core

type AccountManager struct {
	// contains filtered or unexported fields
}

type ClusterManager struct {
	// contains filtered or unexported fields
}

type Config struct {
	OperatorNatsCluster *OperatorNatsCluster
	// OperatorNamespace is the Kubernetes namespace where the operator is deployed.
	// TODO: [#102][#144] When sunsetting DefaultNatsURL, remove this field if it no longer serves a purpose.
	OperatorNamespace domain.Namespace
	// DefaultNatsURL is a comma-separated list of NATS server URLs to use when OperatorNatsCluster is not configured.
	// Deprecated: This field is deprecated and will be removed in a future release.
	// TODO: [#102][#144] Sunset DefaultNatsURL (NATS_URL)
	DefaultNatsURL string
}

type OperatorNatsCluster struct {
	ClusterRef v1alpha1.NatsClusterRef
	// Optional controls account-level overrides when ClusterRef is configured.
	// false (default) means account-level cluster refs must not deviate.
	Optional bool
}

type Secrets struct {
	Root nkeys.KeyPair
	Sign nkeys.KeyPair
}

type SignedUserJWT struct {
	UserJWT   string
	AccountID string
	SignedBy  string
}

type UserJWTSigner interface {
	SignUserJWT(ctx context.Context, accountRef domain.NamespacedName, claims *jwt.UserClaims) (*SignedUserJWT, error)
}

type UserManager struct {
	// contains filtered or unexported fields
}