's owner or a writer role (ADR-0136).
	KV []FunctionKV `` /* 292-byte string literal not displayed */
	// Blob binds an alias to a (bucket, prefix) sub-domain, read through ctx.blob and S3 (ADR-0080); writes need the
	// prefix's owner or a writer role.
	Blob []FunctionBlob `` /* 344-byte string literal not displayed */
	// SQL binds an alias to a SQLDatabase, read through ctx.sql (ADR-0233); writes need its owner or a writer role. A
	// missing database holds the Function Pending (SQLDatabaseNotFound).
	SQL []FunctionSQL `` /* 298-byte string literal not displayed */
	// Lake binds an alias to a Lake (ADR-0091): the worker gets FUNCD_LAKE_<ALIAS>_URL and _TOKEN, and
	// the reconcile waits, fail-closed, until the lake is Ready.
	Lake []FunctionLake `` /* 158-byte string literal not displayed */
	// Links binds an alias to a target Function, called through ctx.invoke and ctx.fetch (ADR-0064); with no matching
	// link the call is refused.
	Links []FunctionLink `` /* 361-byte string literal not displayed */
	// Config names ConfigMaps whose Data is injected as env vars, before Secrets, so a bound Secret overrides a config
	// default (ADR-0093); a missing one fails closed (ConfigResolveFailed).
	Config []ObjectName `` /* 319-byte string literal not displayed */
	// Secret names Secrets whose Data is injected as env vars (ADR-0057); only the names are stored, resolution is
	// PDP-authorized, and an unauthorized or missing Secret fails the Function closed.
	Secret []ObjectName `` /* 264-byte string literal not displayed */
}

type FunctionBlob struct {
	// Alias is the local handle; a DNS-1123 label, unique within Blob.
	Alias string `` /* 162-byte string literal not displayed */
	// Bucket is the name of a Bucket in this function's namespace.
	Bucket ObjectName `json:"bucket" doc:"The Bucket, in the same namespace, that holds the prefix."`
	// Prefix is a sub-domain (BucketPrefix.name) of that bucket; a DNS-1123 label.
	Prefix string `json:"prefix" pattern:"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$" doc:"The prefix, by its name in the Bucket's prefixes."`
}

type FunctionKV struct {
	// Alias is the local handle the handler passes to context.kv; a DNS-1123 label, unique within KV.
	Alias string `` /* 138-byte string literal not displayed */
	// Store is the name of a KVStore in this function's namespace.
	Store ObjectName `json:"store" doc:"The KVStore, in the same namespace, that holds the table."`
	// Table is a sub-domain (KVStore.spec.tables[].name) of that store; a DNS-1123 label.
	Table string `json:"table" pattern:"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$" doc:"The table, by its name in the store's tables."`
}

type FunctionLake struct {
	// Alias names the FUNCD_LAKE_<ALIAS>_* env pair; a DNS-1123 label, unique within Lakes.
	Alias string `` /* 237-byte string literal not displayed */
	// Lake is the name of a Lake in this function's namespace.
	Lake ObjectName `json:"lake" doc:"The Lake to query, in the same namespace."`
}

type FunctionLink struct {
	// Alias is the local name the handler passes to invoke; a DNS-1123 label, unique within Links.
	Alias string `` /* 152-byte string literal not displayed */
	// Target is the name of a Function in this function's namespace.
	Target ObjectName `json:"target" doc:"The Function to call, in the same namespace."`
	// Timeout bounds the synchronous wait (incl. a cold-start wake).
	Timeout Duration `` /* 137-byte string literal not displayed */
}

type FunctionName string

type FunctionProtocol string

type FunctionSQL struct {
	Alias    string     `` /* 139-byte string literal not displayed */
	Database ObjectName `json:"database" doc:"The SQLDatabase to query, in the same namespace."`
}

