nodeapi

type ConnSample struct {
	Email string `json:"e"`
	IP    string `json:"ip"`
}

type GeoFile struct {
	Name       string `json:"name"`
	Present    bool   `json:"present"`
	Size       int64  `json:"size"`
	ModifiedAt int64  `json:"modified_at"`
}

type HostStats struct {
	DiskUsed   int64 `json:"disk_used"`
	DiskTotal  int64 `json:"disk_total"`
	MemUsed    int64 `json:"mem_used"`
	MemTotal   int64 `json:"mem_total"`
	HostUptime int64 `json:"host_uptime"` // seconds
	// ConnGuard is whether the per-IP flood guard's nftables rules are actually in
	// force on the node (it degrades to a no-op without nft/root, silently).
	ConnGuard bool `json:"connguard"`
	BBR       bool `json:"bbr"`
}

type JoinRequest struct {
	JoinToken   string `json:"join_token"`
	NodeVersion string `json:"node_version"`
}

type JoinResponse struct {
	NodeID   int64  `json:"node_id"`
	Token    string `json:"token"`
	PanelURL string `json:"panel_url"`
	HoldSec  int    `json:"hold_sec"` // how long the panel will hold a no-change sync
	NodeAPI  string `json:"node_api"` // node-API path segment (in case the URL is bare)
}

type NodeMeta struct {
	Host           string `json:"host"`
	SNI            string `json:"sni"`
	ACMEEmail      string `json:"acme_email"`
	ACMEProvider   string `json:"acme_provider"`
	ZeroSSLEABKID  string `json:"zerossl_eab_kid,omitempty"`
	ZeroSSLEABHMAC string `json:"zerossl_eab_hmac,omitempty"`

	HysteriaEnabled bool `json:"hysteria_enabled"`
	HysteriaPort    int  `json:"hysteria_port"`
	HopStart        int  `json:"hop_start"`
	HopEnd          int  `json:"hop_end"`

	// ConnGuardPorts are the public TCP ports the per-IP connection guard should
	// protect (VLESS, and REALITY when enabled).
	ConnGuardPorts []int `json:"connguard_ports,omitempty"`

	// LoopbackDest is where the node's Xray fallback forwards non-VPN traffic — the
	// agent runs its decoy server there (matches the panel's own layout).
	LoopbackDest string `json:"loopback_dest"`

	DecoyTemplate string `json:"decoy_template"`

	// Opera egress: when enabled, the agent runs the opera-proxy helper locally on
	// OperaPort in the given country. The generated Xray config's "opera" outbound
	// already points at 127.0.0.1:OperaPort, so the agent only has to keep the helper
	// alive. WARP needs no helper — it's a native WireGuard outbound in the config.
	OperaEnabled bool   `json:"opera_enabled,omitempty"`
	OperaCountry string `json:"opera_country,omitempty"`
	OperaPort    int    `json:"opera_port,omitempty"`

	// GeoRefreshHours is how often the node should auto-refresh its geo databases
	// (hours; 0 ⇒ never). Pushed from the panel so the fleet shares one cadence.
	GeoRefreshHours int `json:"geo_refresh_hours,omitempty"`

	// XrayPinnedVersion is the release the panel expects; the UI flags a node whose
	// running Xray differs so version skew is visible.
	XrayPinnedVersion string `json:"xray_pinned_version,omitempty"`
}

type NodeState struct {
	Hash       string          `json:"hash"`
	XrayConfig json.RawMessage `json:"xray_config"`
	Meta       NodeMeta        `json:"meta"`
}

type SiteSample struct {
	UserID int64  `json:"u"`
	Host   string `json:"h"`
	Count  int64  `json:"c"`
}

type SyncRequest struct {
	ConfigHash  string `json:"config_hash"`
	NodeVersion string `json:"node_version"`
	XrayVersion string `json:"xray_version"`
	XrayRunning bool   `json:"xray_running"`
	// Revoked ⇒ this node already knows the panel switched it off and has stopped
	// serving. It changes how the panel answers: a node that has yet to hear the bad
	// news is told at once, but one that already knows has its request HELD like any
	// other, so switching it back on reaches it immediately instead of on its next
	// slow poll. Absent from an older agent, which simply keeps the old behaviour.
	Revoked bool `json:"revoked,omitempty"`

