mesh

type DeviceManager struct {
	// contains filtered or unexported fields
}

type Disabled struct{}

type DiscoPinger struct {
	NodeID   string
	Key      []byte
	Controls []string // control disco endpoints "ip:port"
	Interval time.Duration
	Clock    clock.Clock
	Report   func(observedEndpoint string)
	Logger   *slog.Logger
	// contains filtered or unexported fields
}

type DiscoResponder struct {
	// contains filtered or unexported fields
}

type Manager interface {
	// Up creates/configures the WG device. Idempotent.
	Up(ctx context.Context, cfg NodeConfig) error
	// ApplyPeers reconciles the device's peer set to exactly `peers`
	// (declarative full set — implementations diff internally).
	ApplyPeers(ctx context.Context, peers *clusterv1.PeerSet) error
	// Down tears the device down.
	Down(ctx context.Context) error
	Status() Status
	// PublicKey returns the node's WG public key (generating a keypair on
	// first use), valid before Up.
	PublicKey() (string, error)
}

type NodeConfig struct {
	// PrivateKeyPath stores the WG private key (0600). Generated when absent.
	PrivateKeyPath string
	MeshIP         netip.Addr
	// ListenPort for WireGuard UDP (default 51820).
	ListenPort uint16
	// InterfaceName defaults to "zt0" (utunN chosen automatically on darwin).
	InterfaceName string
}

type PeerSyncConfig struct {
	NodeID  string
	Manager Manager
	Clock   clock.Clock
	Logger  *slog.Logger
	// Dial opens a connection to a control node's MeshService. Called on every
	// (re)connect; the returned closer is invoked when the stream ends.
	Dial func(ctx context.Context) (grpc.ClientConnInterface, func() error, error)
}

type Status struct {
	Enabled   bool
	Up        bool
	MeshIP    netip.Addr
	PublicKey string
	// PeerPaths maps node id → path in use: "direct" | "punched" | "relay" | "hub".
	PeerPaths map[string]string
}