config

type Config struct {
	Path           string
	Logger         *logging.Logger
	NonInteractive bool
	Definition     *Definition // New format with separated secret stores and services
}

type Definition struct {
	Version       int                          `yaml:"version"`
	SecretStores  map[string]SecretStoreConfig `yaml:"secretStores,omitempty"`
	Services      map[string]ServiceConfig     `yaml:"services,omitempty"`
	Providers     map[string]ProviderConfig    `yaml:"providers,omitempty"` // Legacy compatibility
	Transforms    map[string][]string          `yaml:"transforms"`
	Envs          map[string]Environment       `yaml:"envs"`
	Templates     []Template                   `yaml:"templates"`
	Policies      *policy.PolicyConfig         `yaml:"policies,omitempty"`
	Notifications *NotificationConfig          `yaml:"notifications,omitempty"` // Rotation notifications
	Metrics       *MetricsConfig               `yaml:"metrics,omitempty"`       // Prometheus metrics
}

type EmailNotificationConfig struct {
	// SMTP server configuration.
	SMTP SMTPConfig `yaml:"smtp"`

	// From is the sender email address.
	From string `yaml:"from"`

	// To is the list of recipient email addresses.
	To []string `yaml:"to"`

	// Events specifies which rotation events trigger notifications.
	Events []string `yaml:"events,omitempty"`

	// BatchMode controls email batching: immediate, hourly, daily.
	BatchMode string `yaml:"batch_mode,omitempty"`
}

type Environment map[string]Variable

type MetricsConfig struct {
	Prometheus *PrometheusConfig `yaml:"prometheus,omitempty"`
}

type NotificationConfig struct {
	// Slack configuration for Slack webhook notifications.
	Slack *SlackNotificationConfig `yaml:"slack,omitempty"`

	// Email configuration for SMTP email notifications.
	Email *EmailNotificationConfig `yaml:"email,omitempty"`

	// PagerDuty configuration for PagerDuty incident notifications.
	PagerDuty *PagerDutyNotificationConfig `yaml:"pagerduty,omitempty"`

	// Webhooks configuration for custom webhook notifications.
	Webhooks []WebhookNotificationConfig `yaml:"webhooks,omitempty"`
}

type PagerDutyNotificationConfig struct {
	// IntegrationKey is the PagerDuty Events API integration key.
	// Can be a secret reference like "store://vault/pagerduty/integration-key".
	IntegrationKey string `yaml:"integration_key"`

	// ServiceID is the PagerDuty service ID (optional).
	ServiceID string `yaml:"service_id,omitempty"`

	// Severity is the default incident severity: critical, error, warning, info.
	Severity string `yaml:"severity,omitempty"`

	// Events specifies which rotation events trigger notifications.
	Events []string `yaml:"events,omitempty"`

	// AutoResolve indicates whether to auto-resolve incidents on success.
	AutoResolve bool `yaml:"auto_resolve,omitempty"`
}

type PrometheusConfig struct {
	Enabled bool              `yaml:"enabled"`
	Port    int               `yaml:"port,omitempty"`
	Path    string            `yaml:"path,omitempty"`
	Labels  map[string]string `yaml:"labels,omitempty"`
}

type ProviderConfig struct {
	Type      string                 `yaml:"type"`
	TimeoutMs int                    `yaml:"timeout_ms,omitempty"` // Timeout in milliseconds (default: 30000)
	Config    map[string]interface{} `yaml:",inline"`
}

type ProviderRef struct {
	Provider string `yaml:"provider"`
	Key      string `yaml:"key"`
	Version  string `yaml:"version,omitempty"`
}

type Reference struct {
	// New URI format (primary)
	Store   string `yaml:"store,omitempty"`   // store:// reference
	Service string `yaml:"service,omitempty"` // svc:// reference

	// Legacy format (provider + key) - for backward compatibility
	Provider string `yaml:"provider,omitempty"`
	Key      string `yaml:"key,omitempty"`
	Version  string `yaml:"version,omitempty"`
}

type RollbackConfig struct {
	// Automatic enables automatic rollback on verification failure.
	Automatic bool `yaml:"automatic,omitempty"`

