model

type AccessGroup struct {
	ID          uint      `gorm:"primaryKey" json:"id"`
	ScopeID     string    `gorm:"size:64;not null;uniqueIndex:ux_access_group_scope_name" json:"scope_id"`
	Name        string    `gorm:"size:120;not null;uniqueIndex:ux_access_group_scope_name" json:"name"`
	Description string    `gorm:"type:text" json:"description"`
	Enabled     bool      `gorm:"not null" json:"enabled"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type AccessGroupPlan struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	GroupID   uint      `gorm:"not null;uniqueIndex:ux_access_group_plan" json:"group_id"`
	PlanID    uint      `gorm:"not null;uniqueIndex:ux_access_group_plan;index" json:"plan_id"`
	CreatedAt time.Time `json:"created_at"`
}

type AccessGroupUser struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	GroupID   uint      `gorm:"not null;uniqueIndex:ux_access_group_user" json:"group_id"`
	UserID    uint      `gorm:"not null;uniqueIndex:ux_access_group_user;index" json:"user_id"`
	CreatedAt time.Time `json:"created_at"`
}

type AdminAPIToken struct {
	ID     string `gorm:"primaryKey;size:36" json:"id"`
	UserID uint   `gorm:"not null;index" json:"user_id"`
	Name   string `gorm:"size:100;not null" json:"name"`
	// TokenHash is the hex SHA-256 of the token; it is the lookup key.
	TokenHash string `gorm:"size:64;not null;uniqueIndex" json:"-"`
	// Hint is the last four characters of the token, to tell tokens apart.
	Hint       string     `gorm:"size:8;not null" json:"hint"`
	Scope      string     `gorm:"size:16;not null" json:"scope"`
	ExpiresAt  *time.Time `json:"expires_at"`
	LastUsedAt *time.Time `json:"last_used_at"`
	LastUsedIP string     `gorm:"size:45" json:"last_used_ip,omitempty"`
	CreatedIP  string     `gorm:"size:45" json:"created_ip,omitempty"`
	CreatedAt  time.Time  `json:"created_at"`
	RevokedAt  *time.Time `json:"revoked_at"`
	// OwnerEmail is the owner's current email, filled in when tokens are
	// listed so an administrator who lists everyone's tokens can tell whose
	// they are. It is not a column.
	OwnerEmail string `gorm:"-" json:"owner_email,omitempty"`
	// RevokeReason says why the token ended: owner_revoked, admin_revoked or
	// owner_not_admin (the owner was banned, demoted or deleted when it was
	// used).
	RevokeReason string `gorm:"size:32" json:"revoke_reason,omitempty"`
}

type AdminCreateUserRequest struct {
	Email          string `json:"email" binding:"required,email"`
	Password       string `json:"password" binding:"required,min=6"`
	IsAdmin        int    `json:"is_admin"`
	FlowResetTime  int64  `json:"flowResetTime"`
	GroupID        *uint  `json:"group_id"`
	TransferEnable *int64 `json:"transfer_enable"`
	SpeedLimit     *int64 `json:"speed_limit"`
	DeviceLimit    *int   `json:"device_limit"`
}

type AgentCertificate struct {
	Serial       string     `gorm:"primaryKey;size:40" json:"serial"`
	NodeKind     string     `gorm:"size:16;not null;index:idx_v4_kernel_agent_certificate_node,priority:1" json:"node_kind"`
	NodeID       uint       `gorm:"not null;index:idx_v4_kernel_agent_certificate_node,priority:2" json:"node_id"`
	Cluster      string     `gorm:"size:63;not null" json:"cluster"`
	EnrollmentID string     `gorm:"size:36;not null;index" json:"enrollment_id"`
	IssuerKeyID  string     `gorm:"size:64;not null" json:"issuer_key_id"`
	NotAfter     time.Time  `gorm:"not null;index" json:"not_after"`
	RevokedAt    *time.Time `json:"revoked_at"`
	RevokeReason string     `gorm:"size:64" json:"revoke_reason,omitempty"`
	CreatedAt    time.Time  `json:"created_at"`
}

type AgentDiagnosticTask struct {
	ID         uint      `gorm:"primaryKey" json:"id"`
	TaskID     string    `gorm:"size:80;uniqueIndex" json:"task_id"`
	NodeID     uint      `gorm:"index" json:"node_id"`
	Action     string    `gorm:"size:40" json:"action"`
	Params     string    `gorm:"type:text" json:"params,omitempty"`
	Status     string    `gorm:"size:20;index" json:"status"`
	Success    bool      `json:"success"`
	Output     string    `gorm:"type:text" json:"output,omitempty"`
	Error      string    `gorm:"type:text" json:"error,omitempty"`
	DurationMS int64     `json:"duration_ms"`
	CreatedAt  time.Time `json:"created_at"`
	UpdatedAt  time.Time `json:"timestamp"`
}

type AgentEnrollment struct {
	ID       string `gorm:"primaryKey;size:36" json:"id"`
	NodeKind string `gorm:"size:16;not null;index:idx_v4_kernel_agent_enrollment_node,priority:1" json:"node_kind"`
	NodeID   uint   `gorm:"not null;index:idx_v4_kernel_agent_enrollment_node,priority:2" json:"node_id"`
	Cluster  string `gorm:"size:63;not null" json:"cluster"`
	Method   string `gorm:"size:32;not null" json:"method"`
	// CredentialHash is set for AgentEnrollmentMethodCredential only.
	CredentialHash *string    `gorm:"size:64;uniqueIndex" json:"-"`
	ExpiresAt      *time.Time `json:"expires_at"`
	UsedAt         *time.Time `json:"used_at"`
	RevokedAt      *time.Time `json:"revoked_at"`
	RevokeReason   string     `gorm:"size:64" json:"revoke_reason,omitempty"`
	AgentVersion   string     `gorm:"size:64" json:"agent_version,omitempty"`
	InstanceID     string     `gorm:"size:128" json:"instance_id,omitempty"`
	CreatedBy      uint       `json:"created_by"`
	CreatedAt      time.Time  `json:"created_at"`
}

type AgentReportBatch struct {
	NodeKind  string    `gorm:"primaryKey;size:16" json:"node_kind"`
	NodeID    uint      `gorm:"primaryKey" json:"node_id"`
	BatchID   string    `gorm:"primaryKey;size:128" json:"batch_id"`
	Kind      string    `gorm:"size:16;not null" json:"kind"`
	CreatedAt time.Time `gorm:"not null;index" json:"created_at"`
}

type AgentTransport struct {
	NodeKind  string `gorm:"primaryKey;size:16" json:"node_kind"`
	NodeID    uint   `gorm:"primaryKey;autoIncrement:false" json:"node_id"`
	Transport string `gorm:"primaryKey;size:32" json:"transport"`
	// AgentVersion is what the agent reported on this transport (the
	// stream's Hello), empty where the transport carries none.
	AgentVersion string `gorm:"size:64;not null;default:''" json:"agent_version"`
	// Identity is the SPIFFE ID of a certificate-authenticated agent, or
	// "api-key"; CertSerial and CertNotAfter describe the certificate.
	Identity     string     `gorm:"size:255;not null;default:''" json:"identity"`
	CertSerial   string     `gorm:"size:40;not null;default:''" json:"cert_serial,omitempty"`
	CertNotAfter *time.Time `json:"cert_not_after,omitempty"`
	FirstSeenAt  time.Time  `gorm:"not null" json:"first_seen_at"`
	LastSeenAt   time.Time  `gorm:"not null;index" json:"last_seen_at"`
}

type AgentUpgradeCampaign struct {
	ID            string `gorm:"primaryKey;size:36" json:"id"`
	TargetVersion string `gorm:"size:64;not null" json:"target_version"`
	// ArtifactsJSON is the per-architecture release assets the operation
	// carries ([]agentcontrol.UpgradeArtifact: asset, url, sha256, size,
	// signature), verified with the official key when the campaign was
	// created.
	ArtifactsJSON string `gorm:"type:text;not null" json:"-"`
	// BatchesJSON is the batches ([]agentupgrade.Batch: cumulative
	// percent, minimum duration in seconds).
	BatchesJSON string `gorm:"type:text;not null" json:"-"`
	// FailureThresholdPercent: a batch rolls back when more than this
	// share of its offered nodes fail (H19: 5).
	FailureThresholdPercent int `gorm:"not null" json:"failure_threshold_percent"`
	// ReconnectTimeoutSeconds: an offered node must reconnect with the
	// target version within this time (H19: 600).
	ReconnectTimeoutSeconds int `gorm:"not null" json:"reconnect_timeout_seconds"`
	// ExcludeJSON lists the excluded nodes and tags
	// ({"nodes":["forward-3"],"tags":["edge"]}).
	ExcludeJSON string `gorm:"type:text;not null" json:"-"`
	Status      string `gorm:"size:16;not null;index" json:"status"`
	// ActiveSlot is AgentUpgradeActiveSlot while the campaign is not
	// terminal, NULL afterwards: its unique index admits one active
	// campaign on SQLite and PostgreSQL alike.
	ActiveSlot *string `gorm:"size:8;uniqueIndex:ux_v4_kernel_agent_upgrade_active" json:"-"`
	// CurrentBatch is the index of the running batch.
	CurrentBatch   int        `gorm:"not null;default:0" json:"current_batch"`
	BatchStartedAt *time.Time `json:"batch_started_at"`
	// PausedAt is when the campaign was paused; nil otherwise.
	PausedAt *time.Time `json:"paused_at"`
	// RollbackStartedAt is when the current batch started rolling back.
	RollbackStartedAt *time.Time `json:"rollback_started_at"`
	// StatusReason and ErrorCode explain a terminal status or rollback.
	StatusReason string     `gorm:"size:1024;not null;default:''" json:"status_reason"`
	ErrorCode    string     `gorm:"size:64;not null;default:''" json:"error_code"`
	Reason       string     `gorm:"size:512;not null;default:''" json:"reason"`
	CreatedBy    uint       `gorm:"not null;default:0" json:"created_by"`
	Actor        string     `gorm:"size:100;not null;default:''" json:"actor"`
	CreatedAt    time.Time  `gorm:"not null" json:"created_at"`
	UpdatedAt    time.Time  `gorm:"not null" json:"updated_at"`
	FinishedAt   *time.Time `json:"finished_at"`
}

type AgentUpgradeNode struct {
	ID         uint64 `gorm:"primaryKey;autoIncrement" json:"-"`
	CampaignID string `` /* 153-byte string literal not displayed */
	// NodeKind is proxy or forward; ids of the two overlap.
	NodeKind string `gorm:"size:16;not null;uniqueIndex:ux_v4_kernel_agent_upgrade_node,priority:2" json:"node_kind"`
	NodeID   uint64 `gorm:"not null;uniqueIndex:ux_v4_kernel_agent_upgrade_node,priority:3" json:"node_id"`
	// Batch is the node's batch; OrderKey its canary order (the
	// SHA-256 of its name, hex), lowest first.
	Batch    int    `gorm:"not null;index:idx_v4_kernel_agent_upgrade_node_batch,priority:2" json:"batch"`
	OrderKey string `gorm:"size:64;not null" json:"order_key"`
	State    string `gorm:"size:16;not null" json:"state"`
	// FromVersion is the version the node's Agent ran when it was offered
	// the upgrade (the rollback target).
	FromVersion string `gorm:"size:64;not null;default:''" json:"from_version"`
	// OperationID is the agent.upgrade operation sent; SessionID the
	// stream session it was sent on.
	OperationID string `gorm:"size:64;not null;default:''" json:"operation_id"`
	SessionID   string `gorm:"size:64;not null;default:''" json:"session_id"`
	// RollbackOperationID is the rollback operation sent, empty if none.
	RollbackOperationID string     `gorm:"size:64;not null;default:''" json:"rollback_operation_id"`
	ErrorCode           string     `gorm:"size:64;not null;default:''" json:"error_code"`
	Error               string     `gorm:"size:1024;not null;default:''" json:"error"`
	OfferedAt           *time.Time `json:"offered_at"`
	HandedOffAt         *time.Time `json:"handed_off_at"`
	ReconnectedAt       *time.Time `json:"reconnected_at"`
	FinishedAt          *time.Time `json:"finished_at"`
	RollbackSentAt      *time.Time `json:"rollback_sent_at"`
	CreatedAt           time.Time  `gorm:"not null" json:"created_at"`
	UpdatedAt           time.Time  `gorm:"not null" json:"updated_at"`
}

type AlipayConfig struct {
	AppID      string `json:"app_id"`      // 应用ID
	PrivateKey string `json:"private_key"` // 应用私钥
	PublicKey  string `json:"public_key"`  // 支付宝公钥
	NotifyURL  string `json:"notify_url"`  // 异步通知地址
	ReturnURL  string `json:"return_url"`  // 同步跳转地址
	Sandbox    bool   `json:"sandbox"`     // 沙箱模式
}

type AuditLog struct {
	ID           uint   `gorm:"primaryKey" json:"id"`
	UserID       *uint  `gorm:"index" json:"user_id"`
	Email        string `gorm:"size:255" json:"email"`
	Method       string `gorm:"size:10" json:"method"`        // HTTP method
	Path         string `gorm:"size:500" json:"path"`         // Request path
	Module       string `gorm:"size:100;index" json:"module"` // Extracted module from path
	Action       string `gorm:"size:50;index" json:"action"`  // create/update/delete/etc.
	IP           string `gorm:"size:45" json:"ip"`            // Client IP
	UserAgent    string `gorm:"size:500" json:"user_agent"`
	RequestID    string `gorm:"size:64" json:"request_id"`      // Correlation ID
	RequestBody  string `gorm:"type:text" json:"request_body"`  // Request body (truncated)
	StatusCode   int    `json:"status_code"`                    // HTTP response status
	DurationMS   int64  `json:"duration_ms"`                    // Request duration in milliseconds
	ErrorMessage string `gorm:"type:text" json:"error_message"` // Error if status >= 400

	CreatedAt time.Time `gorm:"index" json:"created_at"`
}

type AuthorizedKey struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	Name      string    `gorm:"size:100" json:"name"`           // 密钥名称/备注
	Key       string    `gorm:"size:64;uniqueIndex" json:"key"` // 授权密钥
	KeyHash   string    `gorm:"size:64" json:"-"`               // 密钥哈希 (不返回给前端)
	Used      int       `gorm:"default:0" json:"used"`          // 已注册节点数量
	ExpireAt  *int64    `json:"expire_at"`                      // 过期时间 (null=永不过期)
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type BackupConfig struct {
	ID             uint   `gorm:"primaryKey" json:"id"`
	Enabled        bool   `gorm:"default:false" json:"enabled"`
	AutoBackup     bool   `gorm:"default:false" json:"auto_backup"`
	Schedule       string `gorm:"size:50" json:"schedule"`         // cron表达式
	RetentionDays  int    `gorm:"default:7" json:"retention_days"` // 保留天数
	BackupDatabase bool   `gorm:"default:true" json:"backup_database"`
	BackupFiles    bool   `gorm:"default:false" json:"backup_files"`
	StorageType    string `gorm:"size:20;default:local" json:"storage_type"` // local/s3/ftp
	StoragePath    string `gorm:"size:255" json:"storage_path"`
	S3Bucket       string `gorm:"size:100" json:"s3_bucket"`
	S3Region       string `gorm:"size:50" json:"s3_region"`
	S3Endpoint     string `gorm:"size:255" json:"s3_endpoint"`
	S3AccessKey    string `gorm:"size:100" json:"s3_access_key"`
	S3SecretKey    string `gorm:"size:100" json:"s3_secret_key"`