	// XrayStartedAt is when the currently-running Xray started, in the NODE's clock
	// (0 ⇒ down, or an agent too old to report it). The panel never compares it to
	// its own clock — only to the previous value from this same node — which is what
	// lets it confirm an operator-requested restart actually happened without the two
	// machines having to agree on the time.
	XrayStartedAt int64 `json:"xray_started_at,omitempty"`

	// Live cert fingerprint, so the panel can emit correct pinning in this node's
	// share links without ever seeing the node's disk. Empty sha ⇒ no cert yet.
	CertSHA256     string `json:"cert_sha256"`
	CertSelfSigned bool   `json:"cert_self_signed"`
	// Cert details for the node's Домен tab: the issuer (≈ ACME provider) and expiry.
	CertIssuer    string `json:"cert_issuer,omitempty"`
	CertExpiresAt int64  `json:"cert_expires_at,omitempty"` // unix; 0 ⇒ unknown/no cert

	// Traffic deltas accumulated since the last acked report. ReportID is monotonic
	// per node and persisted by the agent, so a lost response is retried without
	// double-counting (the panel dedupes against its stored watermark).
	ReportID int64          `json:"report_id"`
	Traffic  []TrafficDelta `json:"traffic,omitempty"`

	// Conns are distinct (user-email, source-IP) samples seen in this node's Xray
	// access log since the last sync. The panel feeds them through the same device-
	// counting pipeline as the master (RecordAccess → AddConnection), so a user's
	// device cap counts unique IPs across the WHOLE fleet, not just the master.
	Conns []ConnSample `json:"conns,omitempty"`

	// Sites are this node's busiest destination addresses per user since the last
	// sync, which the panel matches against its IP blocklists.
	//
	// Aggregated on the node and truncated there, rather than shipped raw the way
	// Conns are: destinations are high-cardinality (a browsing user produces dozens
	// of distinct hosts a minute), so a raw per-connection feed would put the same
	// unbounded growth on the wire that keeps it out of the database. Lossy by
	// construction — the tail below the truncation never leaves the node, which is
	// the right trade for a view that only ever shows a top-N.
	Sites []SiteSample `json:"sites,omitempty"`

	// Logs is the node's recent log tail (agent + Xray), sent only when the panel
	// asked for it via SyncResponse.WantLogs — so a viewing operator sees fresh logs
	// without every sync carrying the payload.
	Logs []string `json:"logs,omitempty"`

	// GeoFiles is the on-disk status of the node's geo databases (name/size/mtime),
	// so its Домен/Geo tab can show them like the master's. Small — sent every sync.
	GeoFiles []GeoFile `json:"geo_files,omitempty"`

	// Host is the node's own machine state for its diagnostics page. The panel can't
	// stat a remote node's disk or read its nftables, so the node reports the same
	// handful of facts the panel shows for itself. Optional: an older agent omits it
	// and the report says so rather than inventing numbers.
	Host *HostStats `json:"host,omitempty"`
}

type SyncResponse struct {
	Changed   bool       `json:"changed"`
	AckReport int64      `json:"ack_report"` // highest ReportID the panel has ingested
	State     *NodeState `json:"state,omitempty"`

	// Revoked ⇒ the node was deleted or disabled: stop serving, keep polling slowly
	// so it recovers if re-enabled. Distinct from an unreachable panel (which the
	// agent treats as "keep serving last-known config").
	Revoked bool `json:"revoked,omitempty"`

	// PanelURL, when set, tells the agent the panel moved — persist and switch to it.
	PanelURL string `json:"panel_url,omitempty"`

	// RefreshGeo ⇒ the operator asked this node to re-download its geo databases now
	// (and reload Xray to pick them up).
	RefreshGeo bool `json:"refresh_geo,omitempty"`

	// Update ⇒ the operator asked this node to self-update to the latest release.
	// The agent downloads + verifies the new binary and restarts itself.
	Update bool `json:"update,omitempty"`

	// RestartXray ⇒ the operator asked this node to bounce its Xray process (the
	// config is unchanged; every live connection on that node drops and reconnects).
	RestartXray bool `json:"restart_xray,omitempty"`

	// WantLogs ⇒ an operator is viewing this node's logs; include the log tail in the
	// next sync request.
	WantLogs bool `json:"want_logs,omitempty"`
}

type TrafficDelta struct {
	UserID int64 `json:"user_id"`
	Up     int64 `json:"up"`
	Down   int64 `json:"down"`
}