skynetweb

type Config struct {
	// DomainSuffix is the TLD matched by the resolver (default ".skynet").
	DomainSuffix string
	// ProxyAddr is the host the SOCKS5 proxy listens on. Empty means loopback
	// ("127.0.0.1"). Set to "0.0.0.0" or a LAN IP to serve other devices on
	// the network (a `.skynet` gateway for a home router's LAN). Only bind a
	// non-loopback address on a trusted network.
	ProxyAddr string
	// ProxyPort is the SOCKS5 listener port.
	ProxyPort uint
	// UpstreamSOCKS forwards non-matching SOCKS5 CONNECTs to this
	// upstream (e.g. chain with skysocks-client for regular web
	// traffic).
	UpstreamSOCKS string
	// UpstreamRules send chosen domains to a different upstream, or
	// "direct", ahead of UpstreamSOCKS.
	UpstreamRules []proxyroute.Rule

	// Stats, when non-nil, is updated for every request.
	// Optional; no collection happens when nil.
	Stats *Stats

	// Requests, when non-nil, records every .skynet dial with the path the
	// dialer reports, for the status pages.
	Requests *proxystatus.RequestLog

	// TLSMITM enables on-the-fly TLS termination for browser
	// connections to <pk>.skynet on the TLSPort, using LeafMinter to
	// produce per-host leaf certs signed by a locally-installed CA.
	// When false the runtime behaves exactly as before — pure SOCKS5
	// byte splice. See pkg/skynetca for the trust model and the
	// security argument for why TLS is terminated locally rather than
	// end-to-end.
	TLSMITM bool
	// TLSPort selects the destination port treated as TLS for MITM.
	// Defaults to 443. Ignored when TLSMITM is false.
	TLSPort uint16
	// TLSUpstreamPort is the destination port a MITM'd TLS connection is
	// sent to once decrypted. Defaults to 80, where visors serve HTTP.
	TLSUpstreamPort uint16
	// LeafMinter mints per-host leaf certs. Required when TLSMITM
	// is true; ignored otherwise.
	LeafMinter skynetca.LeafMinter

	// LocalPK is this visor's public key, used to detect self-lookups for the
	// SelfLoopback short-circuit.
	LocalPK cipher.PubKey
	// SelfLoopback, when true (the default), serves a request whose destination
	// is LocalPK from the local service in-process via SelfDial, instead of
	// routing out over skynet back to ourselves. Set false to force the full
	// self-route path — e.g. to test self-transports (a legitimate use case).
	SelfLoopback bool
	// SelfDial returns an in-process connection to the local service registered
	// on the given port. Used only when SelfLoopback short-circuits a
	// self-destined request. Nil disables the short-circuit.
	SelfDial func(port uint16) (net.Conn, error)
	// Aliases maps a destination label to a PK (e.g. "skywire" -> LocalPK), so
	// "skywire.skynet" resolves exactly like "<pk>.skynet".
	Aliases map[string]cipher.PubKey

	// StatusProvider, when non-nil, enables the reserved in-process status hosts
	// served through this proxy — a read-only diagnostic page (logs +
	// route/transport events + per-leg mux view) for a surface. Nil disables the
	// status hosts. See pkg/proxystatus.
	StatusProvider proxystatus.Provider
	// StatusSurface scopes which reserved status host THIS proxy layer owns and
	// answers for (e.g. SurfaceSkynet → only http(s)://status.skynet/). A status
	// host matching a DIFFERENT surface is NOT served here — it falls through so
	// the request continues up the proxy chain to the layer that owns it. Empty
	// means "serve any matched surface" (the pre-scoping behavior), kept so
	// standalone runtimes and tests need no wiring. Ignored when StatusProvider is
	// nil.
	StatusSurface proxystatus.Surface

	// Publish, when non-nil, is called once with a handler that serves ONE
	// already-established connection exactly as the listener would, protocol
	// sniff included. The visor registers it as an in-process local service so
	// an app on this visor reaches this resolver over the data plane it already
	// holds, with no second SOCKS hop on localhost. The handler stays valid
	// until Run returns.
	Publish func(serve func(net.Conn))
}

type RouteLabel struct {
	IsTpID bool
	PK     cipher.PubKey // valid when !IsTpID
	TpID   uuid.UUID     // valid when IsTpID
}

type SkynetDialer interface {
	DialSkynet(ctx context.Context, remote cipher.PubKey, port uint16, route []RouteLabel) (net.Conn, error)
}

type Stats struct {
	// contains filtered or unexported fields
}

type StatsSnapshot struct {
	StartedAt     time.Time  `json:"started_at,omitempty"`
	UptimeSec     int64      `json:"uptime_sec,omitempty"`
	TotalRequests uint64     `json:"total_requests"`
	Successful    uint64     `json:"successful"`
	Failed        uint64     `json:"failed"`
	Active        int64      `json:"active"`
	LastRequestAt *time.Time `json:"last_request_at,omitempty"`
	LastSuccessAt *time.Time `json:"last_success_at,omitempty"`
	LastFailureAt *time.Time `json:"last_failure_at,omitempty"`
	LastError     string     `json:"last_error,omitempty"`
}