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type BackupRecord struct {
	ID        uint   `gorm:"primaryKey" json:"id"`
	Name      string `gorm:"size:100" json:"name"`
	Type      string `gorm:"size:20" json:"type"`       // full/database/files
	Size      int64  `json:"size"`                      // 文件大小(字节)
	Path      string `gorm:"size:255" json:"path"`      // 存储路径
	Status    int    `gorm:"default:0" json:"status"`   // 0=进行中 1=成功 2=失败
	Error     string `gorm:"type:text" json:"error"`    // 错误信息
	Auto      bool   `gorm:"default:false" json:"auto"` // 是否自动备份
	CreatedBy *uint  `json:"created_by"`                // 创建者ID

	CompletedAt *time.Time `json:"completed_at"`
	CreatedAt   time.Time  `json:"created_at"`
	UpdatedAt   time.Time  `json:"updated_at"`
}

type BaseServer struct {
	ID          uint      `gorm:"primaryKey" json:"id"`
	GroupID     string    `gorm:"type:varchar(255)" json:"group_id"` // JSON array of group IDs
	RouteID     string    `gorm:"type:varchar(255)" json:"route_id"` // JSON array of route IDs
	ParentID    *uint     `json:"parent_id"`
	Tags        *string   `gorm:"type:varchar(255)" json:"tags"`
	Name        string    `gorm:"size:255" json:"name"`
	Rate        float64   `gorm:"default:1" json:"rate"`
	Host        string    `gorm:"size:255" json:"host"`
	Port        int       `json:"port"`
	ServerPort  int       `json:"server_port"`
	TLS         int       `gorm:"default:0" json:"tls"` // 0: None, 1: TLS, 2: Reality
	TLSSettings *string   `gorm:"type:text" json:"tls_settings"`
	Show        int       `gorm:"default:0" json:"show"`
	Sort        *int      `json:"sort"`
	LastCheckAt *int64    `json:"last_check_at"` // 最后检查时间
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type CommissionRecord struct {
	ID         uint    `gorm:"primaryKey" json:"id"`
	UserID     uint    `gorm:"index" json:"user_id"`      // 获得佣金的用户
	OrderID    uint    `gorm:"index" json:"order_id"`     // 关联订单
	FromUserID uint    `gorm:"index" json:"from_user_id"` // 被邀请用户
	Amount     float64 `json:"amount"`                    // 佣金金额
	Type       int     `json:"type"`                      // 1=订单佣金 2=充值佣金 3=系统赠送
	Status     int     `gorm:"default:0" json:"status"`   // 0=待确认 1=已到账 2=已提现 3=已取消
	Remark     string  `gorm:"size:255" json:"remark"`

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type CommissionWithdraw struct {
	ID      uint    `gorm:"primaryKey" json:"id"`
	UserID  uint    `gorm:"index" json:"user_id"`
	Amount  float64 `json:"amount"`                  // 提现金额
	Method  string  `gorm:"size:20" json:"method"`   // alipay/wechat/bank
	Account string  `gorm:"size:100" json:"account"` // 收款账号
	Name    string  `gorm:"size:50" json:"name"`     // 收款人姓名
	Status  int     `gorm:"default:0" json:"status"` // 0=待处理 1=已处理 2=已拒绝
	Remark  string  `gorm:"size:255" json:"remark"`

	ProcessedAt *time.Time `json:"processed_at"`
	CreatedAt   time.Time  `json:"created_at"`
	UpdatedAt   time.Time  `json:"updated_at"`
}

type Coupon struct {
	ID           uint      `gorm:"primaryKey" json:"id"`
	Code         string    `gorm:"size:32;uniqueIndex" json:"code"`
	Name         string    `gorm:"size:255" json:"name"`
	Type         int       `gorm:"default:1" json:"type"`       // 1: percentage, 2: fixed amount
	Value        int       `json:"value"`                       // percentage (0-100) or amount in cents
	LimitUse     *int      `json:"limit_use"`                   // null or -1 = unlimited
	LimitUseWith *uint     `gorm:"index" json:"limit_use_with"` // limit to specific plan ID
	LimitPeriod  *string   `gorm:"size:20" json:"limit_period"` // limit to specific period
	UseCount     int       `gorm:"default:0" json:"use_count"`  // how many times used
	StartedAt    int64     `json:"started_at"`                  // unix timestamp
	EndedAt      int64     `json:"ended_at"`                    // unix timestamp
	CreatedAt    time.Time `json:"created_at"`
	UpdatedAt    time.Time `json:"updated_at"`
}

type CouponUsage struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	CouponID  uint      `gorm:"index" json:"coupon_id"`
	UserID    uint      `gorm:"index" json:"user_id"`
	OrderID   uint      `gorm:"index" json:"order_id"`
	CreatedAt time.Time `json:"created_at"`
}

type EPayConfig struct {
	APIURL    string `json:"api_url"`    // API地址
	PID       string `json:"pid"`        // 商户ID
	Key       string `json:"key"`        // 商户密钥
	NotifyURL string `json:"notify_url"` // 通知地址
	ReturnURL string `json:"return_url"` // 跳转地址
}

type EmailConfig struct {
	Host        string `json:"host"`         // SMTP服务器
	Port        int    `json:"port"`         // 端口
	Username    string `json:"username"`     // 用户名
	Password    string `json:"password"`     // 密码/授权码
	FromName    string `json:"from_name"`    // 发件人名称
	FromAddress string `json:"from_address"` // 发件人地址
	Encryption  string `json:"encryption"`   // ssl/tls/none
}

type EncryptionSettings struct {
	Mode          string `json:"mode,omitempty"`           // 模式: native
	Ticket        string `json:"ticket,omitempty"`         // Ticket: 0rtt
	ServerPadding string `json:"server_padding,omitempty"` // 服务器填充
	PrivateKey    string `json:"private_key,omitempty"`    // 加密私钥
}

type Event struct {
	ID          uint       `gorm:"primaryKey" json:"id"`
	Type        string     `gorm:"size:100;index" json:"type"` // e.g. plan.created, plan.updated, plan.assigned
	Payload     *string    `gorm:"type:text" json:"payload"`
	Status      string     `gorm:"size:20;default:'pending'" json:"status"`
	CreatedAt   time.Time  `json:"created_at"`
	ProcessedAt *time.Time `json:"processed_at"`
}

type Forward struct {
	ID                uint           `gorm:"primaryKey" json:"id"`
	UserID            uint           `gorm:"index;not null" json:"user_id"`
	UserName          string         `gorm:"size:255" json:"user_name"`
	Name              string         `gorm:"size:100;not null" json:"name"`
	TunnelID          uint           `gorm:"index;not null" json:"tunnel_id"`
	Tunnel            *ForwardTunnel `gorm:"foreignKey:TunnelID" json:"tunnel,omitempty"`
	InPort            int            `gorm:"not null" json:"in_port"`
	OutPort           int            `json:"out_port"`
	RemoteAddr        string         `gorm:"type:text;not null" json:"remote_addr"`
	InterfaceName     string         `gorm:"size:255" json:"interface_name"`
	Strategy          string         `gorm:"size:20;default:'fifo'" json:"strategy"`
	Status            int            `gorm:"default:1" json:"status"`
	RuntimeBackend    string         `gorm:"size:50;default:'gost';index" json:"runtimeBackend"`
	RuntimeStatus     int            `gorm:"default:0;index" json:"runtimeStatus"`
	RuntimeMessage    string         `gorm:"type:text" json:"runtimeMessage"`
	RuntimeLastSyncAt *time.Time     `json:"runtimeLastSyncAt"`
	InFlow            int64          `gorm:"default:0" json:"in_flow"`
	OutFlow           int64          `gorm:"default:0" json:"out_flow"`
	Inx               int            `gorm:"default:0" json:"inx"`
	CreatedAt         time.Time      `json:"created_at"`
	UpdatedAt         time.Time      `json:"updated_at"`
	User              *User          `gorm:"foreignKey:UserID" json:"user,omitempty"`
}

type ForwardAgentBridgeTask struct {
	ID           uint      `gorm:"primaryKey" json:"id"`
	TaskID       string    `gorm:"size:80;uniqueIndex" json:"taskId"`
	RuntimeJobID uint      `gorm:"uniqueIndex" json:"runtimeJobId"`
	NodeID       uint      `gorm:"index" json:"nodeId"`
	ForwardID    *uint     `gorm:"index" json:"forwardId"`
	Action       string    `gorm:"size:30" json:"action"`
	Type         string    `gorm:"size:30" json:"type"`
	Params       string    `gorm:"type:text" json:"params"`
	Status       string    `gorm:"size:20;index" json:"status"`
	Dispatched   bool      `gorm:"default:false" json:"dispatched"`
	CreatedAt    time.Time `json:"created_at"`
	UpdatedAt    time.Time `json:"updated_at"`
}

type ForwardCleanAgent struct {
	ID           uint       `gorm:"primaryKey" json:"id"`
	NodeID       *uint      `gorm:"index" json:"nodeId"`
	Name         string     `gorm:"size:100;not null" json:"name"`
	Token        string     `gorm:"size:160;not null;uniqueIndex" json:"-"`
	Version      string     `gorm:"size:50" json:"version"`
	Hostname     string     `gorm:"size:255" json:"hostname"`
	OS           string     `gorm:"size:50" json:"os"`
	Arch         string     `gorm:"size:50" json:"arch"`
	Kernel       string     `gorm:"size:120" json:"kernel"`
	PublicIP     string     `gorm:"size:64" json:"publicIp"`
	PrivateIP    string     `gorm:"size:64" json:"privateIp"`
	Capabilities string     `gorm:"type:text" json:"capabilities"`
	Status       int        `gorm:"default:0;index" json:"status"`
	LastSeen     *time.Time `gorm:"index" json:"lastSeen"`
	LastError    string     `gorm:"type:text" json:"lastError"`
	RevokedAt    *time.Time `json:"revokedAt"`
	CreatedAt    time.Time  `json:"created_at"`
	UpdatedAt    time.Time  `json:"updated_at"`
}

type ForwardLatencyBucket struct {
	ID uint `gorm:"primaryKey" json:"id"`

	// 跨三类目标的统一键: "<type>:<id>:<host>:<port>"
	TargetKey  string `gorm:"size:191;not null;uniqueIndex:idx_flb_key_time,priority:1;index:idx_flb_key_latest,priority:1" json:"target_key"`
	TargetType string `gorm:"size:20;not null;index" json:"target_type"`
	TargetID   uint   `gorm:"index" json:"target_id"`
	Label      string `gorm:"size:191" json:"label"`
	Host       string `gorm:"size:255" json:"host"`
	Port       int    `json:"port"`

	BucketAt        time.Time `` /* 137-byte string literal not displayed */
	IntervalSeconds int       `gorm:"not null;default:60" json:"interval_seconds"`

	SampleCount  int     `gorm:"not null" json:"sample_count"`
	SuccessCount int     `gorm:"not null" json:"success_count"`
	MinRTT       float64 `json:"min_rtt"`  // ms
	AvgRTT       float64 `json:"avg_rtt"`  // ms
	MaxRTT       float64 `json:"max_rtt"`  // ms
	P95RTT       float64 `json:"p95_rtt"`  // ms
	LossPct      float64 `json:"loss_pct"` // 0..100

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type ForwardLegacyArchive struct {
	ID uint `gorm:"primaryKey" json:"id"`
	// Path is the archive file's absolute path on the Control host.
	Path      string `gorm:"size:1024;not null" json:"path"`
	SHA256    string `gorm:"size:64;not null" json:"sha256"`
	SizeBytes int64  `json:"size_bytes"`
	// Schema is the archive's schema version.
	Schema string `gorm:"size:64;not null" json:"schema"`
	// Trigger is "startup" (the first v4.2 start) or "cli".
	Trigger string `gorm:"size:16;not null" json:"trigger"`
	Actor   string `gorm:"size:255" json:"actor"`
	// RowCounts is a JSON object of each archived table's row count; a
	// table that did not exist is -1.
	RowCounts string    `gorm:"type:text" json:"row_counts"`
	CreatedAt time.Time `gorm:"index" json:"created_at"`
}

type ForwardLegacyDrop struct {
	ID            uint   `gorm:"primaryKey" json:"id"`
	ArchiveID     uint   `json:"archive_id"`
	ArchivePath   string `gorm:"size:1024" json:"archive_path"`
	ArchiveSHA256 string `gorm:"size:64" json:"archive_sha256"`
	// Backup is a JSON object naming the database backup the drop
	// accepted (source, path, size, sha256).
	Backup string `gorm:"type:text" json:"backup"`
	// Dropped and AlreadyMissing are JSON arrays of table names.
	Dropped        string    `gorm:"type:text" json:"dropped"`
	AlreadyMissing string    `gorm:"type:text" json:"already_missing"`
	Actor          string    `gorm:"size:255" json:"actor"`
	CreatedAt      time.Time `json:"created_at"`
}

type ForwardLegacyNode struct {
	ID       uint   `gorm:"primaryKey" json:"id"`
	NodeID   uint   `gorm:"not null;uniqueIndex" json:"node_id"`
	NodeRef  string `gorm:"size:64;not null" json:"node_ref"`
	NodeName string `gorm:"size:255" json:"node_name"`
	// State is the latest check's result: clean, dirty or unreachable.
	State string `gorm:"size:16;not null;index" json:"state"`
	// Checks is a JSON array of the check's paths (agent, nodex, ansible)
	// with their results.
	Checks    string     `gorm:"type:text" json:"checks"`
	Detail    string     `gorm:"type:text" json:"detail"`
	CheckedAt *time.Time `json:"checked_at"`
	// AbandonedAt is set when an administrator accepted the node as
	// unreachable for good; the drop then no longer waits for it.
	AbandonedAt   *time.Time `json:"abandoned_at"`
	AbandonedBy   string     `gorm:"size:255" json:"abandoned_by"`
	AbandonReason string     `gorm:"type:text" json:"abandon_reason"`
	CreatedAt     time.Time  `json:"created_at"`
	UpdatedAt     time.Time  `json:"updated_at"`
}

type ForwardLinkCA struct {
	ID             uint       `gorm:"primaryKey" json:"id"`
	Cluster        string     `gorm:"size:63;not null;index" json:"cluster"`
	State          string     `gorm:"size:16;not null;index" json:"state"`
	KeyID          string     `gorm:"size:64;not null;uniqueIndex" json:"key_id"`
	CertificatePEM string     `gorm:"type:text;not null" json:"certificate_pem"`
	SealedKey      string     `gorm:"type:text;not null" json:"-"`
	NotBefore      time.Time  `gorm:"not null" json:"not_before"`
	NotAfter       time.Time  `gorm:"not null" json:"not_after"`
	ActivatedAt    *time.Time `json:"activated_at"`
	RetiredAt      *time.Time `json:"retired_at"`
	CreatedAt      time.Time  `json:"created_at"`
}

type ForwardLinkCertificate struct {
	Serial   string `gorm:"primaryKey;size:40" json:"serial"`
	NodeKind string `gorm:"size:16;not null;index:idx_v4_kernel_forward_link_certificate_node,priority:1" json:"node_kind"`
	NodeID   uint   `gorm:"not null;index:idx_v4_kernel_forward_link_certificate_node,priority:2" json:"node_id"`
	Cluster  string `gorm:"size:63;not null" json:"cluster"`
	// AgentSerial is the serial of the Agent client certificate the request
	// was authenticated with.
	AgentSerial  string     `gorm:"size:40;not null" json:"agent_serial"`
	IssuerKeyID  string     `gorm:"size:64;not null" json:"issuer_key_id"`
	DNSName      string     `gorm:"size:64;not null" json:"dns_name"`
	SPIFFEID     string     `gorm:"column:spiffe_id;size:255;not null" json:"spiffe_id"`
	NotAfter     time.Time  `gorm:"not null;index" json:"not_after"`
	RevokedAt    *time.Time `json:"revoked_at"`
	RevokeReason string     `gorm:"size:64" json:"revoke_reason,omitempty"`
	CreatedAt    time.Time  `json:"created_at"`
}

type ForwardLog struct {
	ID     uint  `gorm:"primaryKey" json:"id"`
	RuleID uint  `gorm:"index" json:"rule_id"`
	UserID *uint `gorm:"index" json:"user_id"`

