v1alpha3

type Address struct {
	// Address line 1.
	// +optional
	AddressLine1 string `json:"addressLine1,omitempty"`

	// Address line 2.
	// +optional
	AddressLine2 string `json:"addressLine2,omitempty"`

	// City.
	// +optional
	City string `json:"city,omitempty"`

	// State or province.
	// +optional
	StateProvince string `json:"stateProvince,omitempty"`

	// PostalCode or ZIP code.
	// +optional
	PostalCode string `json:"postalCode,omitempty"`

	// Country code (ISO 3166-1 alpha-2).
	// +optional
	Country string `json:"country,omitempty"`
}

type DomainRecord struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec   DomainRecordSpec   `json:"spec,omitempty"`
	Status DomainRecordStatus `json:"status,omitempty"`
}

type DomainRecordList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DomainRecord `json:"items"`
}

type DomainRecordPhase string

type DomainRecordSpec struct {
	// Zone is the name of the DomainZone that manages this record.
	// Optional - empty means standalone (custom domain, not zone-managed).
	// +optional
	Zone string `json:"zone,omitempty"`

	// Name is the DNS record name (e.g. "example.com", "www.example.com").
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Name string `json:"name"`

	// TTL in seconds. Optional, defaults to 300.
	// +kubebuilder:validation:Minimum=0
	// +kubebuilder:validation:Maximum=86400
	// +optional
	TTL *int32 `json:"ttl,omitempty"`

	// Target specifies the record data.
	// +kubebuilder:validation:Required
	Target DomainRecordTarget `json:"target"`

	// TLS configures TLS certificate provisioning for this record's domains.
	// Only valid when target.ref is set.
	// +optional
	TLS *DomainTLSSpec `json:"tls,omitempty"`
}

type DomainRecordStatus struct {
	// Type is the resolved DNS record type (A, AAAA, CNAME, TXT, MX, etc.).
	// Derived from the populated DNS field or resolved from ref.
	// +optional
	Type string `json:"type,omitempty"`

	// Phase is the record's lifecycle state. Empty on records that have not
	// been reconciled by a phase-aware controller yet; consumers fall back to
	// conditions in that case.
	// +optional
	Phase DomainRecordPhase `json:"phase,omitempty"`

	// Conditions contains domain record conditions.
	// Standard conditions: Ready, ZoneReady, TargetReady.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`

	// ResolvedValues contains the actual DNS values configured.
	// Populated by the controller when target.ref is used.
	// +optional
	ResolvedValues []string `json:"resolvedValues,omitempty"`
}

type DomainRecordTarget struct {
	// DNS specifies the record data directly.
	// Exactly one of DNS or Ref must be set.
	// +optional
	DNS *DomainRecordTargetDNS `json:"dns,omitempty"`

	// Ref specifies a reference to another object within Apoxy
	// (e.g. Proxy, Gateway, DomainRecord).
	// Exactly one of DNS or Ref must be set.
	// +optional
	Ref *LocalObjectReference `json:"ref,omitempty"`
}

type DomainRecordTargetDNS struct {
	// A holds IPv4 A record addresses.
	// +optional
	A []string `json:"a,omitempty"`

	// AAAA holds IPv6 AAAA record addresses.
	// +optional
	AAAA []string `json:"aaaa,omitempty"`

	// FQDN holds a CNAME record target.
	// +optional
	FQDN *string `json:"fqdn,omitempty"`

	// TXT holds TXT record values.
	// +optional
	TXT []string `json:"txt,omitempty"`

	// MX holds Mail Exchange record values (e.g. "10 mail.example.com").
	// +optional
	MX []string `json:"mx,omitempty"`

	// DKIM holds DKIM (DomainKeys Identified Mail) values.
	// Values should be DKIM public key records (e.g. "v=DKIM1; k=rsa; p=...").
	// +optional
	DKIM []string `json:"dkim,omitempty"`

	// SPF holds SPF (Sender Policy Framework) values.
	// Values should follow SPF syntax (e.g. "v=spf1 include:_spf.google.com ~all").
	// +optional
	SPF []string `json:"spf,omitempty"`

	// DMARC holds DMARC values.
	// Values should follow DMARC syntax (e.g. "v=DMARC1; p=reject; rua=mailto:...").
	// +optional
	DMARC []string `json:"dmarc,omitempty"`

	// CAA holds Certification Authority Authorization record values.
	// +optional
	CAA []string `json:"caa,omitempty"`

	// SRV holds Service Locator record values.
	// +optional
	SRV []string `json:"srv,omitempty"`

	// NS holds Name Server record values.
	// +optional
	NS []string `json:"ns,omitempty"`

	// DS holds DS (Delegation Signer) records for DNSSEC chain of trust.
	// Values should be DS record data (e.g. "12345 8 2 <digest>").
	// +optional
	DS []string `json:"ds,omitempty"`