type FunctionSpec struct {
	// Scaling configures scale-to-zero / idle reclaim (ADR-0016, F11). V1 honors
	// MinReplicas (0 enables scale-to-zero) and IdleTimeout (0 disables reclaim);
	// MaxReplicas is recorded for forward-compatibility (1→N autoscaling is V3).
	Scaling Scaling `` /* 186-byte string literal not displayed */
	// Runtime is the runtime class / language image (e.g. "nodejs22", "python312") — F13/ADR-0020.
	// Typed RuntimeName so its DNS-1123 constraint reaches the OpenAPI schema (ADR-0048).
	Runtime RuntimeName `` /* 215-byte string literal not displayed */
	// Handler is the entrypoint the shim resolves at materialization (e.g. "app.handler") — F13.
	Handler string `` /* 221-byte string literal not displayed */
	// Protocol is how the shim calls the code (ADR-0243): "cloudevent", the default, or "http", an http(app) export
	// that serves every request and that only the edge calls.
	Protocol FunctionProtocol `` /* 318-byte string literal not displayed */
	// Image is the source artifact OCI ref (oci-layout:// · file:// · a bare registry ref; the tag at the
	// string end), pulled + served by the runtime — F13/ADR-0020, flattened by ADR-0097 (was spec.artifact.uri).
	Image string `` /* 265-byte string literal not displayed */
	// ImageDigest is the content digest pinned into the stamped Revision ("what was validated ships"),
	// system-set at materialization (ADR-0035) — ADR-0097 (was spec.artifact.digest).
	ImageDigest string `` /* 292-byte string literal not displayed */
	// Replicas is the manual replica count (>=0); the effective count also honors Scaling + the
	// activator's wake (ADR-0016/0020) — F13.
	Replicas int `` /* 385-byte string literal not displayed */
	// Timeout bounds an external invoke until its response starts; 0 ⇒ invoke.defaultTimeout. External
	// invokes only: links and steps keep their own limits (ADR-0151).
	Timeout Duration `` /* 134-byte string literal not displayed */
	// Pooling is the per-function worker-pooling opt-in (ADR-0046, F28). Empty ⇒ solo (own
	// worker, the default). Functions sharing (namespace, runtime, Pooling.Worker) and the same
	// access (bindings, owned data, grants) co-locate as handlers in one pool worker; status.pool
	// names it.
	Pooling Pooling `` /* 127-byte string literal not displayed */
	// Resources sizes each solo worker (ADR-0291): its cpu and memory, enforced by the runtime driver; an empty field
	// takes functions.defaultResources. Not with pooling.worker: a pool's heap cap is pool-wide.
	Resources ResourceSpec `` /* 230-byte string literal not displayed */
	// Bindings are what the Function's code uses (ADR-0246): each binding is its grant, named like the ctx accessor
	// that reaches it.
	Bindings FunctionBindings `` /* 428-byte string literal not displayed */
	// KVStores, Buckets, SQLDatabases, Lakes and ConfigMaps are what the Function declares at its root
	// (ADR-0248): by name it owns the resource, which carries its marker; by ref it binds an existing one. An owner
	// left out of a store's tables, prefixes or database is the Function (the function-store-owner admission).
	KVStores     []KVStoreEntry     `` /* 325-byte string literal not displayed */
	Buckets      []BucketEntry      `` /* 392-byte string literal not displayed */
	SQLDatabases []SQLDatabaseEntry `` /* 398-byte string literal not displayed */
	Lakes        []LakeEntry        `` /* 340-byte string literal not displayed */
	ConfigMaps   []ConfigMapEntry   `` /* 375-byte string literal not displayed */
	// SecretDeclarations are the Secrets the Function's bindings name, with the keys it reads (ADR-0213 Decision 8).
	SecretDeclarations []SecretDeclaration `` /* 359-byte string literal not displayed */
	// Volumes are the directories the Function owns (ADR-0262): emptyDir per worker, local durable; its code reads each
	// one's path from FUNCD_VOLUME_<NAME>.
	Volumes []VolumeEntry `` /* 260-byte string literal not displayed */
	// Ingress is the Function's edge exposure (ADR-0241): unset, it answers by name at /function/<name> while its
	// namespace is implicit; a host or a path gives it a Route of its own.
	Ingress *Ingress `` /* 292-byte string literal not displayed */
}

type FunctionStatus struct {
	Status          `json:",inline"`
	Replicas        int    `json:"replicas,omitempty" doc:"How many of the serving revision's workers are ready."` // workers that listened and get calls (ADR-0161)
	CurrentRevision string ``                                                                                      // the latest stamped Revision name (ADR-0020)
	/* 200-byte string literal not displayed */
	// ServingRevision is the Revision whose workers receive the calls (ADR-0143); empty until the first deploy serves,
	// and again once no replica is desired.
	ServingRevision string `` /* 247-byte string literal not displayed */
	// DrainingRevision is the Revision demoted at the last switch while any of its workers remain, and DrainingSince
	// the time of that switch (ADR-0143); both are cleared together.
	DrainingRevision string     `` /* 426-byte string literal not displayed */
	DrainingSince    *Timestamp `json:"drainingSince,omitempty" doc:"When the last switch moved the calls off drainingRevision; cleared with it."`
	// Pool is the pool worker a pooled Function runs in, "<runtime>/<worker>/<access>"; empty when solo.
	Pool string `` /* 201-byte string literal not displayed */
}

type FunctionStep struct {
	// Image is a full OCI artifact reference the workflow owns and materializes into a Function.
	Image string `` /* 237-byte string literal not displayed */
	// Ref references an existing Function in the namespace (a shared service).
	Ref ObjectName `` /* 250-byte string literal not displayed */
	// Retry is the per-step retry policy; nil ⇒ the engine default.
	Retry *StepRetry `` /* 324-byte string literal not displayed */
	// Timeout is the per-step invocation bound; 0 ⇒ the engine default.
	Timeout Duration `json:"timeout,omitempty" doc:"The per-step invocation bound: 0s to 24h; 0s or unset means workflow.defaultStepTimeout."`
	// Pooling overrides the workflow-level pooling for this step's materialized Function
	// (nil ⇒ inherit spec.pooling); image steps only.
	Pooling *WorkflowPooling `` /* 192-byte string literal not displayed */
	// Bindings are the step's bindings (ADR-0246), copied onto its materialized Function.
	Bindings StepBindings `` /* 263-byte string literal not displayed */
}

type Gateway struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Status     GatewayStatus `json:"status,omitempty"`
}

type GatewayStatus struct {
	Status `json:",inline"`
}

type Grant struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       GrantSpec `json:"spec"`
}

type GrantSpec struct{}

type GroupVersionKind struct {
	Group   string
	Version string
	Kind    Kind
}

type HTTPMethod string

type Identity struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       IdentitySpec   `json:"spec"`
	Status     IdentityStatus `json:"status,omitempty"`
}

