config

type ACME struct {
	Directory string `yaml:"directory"`
	Email     string `yaml:"email"`
}

type Auth struct {
	APIKeys          string `yaml:"api_keys"`
	Provider         string `yaml:"provider"`
	Token            string `yaml:"token"`
	AllowRemoteAdmin bool   `yaml:"allow_remote_admin"`

	// RUNE-201 session tuning. Zero values fall back to the built-in defaults
	// (15m access, 30d sliding refresh, 30s rotation grace).
	SessionAccessTTL   time.Duration `yaml:"session_access_ttl"`
	SessionRefreshTTL  time.Duration `yaml:"session_refresh_ttl"`
	SessionGraceWindow time.Duration `yaml:"session_grace_window"`
}

type ClickHouseConfig struct {
	// DSN is the connection string (clickhouse://user:pass@host:9000/db).
	DSN string `yaml:"dsn,omitempty"`
	// Database is the target database (default "runesight").
	Database string `yaml:"database,omitempty"`
	// Table is the target log table (default "logs").
	Table string `yaml:"table,omitempty"`
	// AutoMigrate creates the database/table on first connect. Default true
	// (zero-config); set false when operators manage the schema themselves.
	AutoMigrate bool `yaml:"auto_migrate,omitempty"`
	// StoragePolicy is the server-configured policy naming the hot + s3
	// volumes. Empty disables tiering.
	StoragePolicy string `yaml:"storage_policy,omitempty"`
	// S3Volume is the volume within StoragePolicy that aged parts move to
	// (default "s3").
	S3Volume string `yaml:"s3_volume,omitempty"`
	// HotDays moves parts older than this to S3Volume. 0 keeps all parts on
	// the hot disk.
	HotDays int `yaml:"hot_days,omitempty"`
}

type Client struct {
	Timeout time.Duration `yaml:"timeout"`
	Retries int           `yaml:"retries"`
}

type Config struct {
	Server    Server    `yaml:"server"`
	UI        UI        `yaml:"ui"`
	DataDir   string    `yaml:"data_dir"`
	Client    Client    `yaml:"client"`
	Docker    Docker    `yaml:"docker"`
	Namespace string    `yaml:"namespace"`
	Auth      Auth      `yaml:"auth"`
	Resources Resources `yaml:"resources"`
	Log       Log       `yaml:"log"`
	Secret    struct {
		Encryption SecretEncryption `yaml:"encryption"`
		Limits     store.Limits     `yaml:"limits"`
	} `yaml:"secret"`
	ConfigResource struct {
		Limits store.Limits `yaml:"limits"`
	} `yaml:"config"`
	Plugins    Plugins    `yaml:"plugins"`
	Networking Networking `yaml:"networking"`
	Telemetry  Telemetry  `yaml:"telemetry"`
	Node       Node       `yaml:"node"`
	Ingress    Ingress    `yaml:"ingress"`
	ACME       ACME       `yaml:"acme"`
	Storage    Storage    `yaml:"storage"`

	// Observability is the native observability (RuneSight) subsystem
	// config. When Enabled, runed wires the log store + agent forwarder.
	Observability Observability `yaml:"observability"`

	// FailedInstanceRetention controls how long failed-but-preserved
	// instance containers stick around for postmortem (logs, exec --debug)
	// before the reconciler evicts them. See FailedInstanceRetention for
	// individual knobs and defaults.
	FailedInstanceRetention FailedInstanceRetention `yaml:"failed_instance_retention"`
}

type Docker struct {
	APIVersion                string                 `yaml:"api_version"`
	FallbackAPIVersion        string                 `yaml:"fallback_api_version"`
	NegotiationTimeoutSeconds int                    `yaml:"negotiation_timeout_seconds"`
	LogMaxSize                string                 `yaml:"log_max_size"`
	LogMaxFile                int                    `yaml:"log_max_file"`
	Registries                []DockerRegistryConfig `yaml:"registries"`
}

type DockerRegistryAuth struct {
	Type       string            `yaml:"type"` // basic | token | dockerconfigjson | ecr | gcp
	Username   string            `yaml:"username"`
	Password   string            `yaml:"password"`
	Token      string            `yaml:"token"`
	Region     string            `yaml:"region"`
	FromSecret any               `yaml:"fromSecret"` // string or {name,namespace}
	Bootstrap  bool              `yaml:"bootstrap"`
	Manage     string            `yaml:"manage"` // create|update|ignore
	Immutable  bool              `yaml:"immutable"`
	Data       map[string]string `yaml:"data"` // inline source (env-expanded)
}

type DockerRegistryConfig struct {
	Name     string             `yaml:"name"`
	Registry string             `yaml:"registry"`
	Auth     DockerRegistryAuth `yaml:"auth"`
}

type FailedInstanceRetention struct {
	// PerServiceCap is the maximum number of Failed instances to retain
	// per service before the oldest is evicted. 0 disables the cap.
	PerServiceCap int `yaml:"per_service_cap"`

	// TTL is the maximum age of a Failed instance before it is evicted,
	// regardless of cap. 0 disables TTL (only the cap applies).
	TTL time.Duration `yaml:"ttl"`

