core

type AgentAuditPost struct {
	MessageType  AgentMsg    // AgentMsgAudit
	MyIdentity   string      // Sender identity
	YourIdentity string      // Recipient identity
	Zone         string      // Zone (FQDN)
	AuditData    interface{} // Zone data repo snapshot (placeholder)
	Message      string      // Optional status message
	Time         time.Time   // Timestamp
}

type AgentBeatPost struct {
	MessageType    AgentMsg
	MyIdentity     string          // Sender's identity
	YourIdentity   string          // Recipient's identity
	MyBeatInterval uint32          // Intended beat interval in seconds
	Zones          []string        // Zones shared with the remote agent
	Time           time.Time       // Message timestamp
	Gossip         json.RawMessage `json:"Gossip,omitempty"` // Gossip data (opaque at core level)
}

type AgentBeatResponse struct {
	Status       string // ok | error
	MyIdentity   string // Responder's identity
	YourIdentity string // Original sender
	Time         time.Time
	Client       string
	Msg          string
	Error        bool
	ErrorMsg     string
}

type AgentConfigPost struct {
	MessageType  AgentMsg          // AgentMsgConfig
	MyIdentity   string            // Sender identity
	YourIdentity string            // Recipient identity
	Zone         string            // Zone (FQDN)
	Subtype      string            // Config subtype: "upstream", "downstream", "sig0key"
	ConfigData   map[string]string // Key-value config data
	Message      string            // Optional status message
	Time         time.Time         // Timestamp
}

type AgentEditsPost struct {
	MessageType  AgentMsg                       // AgentMsgEdits
	MyIdentity   string                         // Combiner identity
	YourIdentity string                         // Requesting agent identity
	Zone         string                         // Zone (FQDN)
	AgentRecords map[string]map[string][]string // All agents' contributions (agentID → owner → []RR strings)
	Message      string                         // Optional status message
	Time         time.Time                      // Timestamp
}

type AgentHelloPost struct {
	MessageType  AgentMsg
	Name         string    `json:"name,omitempty"` // DEPRECATED: Unused field
	MyIdentity   string    // Agent identity (FQDN)
	YourIdentity string    // Recipient identity (FQDN)
	Addresses    []string  `json:"addresses,omitempty"` // DEPRECATED: Use DNS discovery (SVCB records) instead
	Port         uint16    `json:"port,omitempty"`      // DEPRECATED: Use DNS discovery (URI scheme) instead
	TLSA         dns.TLSA  `json:"tlsa,omitempty"`      // DEPRECATED: Use DNS discovery (TLSA query) instead
	Zone         string    // Zone that triggered this hello (only one zone per hello)
	Time         time.Time // Message timestamp
}

type AgentHelloResponse struct {
	Status       string // ok | error
	MyIdentity   string // Responder's identity
	YourIdentity string // Original sender
	Time         time.Time
	Msg          string
	Error        bool
	ErrorMsg     string
}

type AgentKeystatePost struct {
	MessageType  AgentMsg            // AgentMsgKeystate
	MyIdentity   string              // Sender's identity
	YourIdentity string              // Recipient's identity
	Zone         string              // Zone this key belongs to (FQDN)
	KeyTag       uint16              // DNSKEY key tag (unused for inventory)
	Algorithm    uint8               // DNSKEY algorithm number (unused for inventory)
	Signal       string              // "propagated", "rejected", "removed", "published", "retired", "inventory"
	Message      string              // Optional detail (e.g. rejection reason)
	KeyInventory []KeyInventoryEntry // Complete key inventory (only when Signal == "inventory")
	Time         time.Time           // Message timestamp
}

type AgentKeystateResponse struct {
	Status       string // ok | error
	MyIdentity   string // Responder's identity
	YourIdentity string // Original sender
	Zone         string // Echoed zone
	KeyTag       uint16 // Echoed key tag
	Signal       string // Echoed signal
	Time         time.Time
	Msg          string
	Error        bool
	ErrorMsg     string
}