	// 连接信息
	SourceIP   string `gorm:"size:50" json:"source_ip"`
	SourcePort int    `json:"source_port"`
	TargetHost string `gorm:"size:255" json:"target_host"`
	TargetPort int    `json:"target_port"`

	// 流量统计
	Upload   int64 `json:"upload"`
	Download int64 `json:"download"`
	Duration int64 `json:"duration"` // 持续时间(秒)

	// 节点信息
	RelayNodeID uint `json:"relay_node_id"`
	ExitNodeID  uint `json:"exit_node_id"`

	// 状态
	Status string `gorm:"size:20" json:"status"` // success/timeout/error
	Error  string `gorm:"size:500" json:"error"`

	CreatedAt time.Time `gorm:"index" json:"created_at"`
}

type ForwardNode struct {
	ID          uint   `gorm:"primaryKey" json:"id"`
	Name        string `gorm:"size:100;not null" json:"name"`
	Type        string `gorm:"size:20;not null;default:'exit'" json:"type"` // relay/exit
	Host        string `gorm:"size:255;not null" json:"host"`
	Port        int    `gorm:"not null" json:"port"`
	APIPort     int    `json:"api_port"` // 管理API端口
	APIToken    string `gorm:"size:100" json:"api_token"`
	MetricsPort int    `json:"metrics_port"` // Prometheus /metrics 端口，0 表示未配置

	// 节点信息
	Region     string `gorm:"size:50" json:"region"`      // 地区: HK, US, JP, SG等
	ISP        string `gorm:"size:50" json:"isp"`         // 运营商
	Datacenter string `gorm:"size:100" json:"datacenter"` // 数据中心
	Bandwidth  int64  `json:"bandwidth"`                  // 带宽(Mbps)

	// 状态
	Status    int       `gorm:"default:0" json:"status"`
	LastCheck time.Time `json:"last_check"`
	Latency   int       `json:"latency"` // 延迟(ms)
	Load      float64   `json:"load"`    // 负载 0-1
	Uptime    float64   `json:"uptime"`  // 在线率 0-100

	// 配置
	Tags    string `gorm:"type:text" json:"tags"`   // JSON数组
	Weight  int    `gorm:"default:1" json:"weight"` // 负载均衡权重
	MaxConn int    `json:"max_conn"`                // 最大连接数
	Enabled bool   `gorm:"default:true" json:"enabled"`

	// 统计
	TotalUpload   int64 `json:"total_upload"`
	TotalDownload int64 `json:"total_download"`
	CurrentConn   int   `json:"current_conn"`

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type ForwardPortBinding struct {
	ID         uint      `gorm:"primaryKey" json:"id"`
	ForwardID  uint      `gorm:"index;not null" json:"forwardId"`
	NodeID     uint      `gorm:"not null;uniqueIndex:idx_forward_port_binding_socket,priority:1" json:"nodeId"`
	Transport  string    `gorm:"size:10;not null;uniqueIndex:idx_forward_port_binding_socket,priority:2" json:"transport"`
	ListenAddr string    `gorm:"size:255;not null;uniqueIndex:idx_forward_port_binding_socket,priority:3" json:"listenAddr"`
	InPort     int       `gorm:"not null;uniqueIndex:idx_forward_port_binding_socket,priority:4" json:"inPort"`
	CreatedAt  time.Time `json:"createdAt"`
	UpdatedAt  time.Time `json:"updatedAt"`

	Forward *Forward `gorm:"foreignKey:ForwardID" json:"forward,omitempty"`
}

type ForwardRoute struct {
	ID       uint   `gorm:"primaryKey" json:"id"`
	Name     string `gorm:"size:100;not null" json:"name"`
	Priority int    `gorm:"default:0" json:"priority"` // 优先级，数字越大越优先
	Enabled  bool   `gorm:"default:true" json:"enabled"`

	// 匹配条件 (所有条件为AND关系)
	SourceIP  string `gorm:"size:100" json:"source_ip"` // 源IP/网段，支持CIDR，多个用逗号分隔
	Region    string `gorm:"size:50" json:"region"`     // 来源地区
	PortRange string `gorm:"size:50" json:"port_range"` // 端口范围: 80-443,8080
	Protocol  string `gorm:"size:20" json:"protocol"`   // 协议: tcp/udp/both

	// 目标节点
	RelayGroup  string `gorm:"size:50" json:"relay_group"` // 中转节点组名
	ExitGroup   string `gorm:"size:50" json:"exit_group"`  // 落地节点组名
	RelayNodeID *uint  `json:"relay_node_id"`              // 或指定特定节点
	ExitNodeID  *uint  `json:"exit_node_id"`

	// 负载均衡
	BalanceMode string `gorm:"size:20;default:'round-robin'" json:"balance_mode"`

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type ForwardRule struct {
	ID      uint   `gorm:"primaryKey" json:"id"`
	Name    string `gorm:"size:100;not null" json:"name"`
	Enabled bool   `gorm:"default:true" json:"enabled"`

	// 入口配置 (中转节点)
	RelayNodeID uint         `gorm:"not null" json:"relay_node_id"`
	RelayNode   *ForwardNode `gorm:"foreignKey:RelayNodeID" json:"relay_node,omitempty"`
	ListenPort  int          `gorm:"not null" json:"listen_port"`           // 监听端口
	Protocol    string       `gorm:"size:10;default:'tcp'" json:"protocol"` // tcp/udp/both

	// 出口配置 (落地节点)
	ExitNodeID uint         `gorm:"not null" json:"exit_node_id"`
	ExitNode   *ForwardNode `gorm:"foreignKey:ExitNodeID" json:"exit_node,omitempty"`
	TargetHost string       `gorm:"size:255;not null" json:"target_host"` // 目标地址
	TargetPort int          `gorm:"not null" json:"target_port"`          // 目标端口

	// 用户绑定 (可选，为空则为公共规则)
	UserID      *uint `json:"user_id"`
	User        *User `gorm:"foreignKey:UserID" json:"user,omitempty"`
	UserGroupID *uint `json:"user_group_id"`

	// IP allowlist (comma-separated CIDRs or single IPs, empty = allow all)
	AllowedIPs string `gorm:"size:1000" json:"allowed_ips"`

	// 流量控制
	SpeedLimit   *int64     `json:"speed_limit"`   // 速度限制(KB/s), nil为不限
	TrafficLimit *int64     `json:"traffic_limit"` // 流量限制(字节), nil为不限
	ExpireTime   *time.Time `json:"expire_time"`   // 过期时间, nil为永不过期

	// 统计
	Upload      int64 `json:"upload"`
	Download    int64 `json:"download"`
	Connections int   `json:"connections"` // 当前连接数
	TotalConns  int64 `json:"total_conns"` // 累计连接数

	// 其他
	Remark    string    `gorm:"size:500" json:"remark"`
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type ForwardRuntimeJob struct {
	ID           uint       `gorm:"primaryKey" json:"id"`
	Backend      string     `gorm:"size:50;not null;index" json:"backend"`
	Action       string     `gorm:"size:30;not null;index" json:"action"`
	ResourceType string     `gorm:"size:30;index" json:"resourceType"`
	ResourceID   *uint      `json:"resourceId"`
	ForwardID    *uint      `gorm:"index" json:"forwardId"`
	TunnelID     *uint      `gorm:"index" json:"tunnelId"`
	NodeID       *uint      `gorm:"index" json:"nodeId"`
	AgentID      *uint      `gorm:"index" json:"agentId"`
	Status       int        `gorm:"default:0;index" json:"status"`
	Payload      string     `gorm:"type:text" json:"payload"`
	Result       string     `gorm:"type:text" json:"result"`
	Error        string     `gorm:"type:text" json:"error"`
	StartedAt    *time.Time `json:"startedAt"`
	ClaimedAt    *time.Time `json:"claimedAt"`
	CompletedAt  *time.Time `json:"completedAt"`
	CreatedAt    time.Time  `json:"created_at"`
	UpdatedAt    time.Time  `json:"updated_at"`
}

type ForwardStats struct {
	ID     uint  `gorm:"primaryKey" json:"id"`
	NodeID uint  `gorm:"index" json:"node_id"`
	RuleID uint  `gorm:"index" json:"rule_id"`
	UserID *uint `gorm:"index" json:"user_id"`

	// 时间
	Date time.Time `gorm:"type:date" json:"date"` // 日期
	Hour int       `json:"hour"`                  // 小时 0-23

	// 流量
	Upload      int64 `json:"upload"`
	Download    int64 `json:"download"`
	Connections int64 `json:"connections"`

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type ForwardTrafficCursor struct {
	ID            uint      `gorm:"primaryKey" json:"id"`
	ForwardID     uint      `gorm:"uniqueIndex:idx_forward_traffic_cursor" json:"forwardId"`
	Backend       string    `gorm:"size:50;uniqueIndex:idx_forward_traffic_cursor" json:"backend"`
	UploadTotal   int64     `gorm:"default:0" json:"uploadTotal"`
	DownloadTotal int64     `gorm:"default:0" json:"downloadTotal"`
	CreatedAt     time.Time `json:"created_at"`
	UpdatedAt     time.Time `json:"updated_at"`
}

type ForwardTunnel struct {
	ID            uint      `gorm:"primaryKey" json:"id"`
	Name          string    `gorm:"size:100;not null" json:"name"`
	InNodeID      uint      `gorm:"index" json:"inNodeId"`
	OutNodeID     *uint     `gorm:"index" json:"outNodeId"`
	InIP          string    `gorm:"size:255" json:"in_ip"`
	OutIP         string    `gorm:"size:255" json:"out_ip"`
	InNodePortSta *int      `json:"in_node_port_sta"`
	InNodePortEnd *int      `json:"in_node_port_end"`
	Type          int       `gorm:"default:1" json:"type"`
	Flow          int       `gorm:"default:2" json:"flow"`
	Protocol      string    `gorm:"size:30;default:'tcp'" json:"protocol"`
	TrafficRatio  float64   `gorm:"default:1" json:"traffic_ratio"`
	InterfaceName string    `gorm:"size:255" json:"interface_name"`
	TCPListenAddr string    `gorm:"size:255;default:'0.0.0.0'" json:"tcpListenAddr"`
	UDPListenAddr string    `gorm:"size:255;default:'0.0.0.0'" json:"udpListenAddr"`
	Status        int       `gorm:"default:1" json:"status"`
	CreatedAt     time.Time `json:"created_at"`
	UpdatedAt     time.Time `json:"updated_at"`
}

type ForwardUserTunnel struct {
	ID            uint      `gorm:"primaryKey" json:"id"`
	UserID        uint      `gorm:"uniqueIndex:idx_forward_user_tunnel" json:"user_id"`
	TunnelID      uint      `gorm:"uniqueIndex:idx_forward_user_tunnel;index" json:"tunnel_id"`
	Flow          int64     `gorm:"default:0" json:"flow"`
	Num           int       `gorm:"default:0" json:"num"`
	InFlow        int64     `gorm:"default:0" json:"in_flow"`
	OutFlow       int64     `gorm:"default:0" json:"out_flow"`
	FlowResetTime int64     `gorm:"default:0" json:"flowResetTime"`
	ExpTime       int64     `gorm:"default:0" json:"expTime"`
	SpeedID       *uint     `json:"speedId"`
	Status        int       `gorm:"default:1" json:"status"`
	CreatedAt     time.Time `json:"created_at"`
	UpdatedAt     time.Time `json:"updated_at"`

	User   *User          `gorm:"foreignKey:UserID" json:"user,omitempty"`
	Tunnel *ForwardTunnel `gorm:"foreignKey:TunnelID" json:"tunnel,omitempty"`
}

type IdentityAccountLink struct {
	UserID            uint   `gorm:"primaryKey;autoIncrement:false" json:"user_id"`
	AccountUUID       string `gorm:"size:36;not null;uniqueIndex" json:"account_uuid"`
	ProjectionVersion uint64 `gorm:"not null;default:0" json:"projection_version"`
	// TokenVersion is the highest identity token version projected. A
	// session-ending projection revokes by token version only above it.
	TokenVersion uint64    `gorm:"not null;default:0" json:"token_version"`
	CreatedAt    time.Time `gorm:"not null" json:"created_at"`
	UpdatedAt    time.Time `gorm:"not null" json:"updated_at"`
}

type IdentityAuthority struct {
	ID         uint      `gorm:"primaryKey;autoIncrement:false" json:"id"`
	State      string    `gorm:"size:16;not null" json:"state"`
	ImportID   string    `gorm:"size:64;not null;default:''" json:"import_id"`
	Checkpoint string    `gorm:"type:text;not null;default:''" json:"checkpoint"`
	UpdatedAt  time.Time `gorm:"not null" json:"updated_at"`
}

type IdentityCutoverEvent struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	Action    string    `gorm:"size:32;not null;index" json:"action"`
	ActorID   uint      `gorm:"not null;default:0" json:"actor_id"`
	Detail    string    `gorm:"type:text;not null;default:''" json:"detail"`
	CreatedAt time.Time `gorm:"not null;index" json:"created_at"`
}

type IdentityRevocation struct {
	UserID            uint       `gorm:"primaryKey;autoIncrement:false" json:"user_id"`
	TokenVersion      uint64     `gorm:"not null;default:0" json:"token_version"`
	NotBefore         time.Time  `gorm:"not null" json:"not_before"`
	IdentityNotBefore *time.Time `json:"identity_not_before,omitempty"`
	Reason            string     `gorm:"size:64;not null;default:''" json:"reason"`
	UpdatedAt         time.Time  `gorm:"not null;index" json:"updated_at"`
}

type IdentitySessionRevocation struct {
	SessionID string    `gorm:"primaryKey;size:64" json:"session_id"`
	UserID    uint      `gorm:"not null;index" json:"user_id"`
	ExpiresAt time.Time `gorm:"not null;index" json:"expires_at"`
	Reason    string    `gorm:"size:64;not null;default:''" json:"reason"`
	CreatedAt time.Time `gorm:"not null" json:"created_at"`
}

type IdentityTokenKey struct {
	KeyID     string     `gorm:"column:kid;primaryKey;size:64" json:"kid"`
	PublicKey string     `gorm:"type:text;not null" json:"public_key"`
	State     string     `gorm:"size:16;not null" json:"state"`
	NotBefore *time.Time `json:"not_before"`
	NotAfter  *time.Time `json:"not_after"`
	UpdatedAt time.Time  `gorm:"not null" json:"updated_at"`
}

type InviteCode struct {
	ID        uint       `gorm:"primaryKey" json:"id"`
	Code      string     `gorm:"size:32;uniqueIndex" json:"code"`
	UserID    *uint      `gorm:"index" json:"user_id"`    // 所属用户 (null=公共)
	Status    int        `gorm:"default:0" json:"status"` // 0=未使用 1=已使用
	UsedBy    *uint      `json:"used_by"`                 // 使用者ID
	UsedAt    *time.Time `json:"used_at"`
	ExpiredAt *time.Time `json:"expired_at"` // 过期时间 (null=永不过期)

