routing

type InfraNotReadyError struct {
	Reason string
}

type MeshConfig struct {
	// Mode is the data-plane enrollment mode (ambient/sidecar/none).
	Mode MeshMode
	// WaypointEnabled turns on per-child waypoint routing (ambient only). When
	// false, namespaces are enrolled without a waypoint label.
	WaypointEnabled bool
	// WaypointNamespace is where the per-child waypoint Gateways live (e.g.
	// istio-system) on both the regional and child clusters.
	WaypointNamespace string
}

type MeshMode string

type OrphanSweeper interface {
	SweepOrphans(ctx context.Context, req SweepRequest) error
}

type RouteProvider interface {
	// EnsureRoutes materializes access for all endpoints of the workspace
	// and returns what is reachable. Idempotent: repeat calls with unchanged
	// input converge on the same entries. An entry with Ready=false and a
	// Message is the per-endpoint failure surface (e.g. pool exhausted);
	// returning an error signals a provider-wide transient problem the
	// caller should retry.
	EnsureRoutes(ctx context.Context, req RouteRequest) ([]workspacesv1.AccessEntry, error)

	// CleanupRoutes removes everything EnsureRoutes created for the
	// workspace. Idempotent; must tolerate nil req.Endpoints and routes
	// that never existed.
	CleanupRoutes(ctx context.Context, req RouteRequest) error
}

type RouteRequest struct {
	// Workspace is the deployment being routed.
	Workspace *workspacesv1.WorkspaceDeployment

	// Endpoints are the access endpoints declared by the WorkspaceClass.
	// May be nil during cleanup when the class is no longer resolvable —
	// providers must be able to clean up from workspace identity alone
	// (e.g. via labels on the objects they created).
	Endpoints []workspacesv1.AccessEndpoint

	// ManagementClient reads cluster topology and kubeconfig secrets on the
	// management cluster.
	ManagementClient client.Client

	// Scheme is the management client's scheme, for building per-cluster
	// clients.
	Scheme *runtime.Scheme
}

type SweepRequest struct {
	// ManagementClient reads cluster topology and kubeconfig secrets on the
	// management cluster.
	ManagementClient client.Client
	// Scheme for building per-cluster clients.
	Scheme *runtime.Scheme
	// IsActiveWorkspace reports whether a WorkspaceDeployment with the given
	// name currently exists (in any namespace — conservative on purpose:
	// the sweep must never remove live routes).
	IsActiveWorkspace func(name string) bool
}

type WaypointConfig struct {
	Name      string
	Namespace string
}