type IdentitySpec struct {
	// Type is the identity flavor. V1: only "external". Required.
	Type IdentityType `` /* 242-byte string literal not displayed */
	// CredentialSecretName is the owned Secret the issued keypair is written to. Empty ⇒ the Identity's
	// own name.
	CredentialSecretName ObjectName `` /* 484-byte string literal not displayed */
	// Rotate, when incremented past status.observedRotate, forces the controller to reissue the secret
	// (rotation). The access key id is stable; only the secret changes.
	Rotate int64 `` /* 226-byte string literal not displayed */
}

type IdentityStatus struct {
	Status `json:",inline"`
	// AccessKeyID is the issued, stable SigV4 access key id (the secret lives only in the owned Secret).
	AccessKeyID string `` /* 203-byte string literal not displayed */
	// ObservedRotate mirrors the spec.rotate the currently-issued secret corresponds to.
	ObservedRotate int64 `` /* 132-byte string literal not displayed */
}

type IdentityType string

type Ingress struct {
	// Enabled turns the resource's own address on or off. Unset: a Function or a Site follows its namespace's
	// defaultExposure (implicit on, explicit off) and a Lake is off.
	Enabled *bool `` /* 194-byte string literal not displayed */
	// Host is the exact host of the resource's own address; "" is the namespace host (ADR-0240).
	Host string `` /* 210-byte string literal not displayed */
	// Path is the edge path of the resource's own address; "" is "/" when Host is set, else
	// /function/<name>, /site/<name> or /lake/<name>.
	Path string `` /* 222-byte string literal not displayed */
	// Auth is the edge stance of the resource's own address; nil is the namespace default.
	Auth *RouteAuth `` /* 214-byte string literal not displayed */
}

type Invocation struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Status     InvocationStatus `json:"status,omitempty"`
}

type InvocationStatus struct {
	Status    `json:",inline"`
	StartTime Timestamp `json:"startTime,omitzero" doc:"When the call started; for a Sensor's action, its first attempt."`
	EndTime   Timestamp `json:"endTime,omitzero" doc:"When the call ended, after its last attempt."`
	Error     string    `json:"error,omitempty" doc:"Why the call failed, on a Failed record; empty when it succeeded."`
}

type JoinMode string

type KVServiceSpec struct {
	Binding string `json:"binding" pattern:"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$"`
}

type KVStore struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       KVStoreSpec   `json:"spec"`
	Status     KVStoreStatus `json:"status,omitempty"`
}

type KVStoreEntry struct {
	Name ObjectName `json:"name,omitempty"`
	Ref  ObjectName `json:"ref,omitempty"`
	// Deletion is retain (or empty, the default: the store and its data outlive the App) or delete.
	Deletion    DeletionPolicy `json:"deletion,omitempty"`
	KVStoreSpec `json:",inline"`
}

type KVStoreQuota struct {
	SizeQuota `json:",inline"`
	// MaxValueBytes caps a single value's size; 0 ⇒ DefaultMaxValueBytes (1 MiB); at most MaxValueBytesLimit.
	MaxValueBytes int64 `` /* 138-byte string literal not displayed */
	// MaxKeyBytes caps a single key's size; 0 ⇒ DefaultMaxKeyBytes (1 KiB); at most MaxKeyBytesLimit.
	MaxKeyBytes int `json:"maxKeyBytes,omitempty" minimum:"0" maximum:"64000" doc:"The longest key, in bytes. 0 means 1024 (1 KiB)."`
}

type KVStoreSpec struct {
	// Quota caps the store's total size, each value and each key (ADR-0292).
	Quota KVStoreQuota `json:"quota,omitzero" doc:"Caps on the store's total size, on each value and on each key."`
	// Tables are the store's sub-domains (ADR-0073): each is a key space <ns>/<store>/<table>/ with a
	// single-writer Owner. Table names are unique within the store (so a table has exactly one owner by
	// construction). Empty ⇒ a store with no writable sub-domains.
	Tables []KVTable `` /* 249-byte string literal not displayed */
}

type KVStoreStatus struct {
	Status `json:",inline"`
	// Tables is the number of sub-domains declared on the store (computed by the reconciler).
	Tables int `json:"tables,omitempty" doc:"The number of tables the store declares."`
	// Bindings is the number of Function.spec.bindings.kv entries referencing this store (computed by the reconciler).
	Bindings int `json:"bindings,omitempty" doc:"The number of Function spec.bindings.kv entries that name the store."`
}

type KVTable struct {
	// Name is the sub-domain name; a DNS-1123 label, unique within the store.
	Name string `json:"name" pattern:"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$" doc:"The table's name, unique within the store."`
	// Owner is a writer by default, a Function in this store's namespace; a writer-role grant adds others (ADR-0136).
	// Cross-resource validity (the owner exists) is an admission, not Validate.
	Owner ObjectName `` /* 632-byte string literal not displayed */
}

type Kind string

type Lake struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       LakeSpec   `json:"spec"`
	Status     LakeStatus `json:"status,omitempty"`
}