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type InviteConfig struct {
	ID      uint `gorm:"primaryKey" json:"id"`
	Enabled bool `gorm:"default:true" json:"enabled"`

	// 邀请码设置
	AutoGenerate   bool `gorm:"default:true" json:"auto_generate"` // 新用户自动生成邀请码
	CodeCount      int  `gorm:"default:5" json:"code_count"`       // 每个用户邀请码数量
	CodeExpireDays int  `gorm:"default:0" json:"code_expire_days"` // 邀请码过期天数 (0=永不过期)

	// 佣金设置
	CommissionEnabled   bool    `gorm:"default:true" json:"commission_enabled"` // 是否启用佣金
	CommissionType      int     `gorm:"default:1" json:"commission_type"`       // 1=按比例 2=固定金额
	CommissionRate      float64 `gorm:"default:0.1" json:"commission_rate"`     // 佣金比例 (0.1 = 10%)
	CommissionFixed     float64 `gorm:"default:0" json:"commission_fixed"`      // 固定佣金金额
	CommissionMinAmount float64 `gorm:"default:10" json:"commission_min"`       // 最低提现金额

	// 首次奖励
	FirstOrderBonus   float64 `gorm:"default:0" json:"first_order_bonus"`   // 首单奖励
	FirstTrafficBonus int64   `gorm:"default:0" json:"first_traffic_bonus"` // 首次流量奖励 (bytes)

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type KernelAlert struct {
	ID uint `gorm:"primaryKey" json:"id"`
	// Key is "<kind>/<subject>", unique.
	Key string `gorm:"column:alert_key;size:191;not null;uniqueIndex" json:"key"`
	// Kind is one of the kernelalerts.Kind* values.
	Kind     string `gorm:"size:48;not null;index" json:"kind"`
	Severity string `gorm:"size:16;not null" json:"severity"`
	// SubjectKind names what the alert is about (node, ca, module,
	// node_secrets, identity) and Subject which one (proxy-12,
	// service_ca:<key id>, a package id, a split table).
	SubjectKind string `gorm:"size:32;not null" json:"subject_kind"`
	Subject     string `gorm:"size:120;not null" json:"subject"`
	// Message is an English sentence for notifications; the admin UI
	// composes its own text from Kind and Detail.
	Message string `gorm:"size:500;not null" json:"message"`
	// Detail is a JSON object of the facts behind the alert.
	Detail string `gorm:"type:text;not null;default:''" json:"-"`
	// ExpiresAt is the end of the certificate the alert is about.
	ExpiresAt   *time.Time `json:"expires_at"`
	FirstSeenAt time.Time  `gorm:"not null" json:"first_seen_at"`
	LastSeenAt  time.Time  `gorm:"not null" json:"last_seen_at"`
	// LastNotifiedAt and NotifiedSeverity record the last notification of
	// this alert; NotifyCount counts them.
	LastNotifiedAt   *time.Time `json:"last_notified_at"`
	NotifiedSeverity string     `gorm:"size:16;not null;default:''" json:"-"`
	NotifyCount      int        `gorm:"not null;default:0" json:"notify_count"`
	ResolvedAt       *time.Time `gorm:"index" json:"resolved_at"`
	CreatedAt        time.Time  `json:"created_at"`
	UpdatedAt        time.Time  `json:"updated_at"`
}

type KernelForwardAllocation struct {
	RouteID    string     `gorm:"primaryKey;size:64" json:"route_id"`
	HopIndex   uint32     `gorm:"primaryKey" json:"hop_index"`
	NodeRef    string     `gorm:"primaryKey;size:32;index" json:"node_ref"`
	Port       uint32     `gorm:"not null" json:"port"`
	Mark       uint32     `gorm:"not null" json:"mark"`
	ReleasedAt *time.Time `gorm:"index" json:"released_at"`
	UpdatedAt  time.Time  `gorm:"not null" json:"updated_at"`
}

type KernelForwardCounter struct {
	RouteID      string    `gorm:"primaryKey;size:64" json:"route_id"`
	HopIndex     uint32    `gorm:"primaryKey" json:"hop_index"`
	NodeRef      string    `gorm:"primaryKey;size:32;index" json:"node_ref"`
	CounterEpoch string    `gorm:"primaryKey;size:128" json:"counter_epoch"`
	UpBytes      uint64    `gorm:"not null" json:"up_bytes"`
	DownBytes    uint64    `gorm:"not null" json:"down_bytes"`
	UpPackets    uint64    `gorm:"not null" json:"up_packets"`
	DownPackets  uint64    `gorm:"not null" json:"down_packets"`
	TotalConns   uint64    `gorm:"not null" json:"total_conns"`
	ActiveConns  uint32    `gorm:"not null" json:"active_conns"`
	ObservedAt   time.Time `gorm:"not null" json:"observed_at"`
	UpdatedAt    time.Time `gorm:"not null" json:"updated_at"`
}

type KernelForwardDNSBinding struct {
	ID            uint64     `gorm:"primaryKey;autoIncrement" json:"id"`
	RouteID       string     `gorm:"size:64;not null;uniqueIndex:ux_kernel_forward_dns_binding_route" json:"route_id"`
	ProviderID    uint64     `gorm:"not null;index;uniqueIndex:ux_kernel_forward_dns_binding_name" json:"provider_id"`
	Zone          string     `gorm:"size:253;not null;uniqueIndex:ux_kernel_forward_dns_binding_name" json:"zone"`
	RecordName    string     `gorm:"size:253;not null;uniqueIndex:ux_kernel_forward_dns_binding_name" json:"record_name"`
	Mode          string     `gorm:"size:16;not null" json:"mode"`
	RecordTypes   string     `gorm:"size:32;not null" json:"record_types"`
	TTL           uint32     `gorm:"not null" json:"ttl"`
	Paused        bool       `gorm:"not null;default:false" json:"paused"`
	State         string     `gorm:"size:32;not null;default:''" json:"state"`
	PublishedJSON string     `gorm:"type:text;not null;default:''" json:"published"`
	PublishedAt   *time.Time `json:"published_at"`
	EvaluatedAt   *time.Time `json:"evaluated_at"`
	Degraded      bool       `gorm:"not null;default:false" json:"degraded"`
	Failures      uint32     `gorm:"not null;default:0" json:"failures"`
	LastError     string     `gorm:"type:text;not null;default:''" json:"last_error"`
	LastErrorAt   *time.Time `json:"last_error_at"`
	NextAttemptAt *time.Time `json:"next_attempt_at"`
	CreatedAt     time.Time  `gorm:"not null" json:"created_at"`
	UpdatedAt     time.Time  `gorm:"not null" json:"updated_at"`
	PublishedTTL  uint32     `gorm:"not null;default:0" json:"published_ttl"`
	DesiredJSON   string     `gorm:"type:text;not null;default:''" json:"desired"`
}

type KernelForwardDNSNode struct {
	BindingID   uint64    `gorm:"primaryKey" json:"binding_id"`
	NodeRef     string    `gorm:"primaryKey;size:32" json:"node_ref"`
	InRotation  bool      `gorm:"not null;default:false" json:"in_rotation"`
	Healthy     bool      `gorm:"not null;default:false" json:"healthy"`
	GoodStreak  uint32    `gorm:"not null;default:0" json:"good_streak"`
	BadStreak   uint32    `gorm:"not null;default:0" json:"bad_streak"`
	Reason      string    `gorm:"size:32;not null;default:''" json:"reason"`
	EvaluatedAt time.Time `gorm:"not null" json:"evaluated_at"`
}

type KernelForwardDNSProvider struct {
	ID                uint64    `gorm:"primaryKey;autoIncrement" json:"id"`
	Name              string    `gorm:"size:128;not null;uniqueIndex:ux_kernel_forward_dns_provider_name" json:"name"`
	Kind              string    `gorm:"size:32;not null" json:"kind"`
	ConfigJSON        string    `gorm:"type:text;not null;default:''" json:"config"`
	CredentialNames   string    `gorm:"type:text;not null;default:''" json:"credential_names"`
	SealedCredentials string    `gorm:"type:text;not null;default:''" json:"-"`
	CreatedAt         time.Time `gorm:"not null" json:"created_at"`
	UpdatedAt         time.Time `gorm:"not null" json:"updated_at"`
}

type KernelForwardNode struct {
	NodeRef           string     `gorm:"primaryKey;size:32" json:"node_ref"`
	NodeKind          string     `gorm:"size:16;not null;uniqueIndex:ux_kernel_forward_node" json:"node_kind"`
	NodeID            uint64     `gorm:"not null;uniqueIndex:ux_kernel_forward_node" json:"node_id"`
	Negotiated        bool       `gorm:"not null;default:false" json:"negotiated"`
	CapabilitiesJSON  string     `gorm:"type:text;not null;default:''" json:"capabilities"`
	CapabilitiesHash  string     `gorm:"size:64;not null;default:''" json:"capabilities_hash"`
	AgentVersion      string     `gorm:"size:128;not null;default:''" json:"agent_version"`
	ReportedAt        *time.Time `json:"reported_at"`
	PortFirst         uint32     `gorm:"not null;default:0" json:"port_first"`
	PortLast          uint32     `gorm:"not null;default:0" json:"port_last"`
	ReservedPortsJSON string     `gorm:"type:text;not null;default:''" json:"reserved_ports"`
	AddressesJSON     string     `gorm:"type:text;not null;default:''" json:"addresses"`
	LabelsJSON        string     `gorm:"type:text;not null;default:''" json:"labels"`
	CreatedAt         time.Time  `gorm:"not null" json:"created_at"`
	UpdatedAt         time.Time  `gorm:"not null" json:"updated_at"`
}

type KernelForwardNodeReport struct {
	NodeRef    string    `gorm:"primaryKey;size:32" json:"node_ref"`
	Generation uint64    `gorm:"not null" json:"generation"`
	StateHash  string    `gorm:"size:64;not null;default:''" json:"state_hash"`
	Applied    bool      `gorm:"not null;default:false" json:"applied"`
	HopErrors  int       `gorm:"not null;default:0" json:"hop_errors"`
	ReportJSON string    `gorm:"type:text;not null" json:"report"`
	ObservedAt time.Time `gorm:"not null;index" json:"observed_at"`
	ReceivedAt time.Time `gorm:"not null" json:"received_at"`
}

type KernelForwardNodeState struct {
	NodeRef    string    `gorm:"primaryKey;size:32" json:"node_ref"`
	Generation uint64    `gorm:"not null" json:"generation"`
	StateHash  string    `gorm:"size:64;not null" json:"state_hash"`
	StateJSON  string    `gorm:"type:text;not null" json:"state"`
	PlannedAt  time.Time `gorm:"not null" json:"planned_at"`
}

type KernelForwardPlan struct {
	ID             string     `gorm:"primaryKey;size:16" json:"id"`
	Revision       uint64     `gorm:"not null;default:0" json:"revision"`
	Refused        bool       `gorm:"not null;default:false" json:"refused"`
	Reason         string     `gorm:"size:64;not null;default:''" json:"reason"`
	ViolationsJSON string     `gorm:"type:text;not null;default:''" json:"violations"`
	WarningsJSON   string     `gorm:"type:text;not null;default:''" json:"warnings"`
	PlannedAt      *time.Time `json:"planned_at"`
	UpdatedAt      time.Time  `gorm:"not null" json:"updated_at"`
}

type KernelForwardRequest struct {
	RequestID    string    `gorm:"primaryKey;size:128" json:"request_id"`
	Method       string    `gorm:"size:32;not null" json:"method"`
	RouteID      string    `gorm:"size:64;not null;default:''" json:"route_id"`
	RequestHash  string    `gorm:"size:64;not null" json:"request_hash"`
	ResponseJSON string    `gorm:"type:text;not null" json:"response"`
	CreatedAt    time.Time `gorm:"not null;index" json:"created_at"`
}

type KernelForwardRoute struct {
	ID        string    `gorm:"primaryKey;size:64" json:"id"`
	Owner     string    `gorm:"size:64;not null;index" json:"owner"`
	Revision  uint64    `gorm:"not null" json:"revision"`
	RouteJSON string    `gorm:"type:text;not null" json:"route"`
	Enforced  string    `gorm:"size:16;not null;default:''" json:"enforced"`
	CreatedAt time.Time `gorm:"not null" json:"created_at"`
	UpdatedAt time.Time `gorm:"not null" json:"updated_at"`
}

type KernelForwardTraffic struct {
	RouteID     string    `gorm:"primaryKey;size:64" json:"route_id"`
	HopIndex    uint32    `gorm:"primaryKey" json:"hop_index"`
	NodeRef     string    `gorm:"primaryKey;size:32" json:"node_ref"`
	HourStart   time.Time `gorm:"primaryKey;index" json:"hour_start"`
	UpBytes     uint64    `gorm:"not null" json:"up_bytes"`
	DownBytes   uint64    `gorm:"not null" json:"down_bytes"`
	UpPackets   uint64    `gorm:"not null" json:"up_packets"`
	DownPackets uint64    `gorm:"not null" json:"down_packets"`
	Conns       uint64    `gorm:"not null" json:"conns"`
	UpdatedAt   time.Time `gorm:"not null" json:"updated_at"`
}

type KernelNodeConfigStatus struct {
	ID uint64 `gorm:"primaryKey;autoIncrement" json:"-"`
	// NodeKind is proxy (v2_node) or forward (v2_forward_node); ids of the
	// two tables overlap.
	NodeKind string `gorm:"size:16;not null;uniqueIndex:idx_kernel_node_config_status_node,priority:1" json:"node_kind"`
	NodeID   uint64 `gorm:"not null;uniqueIndex:idx_kernel_node_config_status_node,priority:2" json:"node_id"`
	// SessionID is the stream session that sent the last status.
	SessionID string `gorm:"size:64;not null" json:"session_id"`
	// ReportedRevision, ReportedHash, ReportedApplied and ReportedError are
	// the last ConfigStatus as the agent sent it (the error cut to 1024
	// bytes); Verdict is how the kernel judged it (ConfigVerdict*).
	ReportedRevision uint64 `gorm:"not null;default:0" json:"reported_revision"`
	ReportedHash     string `gorm:"size:64;not null" json:"reported_hash"`
	ReportedApplied  bool   `gorm:"not null;default:false" json:"reported_applied"`
	ReportedError    string `gorm:"size:1024;not null" json:"reported_error"`
	// ReportedErrorCode is the status's error_code
	// (agentcontrol.ConfigErrorCode*), empty when applied, from an agent
	// built before codes, or when the code is malformed.
	ReportedErrorCode string    `gorm:"size:64;not null;default:''" json:"reported_error_code"`
	Verdict           string    `gorm:"size:16;not null" json:"verdict"`
	ReportedAt        time.Time `gorm:"not null" json:"reported_at"`
	// AppliedRevision and AppliedHash are the last configuration the kernel
	// verified as applied; zero and empty until one is.
	AppliedRevision uint64     `gorm:"not null;default:0" json:"applied_revision"`
	AppliedHash     string     `gorm:"size:64;not null" json:"applied_hash"`
	AppliedAt       *time.Time `json:"applied_at"`
	CreatedAt       time.Time  `gorm:"not null" json:"created_at"`
	UpdatedAt       time.Time  `gorm:"not null" json:"updated_at"`
}