	// OnVerificationFailure triggers rollback when verification fails.
	OnVerificationFailure bool `yaml:"on_verification_failure,omitempty"`

	// OnHealthCheckFailure triggers rollback when health checks fail.
	OnHealthCheckFailure bool `yaml:"on_health_check_failure,omitempty"`

	// TimeoutSeconds is the maximum time for rollback operation (default: 30).
	TimeoutSeconds int `yaml:"timeout,omitempty"`

	// MaxRetries is the number of times to retry rollback if it fails (default: 2).
	MaxRetries int `yaml:"max_retries,omitempty"`

	// Notifications lists notification channels for rollback events.
	Notifications []string `yaml:"notifications,omitempty"`
}

type SMTPConfig struct {
	Host     string `yaml:"host"`
	Port     int    `yaml:"port"`
	Username string `yaml:"username,omitempty"`
	Password string `yaml:"password,omitempty"`
	TLS      bool   `yaml:"tls,omitempty"`
}

type SecretStoreConfig struct {
	Type      string                 `yaml:"type"`
	TimeoutMs int                    `yaml:"timeout_ms,omitempty"`
	Config    map[string]interface{} `yaml:",inline"`
}

type ServiceConfig struct {
	Type      string                 `yaml:"type"`
	TimeoutMs int                    `yaml:"timeout_ms,omitempty"`
	Config    map[string]interface{} `yaml:",inline"`
}

type SlackMentions struct {
	// OnFailure lists Slack handles to mention when rotation fails.
	// Examples: ["@oncall", "@platform-team"]
	OnFailure []string `yaml:"on_failure,omitempty"`

	// OnRollback lists Slack handles to mention when rollback occurs.
	OnRollback []string `yaml:"on_rollback,omitempty"`
}

type SlackNotificationConfig struct {
	// WebhookURL is the Slack incoming webhook URL.
	// Can be a secret reference like "store://vault/slack/webhook".
	WebhookURL string `yaml:"webhook_url"`

	// Channel is the Slack channel to post to (optional, uses webhook default).
	Channel string `yaml:"channel,omitempty"`

	// Events specifies which rotation events trigger notifications.
	// Valid values: started, completed, failed, rollback.
	// If empty, all events are sent.
	Events []string `yaml:"events,omitempty"`

	// Mentions specifies who to mention for specific events.
	Mentions *SlackMentions `yaml:"mentions,omitempty"`
}

type Template struct {
	Name         string `yaml:"name"`
	Format       string `yaml:"format"`
	Env          string `yaml:"env"`
	Out          string `yaml:"out"`
	TemplatePath string `yaml:"template_path,omitempty"`
}

type Variable struct {
	From      *Reference        `yaml:"from"`
	Literal   string            `yaml:"literal"`
	Transform string            `yaml:"transform"`
	Optional  bool              `yaml:"optional"`
	Metadata  map[string]string `yaml:"metadata,omitempty"`
}

type WebhookNotificationConfig struct {
	// Name is a human-readable name for this webhook.
	Name string `yaml:"name"`

	// URL is the webhook endpoint URL.
	URL string `yaml:"url"`

	// Method is the HTTP method to use (default: POST).
	Method string `yaml:"method,omitempty"`

	// Headers are additional HTTP headers to include.
	Headers map[string]string `yaml:"headers,omitempty"`

	// Events specifies which rotation events trigger notifications.
	Events []string `yaml:"events,omitempty"`

	// PayloadTemplate is a Go template for the request body.
	// If empty, a default JSON payload is used.
	PayloadTemplate string `yaml:"payload_template,omitempty"`

	// Retry configuration.
	Retry *WebhookRetryConfig `yaml:"retry,omitempty"`

	// Timeout in seconds (default: 10).
	TimeoutSeconds int `yaml:"timeout,omitempty"`
}

type WebhookRetryConfig struct {
	// MaxAttempts is the maximum number of retry attempts (default: 3).
	MaxAttempts int `yaml:"max_attempts,omitempty"`

	// Backoff strategy: linear, exponential (default: exponential).
	Backoff string `yaml:"backoff,omitempty"`
}