tunnel

type Cloudflare struct {
	// Binary is an explicit cloudflared executable; when set, nothing else
	// is tried.
	Binary string
	// Timeout bounds how long Open waits for the URL and then for its
	// hostname to be published in DNS; defaults to 30s.
	Timeout time.Duration
	// InstallDir is where a downloaded cloudflared is kept (agentmesh-one uses
	// <data-dir>/bin). Empty disables both the cache and downloads.
	InstallDir string
	// Consent is asked before downloading; installing cloudflared means
	// accepting Cloudflare's license, so this must be an explicit choice.
	// Nil never downloads.
	Consent func(version, url string) bool
	// ReleaseURL overrides the GitHub release download prefix (mirrors,
	// tests). The pinned digests still apply.
	ReleaseURL string
	// HTTPClient performs the download; nil uses a 10 minute timeout.
	HTTPClient *http.Client
	// LookupHost asks whether the assigned hostname exists yet; nil asks
	// the zone's authoritative nameserver (see authoritativeLookup). Tests
	// stub it.
	LookupHost func(ctx context.Context, host string) ([]string, error)
	// Token is an optional named tunnel token (from --tunnel-token-path
	// or AGENTMESH_TUNNEL_TOKEN). When set, Open runs
	// `cloudflared tunnel --no-autoupdate run --url <target>` with
	// TUNNEL_TOKEN in the child environment instead of a random
	// trycloudflare.com quick tunnel, and publishes ExternalURL.
	Token string
	// ExternalURL is the public https:// hostname routed to the named
	// tunnel when Token is set.
	ExternalURL string
}

type Codespaces struct {
	// Getenv reads the platform variables; nil uses os.Getenv.
	Getenv func(string) string
	// Transport performs the probe requests; nil uses the default.
	Transport http.RoundTripper
	// ProbeTimeout bounds how long the probe waits for a first answer;
	// defaults to 90s.
	ProbeTimeout time.Duration
	// ProbeInterval is the pause between probe requests; defaults to 2s.
	ProbeInterval time.Duration
}

type Provider interface {
	// Name is the operator-facing identifier (e.g. "cloudflare").
	Name() string
	// Open publishes target, a local http://host:port URL, and returns once
	// the public URL is known or ctx expires.
	Open(ctx context.Context, target string) (Tunnel, error)
}

type Tunnel interface {
	// URL is the public https base URL that reaches the local target.
	URL() string
	// Done is closed once the tunnel has stopped forwarding, for whatever
	// reason; Err then reports why (nil after Close).
	Done() <-chan struct{}
	Err() error
	// Close tears the tunnel down.
	Close() error
}