tunnel

type ClosedSessionInfo struct {
	Duration time.Duration
}

type Config struct {
	// Enabled controls whether tunneling is active.
	// Default: true (set by ApplyDefaults).
	Enabled bool `yaml:"enabled"`

	// MaxSessions is the maximum number of concurrent tunnel sessions.
	// Default: 10
	MaxSessions int `yaml:"max_sessions"`

	// DefaultTimeout is the default/maximum session timeout.
	// Default: 30m
	DefaultTimeout time.Duration `yaml:"default_timeout"`

	// SSHListenAddr is the address for the SSH mesh server to listen on.
	// If empty, the SSH server is not started.
	SSHListenAddr string `yaml:"ssh_listen_addr"`

	// HostKeyDir is the directory for storing the SSH host key.
	// If empty, a transient key is generated (not persisted).
	HostKeyDir string `yaml:"host_key_dir"`
}

type Ed25519JWTVerifier struct {
	// contains filtered or unexported fields
}

type JWTVerifier interface {
	Verify(token string) error
}

type K8sProxy struct {
	// contains filtered or unexported fields
}

type MeshServer struct {
	// contains filtered or unexported fields
}

type SSHServer struct {
	// contains filtered or unexported fields
}

type SSHServerConfig struct {
	// MaxSessions is the maximum number of concurrent SSH sessions.
	// Default: 10
	MaxSessions int

	// IdleTimeout is the idle timeout for SSH connections.
	// Default: 30m
	IdleTimeout time.Duration

	// ListenAddr is the address to listen on (mesh IP + port).
	// Required.
	ListenAddr string
}

type Session struct {
	SessionID  string
	TargetHost string
	TargetPort int
	MeshIP     string
	// contains filtered or unexported fields
}

type SessionManager struct {
	// contains filtered or unexported fields
}

type TunnelReporter interface {
	ReportReady(ctx context.Context, sessionID, listenAddr string)
	ReportClosed(ctx context.Context, sessionID, reason string, duration time.Duration)
}