dataplane

type AuxiliaryFiles struct {
	// GeneralFiles contains general-purpose files (error pages, custom response files, etc.)
	GeneralFiles []auxiliaryfiles.GeneralFile

	// SSLCertificates contains SSL certificates to sync to HAProxy SSL storage
	SSLCertificates []auxiliaryfiles.SSLCertificate

	// SSLCaFiles contains SSL CA certificate files for client/backend certificate verification
	SSLCaFiles []auxiliaryfiles.SSLCaFile

	// MapFiles contains map files for backend routing and other map-based features
	MapFiles []auxiliaryfiles.MapFile

	// CRTListFiles contains crt-list files for SSL certificate lists with per-certificate options
	CRTListFiles []auxiliaryfiles.CRTListFile
}

type Capabilities struct {
	// Storage capabilities
	SupportsCrtList        bool // crt-list files (3.2+)
	SupportsMapStorage     bool // map files (3.0+)
	SupportsGeneralStorage bool // general files (3.0+)
	SupportsSslCaFiles     bool // CA files (3.2+)
	SupportsSslCrlFiles    bool // CRL files (3.2+)

	// Configuration capabilities
	SupportsHTTP2            bool // HTTP/2 (3.0+)
	SupportsQUIC             bool // QUIC/HTTP3 (3.0+)
	SupportsQUICInitialRules bool // quic-initial rules (3.1+)

	// Observability capabilities
	SupportsLogProfiles bool // log-profile sections (3.1+)
	SupportsTraces      bool // traces section (3.1+)

	// Certificate automation capabilities
	SupportsAcmeProviders bool // acme sections (3.2+)

	// Runtime capabilities
	SupportsRuntimeMaps    bool // runtime map operations (3.0+)
	SupportsRuntimeServers bool // runtime server operations (3.0+)
}

type CheckGate struct {
	// contains filtered or unexported fields
}

type CheckVerdicts struct {
	// contains filtered or unexported fields
}

type Endpoint struct {
	// URL is the agent endpoint (e.g., "http://haproxy:5555").
	URL string

	// Username for basic authentication
	Username string

	// Password for basic authentication
	Password string

	// PodName is the Kubernetes pod name (for observability)
	PodName string

	// PodNamespace is the Kubernetes pod namespace (for observability)
	PodNamespace string

	// PodUID distinguishes replacements that reuse the same namespace and name.
	PodUID string

	// PodRuntimeID distinguishes container restarts and image changes within one pod UID.
	PodRuntimeID string

	// HAProxy version the pod's agent reported, cached after discovery
	// admission. It decides this pod's runtime capabilities and, at its fleet
	// minimum, the template ones. Zero values mean not yet detected.
	DetectedMajorVersion int    // Major version (e.g., 3)
	DetectedMinorVersion int    // Minor version (e.g., 4)
	DetectedFullVersion  string // Full version string (e.g., "3.4.3")
}

type HAProxyExecutor interface {
	// Version returns the combined output of `haproxy -v`.
	Version(ctx context.Context) (string, error)
	// Check runs `haproxy <args...>` with the working directory set to
	// workDir and returns the combined output. The working directory
	// matters: semantic validation invokes haproxy with a relative config
	// path so that relative file references inside the config resolve.
	Check(ctx context.Context, workDir string, args ...string) ([]byte, error)
}

type PathConfig struct {
	// MapsDir is the base path for HAProxy map files (e.g., /etc/haproxy/maps).
	MapsDir string

	// SSLDir is the base path for HAProxy SSL certificates (e.g., /etc/haproxy/ssl).
	SSLDir string

	// GeneralDir is the base path for HAProxy general files (e.g., /etc/haproxy/general).
	GeneralDir string

	// ConfigFile is the path to the HAProxy configuration file (e.g., /tmp/haproxy.cfg).
	// Only used in validation contexts; can be empty for production paths.
	ConfigFile string
}

type RefusalError struct {
	// Causes are HAProxy's failure messages without process IDs, line numbers, or the
	// check's working directory, so refusals of different renders compare by cause.
	Causes []string
	// contains filtered or unexported fields
}

type ResolvedPaths struct {
	// MapsDir is the resolved path for HAProxy map files.
	MapsDir string

	// SSLDir is the resolved path for HAProxy SSL certificates.
	SSLDir string

	// CRTListDir is the resolved path for CRT-list files.
	// Always equals GeneralDir because CRT-list files are stored as general files
	// to avoid reload on create (native CRT-list API doesn't support skip_reload).
	CRTListDir string

	// GeneralDir is the resolved path for HAProxy general files.
	GeneralDir string

	// ConfigFile is the path to the HAProxy configuration file.
	ConfigFile string
}

type ValidationError struct {
	// Phase indicates which validation phase failed: "syntax" or "semantic"
	Phase string

	// Message is the validation error message
	Message string

	// Cause is the underlying error
	Cause error
}

type ValidationPaths struct {
	// TempDir is the root temp directory for validation files.
	// The validator is responsible for cleaning this up after validation completes.
	// This prevents race conditions where the renderer's cleanup runs before
	// the async validator can use the validation files.
	TempDir           string
	MapsDir           string
	SSLCertsDir       string
	CRTListDir        string // Directory for CRT-list files (may differ from SSLCertsDir on HAProxy < 3.2)
	GeneralStorageDir string
	ConfigFile        string
}

type Version struct {
	Major int
	Minor int
	Patch int
	Full  string // Original version string, retained for logging
}