type LakeBindings struct {
	// Blob binds the lakehouse buckets the engine may read and write, projected onto its backing Function so ADR-0085
	// injects the keypair; the prefix the lake lives under must be owned by this service (single-writer).
	Blob []FunctionBlob `` /* 174-byte string literal not displayed */
	// Config names ConfigMaps whose Data is injected into the engine as env vars: engine tuning (DUCKDB_*).
	Config []ObjectName `` /* 328-byte string literal not displayed */
	// Secret names Secrets whose Data is injected into the engine as env vars: the Quack token (QUACK_TOKEN).
	Secret []ObjectName `` /* 391-byte string literal not displayed */
}

type LakeEntry struct {
	Name     ObjectName `json:"name,omitempty"`
	Ref      ObjectName `json:"ref,omitempty"`
	LakeSpec `json:",inline"`
}

type LakeLocation struct {
	// Bucket is the name of a Bucket in this service's namespace.
	Bucket ObjectName `json:"bucket" doc:"The Bucket that holds the Lake's files, in the Lake's namespace."`
	// Prefix is a sub-domain (BucketPrefix.name) of that bucket; a DNS-1123 label.
	Prefix string `json:"prefix" pattern:"^[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?$" doc:"The prefix of that Bucket, which this Lake must own."`
}

type LakeSpec struct {
	// Bindings are what the engine uses (ADR-0246): the lakehouse buckets, its ConfigMaps and its Secrets.
	Bindings LakeBindings `json:"bindings" doc:"What the Lake's engine uses: Bucket prefixes, and the ConfigMaps and Secrets of its environment."`
	// Location names the bound (bucket, prefix) the Lake's files live under; the prefix must be OWNED by this Lake
	// (single-writer). Its catalog, a DuckDB file (ADR-0271), lives in the catalog store under the same location
	// (ADR-0293).
	Location LakeLocation `` /* 344-byte string literal not displayed */
	// Resources sizes the engine (cpu/mem); DuckDB is memory-hungry. Validate refuses a value that does not parse, and
	// the provider-runtime maps it onto runtime.Limits (ADR-0087, ADR-0291 Decision 2).
	Resources ResourceSpec `` /* 159-byte string literal not displayed */
	// Ingress declares the edge exposure of this lake's lake::query PEP proxy (ADR-0138, ADR-0241), on only
	// with enabled: true; its default path is /lake/<name>. Once Ready, the reconciler programs an edge
	// entry to the PEP PROXY (never the engine), so an external caller is PEP'd on lake::query exactly like an
	// internal one; auth is refused, since the proxy authenticates. Exposure is a network path, not a grant.
	Ingress *Ingress `` /* 251-byte string literal not displayed */
	// Buckets, ConfigMaps and SecretDeclarations are what a standalone Lake declares at its root (ADR-0251):
	// by name it owns the Bucket or ConfigMap, which carries its marker; by ref it binds an existing one. An owner left
	// out of a prefix is the Lake (the lake-store-owner admission). A lake nested in a Function or an
	// App declares nothing here: its declarer's root holds them.
	Buckets            []BucketEntry       `` /* 402-byte string literal not displayed */
	ConfigMaps         []ConfigMapEntry    `` /* 375-byte string literal not displayed */
	SecretDeclarations []SecretDeclaration `` /* 346-byte string literal not displayed */
}

type LakeStatus struct {
	Status `json:",inline"`
	// Function is the engine identity, "<name>-duckdb" (computed by the reconciler). No Function object has this
	// name: the engine runs as the provider worker named for the Lake (ADR-0086, repointed at the engine).
	Function ObjectName `` /* 143-byte string literal not displayed */
	// Endpoint is the published Quack URL — the backing function's ingress path (computed).
	Endpoint string `` /* 230-byte string literal not displayed */
	// ProxyPort is the port of the lake's PEP proxy listener (ADR-0162), recorded so a restarted daemon binds the
	// same port again and the URL consumers hold keeps reaching this lake (computed).
	ProxyPort int `` /* 241-byte string literal not displayed */
}

type Namespace struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       NamespaceSpec   `json:"spec,omitempty"`
	Status     NamespaceStatus `json:"status,omitempty"`
}

type NamespaceName string

type NamespaceSpec struct {
	// DefaultExposure switches the public data-plane front door. Empty/absent ⇒ implicit.
	DefaultExposure ExposureMode `` /* 375-byte string literal not displayed */
	// EdgeDefaults carries the namespace-wide edge policy defaults merged under each Route
	// (F74–F78 add fields; empty in F79).
	EdgeDefaults *EdgeDefaults `` /* 157-byte string literal not displayed */
	// VolumeBudgetBytes caps the volume space the namespace's Functions reserve (ADR-0262 Decision 5); 0 ⇒ only
	// volumes.capacityBytes limits it.
	VolumeBudgetBytes int64 `` /* 175-byte string literal not displayed */
	// VolumeBudget is the same budget with a binary unit, "4Gi" (ADR-0266); at most one of the two is set.
	VolumeBudget ByteSize `` /* 414-byte string literal not displayed */
}

type NamespaceStatus struct {
	Status `json:",inline"`
}

type OCIPlatform string

type Object interface {
	GroupVersionKind() GroupVersionKind
	GetObjectMeta() *ObjectMeta
	GetName() ObjectName
	GetNamespace() NamespaceName
	GetResourceGroup() ResourceGroupName
	GetGeneration() int64
	Validate() error
}

