portscan

type Config struct {
	Ports       []uint16      // required unless PingOnly
	Timeout     time.Duration // per-probe dial timeout (default 500ms)
	Retries     int           // retries on filtered (default 0)
	Concurrency int           // max sockets in flight (default 2000)
	HostParall  int           // max hosts in flight (default 100)

	// PingOnly skips the port scan and runs TCP ping discovery only (-sn).
	PingOnly bool

	// Banner enables a passive banner grab on every open port.
	Banner bool

	// Progress receives one Tick per host completed. SetTotal is called
	// once up front using target.Iterator.Total(). nil → progress.NewNoop.
	Progress progress.Reporter

	// Resolver enables reverse DNS enrichment. nil disables it (equivalent
	// to --no-dns at the CLI level).
	Resolver *resolver.Cache

	// ScriptEngine runs Lua scripts against each open port. nil disables.
	ScriptEngine *script.Engine

	// Rate bounds SYN packet emission (packets-per-second). 0 disables
	// rate limiting. TCP-connect mode ignores this; the socket semaphore
	// is the pacer there.
	Rate int

	// Adaptive enables the adaptive rate limiter: the SYN sender starts
	// at max(Rate/4, 100) pps and scales up/down based on the observed
	// probe error rate. Ignored when Rate is 0 or when the scan is
	// TCP-connect (not --syn).
	Adaptive bool
}

type HostResult struct {
	Addr      netip.Addr
	Hostname  string // populated when Config.Resolver was set and PTR succeeded
	Started   time.Time
	Elapsed   time.Duration
	Results   []Result
	Discovery *discovery.Result // populated in PingOnly mode
}

type Result struct {
	Addr     netip.Addr
	Port     uint16
	State    State
	RTT      time.Duration
	Err      error           // populated for StateError
	Banner   string          // populated when banner grab is enabled and data was received
	Findings []ScriptFinding // populated when Config.ScriptEngine is set
}

type ScriptFinding struct {
	Script string
	Output string
}

type State int