type AgentMsg string

type AgentMsgPost struct {
	MessageType  AgentMsg            // "sync", "update", "rfi", "status"
	OriginatorID string              // Original author of the update
	YourIdentity string              // Recipient's identity
	Addresses    []string            `json:"addresses,omitempty"` // DEPRECATED: Use DNS discovery (SVCB records) instead
	Port         uint16              `json:"port,omitempty"`      // DEPRECATED: Use DNS discovery (URI scheme) instead
	TLSA         dns.TLSA            `json:"tlsa,omitempty"`      // DEPRECATED: Use DNS discovery (TLSA query) instead
	Zone         string              // Zone this message refers to (only one zone per message)
	Records      map[string][]string `json:"records,omitempty"`    // Resource records grouped by owner name (legacy: Class-overloaded)
	Operations   []RROperation       `json:"operations,omitempty"` // Explicit operations (takes precedence over Records)
	Time         time.Time           // Message timestamp
	RfiType      string              // Type of RFI request if MessageType is RFI
	RfiSubtype   string              `json:"rfi_subtype,omitempty"` // Subtype within an RFI type (e.g. "upstream", "sig0key" for CONFIG)
	Nonce        string              `json:"nonce,omitempty"`       // Unique nonce for replay protection and confirmation correlation
	ZoneClass    string              `json:"zone_class,omitempty"`  // "mp" (default) or "provider"
	Publish      *PublishInstruction `json:"publish,omitempty"`     // KEY/CDS publication instruction for combiner
}

type AgentMsgResponse struct {
	Status      string // ok | error
	Time        time.Time
	AgentId     string
	Msg         string
	Zone        string
	RfiResponse map[string]*RfiData
	Error       bool
	ErrorMsg    string
}

type AgentPingPost struct {
	MessageType  AgentMsg  // AgentMsgPing
	MyIdentity   string    // Sender's identity
	YourIdentity string    // Recipient's identity
	Nonce        string    // For round-trip verification
	Time         time.Time // Message timestamp
}

type AgentPingResponse struct {
	Status       string // ok | error
	MyIdentity   string // Responder's identity
	YourIdentity string // Original sender
	Nonce        string // Echo from request
	Time         time.Time
	Msg          string
	Error        bool
	ErrorMsg     string
}

type CHUNK struct {
	Format     uint8  // Format identifier (used for manifest, unused for data chunks)
	HMACLen    uint16 // HMAC length (0 for data chunks, >0 for manifest)
	HMAC       []byte // HMAC-SHA256 checksum (only present if HMACLen > 0)
	Sequence   uint16 // Chunk sequence number (unused when Total=0)
	Total      uint16 // Total chunks or 0 for manifest (0 = manifest, >0 = data chunk)
	DataLength uint16 // Length of data
	Data       []byte // Format-specific data (JSON manifest or chunk payload)
}

type ConcurrentMap[K comparable, V any] struct {
	// contains filtered or unexported fields
}

type ConcurrentMapShared[K comparable, V any] struct {
	sync.RWMutex // Read Write mutex, guards access to internal map.
	// contains filtered or unexported fields
}

type ConfirmationAccumulator struct {
	// contains filtered or unexported fields
}

type ConfirmationEntry interface {
	// GetId returns the unique identifier for this confirmation entry
	// (e.g., key ID, component ID, sync operation ID)
	GetId() string

	// GetStatus returns "success" or "failed"
	GetStatus() string

	// GetDetails returns additional details or error message
	// Returns empty string for successful operations
	GetDetails() string
}

type DELEG struct {
	// Hdr      dns.RR_Header
	Priority uint16          // If zero, Value must be empty or discarded by the user of this library
	Target   string          `dns:"domain-name"`
	Value    []DELEGKeyValue `dns:"pairs"`
}

type DELEGAlpn struct {
	Alpn []string
}

type DELEGIPv4Hint struct {
	Hint []net.IP
}

type DELEGIPv6Hint struct {
	Hint []net.IP
}

type DELEGKey uint16

type DELEGKeyValue interface {
	Key() DELEGKey // Key returns the numerical key code.

