appcatalog

type ChartRef struct {
	// Repo is the Helm chart repository URL. Must be https:// or oci://
	// — never a bare string that could be shell-interpreted.
	Repo string `yaml:"repo"`
	// Name is the chart name within Repo.
	Name string `yaml:"name"`
	// Version pins an exact chart version — no floating "latest".
	Version string `yaml:"version"`
}

type Entry struct {
	ID      string
	Catalog string
	// AppFile is <catalog>/apps/<id>/app.yaml — always present.
	AppFile string
}

type Maintainer struct {
	Name  string `yaml:"name,omitempty"`
	Email string `yaml:"email,omitempty"`
}

type Manifest struct {
	APIVersion string   `yaml:"apiVersion"`
	Kind       string   `yaml:"kind"`
	Metadata   Metadata `yaml:"metadata"`
	Spec       Spec     `yaml:"spec"`
}

type Metadata struct {
	ID          string       `yaml:"id"`
	Name        string       `yaml:"name"`
	Version     string       `yaml:"version"`
	Categories  []string     `yaml:"categories"`
	Tags        []string     `yaml:"tags"`
	Maintainers []Maintainer `yaml:"maintainers"`
	Description string       `yaml:"description"`
	Homepage    string       `yaml:"homepage"`
	Featured    bool         `yaml:"featured"`
	Visibility  string       `yaml:"visibility"`
}

type RBAC struct {
	ClusterScoped bool `yaml:"clusterScoped"`
}

type Spec struct {
	Chart ChartRef `yaml:"chart"`
	// TargetNamespace is the catalog's namespace template (e.g.
	// "{{.UserNamespace}}"). It is cloudbox-side templating metadata; the
	// peer-hosted install path instead takes an explicit, already-resolved
	// namespace from Target (see render.go) and never expands this string.
	TargetNamespace string `yaml:"targetNamespace"`
	RBAC            RBAC   `yaml:"rbac"`
	// DefaultValuesFile is the AUTHORITATIVE name of the sibling values
	// override (conventionally "values.yaml"). Empty means the app takes
	// no values override at all — a chart with sane defaults needs none.
	// When non-empty, Load resolves it as a bare filename sibling of
	// app.yaml (never a path — traversal and symlink escape are refused)
	// and requires it to exist: a catalog entry that DECLARES a values
	// file but does not ship it is a broken entry, not "no values". See
	// loadDeclaredValues.
	DefaultValuesFile string `yaml:"defaultValuesFile"`
}

type Target struct {
	// Namespace is the target/user namespace the chart is installed
	// into (spec.targetNamespace). Required.
	Namespace string
	// Release distinguishes multiple instances of the same app within
	// one namespace. Defaults to the app id when empty (one instance is
	// the common case).
	Release string
}