config

type Binding[T any] struct {
	// contains filtered or unexported fields
}

type Config struct {
	// EnvPrefix specifies the prefix for environment variables used to override configuration values.
	EnvPrefix string

	// ConfigDirs specifies the directories to search for configuration files in the given order.
	ConfigDirs []string

	// ConfigName specifies the base name of the configuration file without its file extension.
	ConfigName string

	// Args contains the command-line arguments to be parsed for configuration overrides.
	Args []string

	// DebounceDelay is how long to wait after a file change event before reloading config.
	// Defaults to 100ms. Set to a lower value in tests.
	DebounceDelay time.Duration

	// Profile selects an environment overlay file (lakta.<Profile>.<ext>) loaded
	// after the base config so its keys win. Empty disables the overlay.
	// Defaults from the LAKTA_PROFILE env var.
	Profile string
}

type Module struct {
	// contains filtered or unexported fields
}

type Option func(cfg *Config)

type Passthrough[T any] map[string]any

type ProvenanceEntry struct {
	Key    string `json:"key"`
	Origin string `json:"origin"` // file|env|flag|default
	Value  any    `json:"value"`  // pre-redaction; caller redacts before display
}

type ReloadNotifier = lakta.ReloadNotifier

type TLS struct {
	// CertFile is the path to the PEM-encoded certificate (server identity, or
	// client identity for mutual TLS).
	CertFile string `koanf:"cert_file"`

	// KeyFile is the path to the PEM-encoded private key for CertFile.
	KeyFile string `koanf:"key_file"`

	// ClientCAFile is the path to a PEM bundle of CAs used by a server to verify
	// client certificates. Setting it enables mutual TLS.
	ClientCAFile string `koanf:"client_ca_file"`

	// CAFile is the path to a PEM bundle of CAs used by a client to verify the
	// server certificate. Leave empty to use the system trust store.
	CAFile string `koanf:"ca_file"`

	// ClientAuth overrides the server's client-certificate policy: "none",
	// "request", "require", "verify", or "require_and_verify". Defaults to
	// "require_and_verify" when ClientCAFile is set, otherwise "none".
	ClientAuth string `koanf:"client_auth"`
}

type Validatable interface {
	Validate() error
}