	String() string // String returns the string representation of the value.
	// contains filtered or unexported methods
}

type DELEGLocal struct {
	KeyCode DELEGKey // Never 65535 or any assigned keys.
	Data    []byte   // All byte sequences are allowed.
}

type DELEGMandatory struct {
	Code []DELEGKey
}

type DELEGNoDefaultAlpn struct{}

type DELEGPort struct {
	Port uint16
}

type DNSClient struct {
	Port            string
	Transport       Transport
	TLSConfig       *tls.Config
	HTTPClient      *http.Client
	QUICConfig      *quic.Config
	Timeout         time.Duration
	DNSClientUDP    *dns.Client
	DNSClientTCP    *dns.Client
	DNSClientTLS    *dns.Client
	DisableFallback bool
	ForceTCP        bool
}

type DNSClientOption func(*DNSClient)

type DSYNC struct {
	Type   uint16
	Scheme DsyncScheme
	Port   uint16
	Target string
}

type DsyncScheme uint8

type HSYNC struct {
	State    uint8 // 0=OFF, 1=ON
	NSmgmt   uint8 // 1=OWNER, 2=AGENT
	Sign     uint8 // 1=SIGN, 2=NOSIGN
	Identity string
	Upstream string
}

type HSYNC2 struct {
	State    uint8  // 0=OFF, 1=ON
	Flags    uint16 // Will hold both NSmgmt and Sign bits
	Identity string
	Upstream string
}

type HSYNC3 struct {
	State    uint8  // 0=OFF, 1=ON
	Label    string // unqualified provider tag, e.g. "netnod" — NOT an FQDN
	Identity string // FQDN for agent discovery, e.g. "agent.netnod.se."
	Upstream string // label of upstream provider, or "." — NOT an FQDN
}

type HSYNCPARAM struct {
	Value []HSYNCPARAMKeyValue
}

type HSYNCPARAMAuditors struct {
	Auditors []string
}

type HSYNCPARAMFlag struct {
	// contains filtered or unexported fields
}

type HSYNCPARAMKey uint16

type HSYNCPARAMKeyValue interface {
	Key() HSYNCPARAMKey

	String() string
	// contains filtered or unexported methods
}

type HSYNCPARAMLocal struct {
	KeyCode HSYNCPARAMKey
	Data    []byte
}

type HSYNCPARAMNSmgmt struct {
	Value uint8
}

type HSYNCPARAMParentSync struct {
	Value uint8
}

type HSYNCPARAMServers struct {
	Servers []string
}

type HSYNCPARAMSigners struct {
	Signers []string
}

type HSYNCPARAMSuffix struct {
	Label string
}

type IterCb[K comparable, V any] func(key K, v V)

type JSONCHUNK struct {
	Sequence uint16 `json:"sequence"` // Chunk sequence number (0-based)
	Total    uint16 `json:"total"`    // Total number of chunks
	Data     []byte `json:"data"`     // Base64-encoded JSON data (raw bytes, not base64 string)
}

type JSONMANIFEST struct {
	ChunkCount uint16                 `json:"chunk_count"`          // Number of JSONCHUNK records (0 if payload is inline)
	ChunkSize  uint16                 `json:"chunk_size,omitempty"` // Maximum size of each chunk in bytes (optional)
	Checksum   string                 `json:"checksum,omitempty"`   // SHA-256 checksum (optional)
	Metadata   map[string]interface{} `json:"metadata,omitempty"`   // Additional metadata (must include "content")
	Payload    []byte                 `json:"payload,omitempty"`    // Inline payload (base64-encoded in JSON, optional)
}

type JWK struct {
	JWKData string // base64url-encoded JWK JSON
}

type JWKKey struct {
	Kty string `json:"kty"`           // Key Type (e.g., "EC", "OKP")
	Crv string `json:"crv,omitempty"` // Curve (e.g., "P-256", "X25519")
	X   string `json:"x,omitempty"`   // X coordinate (base64url)
	Y   string `json:"y,omitempty"`   // Y coordinate (base64url, EC only)
	Alg string `json:"alg,omitempty"` // Algorithm (optional)
	Use string `json:"use,omitempty"` // Public Key Use (optional)
}