type KernelNodeDesiredConfig struct {
	ID uint64 `gorm:"primaryKey;autoIncrement" json:"-"`
	// NodeKind is proxy (v2_node) or forward (v2_forward_node); ids of the
	// two tables overlap.
	NodeKind string `gorm:"size:16;not null;uniqueIndex:idx_kernel_node_desired_config_node,priority:1" json:"node_kind"`
	NodeID   uint64 `gorm:"not null;uniqueIndex:idx_kernel_node_desired_config_node,priority:2" json:"node_id"`
	// Revision is monotonic per node; it starts at 1.
	Revision uint64 `gorm:"not null;default:0" json:"revision"`
	// ConfigHash is the SHA-256 (hex) of the canonical document.
	ConfigHash string `gorm:"size:64;not null" json:"config_hash"`
	// Format names the document's schema, kernelnodeops.DesiredConfigFormat.
	Format string `gorm:"size:40;not null" json:"format"`
	// ConfigJSON is the canonical document (sorted keys, no whitespace).
	ConfigJSON string `gorm:"type:text;not null" json:"-"`
	// ExcludedProtocols counts the protocols left out because they failed
	// validation (zero while validation is report-only, section 3.8).
	ExcludedProtocols uint32 `gorm:"not null;default:0" json:"excluded_protocols"`
	// BuiltAt is when the document was last rebuilt, changed or not.
	BuiltAt   time.Time `gorm:"not null" json:"built_at"`
	CreatedAt time.Time `gorm:"not null" json:"created_at"`
	UpdatedAt time.Time `gorm:"not null" json:"updated_at"`
}

type KernelNodeOperation struct {
	// ID orders operations (newest first in listings); OperationID names them.
	ID          uint64 `gorm:"primaryKey;autoIncrement" json:"-"`
	OperationID string `gorm:"size:64;not null;uniqueIndex" json:"operation_id"`
	// RequestID is unique: a repeat with the same Digest and owner answers
	// this operation, anything else is refused.
	RequestID string `gorm:"size:128;not null;uniqueIndex" json:"request_id"`
	// Digest is the SHA-256 (hex) of the kind and the canonical operation.
	Digest string `gorm:"size:64;not null" json:"digest"`
	// PackageID owns the operation: only it reads, watches and cancels it.
	PackageID         string `gorm:"size:120;not null;index:idx_kernel_node_operation_owner,priority:1" json:"package_id"`
	PackageGeneration uint64 `gorm:"not null;default:0" json:"package_generation"`
	// SubmittedBy is "<package>@<generation>", or "kernel:<route id>" for
	// the kernel's own handlers.
	SubmittedBy string `gorm:"size:200;not null" json:"submitted_by"`
	// Family is forward, nodeconfig, diagnose, agents or credentials; Kind
	// the operation's stable name, for example "forward.apply".
	Family string `gorm:"size:32;not null;index" json:"family"`
	Kind   string `gorm:"size:64;not null;index" json:"kind"`
	// ResourceKey names what the operation changes ("forward:12",
	// "nodeconfig:proxy-3"); the kernel runs one operation per resource at a
	// time. Empty for operations that change no shared resource.
	ResourceKey string `gorm:"size:96;not null;default:'';index" json:"resource_key"`
	// State is pending, dispatching, running, or one of the terminal
	// states succeeded, failed, cancelled, timed_out and superseded, which
	// never change again.
	State        string `gorm:"size:16;not null;index;index:idx_kernel_node_operation_owner,priority:2" json:"state"`
	Channel      string `gorm:"size:32;not null;default:''" json:"channel"`
	Attempt      uint32 `gorm:"not null;default:0" json:"attempt"`
	NodeRevision uint64 `gorm:"not null;default:0" json:"node_revision"`
	// ParentOperationID is set on the operations a fan-out created; the
	// parent counts them in FanOut*.
	ParentOperationID string `gorm:"size:64;not null;default:'';index" json:"parent_operation_id"`
	FanOutTotal       uint32 `gorm:"not null;default:0" json:"fan_out_total"`
	FanOutSucceeded   uint32 `gorm:"not null;default:0" json:"fan_out_succeeded"`
	FanOutFailed      uint32 `gorm:"not null;default:0" json:"fan_out_failed"`
	FanOutPending     uint32 `gorm:"not null;default:0" json:"fan_out_pending"`
	// KernelOperationID links the durable Agent dispatch (v3_kernel_operation),
	// ForwardRuntimeJobID the forward runtime job (v2_forward_runtime_job).
	KernelOperationID   string `gorm:"size:64;not null;default:''" json:"kernel_operation_id"`
	ForwardRuntimeJobID uint64 `gorm:"not null;default:0" json:"forward_runtime_job_id"`
	// Operation is the canonical OperationSpec as protojson.
	Operation string `gorm:"type:text;not null" json:"operation"`
	Reason    string `gorm:"size:255;not null;default:''" json:"reason"`
	// Result is the OperationResult as protojson, scrubbed, at most 64 KiB.
	Result         string `gorm:"type:text;not null;default:''" json:"result"`
	ErrorCode      string `gorm:"size:40;not null;default:''" json:"error_code"`
	ErrorMessage   string `gorm:"type:text;not null;default:''" json:"error_message"`
	ErrorRetryable bool   `gorm:"not null;default:false" json:"error_retryable"`
	// Evidence is an outcome that arrived after the operation had ended (a
	// late result after its deadline): recorded, never applied.
	Evidence          string     `gorm:"type:text;not null;default:''" json:"evidence"`
	CancelRequestedAt *time.Time `json:"cancel_requested_at"`
	CancelReason      string     `gorm:"size:255;not null;default:''" json:"cancel_reason"`
	CreatedAt         time.Time  `gorm:"not null" json:"created_at"`
	AcceptedAt        *time.Time `json:"accepted_at"`
	FinishedAt        *time.Time `gorm:"index" json:"finished_at"`
	DeadlineAt        time.Time  `gorm:"not null;index" json:"deadline_at"`
	UpdatedAt         time.Time  `gorm:"not null" json:"updated_at"`
}

type KernelNodeOperationEvent struct {
	ID          uint64    `gorm:"primaryKey;autoIncrement" json:"cursor"`
	OperationID string    `gorm:"size:64;not null;index" json:"operation_id"`
	PackageID   string    `gorm:"size:120;not null;index" json:"package_id"`
	Family      string    `gorm:"size:32;not null" json:"family"`
	State       string    `gorm:"size:16;not null" json:"state"`
	CreatedAt   time.Time `gorm:"not null;index" json:"created_at"`
}

type KernelNodeOperationTarget struct {
	ID          uint64 `gorm:"primaryKey;autoIncrement" json:"-"`
	OperationID string `gorm:"size:64;not null;index" json:"operation_id"`
	// NodeKind is proxy (v2_node), forward (v2_forward_node) or clean_agent
	// (v2_forward_clean_agent).
	NodeKind string `gorm:"size:16;not null;index:idx_kernel_node_operation_target_node,priority:1" json:"node_kind"`
	NodeID   uint64 `gorm:"not null;index:idx_kernel_node_operation_target_node,priority:2" json:"node_id"`
}

type KernelOperation struct {
	ID              string `gorm:"primaryKey;size:64" json:"id"`
	IdempotencyKey  string `gorm:"size:160;not null;uniqueIndex" json:"idempotency_key"`
	EnvelopeVersion string `gorm:"size:32;not null;default:anixops.operation/v1" json:"envelope_version"`
	// SessionID is written by the dispatcher from the active Agent connection.
	// It must never be trusted from an HTTP request.
	SessionID            string `gorm:"size:120;index" json:"session_id"`
	NodeID               *uint  `gorm:"index" json:"node_id"`
	PluginID             string `gorm:"size:120;index" json:"plugin_id"`
	TargetVersion        string `gorm:"size:64" json:"target_version"`
	TopologyDeploymentID *uint  `gorm:"index" json:"topology_deployment_id"`
	TopologyStepID       *uint  `gorm:"index" json:"topology_step_id"`
	TopologyRevision     int64  `gorm:"not null;default:0" json:"topology_revision"`
	Kind                 string `gorm:"size:80;not null" json:"kind"`
	Revision             int64  `gorm:"not null" json:"revision"`
	ConfigJSON           string `gorm:"type:text;not null;default:{}" json:"config"`
	ConfigHash           string `gorm:"size:64" json:"config_hash"`
	DependsOnOperationID string `gorm:"size:64;index" json:"depends_on_operation_id,omitempty"`
	// LifecyclePlanID and the following fields group Control-target package
	// operations that must be executed as one dependency-aware lifecycle plan.
	// They are intentionally empty for legacy and Agent operations.
	LifecyclePlanID       string     `gorm:"size:64;index" json:"lifecycle_plan_id,omitempty"`
	LifecyclePlanStepID   uint       `gorm:"index" json:"lifecycle_plan_step_id,omitempty"`
	LifecyclePlanPhase    string     `gorm:"size:16;index" json:"lifecycle_plan_phase,omitempty"`
	LifecyclePlanSequence int        `gorm:"not null;default:0;index" json:"lifecycle_plan_sequence"`
	State                 string     `gorm:"size:32;not null;index" json:"state"`
	DeadlineAt            *time.Time `json:"deadline_at"`
	DispatchedAt          *time.Time `json:"dispatched_at"`
	AcknowledgedAt        *time.Time `json:"acknowledged_at"`
	ObservedAt            *time.Time `json:"observed_at"`
	CancelAt              *time.Time `json:"cancel_at"`
	CancelDispatchedAt    *time.Time `json:"cancel_dispatched_at"`
	ClaimedBy             string     `gorm:"size:96;index" json:"claimed_by"`
	LeaseExpiresAt        *time.Time `gorm:"index" json:"lease_expires_at"`
	Attempt               int        `gorm:"not null;default:0" json:"attempt"`
	ResultJSON            string     `gorm:"type:text" json:"result"`
	LastError             string     `gorm:"type:text" json:"last_error"`
	CreatedAt             time.Time  `json:"created_at"`
	UpdatedAt             time.Time  `json:"updated_at"`
}

type Knowledge struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	Category  string    `gorm:"size:64" json:"category"`
	Title     string    `gorm:"size:255" json:"title"`
	Body      string    `gorm:"type:text" json:"body"`
	Sort      int       `gorm:"default:0" json:"sort"`
	Show      int       `gorm:"default:1" json:"show"` // 0: hidden, 1: visible
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type LoadBalancer struct {
	ID            uint      `gorm:"primaryKey" json:"id"`
	Name          string    `gorm:"size:100" json:"name"`
	GroupID       uint      `gorm:"index" json:"group_id"`                       // 节点组ID
	Strategy      string    `gorm:"size:20;default:round-robin" json:"strategy"` // round-robin/least-conn/latency/weight/random
	HealthCheck   bool      `gorm:"default:true" json:"health_check"`
	CheckInterval int       `gorm:"default:60" json:"check_interval"` // 检查间隔(秒)
	CheckTimeout  int       `gorm:"default:10" json:"check_timeout"`  // 超时时间(秒)
	NodeWeights   string    `gorm:"type:text" json:"node_weights"`    // JSON: {node_id: weight}
	Enabled       bool      `gorm:"default:true" json:"enabled"`
	CreatedAt     time.Time `json:"created_at"`
	UpdatedAt     time.Time `json:"updated_at"`
}

type LoginRequest struct {
	Email     string `json:"email" binding:"required,email"`
	Password  string `json:"password" binding:"required"`
	MFACode   string `json:"mfa_code"`
	MFAMethod string `json:"mfa_method"`
}

type LoginResponse struct {
	Token   string `json:"token"`
	IsAdmin bool   `json:"is_admin"`
}

type MFAConfig struct {
	Enabled         bool   `json:"enabled"`           // 是否启用MFA
	EnforceForAll   bool   `json:"enforce_for_all"`   // 强制所有用户启用
	EnforceForAdmin bool   `json:"enforce_for_admin"` // 强制管理员启用
	AllowedMethods  string `json:"allowed_methods"`   // 允许的方式 (JSON数组)
	TOTPIssuer      string `json:"totp_issuer"`       // TOTP发行者名称
	BackupCodeCount int    `json:"backup_code_count"` // 备用码数量
}

type MFALoginAttempt struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	UserID    uint      `gorm:"index" json:"user_id"`
	IP        string    `gorm:"size:50" json:"ip"`
	UserAgent string    `gorm:"size:255" json:"user_agent"`
	Success   bool      `json:"success"`
	Method    string    `gorm:"size:20" json:"method"` // totp/sms/email/backup
	CreatedAt time.Time `gorm:"index" json:"created_at"`
}

type ModuleCertificate struct {
	Serial       string     `gorm:"primaryKey;size:40" json:"serial"`
	PackageID    string     `gorm:"size:120;not null;index" json:"package_id"`
	Cluster      string     `gorm:"size:63;not null" json:"cluster"`
	EnrollmentID string     `gorm:"size:36;not null;index" json:"enrollment_id"`
	IssuerKeyID  string     `gorm:"size:64;not null" json:"issuer_key_id"`
	NotAfter     time.Time  `gorm:"not null;index" json:"not_after"`
	RevokedAt    *time.Time `json:"revoked_at"`
	CreatedAt    time.Time  `json:"created_at"`
}

type ModuleEnrollment struct {
	ID             string     `gorm:"primaryKey;size:36" json:"id"`
	PackageID      string     `gorm:"size:120;not null;index" json:"package_id"`
	Cluster        string     `gorm:"size:63;not null" json:"cluster"`
	CredentialHash string     `gorm:"size:64;not null;uniqueIndex" json:"-"`
	Reusable       bool       `gorm:"not null" json:"reusable"`
	ExpiresAt      time.Time  `gorm:"not null" json:"expires_at"`
	UsedAt         *time.Time `json:"used_at"`
	UseCount       int64      `gorm:"not null;default:0" json:"use_count"`
	RevokedAt      *time.Time `json:"revoked_at"`
	CreatedBy      uint       `json:"created_by"`
	CreatedAt      time.Time  `json:"created_at"`
}

type Node struct {
	ID           uint       `gorm:"primaryKey" json:"id"`
	Name         string     `gorm:"size:255" json:"name"`           // 节点名称
	Host         string     `gorm:"size:255" json:"host"`           // 服务器地址 (IP或域名)
	Port         int        `gorm:"default:443" json:"port"`        // API通信端口
	APIKey       string     `gorm:"size:64;uniqueIndex" json:"-"`   // 节点API密钥 (用于身份验证)
	APIKeyHash   string     `gorm:"size:64" json:"-"`               // 密钥哈希 (用于快速查找)
	Secret       string     `gorm:"size:255" json:"-"`              // 共享密钥 (用于加密通信)
	Status       NodeStatus `gorm:"default:0" json:"status"`        // 节点状态
	Tags         *string    `gorm:"size:255" json:"tags"`           // 标签 (JSON array)
	GroupID      *uint      `gorm:"index" json:"group_id"`          // 节点分组
	Rate         float64    `gorm:"default:1" json:"rate"`          // 流量倍率
	TrafficRate  float64    `gorm:"default:1" json:"traffic_rate"`  // 计费倍率
	Sort         int        `gorm:"default:0" json:"sort"`          // 排序
	Show         int        `gorm:"default:1" json:"show"`          // 是否显示给用户
	AutoRegister int        `gorm:"default:0" json:"auto_register"` // 是否自动注册的节点

