client

type APIError struct {
	// Status is the non-success HTTP status returned by the remote server.
	Status int
	// Code is decoded from the remote problem body and printed by Error; it is
	// not independently sanitized by Client.
	Code string
}

type APIKeySource interface {
	// APIKey returns a nonblank identifier and secret for this request;
	// implementations own blocking, concurrency and secret lifetime.
	APIKey(context.Context) (string, string, error)
}

type AuditQuery struct {
	// After is the exclusive audit sequence cursor; zero starts at retained
	// history.
	After uint64
	// Limit bounds one audit page; zero leaves the server default.
	Limit uint32
}

type Client struct {
	// contains filtered or unexported fields
}

type CommandQuery struct {
	// Cursor is optional bounded opaque newest-first pagination state.
	Cursor string
	// Limit bounds one command page; zero leaves the server default.
	Limit uint32
}

type Config struct {
	// BaseURL must be an HTTP(S) origin without credentials, query, fragment or
	// non-root path; TLS trust is caller-configured.
	BaseURL string
	// HTTPClient is shallow-copied with redirects disabled; nil selects a
	// 30-second client. Transport and Jar remain shared caller-owned
	// collaborators.
	HTTPClient *http.Client
	// Tokens is one borrowed authentication source; exactly one of Tokens and
	// APIKeys must be supplied.
	Tokens TokenSource
	// APIKeys is one borrowed authentication source, mutually exclusive with
	// Tokens.
	APIKeys APIKeySource
	// MaxResponseBytes bounds buffered response bytes before JSON parsing; zero
	// selects 4 MiB, negative values fail.
	MaxResponseBytes int64
}

type QueueQuery struct {
	// Cursor is optional bounded backend pagination state, not authorization.
	Cursor string
	// Limit bounds one queue-status page; zero leaves the server default.
	Limit uint32
}

type RecordInspectOptions struct {
	// Payload must select hidden, redacted or revealed visibility. Revealed
	// bytes require additional permission/access audit; hidden/redacted
	// inspection still requires record_inspect.
	Payload queue.PayloadVisibility
	// RevealDiagnostics requests separately authorized/audited diagnostics, not
	// blanket payload access.
	RevealDiagnostics bool
}

type RecordQuery struct {
	// Cursor is optional bounded backend pagination state.
	Cursor string
	// Limit bounds one record page; zero leaves the server default.
	Limit uint32
	// Search is optional bounded metadata search text; it is not payload
	// search.
	Search string
	// Sort optionally selects occurrence time, queue or attempt ordering.
	Sort queue.SortField
	// Direction optionally selects ascending or descending order; empty leaves
	// the server default.
	Direction queue.SortDirection
}

type TokenSource interface {
	// Token acquires credentials synchronously for ctx; callers own blocking,
	// shared-use safety and credential lifetime.
	Token(context.Context) (string, error)
}

type WorkerQuery struct {
	// Limit bounds one worker page; zero leaves the server default and values
	// above MaxWorkerPageSize fail.
	Limit uint32
	// After is the optional last worker identity cursor passed to the server.
	After string
	// State optionally filters derived fleet state; the server validates
	// supported values.
	State fleet.State
	// Queue optionally selects a queue membership filter.
	Queue string
}

type WorkloadQuery struct {
	// Limit bounds one workload page; zero leaves the server default, negative
	// or oversized values fail.
	Limit int64
	// Continue is the optional opaque Kubernetes pagination token, not an
	// authorization capability.
	Continue string
}