lanshare

type ListenInfo struct {
	BindAddr    string
	Port        int
	Fingerprint string // self-signed cert SHA-256 (for QR / pairing)
	Passphrase  string // effective password in password mode; "" otherwise
	Mode        string // ModePassword | ModeAllowIP | ModeOpen
}

type PairingInfo struct {
	Host        string
	Port        int
	Fingerprint string
	Password    string
}

type Peer struct {
	Name        string // mDNS instance (device) name
	Host        string // reachable IP
	Port        int
	Fingerprint string // cert SHA-256 (for pinning); "" if not advertised
	Mode        string // ModePassword | ModeAllowIP | ModeOpen
}

type ReceiveOptions struct {
	// Bind is the interface address to listen on ("" = all interfaces).
	Bind string
	// Port pins the listen port. 0 = auto-scan DefaultPort..portRangeEnd. A
	// pinned port that is unavailable is a hard error (no fallback).
	Port int
	// Password sets an explicit receive password (PAKE). Empty + !NoPassword +
	// no AllowIPs => a passphrase is auto-generated.
	Password string
	// NoPassword opens the receiver with no password (caller should warn).
	NoPassword bool
	// AllowIPs restricts accepted source IPs. With AllowIPs and no password, the
	// mode is allow-ip (network-identity auth).
	AllowIPs []string
	// TrustedIPs are source IPs whose inbound transfers are auto-accepted even
	// when a password is set for everyone else (trust-by-IP; caller warns).
	TrustedIPs []string
	// DestDir is where files land (default ~/s2u, created if missing).
	DestDir string
	// Overwrite permits replacing an existing destination file.
	Overwrite bool
	// HandshakeTimeout bounds per-connection setup (default 30s).
	HandshakeTimeout time.Duration
	// OnListen fires once the listener is up, before accepting.
	OnListen func(ListenInfo)
	// OnProgress fires as bytes arrive.
	OnProgress func(received, total int64)
	// OnRequest, if set, is consulted after a sender authenticates but before the
	// transfer is accepted, with the sender IP and declared file name/size.
	// Returning false declines it (the sender is told; the receiver keeps
	// listening). This drives an interactive accept/reject prompt for discovered
	// / open receivers (abuse control for "nearby devices" sharing).
	OnRequest func(RequestInfo) bool
	// Loop keeps the receiver running after each completed transfer instead of
	// returning, so one listener accepts many files (a persistent "serve" mode
	// for a discoverable device). OnReceived fires per completed transfer.
	Loop       bool
	OnReceived func(ReceiveResult)
}

type ReceiveResult struct {
	Name   string
	Path   string
	Bytes  int64
	SHA256 string
	PeerIP string
}

type RequestInfo struct {
	PeerIP     string
	Name       string
	Size       int64
	IsDir      bool
	SenderKey  []byte
	SenderName string
}

type SendOptions struct {
	// Dest is host or host:port. When no port is given, DefaultPort is used.
	Dest string
	// Password, when non-empty, drives the PAKE. Leave empty for an allow-ip /
	// open receiver.
	Password string
	// PinFingerprint pins the receiver's self-signed cert SHA-256 fingerprint
	// (from a QR / pairing string / trusted-device entry). Empty = unpinned.
	PinFingerprint string
	// DialTimeout / HandshakeTimeout bound connection setup.
	DialTimeout      time.Duration
	HandshakeTimeout time.Duration
	// OnProgress, if set, is called as bytes are sent.
	OnProgress func(sent, total int64)
	// Identity, if set, authenticates the sender: it signs the TLS channel
	// binding with this Ed25519 key and sends the public key, so the receiver can
	// recognise / trust this device by its key fingerprint. SenderName is a
	// display label shown in the receiver's approval prompt / trusted-devices list.
	Identity   ed25519.PrivateKey
	SenderName string
}