	// 父子节点 (中转链路: 落地节点为根, 转发节点为子, 支持多级)
	ParentID *uint `gorm:"index" json:"parent_id"` // 上级节点ID, nil=根节点(落地节点)

	// 月流量限额 (仅本节点自身, 不含子节点单独限额; 子节点流量会同时累加到父节点)
	MonthlyLimit    *int64 `json:"monthly_limit"`                      // 月流量限额(字节), nil=不限
	MonthlyUpload   int64  `gorm:"default:0" json:"monthly_upload"`    // 本月已用上传流量
	MonthlyDownload int64  `gorm:"default:0" json:"monthly_download"`  // 本月已用下载流量
	MonthlyResetDay int    `gorm:"default:1" json:"monthly_reset_day"` // 每月流量重置日 (1-28)

	// 高级配置 (直接JSON编辑)
	RawConfig *string `gorm:"type:text" json:"raw_config"` // 原始配置 (JSON, 优先级最高)

	// 服务器信息 (由节点上报)
	ServerIP      *string `gorm:"size:45" json:"server_ip"`      // 实际服务器IP
	ServerVersion *string `gorm:"size:50" json:"server_version"` // 节点程序版本
	ServerOS      *string `gorm:"size:100" json:"server_os"`     // 操作系统信息
	CPUUsage      float64 `gorm:"default:0" json:"cpu_usage"`    // CPU使用率
	MemoryUsage   float64 `gorm:"default:0" json:"memory_usage"` // 内存使用率
	DiskUsage     float64 `gorm:"default:0" json:"disk_usage"`   // 磁盘使用率
	Uptime        int64   `gorm:"default:0" json:"uptime"`       // 运行时间(秒)
	OnlineUsers   int     `gorm:"default:0" json:"online_users"` // 在线用户数

	// 运行时健康状态 (由支持运行时自愈的节点上报)
	RuntimeHealthy   bool   `gorm:"default:true" json:"runtime_healthy"`
	RuntimeError     string `gorm:"type:text" json:"runtime_error"`
	RuntimeCheckedAt *int64 `json:"runtime_checked_at"`

	// 流量统计
	TotalUpload   int64 `gorm:"default:0" json:"total_upload"`   // 总上传流量
	TotalDownload int64 `gorm:"default:0" json:"total_download"` // 总下载流量

	// 时间戳
	LastCheckAt *int64    `json:"last_check_at"` // 最后心跳时间
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`

	// 关联
	Protocols []NodeProtocol `gorm:"foreignKey:NodeID" json:"protocols,omitempty"`
}

type NodeCredential struct {
	ID          uint64 `gorm:"primaryKey;autoIncrement" json:"id"`
	SubjectKind string `gorm:"size:32;not null;uniqueIndex:idx_v4_kernel_node_credential_subject,priority:1" json:"subject_kind"`
	SubjectID   uint64 `gorm:"not null;uniqueIndex:idx_v4_kernel_node_credential_subject,priority:2" json:"subject_id"`
	Kind        string `` /* 150-byte string literal not displayed */
	Version     int    `gorm:"not null;default:1;uniqueIndex:idx_v4_kernel_node_credential_subject,priority:4" json:"version"`
	// KeyHash is the SHA-256 (hex) the kernel looks a credential up by.
	KeyHash string `gorm:"size:64;not null;default:'';index:idx_v4_kernel_node_credential_lookup,priority:2" json:"-"`
	// Value is the secret, where the kernel has to present it. It is
	// stored in clear, as in the legacy columns (decision D5), unless Sealed.
	Value  string `gorm:"type:text;not null;default:''" json:"-"`
	Sealed bool   `gorm:"not null;default:false" json:"sealed"`
	KEKID  string `gorm:"column:kek_id;size:64;not null;default:''" json:"kek_id"`
	// Endpoint is the host:port a forward node token is pinned to.
	Endpoint  string     `gorm:"size:300;not null;default:''" json:"endpoint"`
	Status    string     `gorm:"size:16;not null;default:'active';index" json:"status"`
	ExpiresAt *time.Time `json:"expires_at"`
	// Source says who wrote the current version: backfill, dual_write or
	// issued.
	Source    string     `gorm:"size:16;not null;default:''" json:"source"`
	CreatedAt time.Time  `gorm:"not null" json:"created_at"`
	RotatedAt *time.Time `json:"rotated_at"`
	RevokedAt *time.Time `json:"revoked_at"`
}

type NodeGroup struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	Name      string    `gorm:"size:100" json:"name"`
	Sort      int       `gorm:"default:0" json:"sort"`
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type NodeHeartbeatRequest struct {
	CPUUsage    float64 `json:"cpu_usage"`
	MemoryUsage float64 `json:"memory_usage"`
	DiskUsage   float64 `json:"disk_usage"`
	Uptime      int64   `json:"uptime"`
	OnlineUsers int     `json:"online_users"`
	Upload      int64   `json:"upload"`   // 本次上传流量增量
	Download    int64   `json:"download"` // 本次下载流量增量
}

type NodeLog struct {
	ID         uint       `gorm:"primaryKey" json:"id"`
	NodeID     uint       `gorm:"index;not null" json:"node_id"`
	Level      string     `gorm:"size:20;index;not null" json:"level"`
	Source     string     `gorm:"size:120;index" json:"source"`
	Message    string     `gorm:"type:text;not null" json:"message"`
	TraceID    string     `gorm:"size:120;index" json:"trace_id"`
	FieldsJSON string     `gorm:"type:text" json:"fields_json"`
	LoggedAt   *time.Time `gorm:"index" json:"logged_at"`
	CreatedAt  time.Time  `gorm:"index" json:"created_at"`
	UpdatedAt  time.Time  `json:"updated_at"`
}

type NodeOperationRevision struct {
	NodeID           uint      `gorm:"primaryKey" json:"node_id"`
	DesiredRevision  int64     `gorm:"not null;default:0" json:"desired_revision"`
	ObservedRevision int64     `gorm:"not null;default:0" json:"observed_revision"`
	UpdatedAt        time.Time `json:"updated_at"`
}

type NodePluginLifecycle struct {
	NodeID                uint       `gorm:"primaryKey" json:"node_id"`
	PluginID              string     `gorm:"primaryKey;size:120" json:"plugin_id"`
	DesiredGeneration     int64      `gorm:"not null;default:0" json:"desired_generation"`
	RetryEpoch            int        `gorm:"not null;default:0" json:"retry_epoch"`
	RetryAfter            *time.Time `gorm:"index" json:"retry_after"`
	RetryExhausted        bool       `gorm:"not null;default:false" json:"retry_exhausted"`
	DesiredVersion        string     `gorm:"size:64" json:"desired_version"`
	DesiredConfigRevision int64      `gorm:"not null;default:0" json:"desired_config_revision"`
	DesiredEnabled        bool       `gorm:"not null;default:false" json:"desired_enabled"`
	ActiveVersion         string     `gorm:"size:64" json:"active_version"`
	ActiveEnabled         bool       `gorm:"not null;default:false" json:"active_enabled"`
	ActiveRevision        int64      `gorm:"not null;default:0" json:"active_revision"`
	LastError             string     `gorm:"type:text" json:"last_error"`
	CreatedAt             time.Time  `json:"created_at"`
	UpdatedAt             time.Time  `json:"updated_at"`
}

type NodePluginObservedState struct {
	NodeID           uint      `gorm:"primaryKey" json:"node_id"`
	PluginID         string    `gorm:"primaryKey;size:120" json:"plugin_id"`
	Version          string    `gorm:"size:64;not null" json:"version"`
	DesiredRevision  int64     `gorm:"not null" json:"desired_revision"`
	ObservedRevision int64     `gorm:"not null" json:"observed_revision"`
	ConfigHash       string    `gorm:"size:64;not null" json:"config_hash"`
	Health           string    `gorm:"size:32;not null;index" json:"health"`
	RulesetSHA256    string    `gorm:"size:64;not null" json:"ruleset_sha256"`
	CountersJSON     string    `gorm:"type:text;not null;default:[]" json:"rule_counters"`
	ObservedAt       time.Time `gorm:"not null;index" json:"observed_at"`
	ReceivedAt       time.Time `gorm:"not null;index" json:"received_at"`
	UpdatedAt        time.Time `json:"updated_at"`
}

type NodeProtocol struct {
	ID      uint         `gorm:"primaryKey" json:"id"`
	NodeID  uint         `gorm:"index" json:"node_id"`      // 所属节点
	Name    string       `gorm:"size:100" json:"name"`      // 协议名称
	Type    ProtocolType `gorm:"size:20;index" json:"type"` // 协议类型
	Port    int          `json:"port"`                      // 监听端口
	Enable  int          `gorm:"default:1" json:"enable"`   // 是否启用 (节点端是否运行)
	Show    int          `gorm:"default:1" json:"show"`     // 是否显示在订阅中
	Sort    int          `gorm:"default:0" json:"sort"`     // 排序
	GroupID *uint        `gorm:"index" json:"group_id"`     // 所属订阅分组 (如果为空则跟随节点)

	// 通用配置
	Host *string `gorm:"size:255" json:"host"` // 连接地址 (可覆盖节点host)
	TLS  int     `gorm:"default:0" json:"tls"` // TLS模式: 0=无, 1=TLS, 2=Reality
	ALPN *string `gorm:"size:100" json:"alpn"` // ALPN设置

	// 协议特定配置 (JSON)
	Settings          *string `gorm:"type:text" json:"settings"`           // 协议配置 (JSON)
	TLSSettings       *string `gorm:"type:text" json:"tls_settings"`       // TLS配置 (JSON)
	Transport         *string `gorm:"size:20" json:"transport"`            // 传输层: tcp, ws, grpc, quic, h2
	TransportSettings *string `gorm:"type:text" json:"transport_settings"` // 传输层配置 (JSON)

	// Reality 配置
	RealitySettings *string `gorm:"type:text" json:"reality_settings"` // Reality配置 (JSON)

	// 自定义配置 (全量覆盖)
	CustomConfig *string `gorm:"type:text" json:"custom_config"` // 自定义配置 (JSON, 优先级最高)

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`

	// 关联
	Node               *Node               `gorm:"foreignKey:NodeID" json:"node,omitempty"`
	SubscriptionGroups []SubscriptionGroup `gorm:"many2many:v2_subscription_group_node_protocols;" json:"subscription_groups,omitempty"`
}

type NodeRegisterRequest struct {
	AuthKey       string `json:"auth_key" binding:"required"` // 授权密钥
	Name          string `json:"name"`                        // 节点名称
	Host          string `json:"host"`                        // 节点地址
	Port          int    `json:"port"`                        // API端口
	ServerVersion string `json:"server_version"`              // 节点版本
	ServerOS      string `json:"server_os"`                   // 操作系统
}

type NodeRegisterResponse struct {
	NodeID  uint   `json:"node_id"`
	APIKey  string `json:"api_key"` // 返回给节点的API密钥
	Secret  string `json:"secret"`  // 共享密钥
	Message string `json:"message"`
}

type NodeRuntimeHealthRequest struct {
	Healthy bool   `json:"healthy"`
	Error   string `json:"error"`
}

type NodeSecretSplit struct {
	Table string `gorm:"column:table_name;primaryKey;size:64" json:"table_name"`
	Phase string `gorm:"size:16;not null" json:"phase"`
	// BackfilledRows counts the legacy rows the last backfill pass copied.
	BackfilledRows int64 `gorm:"not null;default:0" json:"backfilled_rows"`
	// BackfillCursor is the last legacy id of the running backfill pass, so
	// an interrupted pass resumes after it.
	BackfillCursor uint64 `gorm:"not null;default:0" json:"backfill_cursor"`
	// BackfilledAt is when the last backfill pass completed; nil while one
	// runs.
	BackfilledAt *time.Time `json:"backfilled_at"`
	// Digest is the digest of every secret of the table, old and new forms
	// equal, at the last verification that matched (VerifiedAt).
	Digest     string     `gorm:"size:64;not null;default:''" json:"digest"`
	VerifiedAt *time.Time `json:"verified_at"`
	// CheckedAt and Mismatches record the last verification, matched or not.
	CheckedAt   *time.Time `json:"checked_at"`
	Mismatches  int64      `gorm:"not null;default:0" json:"mismatches"`
	FinalizedAt *time.Time `json:"finalized_at"`
	FinalizedBy string     `gorm:"size:128;not null;default:''" json:"finalized_by"`
	UpdatedAt   time.Time  `gorm:"not null" json:"updated_at"`
}

type NodeServiceAssignment struct {
	ID                    uint      `gorm:"primaryKey" json:"id"`
	NodeID                uint      `gorm:"not null;index;uniqueIndex:ux_node_service_assignment" json:"node_id"`
	ServiceScope          string    `gorm:"size:64;not null;uniqueIndex:ux_node_service_assignment" json:"service_scope"`
	PluginID              string    `gorm:"size:120;not null;uniqueIndex:ux_node_service_assignment" json:"plugin_id"`
	Role                  string    `gorm:"size:80;not null;uniqueIndex:ux_node_service_assignment" json:"role"`
	DesiredVersion        string    `gorm:"size:64" json:"desired_version"`
	DesiredConfigRevision int64     `gorm:"not null;default:0" json:"desired_config_revision"`
	Enabled               bool      `gorm:"not null" json:"enabled"`
	LifecycleGeneration   int64     `gorm:"not null;default:0" json:"lifecycle_generation"`
	DeletePending         bool      `gorm:"not null;default:false;index" json:"delete_pending"`
	RolloutGroup          string    `gorm:"size:80;index" json:"rollout_group"`
	CreatedAt             time.Time `json:"created_at"`
	UpdatedAt             time.Time `json:"updated_at"`
}

type NodeStatus int

type NotificationLog struct {
	ID        uint       `gorm:"primaryKey" json:"id"`
	UserID    *uint      `gorm:"index" json:"user_id"`
	Type      string     `gorm:"size:20" json:"type"`  // email/telegram/webhook
	Event     string     `gorm:"size:50" json:"event"` // 触发事件
	Title     string     `gorm:"size:200" json:"title"`
	Content   string     `gorm:"type:text" json:"content"`
	Status    int        `json:"status"` // 0=待发送 1=已发送 2=失败
	Error     string     `gorm:"size:500" json:"error"`
	SentAt    *time.Time `json:"sent_at"`
	ReadAt    *time.Time `json:"read_at"`
	CreatedAt time.Time  `gorm:"index" json:"created_at"`
}

type NotificationTemplate struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	Name      string    `gorm:"size:100;not null" json:"name"`
	Type      string    `gorm:"size:20;not null" json:"type"`  // email/telegram/webhook
	Event     string    `gorm:"size:50;not null" json:"event"` // 触发事件
	Title     string    `gorm:"size:200" json:"title"`         // 标题模板
	Content   string    `gorm:"type:text" json:"content"`      // 内容模板
	Enabled   bool      `gorm:"default:true" json:"enabled"`
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type OnlineLog struct {
	ID         uint      `gorm:"primaryKey" json:"id"`
	UserID     uint      `gorm:"index" json:"user_id"`
	ServerID   uint      `gorm:"index" json:"server_id"`
	ServerType string    `gorm:"size:20" json:"server_type"`
	Method     string    `gorm:"size:20" json:"method"`
	IP         string    `gorm:"size:45" json:"ip"`
	CreatedAt  time.Time `json:"created_at"`
}

type OperationLog struct {
	ID         uint   `gorm:"primaryKey" json:"id"`
	UserID     *uint  `gorm:"index" json:"user_id"`
	Username   string `gorm:"size:100" json:"username"`
	Action     string `gorm:"size:50;index" json:"action"` // create/update/delete/login/logout
	Module     string `gorm:"size:50;index" json:"module"` // user/node/order/plan...
	TargetType string `gorm:"size:50" json:"target_type"`  // 目标类型
	TargetID   *uint  `json:"target_id"`                   // 目标ID
	Content    string `gorm:"type:text" json:"content"`    // 操作内容
	IP         string `gorm:"size:45" json:"ip"`
	UserAgent  string `gorm:"size:255" json:"user_agent"`
	Status     int    `gorm:"default:1" json:"status"` // 1=成功 2=失败

