runtime

type ContainerInfo struct {
	ID      string
	Name    string
	Image   string
	Labels  map[string]string
	Running bool
}

type ContainerRuntime interface {
	EnsureImage(ctx context.Context, ref string, auth *RegistryAuth, progress func(status string)) error
	// ImageLoad imports an image tar stream (docker-save format) into the local
	// image store. Used by the dev builder to load a freshly built image without
	// a registry round-trip.
	ImageLoad(ctx context.Context, tar io.Reader) error
	CreateContainer(ctx context.Context, spec ContainerSpec) (id string, err error)
	StartContainer(ctx context.Context, id string) error
	StopContainer(ctx context.Context, id string, timeout time.Duration) error
	RemoveContainer(ctx context.Context, id string, force bool) error
	InspectContainer(ctx context.Context, id string) (ContainerState, error)
	ListContainers(ctx context.Context, labels map[string]string) ([]ContainerInfo, error)
	Logs(ctx context.Context, id string, opts LogsOptions) (<-chan LogEntry, error)
	Exec(ctx context.Context, id string, spec ExecSpec, stdin io.Reader, stdout, stderr io.Writer, resize <-chan TermSize) (exitCode int, err error)
	Stats(ctx context.Context, id string) (StatsSample, error)
	Top(ctx context.Context, id string) (titles []string, processes [][]string, err error)
	// CopyFrom streams a tar archive of a container path; CopyTo extracts one.
	CopyFrom(ctx context.Context, id, path string) (io.ReadCloser, error)
	CopyTo(ctx context.Context, id, path string, tarStream io.Reader) error

	EnsureNetwork(ctx context.Context, spec NetworkSpec) (NetworkInfo, error)
	RemoveNetwork(ctx context.Context, name string) error
	EnsureVolume(ctx context.Context, name string, labels map[string]string) error
	RemoveVolume(ctx context.Context, name string) error
	// VolumeHostPath returns the host filesystem path of a named volume's data
	// (used by the snapshot engine).
	VolumeHostPath(ctx context.Context, name string) (string, error)

	// Ping verifies the engine is reachable (startup check).
	Ping(ctx context.Context) error
}

type ContainerSpec struct {
	Name       string
	Image      string
	Command    []string // empty = image default (Docker CMD)
	Entrypoint []string // empty = image default (Docker ENTRYPOINT)
	Env        []string // "KEY=value"
	Labels     map[string]string
	Ports      []PortBinding
	Mounts     []Mount
	Resources  Resources
	Restart    RestartPolicy
	// Network to attach (per project+env bridge). Empty = default bridge.
	Network string
	// DNS servers for the container (the per-network internal resolver).
	DNS []string
	// WorkingDir override; empty = image default.
	WorkingDir string
	// User override ("uid:gid"); empty = image default.
	User string
	// Privileged is required only for system containers (never services).
	Privileged bool
	// StopGrace between SIGTERM and SIGKILL at StopContainer time.
	StopGrace time.Duration
}

type ContainerState struct {
	ID      string
	Name    string
	Running bool
	// Restarting is Docker's crash-loop backoff state. CAUTION: Docker keeps
	// State.Running=true while Restarting, and NetworkSettings.Ports is empty —
	// callers treating Running as "up" will wait on a container that is dying
	// in a loop (T-98).
	Restarting bool
	ExitCode   int
	OOMKilled  bool
	StartedAt  time.Time
	FinishedAt time.Time
	// Ports actually bound (HostPort filled in).
	Ports  []PortBinding
	Labels map[string]string
	// IPAddress on its primary attached network.
	IPAddress string
	Image     string
}

type Docker struct {
	// contains filtered or unexported fields
}

type ExecSpec struct {
	Command []string
	TTY     bool
	Env     []string
	WorkDir string
}

type LogEntry struct {
	Time   time.Time
	Stderr bool
	Line   string
}

type LogsOptions struct {
	Since  time.Time
	Follow bool
	Tail   int // 0 = all
}

type Mount struct {
	VolumeName string // named Docker volume (preferred)
	HostPath   string // bind mount (system use only)
	Target     string
	ReadOnly   bool
}

type NetworkInfo struct {
	ID      string
	Name    string
	Subnet  string
	Gateway string
}

type NetworkSpec struct {
	Name   string
	Subnet string // CIDR, e.g. "10.201.4.0/24"
	Labels map[string]string
}

type PortBinding struct {
	Name          string // PortSpec.name, for correlation
	ContainerPort uint32
	Protocol      string // "tcp" | "udp"
	HostIP        string // mesh IP for cluster traffic; never 0.0.0.0 unless explicit
	HostPort      uint32
}

type RegistryAuth struct {
	Username string
	Password string
	// ServerAddress like "10.90.0.1:5000"; empty for Docker Hub.
	ServerAddress string
}

type Resources struct {
	CPUMillis uint32 // 1000 = one core (converted to NanoCPUs)
	MemoryMB  uint32
	PidsLimit int64
}

type RestartPolicy string

type StatsSample struct {
	CPUPercent  float64
	MemoryBytes uint64
	NetRxBytes  uint64
	NetTxBytes  uint64
}

type TermSize struct {
	Cols uint32
	Rows uint32
}