planner

type Config struct {
	// RolloutStrategy to use
	RolloutStrategy temporaliov1alpha1.RolloutStrategy
}

type Plan struct {
	// Which actions to take
	DeleteDeployments      []*appsv1.Deployment
	ScaleDeployments       map[*corev1.ObjectReference]uint32
	UpdateDeployments      []*appsv1.Deployment
	ShouldCreateDeployment bool
	VersionConfig          *VersionConfig
	TestWorkflows          []WorkflowConfig

	// ApplyWorkerResources holds resources to apply via SSA, one per (WRT × Build ID) pair.
	ApplyWorkerResources []WorkerResourceApply
	// DeleteWorkerResources lists rendered WRT resource copies to delete explicitly.
	// Populated when a versioned Deployment is being deleted (version sunset), since
	// rendered resources are now owned by the WRT (not the Deployment) and therefore
	// are not GC'd automatically when the Deployment is removed.
	DeleteWorkerResources []WorkerResourceRef
	// EnsureWRTOwnerRefs holds (base, patched) pairs for WRTs that need a
	// controller owner reference added, ready for client.MergeFrom patching.
	// These point from each WRT → the TWD, so the WRT is GC'd when the TWD is
	// deleted. The controller sets this (rather than the webhook) because the owner
	// ref requires the TWD's UID, resolved from spec.temporalWorkerDeploymentRef.
	EnsureWRTOwnerRefs []WRTOwnerRefPatch
}

type VersionConfig struct {
	// Token to use for conflict detection
	ConflictToken []byte
	// Build ID for the version
	BuildID string

	// Set this as the build ID for all new executions
	SetCurrent bool
	// Acceptable values [0,100]
	RampPercentage int32

	// ManagerIdentity is the current manager identity of the worker deployment in Temporal.
	// An empty string indicates the controller should claim the identity before applying
	// any routing config changes.
	ManagerIdentity string
}

type WRTOwnerRefPatch struct {
	Base    *temporaliov1alpha1.WorkerResourceTemplate
	Patched *temporaliov1alpha1.WorkerResourceTemplate
}

type WorkerResourceApply struct {
	Resource     *unstructured.Unstructured
	WRTName      string
	WRTNamespace string
	BuildID      string
	// RenderError is set when rendering spec.template failed. No SSA apply is attempted;
	// the error is recorded in the per-BuildID status entry and reflected in the Ready condition.
	RenderError error
	// RenderedHash is the hash of the rendered Resource object (see k8s.ComputeRenderedObjectHash).
	// Empty string means hashing failed; the apply will proceed unconditionally.
	RenderedHash string
	// LastAppliedHash is the hash recorded in the WRT status from the last successful apply.
	// If RenderedHash == LastAppliedHash (and both are non-empty), the controller skips the
	// SSA apply because the rendered output is identical to what is already on the cluster.
	LastAppliedHash string
}

type WorkerResourceRef struct {
	Namespace  string
	Name       string
	APIVersion string
	Kind       string
}

type WorkflowConfig struct {
	WorkflowType string
	WorkflowID   string
	BuildID      string
	TaskQueue    string
	GateInput    string
	// IsInputSecret indicates whether the GateInput came from a Secret reference
	// and should be treated as sensitive (not logged)
	IsInputSecret bool
}