	CreatedAt time.Time `gorm:"index" json:"created_at"`
}

type Order struct {
	ID                uint      `gorm:"primaryKey" json:"id"`
	InviteUserID      *uint     `gorm:"index" json:"invite_user_id"`
	UserID            uint      `gorm:"index" json:"user_id"`
	PlanID            uint      `gorm:"index" json:"plan_id"`
	CouponID          *uint     `gorm:"index" json:"coupon_id"`
	PaymentID         *uint     `gorm:"index" json:"payment_id"`
	Type              int       `json:"type"` // 1: new, 2: renew, 3: upgrade, 4: reset
	Period            string    `gorm:"size:20" json:"period"`
	TradeNo           string    `gorm:"size:36;uniqueIndex" json:"trade_no"`
	CallbackNo        *string   `gorm:"size:255" json:"callback_no"`
	TotalAmount       int64     `json:"total_amount"`
	DiscountAmount    *int64    `json:"discount_amount"`
	SurplusAmount     *int64    `json:"surplus_amount"`
	RefundAmount      *int64    `json:"refund_amount"`
	Balance           *int64    `json:"balance"`
	SurplusOrder      *string   `gorm:"type:text" json:"surplus_order"`
	Status            int       `gorm:"default:0" json:"status"` // 0: pending, 1: paid, 2: cancelled, 3: completed, 4: discounted
	CommissionStatus  int       `gorm:"default:0" json:"commission_status"`
	CommissionBalance int64     `gorm:"default:0" json:"commission_balance"`
	PaidAt            *int64    `json:"paid_at"`
	CreatedAt         time.Time `json:"created_at"`
	UpdatedAt         time.Time `json:"updated_at"`

	// Relations
	User *User `gorm:"foreignKey:UserID" json:"user,omitempty"`
	Plan *Plan `gorm:"foreignKey:PlanID" json:"plan,omitempty"`
}

type PackageBackupReference struct {
	ID                   uint       `gorm:"primaryKey" json:"id"`
	MigrationRunID       uint       `gorm:"not null;uniqueIndex" json:"migration_run_id"`
	PackageID            string     `gorm:"size:120;not null;index" json:"package_id"`
	PackageVersion       string     `gorm:"size:64;not null" json:"package_version"`
	Generation           uint64     `gorm:"not null;index" json:"generation"`
	Reference            string     `gorm:"type:text;not null" json:"reference"`
	Checksum             string     `gorm:"size:128" json:"checksum"`
	PreviousGenerationID *uint      `gorm:"index" json:"previous_generation_id"`
	RestoredAt           *time.Time `json:"restored_at"`
	RestoreReason        string     `gorm:"type:text" json:"restore_reason"`
	CreatedAt            time.Time  `json:"created_at"`
}

type PackageMigrationRun struct {
	ID                   uint       `gorm:"primaryKey" json:"id"`
	PackageID            string     `gorm:"size:120;not null;uniqueIndex:ux_v4_package_migration_generation" json:"package_id"`
	PackageVersion       string     `gorm:"size:64;not null" json:"package_version"`
	Generation           uint64     `gorm:"not null;uniqueIndex:ux_v4_package_migration_generation" json:"generation"`
	MigrationID          string     `gorm:"size:160;not null" json:"migration_id"`
	MigrationChecksum    string     `gorm:"size:128;not null" json:"migration_checksum"`
	BeforeSchemaVersion  string     `gorm:"size:128;not null" json:"before_schema_version"`
	AfterSchemaVersion   string     `gorm:"size:128;not null" json:"after_schema_version"`
	OpaqueCheckpoint     string     `gorm:"type:text;not null;default:''" json:"opaque_checkpoint"`
	ValidationDigest     string     `gorm:"type:text;not null;default:''" json:"validation_digest"`
	State                string     `gorm:"size:32;not null;index" json:"state"`
	Complete             bool       `gorm:"not null;default:false" json:"complete"`
	FailureCode          string     `gorm:"size:160" json:"failure_code"`
	HealthLeaseID        string     `gorm:"size:160" json:"health_lease_id"`
	HealthGeneration     uint64     `gorm:"not null;default:0" json:"health_generation"`
	HealthVerifiedAt     *time.Time `json:"health_verified_at"`
	BackupReference      string     `gorm:"type:text" json:"backup_reference"`
	BackupReferenceID    *uint      `gorm:"index" json:"backup_reference_id"`
	PreviousGenerationID *uint      `gorm:"index" json:"previous_generation_id"`
	CompletedAt          *time.Time `json:"completed_at"`
	CreatedAt            time.Time  `json:"created_at"`
	UpdatedAt            time.Time  `json:"updated_at"`
}

type PackageReportState struct {
	NodeKind    string    `gorm:"primaryKey;size:16" json:"node_kind"`
	NodeID      uint      `gorm:"primaryKey" json:"node_id"`
	PluginID    string    `gorm:"primaryKey;size:120" json:"plugin_id"`
	Kind        string    `gorm:"primaryKey;size:64" json:"kind"`
	Version     string    `gorm:"size:64;not null" json:"version"`
	PayloadJSON string    `gorm:"type:text;not null" json:"payload"`
	ObservedAt  time.Time `gorm:"not null;index" json:"observed_at"`
	ReceivedAt  time.Time `gorm:"not null;index" json:"received_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type PackageRolloutLock struct {
	PackageID string `gorm:"primaryKey;size:120" json:"package_id"`
}

type PackageRouteGeneration struct {
	ID                 uint       `gorm:"primaryKey" json:"id"`
	PackageID          string     `gorm:"size:120;not null;uniqueIndex:ux_v4_package_route_generation;index" json:"package_id"`
	Version            string     `gorm:"size:64;not null" json:"version"`
	Generation         uint64     `gorm:"not null;uniqueIndex:ux_v4_package_route_generation" json:"generation"`
	CohortPercent      uint8      `gorm:"not null" json:"cohort_percent"`
	State              string     `gorm:"size:32;not null;index" json:"state"`
	PreviousID         *uint      `gorm:"index" json:"previous_id"`
	MigrationRunID     *uint      `gorm:"index" json:"migration_run_id"`
	ValidationResultID *uint      `gorm:"index" json:"validation_result_id"`
	BackupReferenceID  *uint      `gorm:"index" json:"backup_reference_id"`
	ActivatedAt        *time.Time `json:"activated_at"`
	RolledBackAt       *time.Time `json:"rolled_back_at"`
	RollbackReason     string     `gorm:"type:text" json:"rollback_reason"`
	CreatedAt          time.Time  `json:"created_at"`
	UpdatedAt          time.Time  `json:"updated_at"`
}

type PackageStorage struct {
	PackageID       string    `gorm:"primaryKey;size:120" json:"package_id"`
	Driver          string    `gorm:"size:16;not null" json:"driver"`
	RoleName        string    `gorm:"size:63" json:"role_name"`
	SchemaName      string    `gorm:"size:63" json:"schema_name"`
	TablePrefix     string    `gorm:"size:63" json:"table_prefix"`
	GrantsJSON      string    `gorm:"type:text;not null" json:"grants_json"`
	PackageVersion  string    `gorm:"size:64;not null" json:"package_version"`
	HostGeneration  uint64    `gorm:"not null" json:"host_generation"`
	LeaseGeneration int64     `gorm:"not null" json:"lease_generation"`
	CreatedAt       time.Time `json:"created_at"`
	UpdatedAt       time.Time `json:"updated_at"`
}

type PackageValidationResult struct {
	ID                uint      `gorm:"primaryKey" json:"id"`
	MigrationRunID    uint      `gorm:"not null;uniqueIndex:ux_v4_package_validation_run" json:"migration_run_id"`
	PackageID         string    `gorm:"size:120;not null;index" json:"package_id"`
	PackageVersion    string    `gorm:"size:64;not null" json:"package_version"`
	Generation        uint64    `gorm:"not null;index" json:"generation"`
	ValidationDigest  string    `gorm:"type:text;not null" json:"validation_digest"`
	State             string    `gorm:"size:32;not null;index" json:"state"`
	RouteGenerationID *uint     `gorm:"uniqueIndex" json:"route_generation_id"`
	CreatedAt         time.Time `json:"created_at"`
}

type ParsedNode struct {
	ID     string `json:"id"`     // 唯一标识 (hash)
	Name   string `json:"name"`   // 节点名称
	Type   string `json:"type"`   // 协议类型: vless, vmess, trojan, shadowsocks, hysteria2, tuic, anytls, wireguard
	Server string `json:"server"` // 服务器地址 (host)
	Port   int    `json:"port"`   // 服务器端口 (server_port)

	// 认证信息 (渲染后填入)
	UUID     string `json:"uuid,omitempty"`     // VMess/VLESS UUID (用户ID)
	Password string `json:"password,omitempty"` // Trojan/SS 密码

	// TLS 配置 (tls: 0=None, 1=TLS, 2=Reality)
	TLSMode        int    `json:"tls_mode"`                   // TLS 模式: 0=无, 1=TLS, 2=Reality
	TLS            bool   `json:"tls"`                        // 是否启用 TLS (兼容字段)
	TLSFingerprint string `json:"tls_fingerprint,omitempty"`  // TLS 指纹 (fp)
	SkipCertVerify bool   `json:"skip_cert_verify,omitempty"` // 跳过证书验证
	ServerName     string `json:"server_name,omitempty"`      // SNI 服务器名称
	ALPN           string `json:"alpn,omitempty"`             // ALPN 设置

	// Reality 配置 (当 TLSMode=2 时使用)
	RealityPublicKey string `json:"reality_public_key,omitempty"` // Reality 公钥 (pbk)
	RealityShortID   string `json:"reality_short_id,omitempty"`   // Reality ShortId (sid)
	RealitySpiderX   string `json:"reality_spider_x,omitempty"`   // Reality SpiderX (spx)

	// VLESS 特有配置
	Flow       string `json:"flow,omitempty"`       // VLESS 流控: xtls-rprx-vision
	Encryption string `json:"encryption,omitempty"` // VLESS 加密: 空 或 mlkem768x25519plus

	// VLESS Encryption Settings (当 Encryption 非空时)
	EncryptionSettings *EncryptionSettings `json:"encryption_settings,omitempty"`

	// Shadowsocks 配置
	Cipher    string `json:"cipher,omitempty"`     // SS 加密方式
	ServerKey string `json:"server_key,omitempty"` // SS2022 服务器密钥

	// WireGuard 配置
	PrivateKey   string   `json:"private_key,omitempty"`
	PublicKey    string   `json:"public_key,omitempty"`
	PresharedKey string   `json:"preshared_key,omitempty"`
	PeerIP       string   `json:"peer_ip,omitempty"`
	AllowedIPs   []string `json:"allowed_ips,omitempty"`
	DNS          []string `json:"dns,omitempty"`
	MTU          int      `json:"mtu,omitempty"`

	// 传输层配置 (network)
	Transport         string         `json:"transport,omitempty"`          // 传输协议: tcp, ws, grpc, httpupgrade, xhttp
	TransportSettings map[string]any `json:"transport_settings,omitempty"` // 传输层配置

	// 协议特定配置 (兼容旧字段)
	Settings map[string]any `json:"settings,omitempty"`

	// 来源信息
	SourceType string `json:"source_type"` // template, node, external
	SourceID   uint   `json:"source_id"`   // 来源 ID
	SourceName string `json:"source_name"` // 来源名称
	GroupID    uint   `json:"group_id"`    // 所属分组
	GroupName  string `json:"group_name"`  // 分组名称
}

type PayPalConfig struct {
	ClientID     string `json:"client_id"`
	ClientSecret string `json:"client_secret"`
	WebhookID    string `json:"webhook_id"`
	SandboxMode  bool   `json:"sandbox_mode"`
	Currency     string `json:"currency"`
}

type Payment struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	Name      string    `gorm:"size:100" json:"name"`    // 支付名称
	Icon      *string   `gorm:"size:255" json:"icon"`    // 支付图标
	Method    string    `gorm:"size:20" json:"method"`   // crypto 或 fiat
	Provider  string    `gorm:"size:50" json:"provider"` // x402, stripe, paypal 等
	Config    string    `gorm:"type:text" json:"config"` // JSON 配置
	Notify    *string   `gorm:"size:255" json:"notify"`  // 回调地址
	Sort      int       `gorm:"default:0" json:"sort"`   // 排序
	Enable    int       `gorm:"default:1" json:"enable"` // 是否启用
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type PaymentChannel struct {
	ID          uint    `json:"id"`
	Name        string  `json:"name"`
	Type        string  `json:"type"`
	Icon        string  `json:"icon"`
	MinAmount   float64 `json:"min_amount"`
	MaxAmount   float64 `json:"max_amount"`
	FeeRate     float64 `json:"fee_rate"`
	FeeFixed    float64 `json:"fee_fixed"`
	Description string  `json:"description"`
}

type PaymentGateway struct {
	ID      uint   `gorm:"primaryKey" json:"id"`
	Name    string `gorm:"size:100;not null" json:"name"`
	Type    string `gorm:"size:20;not null" json:"type"` // alipay/wechat/stripe/usdt/epay
	Enabled bool   `gorm:"default:false" json:"enabled"`
	Icon    string `gorm:"size:255" json:"icon"` // 图标URL

	// 配置 (JSON格式存储不同支付方式的配置)
	Config string `gorm:"type:text" json:"config"`

	// 费率设置
	FeeRate  float64 `gorm:"default:0" json:"fee_rate"`  // 手续费率 (0-1)
	FeeFixed float64 `gorm:"default:0" json:"fee_fixed"` // 固定手续费

	// 限额设置
	MinAmount float64 `gorm:"default:1" json:"min_amount"`     // 最小金额
	MaxAmount float64 `gorm:"default:10000" json:"max_amount"` // 最大金额

	// 显示设置
	Sort        int    `gorm:"default:0" json:"sort"`       // 排序
	Description string `gorm:"size:500" json:"description"` // 说明文字

	// 统计
	TotalOrders int64   `json:"total_orders"`
	TotalAmount float64 `json:"total_amount"`

