client

type AttestationConfig struct {
	Command                    string            `yaml:"command"`
	Args                       []string          `yaml:"args"`
	Env                        map[string]string `yaml:"env"`
	TimeoutSeconds             int               `yaml:"timeoutSeconds"`
	CacheHandshakeSeconds      int               `yaml:"cacheHandshakeSeconds"`
	HMACSecret                 string            `yaml:"hmacSecret"`
	HMACSecretFile             string            `yaml:"hmacSecretFile"`
	TokenTTLSeconds            int               `yaml:"tokenTTLSeconds"`
	HandshakeMaxAgeSeconds     int               `yaml:"handshakeMaxAgeSeconds"`
	ReauthIntervalSeconds      int               `yaml:"reauthIntervalSeconds"`
	ReauthGraceSeconds         int               `yaml:"reauthGraceSeconds"`
	MaintenanceGraceCapSeconds int               `yaml:"maintenanceGraceCapSeconds"`
	AuthorizerStatusURI        string            `yaml:"authorizerStatusUri"`
	PolicyVersion              string            `yaml:"policyVersion"`
	OutboundAllowed            bool              `yaml:"outboundAllowed"`
	AllowedOutboundPorts       []int             `yaml:"allowedOutboundPorts"`
}

type AttestationOptions struct {
	Command                    string
	Args                       []string
	Env                        map[string]string
	Timeout                    time.Duration
	CacheHandshake             time.Duration
	HMACSecret                 string
	HMACSecretFile             string
	TokenTTL                   time.Duration
	HandshakeMaxAgeSeconds     int
	ReauthIntervalSeconds      int
	ReauthGraceSeconds         int
	MaintenanceGraceCapSeconds int
	AuthorizerStatusURI        string
	PolicyVersion              string
	OutboundAllowed            bool
	AllowedOutboundPorts       []int
}

type BackendConfig struct {
	Name             string              `yaml:"name"`
	Hostname         string              `yaml:"hostname"`
	Hostnames        []string            `yaml:"hostnames"`
	TCPPorts         []int               `yaml:"tcpPorts,omitempty"`
	UDPRoutes        []UDPRouteConfig    `yaml:"udpRoutes,omitempty"`
	NexusAddresses   []string            `yaml:"nexusAddresses"`
	Weight           int                 `yaml:"weight"`
	Attestation      AttestationConfig   `yaml:"attestation"`
	PortMappings     map[int]PortMapping `yaml:"portMappings"`
	HealthChecks     HealthCheckConfig   `yaml:"healthChecks"`
	FlowControl      FlowControlConfig   `yaml:"flowControl"`
	Socks5ListenAddr string              `yaml:"socks5ListenAddr,omitempty"`
}

type CategorizedError struct {
	Err      error
	Category ErrorCategory
	Reason   string // Machine-readable reason code
}

type Client struct {
	// contains filtered or unexported fields
}

type ClientBackendConfig struct {
	Name             string
	Hostnames        []string
	TCPPorts         []int
	UDPRoutes        []UDPRouteConfig
	NexusAddress     string
	Weight           int
	Attestation      AttestationOptions
	PortMappings     map[int]PortMapping
	HealthChecks     HealthCheckConfig
	FlowControl      FlowControlConfig
	Socks5ListenAddr string
}

type CommandTokenProvider struct {
	// contains filtered or unexported fields
}

type Config struct {
	Backends []BackendConfig `yaml:"backends"`
}

type ConnState uint32

type ConnectHandler func(ctx context.Context, req ConnectRequest) (net.Conn, error)

type ConnectRequest struct {
	BackendName      string
	ClientID         uuid.UUID
	Hostname         string
	OriginalHostname string
	Port             int
	ClientIP         string
	IsTLS            bool
	Transport        Transport // "tcp" or "udp" (defaults to "tcp" if empty)
}

type ConnectionStats struct {
	ClientID     string
	Hostname     string
	State        ConnState
	BytesIn      int64
	BytesOut     int64
	BufferLevel  int
	Paused       bool
	ConnectedAt  time.Time
	LastActivity time.Time
	IsUDP        bool
}

type DisconnectReason = protocol.DisconnectReason

type ErrorCategory int

type Event struct {
	Type      EventType
	Timestamp time.Time

	// Connection context (if applicable)
	ClientID string
	Hostname string

	// Error context (if applicable)
	Error  error
	Reason string
}

type EventHandler func(Event)

type EventType int

type FlowControlConfig struct {
	// HighWaterMark is the buffer level at which we send pause_stream (default: 48)
	HighWaterMark int `yaml:"highWaterMark"`
	// LowWaterMark is the buffer level at which we send resume_stream (default: 16)
	LowWaterMark int `yaml:"lowWaterMark"`
	// MaxBuffer is the hard limit on buffered messages before closing connection (default: 64)
	MaxBuffer int `yaml:"maxBuffer"`
}

type HMACTokenProvider struct {
	// contains filtered or unexported fields
}

type HealthCheckConfig struct {
	Enabled           bool `yaml:"enabled"`
	InactivityTimeout int  `yaml:"inactivityTimeout"`
	PongTimeout       int  `yaml:"pongTimeout"`
}

type Option func(*Client)

type PortMapping struct {
	Default string            `yaml:"default"`
	Hosts   map[string]string `yaml:"hosts"`
	// contains filtered or unexported fields
}

type Stats struct {
	// Connection metrics
	ActiveConnections  int64
	TotalConnections   int64
	PendingConnections int64

	// Data transfer
	BytesSentTotal        int64
	BytesReceivedTotal    int64
	MessagesSentTotal     int64
	MessagesReceivedTotal int64

	// Queue metrics
	ControlQueueDepth int
	DataQueueDepth    int // Number of connections with pending data

	// Error metrics
	DroppedConnections int64
	TransientErrors    int64
	PermanentErrors    int64
	RateLimitHits      int64
	EnqueueTimeouts    int64

	// Flow control
	PausedConnections int64
	PauseViolations   int64

	// Event metrics
	DroppedEvents int64

	// UDP metrics
	UDPDroppedPackets int64

	// Session metrics
	SessionUptime   time.Duration
	LastUpdated     time.Time
	ReconnectCount  int64
	LastConnectedAt time.Time

	// Per-connection stats (optional, can be expensive)
	ConnectionStats map[string]ConnectionStats
}

type Token struct {
	Value  string
	Expiry time.Time
}

type TokenProvider interface {
	IssueToken(ctx context.Context, req TokenRequest) (Token, error)
}

type TokenRequest struct {
	Stage                TokenStage
	SessionNonce         string
	BackendName          string
	Hostnames            []string
	TCPPorts             []int
	UDPRoutes            []UDPRouteConfig
	Weight               int
	OutboundAllowed      bool
	AllowedOutboundPorts []int
}

type TokenStage string

type Transport = protocol.Transport

type UDPRouteConfig struct {
	Port                   int  `yaml:"port"`
	FlowIdleTimeoutSeconds *int `yaml:"flowIdleTimeoutSeconds,omitempty"`
}