type ObjectMeta struct {
	// Name is the resource name. omitempty (not "required") so a create may omit it in favour of
	// GenerateName; the store still requires a non-empty Name (ObjectMeta.Validate) once assigned.
	Name ObjectName `` /* 159-byte string literal not displayed */
	// GenerateName is an optional NAME PREFIX for server-side name generation (the k8s pattern): when Name
	// is empty and GenerateName is set, the create path fills Name = GenerateName + a random suffix
	// (GenerateObjectName), retrying on the rare collision. Ignored once Name is set. A plain prefix string
	// (a trailing '-' is idiomatic and allowed — the generated Name is what must be a valid label).
	GenerateName  string            `` /* 170-byte string literal not displayed */
	Namespace     NamespaceName     `json:"namespace,omitempty" doc:"The namespace the object belongs to. A cluster-scoped kind has none."`
	ResourceGroup ResourceGroupName `json:"resourceGroup,omitempty" doc:"The resource group the object belongs to, within its namespace."`
	Tags          Tags              `json:"tags,omitempty" doc:"Labels on the object, as keys and values."`
	UID           UID               `json:"uid,omitempty" doc:"The object's unique ID, which funcd sets when it creates the object."`
	Generation    int64             `json:"generation,omitempty" doc:"Set by funcd: 1 when the object is created, then one more each time its spec changes."`
	// ResourceVersion is opaque: "<timeline>-<n>", or a plain "<n>" on an object written before timelines
	// (ADR-0202). Compare it for equality only; a version minted by another store or before a restore
	// matches none this store holds.
	ResourceVersion string           `` /* 197-byte string literal not displayed */
	CreationTime    Timestamp        `json:"creationTimestamp,omitzero" doc:"When funcd created the object."`
	DeletionTime    *Timestamp       `json:"deletionTimestamp,omitempty" doc:"funcd does not set it."`
	OwnerReferences []OwnerReference `json:"ownerReferences,omitempty" doc:"The objects that own this one. funcd deletes an owned object when its owner goes."`
	Finalizers      []string         `json:"finalizers,omitempty" doc:"funcd does not read it."`
}

type ObjectName string

type ObjectRef struct {
	Kind      Kind          `json:"kind" doc:"The kind of the object it names."`
	Namespace NamespaceName `json:"namespace,omitempty" doc:"The namespace of the object it names."`
	Name      ObjectName    `json:"name" doc:"The name of the object it names."`
}

type OwnerReference struct {
	ObjectRef          `json:",inline"`
	UID                UID  `json:"uid" doc:"The owner's unique ID."`
	Controller         bool `json:"controller,omitempty" doc:"Whether this owner is the one that manages the object."`
	BlockOwnerDeletion bool `json:"blockOwnerDeletion,omitempty" doc:"funcd does not read it."`
}

type PathType string

type Phase string

type PlanAction string

type PlanPart struct {
	Kind   Kind       `json:"kind" doc:"The object's kind."`
	Name   ObjectName `json:"name" doc:"The object's name; for a defined ConfigMap, its stored name."`
	Action PlanAction `` /* 137-byte string literal not displayed */
	Reason string     `` /* 200-byte string literal not displayed */
}

type Policy struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       PolicySpec `json:"spec"`
}

type PolicySpec struct {
	// Cedar is one or more Cedar permit/forbid statements (validated by the policy-validity admission
	// against the curated action/entity schema — kv::read/kv::write; Function/KVStore/KVTable).
	Cedar string `` /* 525-byte string literal not displayed */
}

type Pooling struct {
	// Worker is an owner-chosen worker id. Empty ⇒ solo (own worker). Functions sharing
	// (namespace, runtime, Worker) co-locate as handlers in one worker_threads pool worker.
	Worker string `` /* 535-byte string literal not displayed */
}

type PoolingMode string

type PrefixOwner struct {
	Kind Kind       `` /* 132-byte string literal not displayed */
	Name ObjectName `` /* 170-byte string literal not displayed */
}

type PrincipalKind string

type PrincipalObject interface {
	// contains filtered or unexported methods
}

type PrincipalRef struct {
	Kind PrincipalKind `json:"kind" enum:"Function,Identity" doc:"The kind of the principal: a Function, or an Identity for a caller outside funcd."`
	Name ObjectName    `json:"name" doc:"The principal's name, in the RolesAssignment's namespace. funcd does not check that it exists."`
}

type ReplaySeed struct {
	// Run is the source run to replay (same namespace).
	Run ObjectName `` /* 134-byte string literal not displayed */
	// From is the step to re-run from; `from` and its descendants re-execute, upstream steps are reused.
	From ObjectName `` /* 278-byte string literal not displayed */
	// AllowDrift opts into re-running steps whose resolved artifact digest moved since the source run
	// (a re-materialized workflow) — "same data, current code". Default false ⇒ drift is rejected.
	AllowDrift bool `` /* 246-byte string literal not displayed */
}

type ResourceGroup struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       ResourceGroupSpec   `json:"spec"`
	Status     ResourceGroupStatus `json:"status,omitempty"`
}

type ResourceGroupName string

type ResourceGroupSpec struct {
	Description string `json:"description,omitempty" doc:"Free text about the group; funcd does not read it."`
}

type ResourceGroupStatus struct {
	Status `json:",inline"`
}

type ResourceSpec struct {
	// CPU is a number of cores, at least MinCPU (e.g. "0.5" or "2").
	CPU string `` /* 258-byte string literal not displayed */
	// Memory is a size in ByteSize's grammar (ADR-0266), e.g. "256Mi" or "4GiB".
	Memory string `` /* 370-byte string literal not displayed */
}

