edge

type AgentTunnel struct {
	EnvironmentID string
	Conn          TunnelConnection
	// Deprecated: legacy edge message protocol; remove in v3.
	Pending       sync.Map // map[string]*PendingRequest
	ConnectedAt   time.Time
	LastHeartbeat time.Time
	SessionID     string
	AgentInstance string
	Transport     string
	SecurityMode  string
	Capabilities  []string
	State         string
	DisconnectErr string
	// contains filtered or unexported fields
}

type Config struct {
	EdgeAgent             bool
	EdgeTransport         string
	EdgeReconnectInterval int
	EdgeMTLSMode          string
	EdgeMTLSCAFile        string
	EdgeMTLSCertFile      string
	EdgeMTLSKeyFile       string
	EdgeMTLSServerName    string
	EdgeMTLSAssetsDir     string
	AppURL                string
	ManagerApiUrl         string
	AgentToken            string
	Port                  string
	Listen                string
	// EdgeMuxDisabled keeps the legacy message protocol; remove in v3 with it.
	EdgeMuxDisabled bool
}

type EnrollmentCallback func(ctx context.Context, environmentID, remoteAddr string, certIssued, caGenerated, reenrolled bool)

type EnvironmentNameResolver func(ctx context.Context, environmentID string) (environmentName string, err error)

type EnvironmentResolver func(ctx context.Context, token string) (environmentID string, err error)

type EventCallback func(ctx context.Context, environmentID string, event *TunnelEvent) error

type GRPCAgentTunnelConn struct {
	// contains filtered or unexported fields
}

type GRPCManagerTunnelConn struct {
	// contains filtered or unexported fields
}

type GeneratedMTLSAssets struct {
	Files       []GeneratedMTLSFile `json:"files"`
	HostDirHint string              `json:"hostDirHint"`
	CertIssued  bool                `json:"-"`
	CAGenerated bool                `json:"-"`
	Reenrolled  bool                `json:"-"`
}

type GeneratedMTLSFile struct {
	Name          string `json:"name"`
	Content       string `json:"content"`
	ContainerPath string `json:"containerPath"`
	Permissions   string `json:"permissions"`
}

type PollRuntimeRegistry struct {
	// contains filtered or unexported fields
}

type PollRuntimeState struct {
	LastPollAt          *time.Time
	PollIntervalSeconds int
}

type StatusUpdateCallback func(ctx context.Context, environmentID string, connected bool)

type TunnelClient struct {
	// contains filtered or unexported fields
}

type TunnelConn struct {
	// contains filtered or unexported fields
}

type TunnelConnection interface {
	Send(msg *TunnelMessage) error
	Receive() (*TunnelMessage, error)
	IsExpectedReceiveError(err error) bool
	Close() error
	IsClosed() bool
	Transport() string
}

type TunnelDemandRegistry struct {
	// contains filtered or unexported fields
}

type TunnelEvent struct {
	Type         string `json:"type"`
	Severity     string `json:"severity,omitempty"`
	Title        string `json:"title"`
	Description  string `json:"description,omitempty"`
	ResourceType string `json:"resource_type,omitempty"`
	ResourceID   string `json:"resource_id,omitempty"`
	ResourceName string `json:"resource_name,omitempty"`
	UserID       string `json:"user_id,omitempty"`
	Username     string `json:"username,omitempty"`
	MetadataJSON []byte `json:"metadata_json,omitempty"`
}

type TunnelMessage struct {
	Headers       map[string]string `json:"headers,omitempty"`         // HTTP headers
	Event         *TunnelEvent      `json:"event,omitempty"`           // Agent event payload
	Metadata      map[string]string `json:"metadata,omitempty"`        // Correlation and audit metadata
	ID            string            `json:"id"`                        // Unique request/stream ID
	Type          TunnelMessageType `json:"type"`                      // Message type
	Method        string            `json:"method,omitempty"`          // HTTP method for requests
	Path          string            `json:"path,omitempty"`            // Request path
	Query         string            `json:"query,omitempty"`           // Query string
	AgentToken    string            `json:"agent_token,omitempty"`     // Register request token
	EnvironmentID string            `json:"environment_id,omitempty"`  // Manager-resolved environment ID
	Error         string            `json:"error,omitempty"`           // Error field for register response
	Command       string            `json:"command,omitempty"`         // Typed command name
	SessionID     string            `json:"session_id,omitempty"`      // Manager-issued session identifier
	ResumeSession string            `json:"resume_session,omitempty"`  // Previous session being resumed
	AgentInstance string            `json:"agent_instance,omitempty"`  // Stable agent runtime identity
	SecurityMode  string            `json:"security_mode,omitempty"`   // token, mtls, etc.
	Body          []byte            `json:"body,omitempty"`            // Request/response body
	Capabilities  []string          `json:"capabilities,omitempty"`    // Agent advertised capabilities
	WSMessageType int               `json:"ws_message_type,omitempty"` // WebSocket message type
	Status        int               `json:"status,omitempty"`          // HTTP status for responses
	TimeoutMillis int64             `json:"timeout_millis,omitempty"`  // Command timeout
	Sequence      int64             `json:"sequence,omitempty"`        // Chunk sequence number
	Credit        int64             `json:"credit,omitempty"`          // Command output bytes the manager consumed
	Accepted      bool              `json:"accepted,omitempty"`        // Registration accepted
	DrainPrevious bool              `json:"drain_previous,omitempty"`  // Replace previous session
	Streaming     bool              `json:"streaming,omitempty"`       // Response used chunked output
	EOF           bool              `json:"eof,omitempty"`             // Final chunk indicator
}

type TunnelMessageType string

type TunnelMetadataSnapshot struct {
	ConnectedAt   time.Time
	LastHeartbeat time.Time
	SessionID     string
	AgentInstance string
	SecurityMode  string
	Capabilities  []string
	State         string
}

type TunnelPollRequest struct {
	Transport string `json:"transport,omitempty"`
	Connected bool   `json:"connected,omitempty"`
}

type TunnelPollResponse struct {
	Status              string `json:"status"`
	PollIntervalSeconds int    `json:"pollIntervalSeconds"`
	ActiveTransport     string `json:"activeTransport,omitempty"`
	Connected           bool   `json:"connected,omitempty"`
}

type TunnelRegistry struct {
	// contains filtered or unexported fields
}

type TunnelRuntimeState struct {
	// DataPlane is EdgeDataPlaneMux or EdgeDataPlaneLegacy.
	DataPlane string
	// RoundTripTime is the last keepalive round trip; only multiplexed tunnels measure it.
	RoundTripTime *time.Duration
	// OpenStreams counts open mux streams (including pooled idle ones) or pending legacy requests.
	OpenStreams   int
	Transport     string
	ConnectedAt   *time.Time
	LastHeartbeat *time.Time
	SessionID     string
	AgentInstance string
	SecurityMode  string
	Capabilities  []string
	State         string
}

type TunnelServer struct {
	// Config holds the edge runtime settings; set it before serving.
	Config *Config
	// NameResolver, when set, names environments in generated mTLS assets.
	NameResolver EnvironmentNameResolver
	// EventCallback, when set, receives agent events.
	EventCallback EventCallback
	// EnrollmentCallback, when set, runs after a successful edge mTLS enrollment.
	EnrollmentCallback EnrollmentCallback
	// contains filtered or unexported fields
}