config

type AuthConfig struct {
	Enabled bool   `mapstructure:"enabled"`
	Token   string `mapstructure:"token"`
}

type BrokerClientConfig struct {
	URL                string `mapstructure:"url"`
	Endpoint           string `mapstructure:"endpoint"`
	InsecureSkipVerify bool   `mapstructure:"insecure_skip_verify"` // Skip TLS certificate verification (for self-signed certs)
	AuthToken          string `mapstructure:"auth_token"`           // Authentication token for broker
}

type BrokerConfig struct {
	Server  ServerConfig  `mapstructure:"server"`
	Tunnel  TunnelConfig  `mapstructure:"tunnel"`
	Auth    AuthConfig    `mapstructure:"auth"`
	Logging LoggingConfig `mapstructure:"logging"`
}

type ConsumerConfig struct {
	Broker    BrokerClientConfig `mapstructure:"broker"`
	Socks5    Socks5Config       `mapstructure:"socks5"`
	Transport TransportConfig    `mapstructure:"transport"`
	Logging   LoggingConfig      `mapstructure:"logging"`
}

type LoggingConfig struct {
	Level string `mapstructure:"level"` // "debug", "info", "warn", "error"
}

type ProviderConfig struct {
	Broker    BrokerClientConfig `mapstructure:"broker"`
	Provider  ProviderOptions    `mapstructure:"provider"`
	Transport TransportConfig    `mapstructure:"transport"`
	Logging   LoggingConfig      `mapstructure:"logging"`
}

type ProviderOptions struct {
	ScrubHeaders bool          `mapstructure:"scrub_headers"`
	DialTimeout  time.Duration `mapstructure:"dial_timeout"`
}

type ServerConfig struct {
	Listen                string                     `mapstructure:"listen"`
	TLS                   TLSConfig                  `mapstructure:"tls"`
	StatusEndpointEnabled bool                       `mapstructure:"status_endpoint_enabled"` // Whether to expose GET /status endpoint (default: false)
	UnauthorizedRedirect  UnauthorizedRedirectConfig `mapstructure:"unauthorized_redirect"`   // Redirect settings for unauthorized requests
}

type Socks5Config struct {
	Listen string `mapstructure:"listen"`
}

type TLSConfig struct {
	Enabled  bool   `mapstructure:"enabled"`
	CertFile string `mapstructure:"cert_file"`
	KeyFile  string `mapstructure:"key_file"`
}

type TransportConfig struct {
	PollInterval time.Duration `mapstructure:"poll_interval"`
	RetryBackoff time.Duration `mapstructure:"retry_backoff"`
	// CoalesceWindow bounds how long pollmux.Connector's Write() waits before
	// the first send of an idle-to-active burst, giving immediately-following
	// writes a chance to merge into the same HTTP request. Zero/unset uses
	// pollmux.DefaultCoalesceWindow (2ms).
	CoalesceWindow time.Duration `mapstructure:"coalesce_window"`
}

type TunnelConfig struct {
	PollTimeout    time.Duration `mapstructure:"poll_timeout"`
	SessionTimeout time.Duration `mapstructure:"session_timeout"`
	// CoalesceWindow bounds how long the broker waits for more data to
	// accumulate on a long-poll response once at least one byte is
	// available, instead of flushing immediately. Zero/unset uses
	// pollmux.DefaultCoalesceWindow (2ms).
	CoalesceWindow time.Duration `mapstructure:"coalesce_window"`
	// PollBufferSize caps how many bytes one poll response may carry.
	// Zero/unset uses pollmux.DefaultPollBufferSize (256KiB).
	PollBufferSize int `mapstructure:"poll_buffer_size"`
	// MaxSendBytes caps a single request body. Zero/unset uses
	// pollmux.DefaultMaxSendBytes (1MiB).
	MaxSendBytes int `mapstructure:"max_send_bytes"`
	// HighWaterWarn logs a one-shot warning when either direction of a
	// session buffers this many bytes. Zero disables it.
	HighWaterWarn int `mapstructure:"high_water_warn"`
}

type UnauthorizedRedirectConfig struct {
	Enabled bool   `mapstructure:"enabled"` // Whether to redirect unauthorized requests instead of returning 401/404
	URL     string `mapstructure:"url"`     // Redirect target URL (supports: "/path", "www.example.com", or "https://example.com")
}