type Restore struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       RestoreSpec   `json:"spec"`
	Status     RestoreStatus `json:"status,omitempty"`
}

type RestoreMember struct {
	Kind       Kind          `` /* 156-byte string literal not displayed */
	Name       ObjectName    `` /* 201-byte string literal not displayed */
	As         ObjectName    `` /* 359-byte string literal not displayed */
	AsLocation *LakeLocation `` /* 300-byte string literal not displayed */
	InPlace    bool          `` /* 581-byte string literal not displayed */
	// Volume, with Kind Function, makes the member that Function's local volume; as names another Function whose
	// empty volume of that name receives it (ADR-0262 Decision 11).
	Volume ObjectName `` /* 152-byte string literal not displayed */
}

type RestoreSource struct {
	CredentialsSecret ObjectName `` /* 237-byte string literal not displayed */
	IdentitySecret    ObjectName `` /* 257-byte string literal not displayed */
}

type RestoreSpec struct {
	Backup  ObjectName      `` /* 184-byte string literal not displayed */
	Source  RestoreSource   `json:"source" doc:"The Secrets that read the Backup's copy and open its seal."`
	Members []RestoreMember `` /* 286-byte string literal not displayed */
}

type RestoreStatus struct {
	Status         `json:",inline"`
	Phase          RunPhase   `` /* 256-byte string literal not displayed */
	StartTime      *Timestamp `json:"startTime,omitempty" doc:"When the Restore turned Running, once its Backup and any export had Succeeded."`
	CompletionTime *Timestamp `json:"completionTime,omitempty" doc:"When the Restore ended, Succeeded or Failed."`
	Export         ObjectName `` /* 175-byte string literal not displayed */
}

type Revision struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       RevisionSpec   `json:"spec"`
	Status     RevisionStatus `json:"status,omitempty"`
}

type RevisionID string

type RevisionPin struct {
	Function    ObjectName `json:"function" doc:"The name of a Function the run's steps call."`
	FunctionUID UID        `` /* 158-byte string literal not displayed */
	Revision    ObjectName `json:"revision" doc:"The Revision the run calls: the Function's current revision when the run started."`
	ImageDigest string     `json:"imageDigest,omitempty" doc:"The digest of that Revision's image; empty for a file:// artifact, which has none."` // empty only for a file:// artifact
}

type RevisionSpec struct {
	Function    ObjectRef   `json:"function" doc:"The Function whose spec this Revision snapshots."`
	Number      int64       `json:"number" minimum:"1" doc:"The generation of the Function's spec that this Revision snapshots."`
	Runtime     RuntimeName `` /* 136-byte string literal not displayed */
	Handler     string      `` /* 172-byte string literal not displayed */
	Image       string      `` /* 133-byte string literal not displayed */
	ImageDigest string      `` /* 272-byte string literal not displayed */
}

type RevisionStatus struct {
	Status `json:",inline"`
}

type Role struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       RoleSpec `json:"spec"`
}

type RoleRef struct {
	Kind RoleRefKind `` /* 167-byte string literal not displayed */
	Name string      `` /* 338-byte string literal not displayed */
}

type RoleRefKind string

type RoleSpec struct {
	Actions []string `` /* 158-byte string literal not displayed */
}

type RolesAssignment struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       RolesAssignmentSpec `json:"spec"`
}

type RolesAssignmentSpec struct {
	Principal   *PrincipalRef     `json:"principal,omitempty" doc:"The principal of each entry that sets none."`
	Scope       *ScopeRef         `json:"scope,omitempty" doc:"The scope of each entry that sets none."`
	Assignments []AssignmentEntry `` /* 209-byte string literal not displayed */
}

type Route struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       RouteSpec   `json:"spec"`
	Status     RouteStatus `json:"status,omitempty"`
}

type RouteAuth struct {
	Mode AuthMode `` /* 362-byte string literal not displayed */
}

type RouteBackend struct {
	// Function is the target Function in this Route's namespace. Optional since F82: a static-only
	// rule sets no function (the `omitempty` reflects the union — exactly one arm is set).
	Function ObjectName `` /* 235-byte string literal not displayed */
	// Static serves a Bucket-prefix static site directly through the edge (F82); nil ⇒ a function backend.
	Static *StaticBackend `` /* 149-byte string literal not displayed */
	// Site serves the current build of the named Site in this Route's namespace (ADR-0242).
	Site ObjectName `` /* 238-byte string literal not displayed */
}

type RouteRule struct {
	Path string `` // must begin "/"
	/* 205-byte string literal not displayed */
	PathType PathType `` // Exact | Prefix (default Prefix)
	/* 299-byte string literal not displayed */
	Methods []HTTPMethod `json:"methods,omitempty" doc:"The request methods the rule matches; empty matches every method."` // empty ⇒ all methods
	Backend RouteBackend `json:"backend" doc:"What the rule serves: set exactly one of function, static and site."`
	// Auth is this rule's stance; nil is the Route's spec.auth (ADR-0241 Decision 8).
	Auth *RouteAuth `` /* 161-byte string literal not displayed */
}

