validation

type CheckObserver func(result string, reused bool)

type ValidationResult struct {
	// Valid is true if the configuration passed all validation phases.
	Valid bool

	// Error contains the validation error if Valid is false.
	Error error

	// Phase indicates which validation phase failed (semantic, render, setup).
	// Empty if validation succeeded.
	Phase string

	// DurationMs is the total validation duration in milliseconds.
	DurationMs int64

	// Warnings contains non-fatal diagnostics from additional validation stages.
	Warnings []string
}

type ValidationService struct {
	// contains filtered or unexported fields
}

type ValidationServiceConfig struct {
	// Logger is the structured logger for logging.
	Logger *slog.Logger

	// SkipDNSValidation controls whether to skip DNS resolution failures during validation.
	// When true, servers with unresolvable hostnames start in DOWN state instead of failing.
	// When false (strict mode), DNS resolution failures cause validation to fail.
	SkipDNSValidation bool

	// BaseDir is the production base directory used in "default-path origin" directive.
	// During local validation, this is replaced with the temp directory path so that
	// HAProxy resolves relative paths from the temp directory instead of production paths.
	// Example: "/etc/haproxy"
	BaseDir string

	// MapsDir is the relative directory name for map files (e.g., "maps").
	// Should match the basename of the dataplane MapsDir config.
	MapsDir string

	// SSLCertsDir is the relative directory name for SSL certificates (e.g., "ssl").
	// Should match the basename of the dataplane SSLCertsDir config.
	SSLCertsDir string

	// GeneralDir is the relative directory name for general files (e.g., "general").
	// Should match the basename of the dataplane GeneralStorageDir config.
	GeneralDir string

	// CheckGate serializes this service's `haproxy -c` runs. Give the render
	// gate its own so admission never waits out a fleet-sized config check.
	CheckGate *dataplane.CheckGate

	// Verdicts answers an input set HAProxy already judged; services sharing
	// one never check the same bytes twice. Nil checks every time, and a
	// strict-DNS service never reuses a verdict.
	Verdicts *dataplane.CheckVerdicts

	// CheckObserver is told about every check this service asks HAProxy for.
	CheckObserver CheckObserver
}