	// SnapshotLogBytes is the upper bound on the per-instance log
	// snapshot we capture into Instance.LastLogs at eviction time, so
	// `rune logs --previous` still has output to show after the
	// container is gone. 0 disables snapshotting.
	SnapshotLogBytes int `yaml:"snapshot_log_bytes"`
}

type Ingress struct {
	HTTPAddr  string `yaml:"http_addr"`
	HTTPSAddr string `yaml:"https_addr"`
}

type KEKConfig struct {
	Source     string `yaml:"source"`
	File       string `yaml:"file"`
	Passphrase struct {
		Enabled bool   `yaml:"enabled"`
		Env     string `yaml:"env"`
	} `yaml:"passphrase"`
}

type Log struct {
	Level  string `yaml:"level"`
	Format string `yaml:"format"`
}

type LokiConfig struct {
	// URL is the Loki HTTP endpoint (e.g. http://loki:3100).
	URL string `yaml:"url,omitempty"`
	// TenantID is sent as X-Scope-OrgID for multi-tenant Loki.
	TenantID string `yaml:"tenant_id,omitempty"`
}

type Networking struct {
	ClusterCIDR string `yaml:"cluster_cidr"`
	DevMode     bool   `yaml:"dev_mode"`
}

type Node struct {
	Role string `yaml:"role"`
}

type Observability struct {
	// Enabled turns the agent forwarder + log store on. Default false
	// (opt-in): a bare install stays on the live ephemeral log stream.
	Enabled bool `yaml:"enabled,omitempty"`

	// Backend selects the log store: embedded (default), clickhouse, or loki.
	Backend string `yaml:"backend,omitempty"`

	// RetentionDays bounds record age: the embedded store's sweep, and the
	// ClickHouse table's DELETE TTL. 0 => backend default. Loki manages its
	// own retention server-side.
	RetentionDays int `yaml:"retention_days,omitempty"`

	// Loki configures the loki backend.
	Loki LokiConfig `yaml:"loki,omitempty"`

	// ClickHouse configures the clickhouse backend, including S3 tiering.
	ClickHouse ClickHouseConfig `yaml:"clickhouse,omitempty"`
}

type Plugins struct {
	Dir     string   `yaml:"dir"`
	Enabled []string `yaml:"enabled"`
}

type Resources struct {
	CPU struct {
		DefaultRequest string `yaml:"default_request"`
		DefaultLimit   string `yaml:"default_limit"`
	} `yaml:"cpu"`
	Memory struct {
		DefaultRequest string `yaml:"default_request"`
		DefaultLimit   string `yaml:"default_limit"`
	} `yaml:"memory"`
}

type SecretEncryption struct {
	Enabled bool      `yaml:"enabled"`
	KEK     KEKConfig `yaml:"kek"`
}

type Server struct {
	GRPCAddr string `yaml:"grpc_address"`
	HTTPAddr string `yaml:"http_address"`
	TLS      TLS    `yaml:"tls"`
}

type Storage struct {
	// DefaultStorageClass selects which StorageClass is marked
	// Default:true at orchestrator boot. *string so the empty-string
	// case ("no cluster default — error on missing storageClassName")
	// is distinguishable from "unset → keep built-in default".
	DefaultStorageClass *string `yaml:"defaultStorageClass,omitempty"`

	// PreserveOnDelete, when true, converts ReclaimPolicy:delete to
	// retain for volumes provisioned by the in-tree "local" driver.
	// Useful for single-node dev clusters where accidental rm -rf is
	// unrecoverable.
	PreserveOnDelete bool `yaml:"preserveOnDelete,omitempty"`

	// AllowCreateMissing, when true, lets drivers auto-create missing
	// host paths instead of failing validation. Plumbed through to the
	// driver layer; per-driver enforcement is a separate slice.
	AllowCreateMissing bool `yaml:"allowCreateMissing,omitempty"`

	Drivers map[string]map[string]any `yaml:"drivers,omitempty"`
}

type TLS struct {
	Enabled  bool   `yaml:"enabled"`
	CertFile string `yaml:"cert_file"`
	KeyFile  string `yaml:"key_file"`
}

type Telemetry struct {
	MetricsAddr string `yaml:"metrics_addr"`
}

type UI struct {
	// Enabled turns the dashboard (and the HTTP serving layer it rides
	// on) on or off. Defaults to true.
	Enabled bool `yaml:"enabled"`
	// Path is the mount point for the dashboard. Defaults to "/ui".
	Path string `yaml:"path"`
	// HandoffEnabled allows the `rune ui` CLI token-handoff flow
	// (POST /v1/ui/handoff/{code}). Defaults to true.
	HandoffEnabled bool `yaml:"handoff_enabled"`
	// HandoffTTL bounds the lifetime of a one-time handoff code.
	// Defaults to 60s.
	HandoffTTL time.Duration `yaml:"handoff_ttl"`
	// RequireTLS refuses to serve the UI over plaintext on a non-loopback
	// address: when true and TLS is off, the HTTP server binds 127.0.0.1
	// only and logs a warning. Defaults to true.
	RequireTLS bool `yaml:"require_tls"`
}