sessionwatch

const (
	// MetaSessionWarning is set to "true" on both warning events (T-10 and
	// T-2) so the UI can detect a session-warning SystemEvent without
	// matching on the message text. Use MetaSessionFinal to distinguish
	// the two.
	MetaSessionWarning = "session_warning"
	// MetaSessionFinal is set to "true" on the T-FinalWarningLead event
	// only. Consumers that need to auto-open the SessionAboutToExpire
	// dialog gate on this; T-WarningLead events leave the field unset.
	MetaSessionFinal = "session_final_warning"
	// MetaSessionExpiresAt carries the absolute UTC deadline encoded with
	// FormatExpiresAt; consumers must decode with ParseExpiresAt so a
	// future format change stays a single edit.
	MetaSessionExpiresAt = "session_expires_at"
	// MetaSessionLeadMinutes carries the lead in whole minutes (WarningLead
	// for the T-10 event, FinalWarningLead for the T-2 event) so the UI
	// can show "expires in ~N minutes" without hardcoding either constant.
	MetaSessionLeadMinutes = "lead_minutes"
	// MetaSessionDeadlineRejected is attached to the ERROR/AUTHENTICATION
	// SystemEvent the daemon emits when it discards a deadline from the
	// management server (pre-epoch, too far in the future, or past the
	// clock-skew tolerance). The value is the rejection reason string.
	// userMessage is left empty; the UI detects the event via this key
	// and builds a localized notification — same pattern as the session
	// warnings above.
	MetaSessionDeadlineRejected = "session_deadline_rejected"
)

const (

	// WarningLead is how far before expiry the first (interactive)
	// warning fires. Drives the T-10 OS notification with
	// Extend/Dismiss actions.
	WarningLead = 10 * time.Minute

	// FinalWarningLead is how far before expiry the fallback final
	// warning fires. Drives the auto-opened SessionAboutToExpire dialog,
	// but only when the user has not dismissed the T-WarningLead warning
	// for the same deadline. Must be strictly less than WarningLead.
	FinalWarningLead = 2 * time.Minute
)