package connector_callout

import "net/http"

// HTTPClient is the outbound HTTP transport contract used by Engine.
// Production wiring injects backend's SSRF-safe outbound client; tests may
// inject a lightweight mock.
type HTTPClient interface {
	Do(req *http.Request) (*http.Response, error)
}

// URLAllowlist is the narrow URL safety/redaction contract used by Engine.
type URLAllowlist interface {
	EnsureAllowed(rawURL string) error
	Redact(rawURL string) string
	RedactError(err error) error
}