backup

type DirectOptions struct {
	Endpoint    string
	Fingerprint string
	TLSVerify   bool
	// Namespace within the datastore (configured on the target by an administrator);
	// empty means the root namespace
	Namespace string
	// APIToken in canonical user@realm!tokenid:secret form
	APIToken string
}

type Encryption struct {
	Config      *pbs.CryptConfig
	Fingerprint string
}

type Options struct {
	// Session carries the snapshot identity, format and paths from the server
	Session *temporal.BackupSessionInfo
	// Dial returns a connection on which the PBS backup session is already open
	// (proxy.Dial through the FallBCK server). Ignored when Direct is set.
	Dial func(ctx context.Context, ref pbs.SnapshotRef) (net.Conn, error)
	// Direct, when set, makes gopbs connect to PBS itself with these credentials
	Direct *DirectOptions
	// Workers is the number of concurrent chunk uploads (0 = gopbs default)
	Workers int
	// ArchiveName names the pxar archive inside the snapshot (default: gopbs default)
	ArchiveName string
	// Blobs are small extra files stored in the snapshot as <name>.blob (manifests)
	Blobs []gopbs.Blob
	// Crypt encrypts the upload client-side (per-target key fetched for the run).
	// Required when Session.Encrypted is set: the run refuses to upload plaintext to
	// an encrypted target.
	Crypt *Encryption
	// OnPhase is told what the engine is doing (opening the session, uploading an
	// archive, finalizing); used for activity heartbeats and failure reporting
	OnPhase func(phase string)
	// CacheDir enables metadata change detection for v2 archives: the metadata
	// stream of every upload is kept here and, when it matches the server's previous
	// snapshot, files with unchanged metadata are not read again. Empty disables.
	CacheDir string
	// ReadPaths, when set, are read instead of Session.BackupPaths (same order): a
	// Windows job reads its paths through VSS shadow copies while the archive keeps
	// the names of the configured paths
	ReadPaths []string
}