feat(dgw,agent,jetsocat): route JMUX channels through agents

crates/agent-tunnel-proto/src/lib.rs

@@ -29,6 +29,9 @@ pub use session::{ConnectRequest, ConnectResponse, MAX_SESSION_MESSAGE_SIZE};
 pub use stream::{ControlStream, FramedRecv, FramedSend, SessionStream};
 pub use version::{ALPN_PROTOCOL, CURRENT_PROTOCOL_VERSION, MIN_SUPPORTED_VERSION, validate_protocol_version};
 
+/// Maximum time the Gateway keeps an Agent route online without a liveness message.
+pub const AGENT_OFFLINE_TIMEOUT_SECS: u64 = 90;
+
 /// Current wall-clock time in milliseconds since UNIX epoch.
 pub fn current_time_millis() -> u64 {
     u64::try_from(

crates/agent-tunnel/src/registry.rs

@@ -3,7 +3,7 @@ use std::sync::Arc;
 use std::sync::atomic::{AtomicU64, Ordering};
 use std::time::{Duration, SystemTime};
 
-use agent_tunnel_proto::{DomainAdvertisement, current_time_millis};
+use agent_tunnel_proto::{AGENT_OFFLINE_TIMEOUT_SECS, DomainAdvertisement, current_time_millis};
 use ipnetwork::Ipv4Network;
 use parking_lot::RwLock;
 use serde::Serialize;
@@ -13,7 +13,7 @@ use uuid::Uuid;
 use crate::routing::RouteTarget;
 
 /// Duration after which an agent is considered offline if no heartbeat has been received.
-pub const AGENT_OFFLINE_TIMEOUT: Duration = Duration::from_secs(90);
+pub const AGENT_OFFLINE_TIMEOUT: Duration = Duration::from_secs(AGENT_OFFLINE_TIMEOUT_SECS);
 
 /// Tracks route advertisements received from an agent.
 ///

crates/jmux-proxy/src/event.rs

@@ -66,8 +66,8 @@ pub enum EventOutcome {
 
 /// Complete audit information for one traffic item's lifecycle.
 ///
-/// A single `TrafficEvent` is emitted exactly once per JMUX traffic item when
-/// it ends (successfully or with error).
+/// A single `TrafficEvent` is emitted exactly once when an eligible JMUX traffic item ends.
+/// An item is eligible only when direct target resolution provides a concrete IP address.
 ///
 /// # Timestamp semantics
 ///
@@ -94,7 +94,7 @@ pub enum EventOutcome {
 ///   - connect failure: the last IP that was attempted
 /// - `target_port`: the destination port.
 ///
-/// DNS failures do **not** produce an event because `target_ip` is unknown.
+/// DNS failures and connection attempts handled by connector overrides do **not** produce an event because `target_ip` is unknown.
 #[derive(Clone, Debug)]
 pub struct TrafficEvent {
     /// How the traffic item's lifecycle ended.
@@ -142,13 +142,13 @@ pub struct TrafficEvent {
 
 /// Type-erased traffic audit callback.
 ///
-/// Invoked exactly once per JMUX traffic item at end-of-lifecycle. The callback
-/// itself is **synchronous**; perform any asynchronous work by spawning within
-/// the callback (e.g., `tokio::spawn`) or by sending to an internal channel.
+/// Invoked exactly once at the end of each eligible JMUX traffic item.
+/// An item is eligible only when direct target resolution provides a concrete IP address.
+/// The callback itself is **synchronous**; perform asynchronous work by spawning within the callback (e.g., `tokio::spawn`) or by sending to an internal channel.
 ///
 /// # Exactly-once
 ///
-/// - Each traffic item yields exactly one event.
+/// - Each eligible traffic item yields exactly one event.
 /// - Emitted at cleanup time, not during operation.
 /// - Guarded to prevent duplicate emission.
 /// - No aggregation—each event stands alone.
@@ -162,7 +162,7 @@ pub struct TrafficEvent {
 ///
 /// ```rust,ignore
 /// let proxy = JmuxProxy::new(reader, writer)
-///     .with_traffic_event_callback(|event| {
+///     .with_outgoing_traffic_event_callback(|event| {
 ///         // Log quickly...
 ///         tracing::info!(
 ///             outcome = ?event.outcome,