type KeyInventoryEntry struct {
	KeyTag    uint16 `json:"key_tag"`
	Algorithm uint8  `json:"algorithm"`
	Flags     uint16 `json:"flags"`
	State     string `json:"state"` // "created","published","standby","active","retired","foreign"
	KeyRR     string `json:"keyrr"` // Full DNSKEY RR string (public key data)
}

type MSIGNER struct {
	State  uint8         // 0=OFF, 1=ON
	Method MsignerMethod // 1=DNS, 2=API
	//	Port   uint16
	Target string
}

type ManifestData struct {
	ChunkCount uint16                 `json:"chunk_count"`          // Number of data chunks (0 = inline payload)
	ChunkSize  uint16                 `json:"chunk_size,omitempty"` // Expected chunk size in bytes
	Metadata   map[string]interface{} `json:"metadata,omitempty"`   // Application-specific metadata
	Payload    []byte                 `json:"payload,omitempty"`    // Optional inline payload (for small data)
}

type MsignerMethod uint8

type NOTIFY struct {
	Type   uint16
	Scheme uint8
	Port   uint16
	Target string
}

type PublishInstruction struct {
	KEYRRs    []string `json:"key_rrs,omitempty"` // KEY RRs in text format (supports rollover)
	CDSRRs    []string `json:"cds_rrs,omitempty"` // CDS RRs in text format (future use)
	Locations []string `json:"locations"`         // ["at-apex"], ["at-ns"], both, or [] (retract)
}

type RROperation struct {
	Operation string   `json:"operation"`         // "add", "delete", "replace"
	RRtype    string   `json:"rrtype"`            // DNS RR type name (e.g. "DNSKEY", "NS", "A")
	Records   []string `json:"records,omitempty"` // RR strings in ClassINET text format
}

type RRset struct {
	Name   string
	Class  uint16
	RRtype uint16
	RRs    []dns.RR
	RRSIGs []dns.RR

	// UnclampedTTL is the operator-configured TTL captured the first
	// time SignRRset clamps this RRset under K-step rollover clamping
	// (§5.2 of the automated KSK rollover design). Sentinel 0 means
	// "never clamped." Reset only on whole-RRset replacement (inbound
	// zone transfer / zone reload), which naturally zeroes the field.
	UnclampedTTL uint32 `json:"-"`
}

type RRsetString struct {
	Name   string   `json:"name"`
	RRtype uint16   `json:"rrtype"`
	RRs    []string `json:"rrs"`
	RRSIGs []string `json:"rrsigs,omitempty"`
}

type RemoveCb[K any, V any] func(key K, v V, exists bool) bool

type RfiData struct {
	Status      string // ok | error
	Time        time.Time
	Msg         string
	Error       bool
	ErrorMsg    string
	ZoneXfrSrcs []string
	ZoneXfrAuth []string
	ZoneXfrDsts []string
	AuditData   interface{}       `json:"audit_data,omitempty"`  // zone data repo snapshot for RFI AUDIT
	ConfigData  map[string]string `json:"config_data,omitempty"` // key-value config data for RFI CONFIG
}

type StatusUpdatePost struct {
	MessageType  AgentMsg
	MyIdentity   string
	YourIdentity string
	Zone         string
	SubType      string
	NSRecords    []string `json:",omitempty"`
	DSRecords    []string `json:",omitempty"`
	Result       string   `json:",omitempty"`
	Msg          string   `json:",omitempty"`
	Time         time.Time
}

type Stringer interface {
	fmt.Stringer
	comparable
}

type TSYNC struct {
	Type       uint16
	Alias      string
	Transports string
	V4addr     string
	V6addr     string
}

type Transport uint8

type Tuple[K comparable, V any] struct {
	Key K
	Val V
}

type UpsertCb[V any] func(exist bool, valueInMap V, newValue V) V