type RouteSpec struct {
	// Host is an exact host match. "" is the namespace host <namespace>.<baseDomain>, or for default any host but
	// reserved ones (ADR-0240); an `explicit` default requires a non-empty Host (ADR-0110).
	Host string `` /* 715-byte string literal not displayed */
	// Rules lists the path rules, matched longest-prefix-first. At least one is required.
	Rules []RouteRule `` /* 295-byte string literal not displayed */
	// Auth is the edge authentication stance for this Route's rules (ADR-0113, F77); a rule's own auth beats it, and
	// nil inherits the namespace default, else open (ADR-0241 Decision 8).
	Auth *RouteAuth `` /* 141-byte string literal not displayed */
	// Enabled, false, keeps the Route Disabled: it serves and claims nothing. Unset is true, except for a Route a
	// Site or a Function owns in an explicit namespace (ADR-0241 Decision 6).
	Enabled *bool `` /* 245-byte string literal not displayed */
}

type RouteStatus struct {
	Status `json:",inline"`
	// Host is the host the Route claims: spec.host, else its namespace host, else "" (any host but reserved ones)
	// (ADR-0240).
	Host string `` /* 277-byte string literal not displayed */
}

type RunPhase string

type RunStepStatus struct {
	Name     ObjectName `json:"name" doc:"The step's name."`
	Phase    StepPhase  `` /* 218-byte string literal not displayed */
	Attempts int        `` /* 160-byte string literal not displayed */
	Revision string     `` /* 190-byte string literal not displayed */
	// StartedAt/EndedAt (ADR-0196) give the step duration; Error is the raw step-level failure
	// cause, capped — the full text lives in the step's span + logs (ADR-0106) — on a Failed step, or
	// the cancel on a step that was running when the run was cancelled (ADR-0146).
	StartedAt Timestamp `json:"startedAt,omitzero" doc:"When the step started running."`
	EndedAt   Timestamp `json:"endedAt,omitzero" doc:"When the step succeeded, failed or was cancelled while running."`
	Error     string    `` /* 136-byte string literal not displayed */
}

type RuntimeClass struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       RuntimeClassSpec   `json:"spec"`
	Status     RuntimeClassStatus `json:"status,omitempty"`
}

type RuntimeClassSpec struct {
	Handler string `json:"handler,omitempty" pattern:"^[A-Za-z_][A-Za-z0-9_.]*$"`
}

type RuntimeClassStatus struct {
	Status `json:",inline"`
}

type RuntimeName string

type SQLChangeType string

type SQLDatabase struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       SQLDatabaseSpec   `json:"spec"`
	Status     SQLDatabaseStatus `json:"status,omitempty"`
}

type SQLDatabaseEntry struct {
	Name ObjectName `json:"name,omitempty"`
	Ref  ObjectName `json:"ref,omitempty"`
	// Deletion is retain (or empty, the default: the database and its data outlive the App) or delete.
	Deletion        DeletionPolicy `json:"deletion,omitempty"`
	SQLDatabaseSpec `json:",inline"`
}

type SQLDatabaseSpec struct {
	Resources ResourceSpec `` /* 180-byte string literal not displayed */
	Owner     ObjectName   `` /* 309-byte string literal not displayed */
	// Quota caps the database's total size (ADR-0292).
	Quota SizeQuota `` /* 222-byte string literal not displayed */
}

type SQLDatabaseStatus struct {
	Status   `json:",inline"`
	Bindings int `json:"bindings,omitempty" doc:"The number of Functions whose spec.bindings.sql names the database."`
}

type SQLEvent struct {
	Name  ObjectName      `` /* 148-byte string literal not displayed */
	Table string          `json:"table" doc:"The table whose row changes fire the event, matched by its exact name, case included."`
	On    []SQLChangeType `json:"on,omitempty" doc:"The row changes that fire the event: Insert, Update or Delete. Empty means all three."`
}

type SQLSource struct {
	Database ObjectName ``                                                                                                   /* 164-byte string literal not displayed */
	Events   []SQLEvent `json:"events" doc:"The source's events: at least one, with unique names, each watching one table."` // ≥1; unique names
}

type Scaling struct {
	MinReplicas int `` // 0 enables scale-to-zero
	/* 264-byte string literal not displayed */
	MaxReplicas int `` // recorded; 1→N enforcement is V3
	/* 206-byte string literal not displayed */
	IdleTimeout Duration `json:"idleTimeout,omitempty" doc:"The idle time before a worker is reclaimed: 0s to 24h; 0s or unset disables reclaim."`
}

type SchemaView struct {
	Type     string
	Props    map[string]string          // property name → primitive type
	Defaults map[string]json.RawMessage // property name → declared default, for the properties that have one
	Required []string
}

type ScopeKind string

type ScopeRef struct {
	Kind ScopeKind `` /* 234-byte string literal not displayed */
	Name string    `` /* 283-byte string literal not displayed */
}

type Secret struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       SecretSpec `json:"spec"`
}

type SecretDeclaration struct {
	Name        ObjectName `json:"name"`
	Description string     `json:"description,omitempty"`
	Keys        []string   `json:"keys"`
}

type SecretSpec struct {
	Type SecretType        `json:"type,omitempty" doc:"funcd does not read it."`
	Data map[string][]byte `` /* 361-byte string literal not displayed */
}

type SecretType string

type Sensor struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       SensorSpec   `json:"spec"`
	Status     SensorStatus `json:"status,omitempty"`
}

