health

type CircuitBreaker interface {
	// RecordSuccess records a successful operation
	RecordSuccess()
	// RecordFailure records a failed operation
	RecordFailure()
	// CanAttempt checks if an operation should be allowed based on circuit state
	CanAttempt() bool
	// GetState returns the current state of the circuit breaker
	GetState() CircuitState
	// GetLastStateChange returns the time when the state last changed
	GetLastStateChange() time.Time
	// GetFailureCount returns the current failure count
	GetFailureCount() int
	// GetSnapshot returns an immutable snapshot of the circuit breaker state
	GetSnapshot() circuitBreakerSnapshot
}

type CircuitBreakerConfig struct {
	// Enabled controls whether circuit breaker is active.
	// +kubebuilder:default=false
	Enabled bool

	// FailureThreshold is the number of failures before opening the circuit.
	// +kubebuilder:validation:Minimum=1
	// +kubebuilder:default=5
	// Must be >= 1. Recommended: 5 failures.
	FailureThreshold int

	// Timeout is the duration to wait in open state before attempting recovery.
	// +kubebuilder:validation:Type=string
	// +kubebuilder:validation:Pattern="^([0-9]+(\\.[0-9]+)?(ns|us|µs|ms|s|m|h))+$"
	// +kubebuilder:default="60s"
	// Recommended: 60s.
	Timeout time.Duration
}

type CircuitState string

type Monitor struct {
	// contains filtered or unexported fields
}

type MonitorConfig struct {
	// CheckInterval is how often to perform health checks.
	// Must be > 0. Recommended: 30s.
	CheckInterval time.Duration

	// UnhealthyThreshold is the number of consecutive failures before marking unhealthy.
	// Must be >= 1. Recommended: 3 failures.
	UnhealthyThreshold int

	// Timeout is the maximum duration for a single health check operation.
	// Zero means no timeout (not recommended).
	Timeout time.Duration

	// DegradedThreshold is the response time threshold for marking a backend as degraded.
	// If a health check succeeds but takes longer than this duration, the backend is marked degraded.
	// Zero means disabled (backends will never be marked degraded based on response time alone).
	// Recommended: 5s.
	DegradedThreshold time.Duration

	// CircuitBreaker contains circuit breaker configuration.
	// nil means circuit breaker is disabled.
	CircuitBreaker *CircuitBreakerConfig
}

type State struct {
	// Status is the current health status.
	Status vmcp.BackendHealthStatus

	// ConsecutiveFailures is the number of consecutive failed health checks.
	ConsecutiveFailures int

	// LastCheckTime is when the last health check was performed.
	LastCheckTime time.Time

	// LastErrorCategory is a sanitized error category for API responses.
	// Values: "authentication_failed", "timeout", "connection_failed", "backend_unavailable", etc.
	// This field is safe to serialize and expose in API responses.
	LastErrorCategory string

	// LastError is the raw error encountered (if any).
	// DEPRECATED: This field may contain sensitive information (paths, URLs, credentials)
	// and should not be serialized to API responses. Use LastErrorCategory instead.
	// The json:"-" tag prevents this field from being included in JSON marshaling.
	LastError error `json:"-"`

	// LastTransitionTime is when the status last changed.
	LastTransitionTime time.Time

	// CircuitState is the current circuit breaker state.
	// When circuit breaker is disabled, this will be CircuitClosed (via alwaysClosedCircuit).
	CircuitState CircuitState

	// CircuitLastChanged is when the circuit breaker state last changed.
	// When circuit breaker is disabled, this will be zero time (via alwaysClosedCircuit).
	CircuitLastChanged time.Time
}

type Summary struct {
	Total           int
	Healthy         int
	Degraded        int
	Unhealthy       int
	Unknown         int
	Unauthenticated int
}