mesh

type DeviceManager struct {
	// contains filtered or unexported fields
}

type Disabled struct{}

type DiscoPinger struct {
	NodeID   string
	Key      []byte
	Controls []string // control disco endpoints "ip:port"
	Interval time.Duration
	Clock    clock.Clock
	Report   func(observedEndpoint string)
	Logger   *slog.Logger
	// contains filtered or unexported fields
}

type DiscoResponder struct {
	// contains filtered or unexported fields
}

type Gossip struct {
	// contains filtered or unexported fields
}

type GossipConfig struct {
	// NodeID is this node's zattera id — used as the memberlist node name so
	// events map straight back to nodes.
	NodeID string
	// BindAddr is the mesh IP to bind (e.g. 10.90.0.1). Never a public IP.
	BindAddr string
	// Peers are other control nodes' mesh IPs to join (host or host:port).
	Peers []string
	// CAHash is the cluster CA hash; the gossip encryption key derives from it,
	// so only cluster members can join or read the gossip.
	CAHash []byte
	Clock  clock.Clock
	Logger *slog.Logger
}

type Manager interface {
	// Up creates/configures the WG device. Idempotent.
	Up(ctx context.Context, cfg NodeConfig) error
	// ApplyPeers reconciles the device's peer set to exactly `peers`
	// (declarative full set — implementations diff internally).
	ApplyPeers(ctx context.Context, peers *clusterv1.PeerSet) error
	// Down tears the device down.
	Down(ctx context.Context) error
	Status() Status
	// PublicKey returns the node's WG public key (generating a keypair on
	// first use), valid before Up.
	PublicKey() (string, error)
}

type MeshsockConfig struct {
	NodeID string
	CAHash []byte
	// Punch coordinates hole punching via control (nil disables punching).
	Punch meshsock.PunchRequester
	// Relay sends WG packets via the control TCP relay (nil disables the relay).
	Relay meshsock.RelaySender
}

type NodeConfig struct {
	// PrivateKeyPath stores the WG private key (0600). Generated when absent.
	PrivateKeyPath string
	MeshIP         netip.Addr
	// ListenPort for WireGuard UDP (default 51820).
	ListenPort uint16
	// InterfaceName defaults to "zt0" (utunN chosen automatically on darwin).
	InterfaceName string
	// Meshsock, when set, brings the device up on the userspace meshsock bind
	// (UDP hole punching + relay, phases C/D). Kernel WG cannot use a custom
	// bind, so this forces userspace.
	Meshsock *MeshsockConfig
}

type PeerSyncConfig struct {
	NodeID  string
	Manager Manager
	Clock   clock.Clock
	Logger  *slog.Logger
	// Dial opens a connection to a control node's MeshService. Called on every
	// (re)connect; the returned closer is invoked when the stream ends.
	Dial func(ctx context.Context) (grpc.ClientConnInterface, func() error, error)
	// OnPeers, when set, is called with every PeerSet received (before it is
	// applied). A worker uses it to keep its control-node failover set current.
	OnPeers func(*clusterv1.PeerSet)
}

type Status struct {
	Enabled   bool
	Up        bool
	MeshIP    netip.Addr
	PublicKey string
	// PeerPaths maps node id → path in use: "direct" | "punched" | "relay" | "hub".
	PeerPaths map[string]string
}