syncer

type API interface {
	List(ctx context.Context) ([]tailscale.Service, error)
	CreateOrUpdate(ctx context.Context, svc tailscale.Service) error
	Delete(ctx context.Context, name string) error
}

type Change struct {
	Name   string
	Action string // create, update, unchanged
	Detail string
}

type ClientAPI struct {
	Services *tailscale.ServicesResource
}

type ClientPolicy struct {
	Policy *tailscale.PolicyFileResource
}

type Host interface {
	GetConfig(ctx context.Context) (*catalog.ServeFile, error)
	EnsureHostTags(ctx context.Context, tags []string, resetNode bool) error
	Serve(ctx context.Context, name, endpoint, local string) error
	Advertise(ctx context.Context, svc string) error
	Drain(ctx context.Context, svc string) error
	Clear(ctx context.Context, name, endpoint string) error
}

type Options struct {
	DryRun    bool
	Tailnet   bool
	Host      bool
	Advertise bool
	Policy    bool
	// Names limits VIP puts, Serve, and steady-state advertise to these
	// catalog names (or vip / svc: aliases). Empty means every service.
	// ACL merge stays catalog-wide. After a policy write, every service
	// is drained, re-served, and advertised.
	Names []string
	// Prune deletes VIP Services and Serve mappings whose svc: name is
	// not in this catalog, and rewrites the catalog-owned 443 grant.
	Prune bool
	// ResetNode allows tailscale up --reset when tagging the node.
	ResetNode bool
}

type Plan struct {
	Tailnet []Change
	Host    []Change
	Policy  []policy.Change
}

type PolicyAPI interface {
	Get(ctx context.Context) (*tailscale.ACL, error)
	Raw(ctx context.Context) (body, etag string, err error)
	SetRaw(ctx context.Context, body, etag string) error
	ValidateRaw(ctx context.Context, body string) error
}