compiler

var (
	// ErrEmptyDNSValue reports a value that is empty after trimming.
	ErrEmptyDNSValue = errors.New("empty dns name")
	// ErrWildcardPositionDNSValue reports a wildcard that is not the whole
	// leftmost label: "a.*.b", "a.b.*", "ap*.b", or a bare "*." with no suffix.
	ErrWildcardPositionDNSValue = errors.New(`a wildcard is only supported as the leftmost label: use "*.example.com", an exact name, or "*" to report every name`)
	// ErrNotAHostnameDNSValue reports anything else that is not a name: a single
	// label, a malformed label, a numeric last label, an address, a URL.
	ErrNotAHostnameDNSValue = errors.New(`not a hostname, a "*.<hostname>" wildcard or "*"`)
	// ErrTooLongDNSValue reports a value too long to be matched.
	ErrTooLongDNSValue = fmt.Errorf("dns name is longer than %d characters", MaxDNSNameLen)
	// ErrNULDNSValue reports an embedded NUL, which would truncate the name
	// somewhere between here and the comparison that has to match it.
	ErrNULDNSValue = errors.New("dns name contains a NUL byte")
)

var (
	// ErrEmptyNetworkValue reports a value that is empty after trimming.
	ErrEmptyNetworkValue = errors.New("empty network target")
	// ErrIPv6NetworkValue reports an IPv6 literal or CIDR (IPv4-mapped IPv6
	// forms are unmapped and accepted, not reported).
	ErrIPv6NetworkValue = errors.New("IPv6 addresses and CIDRs are not supported")
	// ErrWildcardNetworkValue reports a wildcard such as "*.example.com",
	// distinct from the bare "*" sentinel.
	ErrWildcardNetworkValue = errors.New(`wildcards are not supported: list each address or fully qualified hostname, or use "*" to match everything`)
	// ErrNotAnIPNetworkValue reports anything else: URLs, truncated
	// addresses, and strings that are not a usable hostname either (a single
	// label, an over-long or malformed label, a numeric last label).
	ErrNotAnIPNetworkValue = errors.New(`not an IPv4 address, IPv4 CIDR, hostname or "*"`)
	// ErrServiceFormNetworkValue reports a name in the cluster DNS domain that
	// names neither a Service nor one of its endpoints: a pod A record, or an
	// incomplete name. Such a name is rejected instead of falling through to
	// Host, because resolving it from the pod's DNS answers is not what an
	// operator naming a cluster address asked for. Callers prefix the specific
	// diagnosis; see serviceFormError.
	ErrServiceFormNetworkValue = errors.New(`a cluster Service must be named "<service>.<namespace>.svc.<cluster-domain>", or one of its endpoints "<hostname>.<service>.<namespace>.svc.<cluster-domain>"`)
	// ErrServiceShortFormNetworkValue reports a cluster name with no domain,
	// such as "redis.default.svc". A pod's resolver expands it through the
	// search domains, so the question is the full name and the authored value
	// would match nothing.
	ErrServiceShortFormNetworkValue = errors.New("this cluster name is missing its DNS domain")
	// ErrServiceLabelNetworkValue reports a cluster name whose labels are
	// malformed.
	ErrServiceLabelNetworkValue = errors.New(`invalid cluster Service name: the service label must start with a letter and the namespace and hostname labels with a letter or digit, all continuing with alphanumerics or "-" and at most 63 characters`)
)

var (
	// ErrEmptyPathValue reports a value that is empty after trimming.
	ErrEmptyPathValue = errors.New("empty path value")
	// ErrNULInPathValue reports an interior NUL byte. A path key is NUL-padded
	// and read back with bpf_probe_read_kernel_str, so a value carrying its own
	// NUL keys an entry no exec or open can ever produce.
	ErrNULInPathValue = errors.New("path contains a NUL byte: kernel paths are NUL-terminated strings")
	// ErrPathValueTooLong reports a value longer than MaxPathValueLen.
	ErrPathValueTooLong = fmt.Errorf("path is longer than %d bytes: the kernel path maps cannot hold it", MaxPathValueLen)
	// ErrRelativePathValue reports a value that is not an absolute path. The
	// kernel resolves every path it can match with bpf_d_path, which always
	// yields one, so a relative value programs a key nothing can ever produce.
	ErrRelativePathValue = errors.New("path must be absolute: the kernel matches resolved paths, so a bare program name never matches")
	// ErrPaddedStarValue reports a value that trims to the StarTarget sentinel
	// without being exactly it. The sentinel switches the whole behavior to
	// default deny, so a near-miss is corrected by the author, not normalized.
	ErrPaddedStarValue = errors.New(`the default-deny wildcard must be written exactly as "*"`)
)

var (
	// ErrEmptyProtocolValue reports a value that is empty after trimming.
	ErrEmptyProtocolValue = errors.New("empty protocol target")
	// ErrInvalidALPNValue reports a tls/<alpn> suffix that is empty, longer
	// than MaxALPNLength, or not visible ASCII.
	ErrInvalidALPNValue = errors.New(`ALPN must be 1-16 visible ASCII characters, e.g. "tls/h2"`)
	// ErrNotAProtocolValue reports anything else: an unrecognized token, an
	// ALPN suffix on a token other than tls, wrong case.
	ErrNotAProtocolValue = errors.New(`not a protocol token ("ssh", "tls", "tls/<alpn>", "dns", "http/1.1", "http/2", "quic") or "*"`)
)

var ClusterDomain = "cluster.local"

var (
	VariablesType = types.NewObjectType("nirmata.variables")
)