httpclient

type Bundle struct {
	// contains filtered or unexported fields
}

type CircuitBreakerConfig struct {
	Name        string                             // Circuit breaker name for metrics
	MaxRequests uint32                             // Max requests in half-open state (default: 3)
	Interval    time.Duration                      // Interval to clear failure counts (default: 60s)
	Timeout     time.Duration                      // Timeout in open state (default: 30s)
	ReadyToTrip func(counts gobreaker.Counts) bool // Custom trip function
}

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	// BaseURL is the base URL for all requests (optional).
	BaseURL string

	// Timeout is the overall request timeout.
	Timeout time.Duration

	// Transport configuration
	MaxIdleConns          int           // Maximum idle connections (default: 100)
	MaxIdleConnsPerHost   int           // Maximum idle connections per host (default: 10)
	IdleConnTimeout       time.Duration // Idle connection timeout (default: 90 seconds)
	TLSHandshakeTimeout   time.Duration // TLS handshake timeout (default: 10 seconds)
	ExpectContinueTimeout time.Duration // Expect 100-continue timeout (default: 1 second)

	// TLS configuration
	TLSConfig *tls.Config

	// Authentication configuration
	EnableJWTAuth bool   // Enable automatic JWT authentication
	APIKeyHeader  string // Header name for API key (default: "X-API-Key")

	// Secure credential provider (replaces plain text APIKey)
	CredentialProvider CredentialProvider // Provider for secure credential access

	// AllowedHosts optionally restricts requests (including RawRequest and
	// resolved BaseURL+path lookups) to this set of hosts. This is opt-in
	// defense-in-depth against SSRF for services that pass user-influenced
	// URLs or paths through the client. Empty/nil (default) preserves the
	// existing unrestricted behavior.
	AllowedHosts []string

	// Retry configuration
	RetryConfig RetryConfig

	// Circuit breaker configuration
	CircuitBreakerConfig CircuitBreakerConfig

	// Logging and observability
	EnableRequestLogging bool // Enable request/response logging
	EnableMetrics        bool // Enable request metrics collection
	LogRequestBody       bool // Log request bodies (be careful with sensitive data)
	LogResponseBody      bool // Log response bodies (be careful with sensitive data)
	MaxLogBodySize       int  // Maximum body size to log (default: 1024 bytes)

	// User agent
	UserAgent string // User agent string (default: "Forge-HTTP-Client/1.0")
}

type CredentialProvider interface {
	// GetAPIKey returns the API key for authentication.
	GetAPIKey(ctx context.Context) (string, error)

	// GetJWTToken returns a JWT token for authentication.
	GetJWTToken(ctx context.Context) (string, error)
}

type HTTPError struct {
	StatusCode int    `json:"status_code"`
	Status     string `json:"status"`
	Body       string `json:"body,omitempty"`
	URL        string `json:"url"`
	Method     string `json:"method"`
}

type RetryConfig struct {
	MaxRetries          int           // Maximum number of retries (default: 3)
	InitialInterval     time.Duration // Initial retry interval (default: 100ms)
	MaxInterval         time.Duration // Maximum retry interval (default: 5s)
	Multiplier          float64       // Backoff multiplier (default: 2.0)
	RandomizationFactor float64       // Randomization factor (default: 0.1)
}

type StaticCredentialProvider struct {
	// contains filtered or unexported fields
}