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type PaymentLog struct {
	ID            uint      `gorm:"primaryKey" json:"id"`
	OrderID       uint      `gorm:"index" json:"order_id"`
	PaymentID     uint      `gorm:"index" json:"payment_id"`
	TradeNo       string    `gorm:"size:64;index" json:"trade_no"`  // 内部交易号
	CallbackNo    *string   `gorm:"size:255" json:"callback_no"`    // 外部交易号
	Method        string    `gorm:"size:20" json:"method"`          // crypto 或 fiat
	Provider      string    `gorm:"size:50" json:"provider"`        // 支付提供商
	Amount        int64     `json:"amount"`                         // 支付金额 (分)
	Currency      string    `gorm:"size:10" json:"currency"`        // 货币类型 (USD, CNY, ETH, USDT等)
	Status        int       `gorm:"default:0" json:"status"`        // 支付状态
	RawData       *string   `gorm:"type:text" json:"raw_data"`      // 原始回调数据
	TxHash        *string   `gorm:"size:255" json:"tx_hash"`        // 区块链交易哈希 (仅虚拟货币)
	WalletAddress *string   `gorm:"size:255" json:"wallet_address"` // 钱包地址 (仅虚拟货币)
	Network       *string   `gorm:"size:50" json:"network"`         // 区块链网络 (仅虚拟货币)
	CreatedAt     time.Time `json:"created_at"`
	UpdatedAt     time.Time `json:"updated_at"`
}

type PaymentRecord struct {
	ID             uint   `gorm:"primaryKey" json:"id"`
	TradeNo        string `gorm:"size:64;uniqueIndex" json:"trade_no"` // 商户订单号
	GatewayID      uint   `json:"gateway_id"`                          // 支付网关ID
	GatewayType    string `json:"gateway_type"`                        // 支付类型
	GatewayTradeNo string `gorm:"size:100" json:"gateway_trade_no"`    // 第三方订单号
	Provider       string `gorm:"size:50" json:"provider"`             // 支付提供商 (x402/stripe/paypal 等)
	UserID         uint   `json:"user_id"`

	// 金额信息
	Amount       float64 `json:"amount"`                                // 订单金额
	FeeAmount    float64 `json:"fee_amount"`                            // 手续费
	ActualAmount float64 `json:"actual_amount"`                         // 实际支付金额
	Currency     string  `gorm:"size:10;default:'CNY'" json:"currency"` // 货币类型

	// 状态 (复用 PaymentStatus 常量)
	Status      int        `json:"status"` // 0=待支付 1=已支付 2=已取消 3=已退款
	PaidAt      *time.Time `json:"paid_at"`
	CancelledAt *time.Time `json:"cancelled_at"`
	RefundedAt  *time.Time `json:"refunded_at"`

	// 回调信息
	NotifyData string `gorm:"type:text" json:"notify_data"` // 回调原始数据
	ClientIP   string `gorm:"size:50" json:"client_ip"`

	// 区块链相关 (虚拟货币支付)
	TxHash        *string `gorm:"size:255" json:"tx_hash"`        // 区块链交易哈希
	WalletAddress *string `gorm:"size:255" json:"wallet_address"` // 钱包地址
	Network       *string `gorm:"size:50" json:"network"`         // 区块链网络

	// 关联
	OrderID *uint `json:"order_id"` // 关联订单

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type Plan struct {
	ID                 uint    `gorm:"primaryKey" json:"id"`
	GroupID            uint    `gorm:"index" json:"group_id"`
	TransferEnable     int64   `json:"transfer_enable"` // GB
	SpeedLimit         *int64  `json:"speed_limit"`
	DeviceLimit        *int    `json:"device_limit"`
	Name               string  `gorm:"size:255" json:"name"`
	Content            *string `gorm:"type:text" json:"content"`
	Show               int     `gorm:"default:0" json:"show"`
	Sort               *int    `json:"sort"`
	Renew              int     `gorm:"default:1" json:"renew"`
	ResetPrice         *int64  `json:"reset_price"`
	ResetTrafficMethod *int    `json:"reset_traffic_method"`
	CapacityLimit      *int    `json:"capacity_limit"`

	// Prices
	MonthPrice     *int64 `json:"month_price"`
	QuarterPrice   *int64 `json:"quarter_price"`
	HalfYearPrice  *int64 `json:"half_year_price"`
	YearPrice      *int64 `json:"year_price"`
	TwoYearPrice   *int64 `json:"two_year_price"`
	ThreeYearPrice *int64 `json:"three_year_price"`
	OnetimePrice   *int64 `json:"onetime_price"`

	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type PlanSubscriptionGroup struct {
	ID        uint      `gorm:"primaryKey" json:"id"`
	PlanID    uint      `gorm:"uniqueIndex:idx_plan_group" json:"plan_id"`
	GroupID   uint      `gorm:"uniqueIndex:idx_plan_group" json:"group_id"`
	CreatedAt time.Time `json:"created_at"`

	// 关联
	Plan  *Plan              `gorm:"foreignKey:PlanID" json:"plan,omitempty"`
	Group *SubscriptionGroup `gorm:"foreignKey:GroupID" json:"group,omitempty"`
}

type Plugin struct {
	ID          string    `gorm:"primaryKey;size:120" json:"id"`
	Name        string    `gorm:"size:160;not null" json:"name"`
	Description string    `gorm:"type:text" json:"description"`
	Publisher   string    `gorm:"size:120;not null" json:"publisher"`
	Official    bool      `gorm:"not null;default:false" json:"official"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type PluginArtifact struct {
	ID             uint      `gorm:"primaryKey" json:"id"`
	ReleaseID      uint      `gorm:"not null;uniqueIndex" json:"release_id"`
	PluginID       string    `gorm:"size:120;not null;index;uniqueIndex:ux_plugin_artifact_key" json:"plugin_id"`
	Version        string    `gorm:"size:64;not null;uniqueIndex:ux_plugin_artifact_key" json:"version"`
	ArtifactSHA256 string    `gorm:"size:64;not null;uniqueIndex:ux_plugin_artifact_key" json:"artifact_sha256"`
	SizeBytes      int64     `gorm:"not null" json:"size_bytes"`
	StorageKey     string    `gorm:"size:320;not null;uniqueIndex" json:"storage_key"`
	Data           []byte    `json:"-"`
	CreatedAt      time.Time `json:"created_at"`
}

type PluginConfiguration struct {
	InstallationID uint      `gorm:"primaryKey" json:"installation_id"`
	Revision       int64     `gorm:"not null;default:0" json:"revision"`
	ConfigJSON     string    `gorm:"type:text;not null;default:{}" json:"config"`
	ConfigHash     string    `gorm:"size:64;not null" json:"config_hash"`
	UpdatedBy      uint      `gorm:"not null" json:"updated_by"`
	CreatedAt      time.Time `json:"created_at"`
	UpdatedAt      time.Time `json:"updated_at"`
}

type PluginInstallation struct {
	ID                  uint       `gorm:"primaryKey" json:"id"`
	PluginID            string     `gorm:"size:120;not null;uniqueIndex:ux_plugin_install_target" json:"plugin_id"`
	Target              string     `gorm:"size:20;not null;uniqueIndex:ux_plugin_install_target" json:"target"`
	DesiredVersion      string     `gorm:"size:64;not null" json:"desired_version"`
	ObservedVersion     string     `gorm:"size:64" json:"observed_version"`
	PreviousVersion     string     `gorm:"size:64" json:"previous_version"`
	State               string     `gorm:"size:32;not null;index" json:"state"`
	Enabled             bool       `gorm:"not null;default:false" json:"enabled"`
	LifecycleGeneration int64      `gorm:"not null;default:0" json:"lifecycle_generation"`
	ConfigRevision      int64      `gorm:"not null;default:0" json:"config_revision"`
	LastError           string     `gorm:"type:text" json:"last_error"`
	CreatedAt           time.Time  `json:"created_at"`
	UpdatedAt           time.Time  `json:"updated_at"`
	DisabledAt          *time.Time `json:"disabled_at"`
}

type PluginLifecyclePlan struct {
	ID              string     `gorm:"primaryKey;size:64" json:"id"`
	IdempotencyKey  string     `gorm:"size:160;not null;uniqueIndex" json:"idempotency_key"`
	Target          string     `gorm:"size:20;not null;index" json:"target"`
	RootPluginID    string     `gorm:"size:120;not null;index" json:"root_plugin_id"`
	RootOperationID string     `gorm:"size:64;not null;uniqueIndex" json:"root_operation_id"`
	State           string     `gorm:"size:32;not null;index" json:"state"`
	Outcome         string     `gorm:"size:32" json:"outcome"`
	LastError       string     `gorm:"type:text" json:"last_error"`
	CreatedAt       time.Time  `json:"created_at"`
	UpdatedAt       time.Time  `json:"updated_at"`
	CompletedAt     *time.Time `json:"completed_at"`
}

type PluginLifecyclePlanStep struct {
	ID                      uint       `gorm:"primaryKey" json:"id"`
	PlanID                  string     `gorm:"size:64;not null;uniqueIndex:ux_plugin_lifecycle_plan_step" json:"plan_id"`
	Sequence                int        `gorm:"not null;uniqueIndex:ux_plugin_lifecycle_plan_step;index" json:"sequence"`
	PluginID                string     `gorm:"size:120;not null;index" json:"plugin_id"`
	TargetVersion           string     `gorm:"size:64;not null" json:"target_version"`
	HadInstallation         bool       `gorm:"not null" json:"had_installation"`
	PreviousDesiredVersion  string     `gorm:"size:64" json:"previous_desired_version"`
	PreviousObservedVersion string     `gorm:"size:64" json:"previous_observed_version"`
	PreviousPreviousVersion string     `gorm:"size:64" json:"previous_previous_version"`
	PreviousState           string     `gorm:"size:32" json:"previous_state"`
	PreviousEnabled         bool       `gorm:"not null" json:"previous_enabled"`
	PreviousDisabledAt      *time.Time `json:"previous_disabled_at"`
	PreviousLastError       string     `gorm:"type:text" json:"previous_last_error"`
	Changed                 bool       `gorm:"not null" json:"changed"`
	ApplyState              string     `gorm:"size:32;not null;default:pending;index" json:"apply_state"`
	RollbackState           string     `gorm:"size:32;not null;default:pending;index" json:"rollback_state"`
	CreatedAt               time.Time  `json:"created_at"`
	UpdatedAt               time.Time  `json:"updated_at"`
}

type PluginRelease struct {
	ID                   uint      `gorm:"primaryKey" json:"id"`
	PluginID             string    `gorm:"size:120;not null;uniqueIndex:ux_plugin_release" json:"plugin_id"`
	Version              string    `gorm:"size:64;not null;uniqueIndex:ux_plugin_release" json:"version"`
	APIVersion           string    `gorm:"size:32;not null" json:"api_version"`
	ManifestJSON         string    `gorm:"type:text;not null" json:"manifest"`
	ArtifactSHA256       string    `gorm:"size:64;not null" json:"artifact_sha256"`
	Signature            string    `gorm:"type:text;not null" json:"signature"`
	TrustRootFingerprint string    `gorm:"size:64;index" json:"trust_root_fingerprint"`
	TrustRootKeyID       string    `gorm:"size:32;index" json:"trust_root_key_id"`
	PublishedAt          time.Time `json:"published_at"`
	CreatedAt            time.Time `json:"created_at"`
}

type PluginRuntime struct {
	PluginID  string    `gorm:"primaryKey;size:120" json:"plugin_id"`
	Runtime   string    `gorm:"size:16;not null" json:"runtime"`
	UpdatedBy uint      `json:"updated_by"`
	UpdatedAt time.Time `json:"updated_at"`
}

type PluginTargetLock struct {
	Target    string    `gorm:"primaryKey;size:20" json:"target"`
	UpdatedAt time.Time `json:"updated_at"`
}

type PluginTelemetryState struct {
	NodeID      uint      `gorm:"primaryKey" json:"node_id"`
	PluginID    string    `gorm:"primaryKey;size:120" json:"plugin_id"`
	MetricsJSON string    `gorm:"type:text;not null" json:"metrics"`
	ObservedAt  time.Time `gorm:"not null;index" json:"observed_at"`
	ReceivedAt  time.Time `gorm:"not null;index" json:"received_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type PluginTrustRoot struct {
	Fingerprint string     `gorm:"primaryKey;size:64" json:"fingerprint"`
	KeyID       string     `gorm:"size:32;not null;index" json:"key_id"`
	PublicKey   string     `gorm:"type:text;not null" json:"public_key"`
	Publisher   string     `gorm:"size:120;not null;index" json:"publisher"`
	Active      bool       `gorm:"not null;default:true;index" json:"active"`
	CreatedAt   time.Time  `json:"created_at"`
	LastSeenAt  time.Time  `json:"last_seen_at"`
	RetiredAt   *time.Time `json:"retired_at"`
}

type PluginWebUIAsset struct {
	ID           uint      `gorm:"primaryKey" json:"id"`
	ReleaseID    uint      `gorm:"not null;uniqueIndex" json:"release_id"`
	PluginID     string    `gorm:"size:120;not null;index;uniqueIndex:ux_plugin_webui_asset_addr" json:"plugin_id"`
	Version      string    `gorm:"size:64;not null;uniqueIndex:ux_plugin_webui_asset_addr" json:"version"`
	BundlePath   string    `gorm:"size:240;not null" json:"bundle_path"`
	BundleSHA256 string    `gorm:"size:64;not null;index;uniqueIndex:ux_plugin_webui_asset_addr" json:"bundle_sha256"`
	SizeBytes    int64     `gorm:"not null" json:"size_bytes"`
	ContentType  string    `gorm:"size:120;not null" json:"content_type"`
	StorageKey   string    `gorm:"size:360;not null;uniqueIndex" json:"storage_key"`
	Data         []byte    `json:"-"`
	CreatedAt    time.Time `json:"created_at"`
}

type ProtocolSecret struct {
	ID          uint64 `gorm:"primaryKey;autoIncrement" json:"id"`
	Scope       string `gorm:"size:32;not null;uniqueIndex:idx_v4_kernel_protocol_secret_position,priority:1" json:"scope"`
	OwnerID     uint64 `gorm:"not null;uniqueIndex:idx_v4_kernel_protocol_secret_position,priority:2" json:"owner_id"`
	ColumnName  string `gorm:"size:64;not null;uniqueIndex:idx_v4_kernel_protocol_secret_position,priority:3" json:"column_name"`
	JSONPointer string `` /* 128-byte string literal not displayed */
	Value       string `gorm:"type:text;not null;default:''" json:"-"`
	Sealed      bool   `gorm:"not null;default:false" json:"sealed"`
	KEKID       string `gorm:"column:kek_id;size:64;not null;default:''" json:"kek_id"`
	// Version counts the changes of the value at this position.
	Version   int       `gorm:"not null;default:1" json:"version"`
	UpdatedAt time.Time `gorm:"not null" json:"updated_at"`
}

type ProtocolTemplate struct {
	Type        ProtocolType `json:"type"`
	Name        string       `json:"name"`
	Description string       `json:"description"`
	DefaultPort int          `json:"default_port"`
	Settings    string       `json:"settings"`         // 默认配置JSON
	TLS         int          `json:"tls"`              // 0=无, 1=TLS, 2=Reality
	TLSSettings string       `json:"tls_settings"`     // TLS配置JSON
	Transport   string       `json:"transport"`        // tcp, ws, etc.
	Reality     string       `json:"reality_settings"` // Reality配置JSON
}