	// DNSKEY holds DNSKEY records for DNSSEC.
	// Values should be DNSKEY record data (e.g. "257 3 8 <base64-encoded-key>").
	// +optional
	DNSKEY []string `json:"dnskey,omitempty"`
}

type DomainTLSSpec struct {
	// The Certificate Authority used to issue the TLS certificate.
	// Currently supports "letsencrypt".
	// +optional
	CertificateAuthority string `json:"certificateAuthority,omitempty"`

	// Disabled turns off certificate provisioning for this domain, leaving it
	// served over plain HTTP.
	//
	// TLS is the default for every ref target — omitting the whole `tls` block
	// gets you a managed certificate — so this field is the only way to ask
	// for an HTTP-only hostname. Use it when traffic must flow before a
	// certificate can exist: during a migration you can prove ownership with
	// the `_apoxy-challenge` delegation, serve HTTP immediately, then clear
	// this field to have the certificate issued.
	//
	// A domain that already holds a certificate keeps serving it until the
	// certificate is removed; setting this only stops future issuance and
	// renewal.
	// +optional
	Disabled bool `json:"disabled,omitempty"`
}

type DomainZone struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`

	Spec DomainZoneSpec `json:"spec,omitempty"`

	Status DomainZoneStatus `json:"status,omitempty"`
}

type DomainZoneList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []DomainZone `json:"items"`
}

type DomainZonePhase string

type DomainZoneSpec struct {
	// RegistrationConfig contains configuration for domain registration.
	// +optional
	RegistrationConfig *RegistrationConfig `json:"registrationConfig,omitempty"`

	// Nameservers to use for this domain zone.
	// If not specified, defaults to Apoxy's nameservers.
	// +optional
	Nameservers []string `json:"nameservers,omitempty"`
}

type DomainZoneStatus struct {
	// Phase of the domain zone.
	Phase DomainZonePhase `json:"phase,omitempty"`

	// RegistrationStatus contains information about domain registration.
	// +optional
	RegistrationStatus *RegistrationStatus `json:"registrationStatus,omitempty"`

	// Nameservers contains information about nameserver configuration.
	// +optional
	Nameservers *NameserverStatus `json:"nameservers,omitempty"`

	// Conditions of the domain zone.
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type Group string

type Kind string

type LocalObjectReference struct {
	// Group is the API Group of the referenced object.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Group Group `json:"group"`

	// Kind is the kind of the referenced object.
	// e.g. Proxy, EdgeFunction, TunnelEndpoint.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:Pattern=`^[a-z0-9][a-z0-9-]*$`
	Kind Kind `json:"kind"`

	// Name is the name of the referenced object.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:Pattern=`^[a-z0-9][a-z0-9-]*$`
	Name ObjectName `json:"name"`
}

type NameserverStatus struct {
	// Required nameservers that should be configured.
	// +optional
	Required []string `json:"required,omitempty"`

	// Current nameservers that are actually configured.
	// +optional
	Current []string `json:"current,omitempty"`
}

type Namespace string

type ObjectName string

type Registrant struct {
	// FirstName of the registrant.
	// +optional
	FirstName string `json:"firstName,omitempty"`

	// LastName of the registrant.
	// +optional
	LastName string `json:"lastName,omitempty"`

	// Email of the registrant.
	// +optional
	Email string `json:"email,omitempty"`

	// Phone number of the registrant.
	// +optional
	Phone string `json:"phone,omitempty"`

	// Organization of the registrant.
	// +optional
	Organization string `json:"organization,omitempty"`

	// Address of the registrant.
	// +optional
	Address *Address `json:"address,omitempty"`
}

type RegistrationConfig struct {
	// AutoRenew indicates whether the domain should be automatically renewed.
	// +optional
	AutoRenew bool `json:"autoRenew,omitempty"`

	// RegistrationPeriodYears is the number of years to register the domain for.
	// +optional
	RegistrationPeriodYears int `json:"registrationPeriodYears,omitempty"`

	// Registrant contains the registrant contact information.
	// +optional
	Registrant *Registrant `json:"registrant,omitempty"`
}

type RegistrationStatus struct {
	// RegistrationID is the unique identifier for the registration.
	// +optional
	RegistrationID string `json:"registrationID,omitempty"`

	// EstimatedCost is the estimated cost for registration or renewal.
	// +optional
	EstimatedCost string `json:"estimatedCost,omitempty"`

	// PaymentURL is the URL to complete payment for registration or renewal.
	// +optional
	PaymentURL string `json:"paymentURL,omitempty"`

	// RegisteredAt is the time when the domain was registered.
	// +optional
	RegisteredAt *metav1.Time `json:"registeredAt,omitempty"`

	// ExpiresAt is the time when the domain registration expires.
	// +optional
	ExpiresAt *metav1.Time `json:"expiresAt,omitempty"`

	// Error contains error information if registration failed.
	// +optional
	Error string `json:"error,omitempty"`
}