type SensorSpec struct {
	// On lists the named event dependencies this Sensor subscribes to (≥1, unique names).
	On []Dependency `json:"on" doc:"The events the Sensor subscribes to, as named dependencies: at least one, with unique names."`
	// Do lists the named actions (≥1, unique names); each is bound to one dependency via On.
	Do []Action `` /* 370-byte string literal not displayed */
}

type SensorStatus struct {
	Status `json:",inline"`
}

type Service struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       ServiceSpec   `json:"spec"`
	Status     ServiceStatus `json:"status,omitempty"`
}

type ServiceSpec struct {
	Type ServiceType `json:"type,omitempty"`
	// KV is set when Type == ServiceTypeKV (ADR-0019, F14).
	KV *KVServiceSpec `json:"kv,omitempty"`
	// Blob is set when Type == ServiceTypeBlob (ADR-0021, F23).
	Blob *BlobServiceSpec `json:"blob,omitempty"`
}

type ServiceStatus struct {
	Status `json:",inline"`
}

type ServiceType string

type Site struct {
	TypeMeta   `json:",inline"`
	ObjectMeta `json:"metadata"`
	Spec       SiteSpec   `json:"spec"`
	Status     SiteStatus `json:"status,omitempty"`
}

type SiteBindings struct {
	Blob []BlobRef `json:"blob" doc:"Exactly one entry: the Bucket and the prefix that hold the Site's bundles."` // exactly one
}

type SiteIngress struct {
	Ingress `json:",inline"`
	// BaseHref makes the Site serve a copy of its index whose <base href> is its mount (ADR-0239 Decision 10).
	BaseHref bool `` /* 181-byte string literal not displayed */
	// Rules are additional bucket prefixes served alongside the app (the data the app fetches). A rule
	// MAY nest under Path (e.g. /bi/data under /bi) — longest-path-first gives the nested rule priority.
	Rules []SiteRule `` /* 267-byte string literal not displayed */
}

type SiteRule struct {
	// Path is the edge path; must begin "/" and must not be "/" (that is the bundle's).
	Path string `` /* 272-byte string literal not displayed */
	// Bucket names a Bucket in this Site's namespace; "" ⇒ the Site's own Bucket.
	Bucket ObjectName `` /* 242-byte string literal not displayed */
	// Prefix is the Bucket sub-domain served at Path.
	Prefix string `` /* 202-byte string literal not displayed */
}

type SiteRuntimeConfig struct {
	// Values are keys and their string values; a key here wins over the same key from ConfigMap.
	Values map[string]string `` /* 422-byte string literal not displayed */
	// ConfigMap names a ConfigMap of the Site's namespace whose data adds keys.
	ConfigMap ObjectName `` /* 378-byte string literal not displayed */
}

type SiteSpec struct {
	// Image is the site bundle OCI ref (oci-layout://<dir>[:<tag>] or a registry ref; a tag or a
	// digest). A tag is resolved to a digest once per spec generation — the author never types one.
	Image string `` /* 490-byte string literal not displayed */
	// Buckets declares exactly the one Bucket its bindings.blob names (ADR-0248 Decision 7): by name the Site creates
	// it with its served prefix and no owner, and refuses an existing one without its marker; by ref the served prefix
	// must exist without an owner, and the Site never edits the Bucket. deletion: delete is refused (ADR-0139).
	Buckets []BucketEntry `` /* 491-byte string literal not displayed */
	// Bindings names the served prefix: one alias-free {bucket, prefix}; objects land under <prefix>/<digest-slug>/.
	// The prefix is immutable after creation (the site-prefix-immutable admission).
	Bindings SiteBindings `json:"bindings,omitzero" doc:"Where the Site stores and serves its bundles: one Bucket prefix, in blob."`
	// Index is the document served for "/" / a directory / (when SPA) a miss. Default "index.html".
	Index string `` /* 332-byte string literal not displayed */
	// SPA serves Index (200) for an un-matched path under the bundle rule so a client-side router owns
	// routing. It NEVER applies to a data mount (Ingress.Rules), whose miss is always 404.
	SPA bool `` /* 224-byte string literal not displayed */
	// Ingress declares the Site-owned Route (named after the Site). Required in V1.
	Ingress SiteIngress `` /* 215-byte string literal not displayed */
	// RuntimeConfig makes the Site serve one generated config.json beside its bundle (ADR-0239). Not the function
	// runtime.
	RuntimeConfig *SiteRuntimeConfig `` /* 170-byte string literal not displayed */
}

type SiteStatus struct {
	Status `json:",inline"`
	// Digest is the manifest digest the owned Route currently serves.
	Digest string `` /* 213-byte string literal not displayed */
	// ServingPrefix is the digest-scoped key prefix the owned Route is programmed with.
	ServingPrefix string `` /* 159-byte string literal not displayed */
	// Objects and Bytes are the materialized bundle's observed size.
	Objects int   `` /* 197-byte string literal not displayed */
	Bytes   int64 `json:"bytes,omitempty" doc:"The total size, in bytes, of the files that objects counts."`
}

type SizeQuota struct {
	MaxSize  ByteSize `` /* 173-byte string literal not displayed */
	MaxBytes int64    `json:"maxBytes,omitempty" minimum:"0" doc:"The same cap as a number of bytes. Set maxSize or maxBytes, not both."`
}