external

type Advisory struct {
	Code     string `json:"code"`
	Field    string `json:"field"`
	Severity string `json:"severity"`
	// Detail is the offending value, so a log line or an MCP caller can see
	// what triggered the advisory without re-reading the row.
	Detail string `json:"detail,omitempty"`
	// Message is English. The admin UI prefers its own translation of Code.
	Message string `json:"message"`
}

type AdvisoryInput struct {
	Service      string
	ServiceURL   string
	PublicURL    string
	PublicURLSet bool
	// CallbackURL is the separate address the service uses to reach filex,
	// when the operator set one. It, not PublicURL, is what the callback
	// advisories must judge: the whole point of the field is that the two can
	// differ.
	CallbackURL string
	Lookup      LookupFunc
}

type LookupFunc func(host string) (definitelyNotFound bool)

type Resolver struct {
	// contains filtered or unexported fields
}

type Settings struct {
	Enabled bool
	URL     string
	Secret  string
	// CallbackURL is the address the SERVICE uses to reach filex — the third
	// address in the three-address problem (see advisory.go). Empty means "use
	// filex's public URL", which is right whenever one address serves both
	// purposes.
	//
	// ⚠ It exists because that is not always true. filex has ONE public URL
	// and it builds both the share links people click and the document URL it
	// hands the document server; a container that cannot resolve the public
	// hostname needs a different address for the second, and until this field
	// there was no way to give it one — the document opened and the save never
	// came back (issue #17, third round). Stored in options_json so no
	// migration is needed and the row keeps one shape.
	CallbackURL string
}