support

type BuildInfo struct {
	Commit  string `json:"commit,omitempty"`
	BuiltAt string `json:"built_at,omitempty"`
	Go      string `json:"go"`
}

type BuildOptions struct {
	Version       string
	GoVersion     string
	BuildCommit   string
	BuildAt       string
	Runtime       RuntimeInfo
	ClusterID     string
	Level         DebugLevel
	IncidentScope string
	// IncludeCollectors, when non-empty, restricts the bundle to collectors whose
	// ID is present (an incident-scoped collection). Empty/nil = every collector
	// (the "standard" scope). The catalog of scope→IDs lives in the owning package;
	// the engine stays generic. Level gating still applies within the scope.
	IncludeCollectors map[string]bool
	Profile           string
	CaseID            string
	Nonce             string
	Clock             func() time.Time
	Salt              []byte // optional; deterministic masking for tests
}

type BuildResult struct {
	BundleID     string
	Manifest     SupportBundleManifest
	Report       RedactionReport  // counts-only redaction report (also packaged in the tar)
	Preview      RedactionPreview // server-side consent preview; NEVER packaged in the tar
	TarGz        []byte
	BundleSHA256 string
}

type CollectInput struct {
	Level    DebugLevel
	Redactor redaction.Redactor
	Runtime  RuntimeInfo
	Clock    func() time.Time
}

type CollectionError struct {
	Collector  string `json:"collector"`
	Phase      string `json:"phase"`       // preflight|execute|redact|assemble
	ErrorClass string `json:"error_class"` // timeout|panic|unavailable|permission|budget|runtime_unsupported
	Message    string `json:"message"`     // redacted
	Fatal      bool   `json:"fatal"`
}

type CollectionStats struct {
	EngineStartedAt string `json:"engine_started_at"`
	EngineEndedAt   string `json:"engine_ended_at"`
	TotalCollectors int    `json:"total_collectors"`
	OK              int    `json:"ok"`
	Failed          int    `json:"failed"`
	Skipped         int    `json:"skipped"`
	ErrorCount      int    `json:"error_count"`
}

type Collector interface {
	Meta() CollectorMeta
	// Collect writes exactly one section into sink. It MUST respect ctx,
	// redact at source via in.Redactor, and return a Result (not an error) for
	// "subsystem down". It should not rely on the runner's panic recovery.
	Collect(ctx context.Context, in CollectInput, sink SectionSink) Result
}

type CollectorMeta struct {
	ID            string // stable snake_case; == section id; unique
	Path          string // section path in the tar (e.g. "sections/diagnostics.json")
	Owner         string // subsystem team
	SchemaVersion int    // per-section schema; bumped on shape change
	Description   string
	Timeout       time.Duration       // hard cap; runner cancels ctx at this
	ByteBudget    int64               // section size cap
	Mandatory     bool                // mandatory collectors gate completeness, never abort
	MinLevel      DebugLevel          // runs only at/above this level (L0 always)
	MaxClass      redaction.DataClass // asserted ceiling; a section exceeding it is dropped
	Sensitivity   redaction.DataClass // declared default class of this section's raw data
}

type DebugLevel int

type GeneratedBy struct {
	Product                string    `json:"product"`
	Version                string    `json:"version"`
	Build                  BuildInfo `json:"build"`
	CollectorEngineVersion int       `json:"collector_engine_version"`
}

type IntegrityInfo struct {
	ManifestSHA256 string `json:"manifest_sha256"` // hash of manifest with integrity fields zeroed
	BundleSHA256   string `json:"bundle_sha256"`   // hash of the whole tar
}

type NodeInfo struct {
	NodeID    string `json:"node_id"`
	Role      string `json:"role"`
	Runtime   string `json:"runtime"`
	ClusterID string `json:"cluster_id,omitempty"`
}

type RedactionInfo struct {
	ModelVersion int    `json:"model_version"`
	Profile      string `json:"profile"`
	FailClosed   bool   `json:"fail_closed"`
}

type RedactionPreview struct {
	ModelVersion int                       `json:"model_version"`
	Sections     []RedactionPreviewSection `json:"sections"`
}

type RedactionPreviewSection struct {
	ID               string   `json:"id"`
	RetainedFreeForm []string `json:"retained_freeform"`
}

type RedactionReport struct {
	ModelVersion int                      `json:"model_version"`
	Profile      string                   `json:"profile"`
	FailClosed   bool                     `json:"fail_closed"`
	Sections     []RedactionReportSection `json:"sections"`
	Totals       RedactionReportCounts    `json:"totals"`
}

type RedactionReportCounts struct {
	Masked   int `json:"masked"`
	Dropped  int `json:"dropped"`
	Scrubbed int `json:"scrubbed"`
}

type RedactionReportSection struct {
	ID       string `json:"id"`
	ClassMax string `json:"class_max"`
	Masked   int    `json:"masked"`
	Dropped  int    `json:"dropped"`
	Scrubbed int    `json:"scrubbed"` // free-form secret shapes redacted in kept strings
}

type Result struct {
	Status    SectionStatus
	ClassMax  redaction.DataClass // highest class actually written (post-redaction)
	Truncated bool
	Note      string // redacted, human-readable
}

type Runner struct{}

type RuntimeInfo struct {
	Runtime string // compose|k8s|host|unknown
	Role    string // standalone|control-plane|data-plane|ha-standby
	NodeID  string
}

type ScopeInfo struct {
	IncidentScope string `json:"incident_scope"`
	DebugLevel    int    `json:"debug_level"`
}

type SectionEntry struct {
	ID               string        `json:"id"`
	Path             string        `json:"path"`
	Collector        string        `json:"collector"`
	CollectorVersion int           `json:"collector_version"`
	Owner            string        `json:"owner"`
	ClassMax         string        `json:"class_max"`
	SHA256           string        `json:"sha256,omitempty"`
	SizeBytes        int64         `json:"size_bytes"`
	StartedAt        string        `json:"started_at"`
	EndedAt          string        `json:"ended_at"`
	Status           SectionStatus `json:"status"`
	Truncated        bool          `json:"truncated"`
	Note             string        `json:"note,omitempty"`
}

type SectionSink interface {
	// WriteJSON marshals v (already redacted by the collector) deterministically
	// into the section, enforcing the byte budget.
	WriteJSON(v any) error
}

type SectionStatus string

type SupportBundleManifest struct {
	Format      string          `json:"format"`
	BundleID    string          `json:"bundle_id"`
	CreatedAt   string          `json:"created_at"` // RFC3339 UTC
	GeneratedBy GeneratedBy     `json:"generated_by"`
	Node        NodeInfo        `json:"node"`
	Scope       ScopeInfo       `json:"scope"`
	CaseID      string          `json:"case_id,omitempty"`
	Redaction   RedactionInfo   `json:"redaction"`
	Sections    []SectionEntry  `json:"sections"`
	Integrity   IntegrityInfo   `json:"integrity"`
	Collection  CollectionStats `json:"collection"`
}