tunnel

type Attempt struct {
	ProviderID  string        `json:"provider_id"`
	CandidateID string        `json:"candidate_id,omitempty"`
	Status      AttemptStatus `json:"status"`
	ErrorClass  string        `json:"error_class,omitempty"`
	Probe       ProbeEvidence `json:"probe"`
}

type AttemptStatus string

type AvailabilitySet struct {
	SchemaVersion string        `json:"schema_version"`
	Region        RegionProfile `json:"region"`
	Candidates    []Candidate   `json:"candidates"`
	Attempts      []Attempt     `json:"attempts"`
}

type Candidate struct {
	ProviderID     string         `json:"provider_id"`
	URL            string         `json:"url"`
	FailureDomains FailureDomains `json:"failure_domains"`
}

type Eligibility struct {
	Eligible bool
	Reason   string
	Evidence *RegionalEvidence
}

type EvidenceStatus string

type FailureDomains struct {
	AuthoritativeDNS      string `json:"authoritative_dns,omitempty"`
	EdgeNetwork           string `json:"edge_network,omitempty"`
	OriginNetwork         string `json:"origin_network,omitempty"`
	ControlPlane          string `json:"control_plane,omitempty"`
	CertificateDependency string `json:"certificate_dependency,omitempty"`
}

type Handle interface {
	Candidate() Candidate
	Wait() <-chan error
	Stop(context.Context) error
}

type Manager struct {
	Region       RegionProfile
	MaxActive    int
	StartTimeout time.Duration
	ProbeTimeout time.Duration
	Probe        ProbeFunc
}

type NetworkSample struct {
	Carrier      string `json:"carrier"`
	Region       string `json:"region"`
	ResolverType string `json:"resolver_type,omitempty"`
	Success      bool   `json:"success"`
	LatencyMS    int64  `json:"latency_ms,omitempty"`
}

type Policy struct {
	Region                RegionProfile
	Now                   time.Time
	AllowedProviderIDs    []string
	RestrictProviders     bool
	AllowNonDefault       bool
	AllowUnverifiedGlobal bool
}

type ProbeEvidence struct {
	DNSOK                  bool          `json:"dns_ok"`
	TCPConnectOK           bool          `json:"tcp_connect_ok"`
	TLSOK                  bool          `json:"tls_ok"`
	HealthOK               bool          `json:"health_ok"`
	BootstrapOK            bool          `json:"bootstrap_ok"`
	StaticBootstrapOK      bool          `json:"static_bootstrap_ok"`
	TicketBoundBootstrapOK bool          `json:"ticket_bound_bootstrap_ok"`
	SmallAssetOK           bool          `json:"small_asset_ok"`
	Latency                time.Duration `json:"latency"`
	InstanceMarker         string        `json:"instance_marker,omitempty"`
}

type ProbeFunc func(context.Context, Candidate) (ProbeEvidence, error)

type Provider interface {
	ID() string
	Metadata() ProviderMetadata
	// Start must return promptly after ctx cancellation. The context remains
	// valid for the returned handle's lifetime; Wait signals only after provider
	// resources are reaped. Manager cancels ctx on startup timeout, parent
	// cancellation, handle stop, or handle exit.
	Start(context.Context, StartRequest) (Handle, error)
}

type ProviderMetadata struct {
	ID                    string         `json:"id"`
	DisplayName           string         `json:"display_name"`
	Protocols             []string       `json:"protocols"`
	Anonymous             bool           `json:"anonymous"`
	CredentialRequirement string         `json:"credential_requirement,omitempty"`
	Executable            string         `json:"executable"`
	DocumentationURL      string         `json:"documentation_url"`
	TermsURL              string         `json:"terms_url,omitempty"`
	DefaultAutomatic      bool           `json:"default_automatic"`
	AutomaticPriority     int            `json:"automatic_priority,omitempty"`
	RequiresSSHPin        bool           `json:"requires_ssh_pin"`
	FailureDomains        FailureDomains `json:"failure_domains"`
}

type RegionProfile string

type RegionalEvidence struct {
	ProviderID string          `json:"provider_id"`
	Region     RegionProfile   `json:"region"`
	Status     EvidenceStatus  `json:"status"`
	Issuer     string          `json:"issuer"`
	ObservedAt time.Time       `json:"observed_at"`
	ExpiresAt  time.Time       `json:"expires_at"`
	Samples    []NetworkSample `json:"samples"`
}

type Registry struct {
	// contains filtered or unexported fields
}

type Runtime struct {
	// contains filtered or unexported fields
}

type Selection struct {
	Provider    Provider
	Metadata    ProviderMetadata
	Eligibility Eligibility
}

type StartRequest struct {
	LocalURL       string
	LocalPort      string
	KnownHostsFile string
	ProviderRoot   string
}