queries

type AccessLogCountryStat struct {
	CountryCode   string
	CountryName   string
	ContinentCode string
	Total         int64
	Allowed       int64
	Denied        int64
}

type AccessLogQuery struct {
	From          time.Time
	To            time.Time
	BeforeID      *int64 // cursor: return rows with id < BeforeID; nil for first page
	ClientIP      *string
	Outcome       *bool
	DenyReason    *string
	DeviceID      *device.DeviceID
	TargetHost    *string
	CountryCode   *string
	ContinentCode *string
	Limit         int
}

type AccessLogView struct {
	ID            int64
	ClientIP      string
	Outcome       bool
	DenyReason    *string
	DeviceID      *device.DeviceID
	DeviceName    *string
	AddressID     *device.AddressID
	CreatedAt     time.Time
	DurationUs    int64
	XFFChain      *string
	TargetHost    *string
	TargetURI     *string
	HTTPMethod    *string
	Headers       map[string][]string
	CountryCode   *string
	CountryName   *string
	ContinentCode *string
	ASN           *int64
	ASNOrg        *string
}

type AddressView struct {
	ID        device.AddressID `db:"id"`
	DeviceID  device.DeviceID  `db:"device_id"`
	IP        string           `db:"ip"`
	IsEnabled bool             `db:"is_enabled"`
	Source    string           `db:"source"`
	UpdatedAt time.Time        `db:"updated_at"`
	CreatedAt time.Time        `db:"created_at"`
	ExpiresAt *time.Time       `db:"expires_at"`
}

type DeviceDetail struct {
	ID           device.DeviceID   `db:"id"`
	Name         string            `db:"name"`
	DeviceType   device.DeviceType `db:"device_type"`
	Description  *string           `db:"description"`
	Icon         *string           `db:"icon"`
	CreatedAt    time.Time         `db:"created_at"`
	UpdatedAt    time.Time         `db:"updated_at"`
	KeyPrefix    *string           `db:"key_prefix"`
	AddressCount int               `db:"address_count"`
	LastSeenAt   *database.DBTime  `db:"last_seen_at"`
	OwnerID      auth.UserID       `db:"owner_id"`
	OwnerName    string            `db:"owner_name"`
}

type DeviceView struct {
	ID           device.DeviceID   `db:"id"`
	Name         string            `db:"name"`
	DeviceType   device.DeviceType `db:"device_type"`
	Description  *string           `db:"description"`
	Icon         *string           `db:"icon"`
	CreatedAt    time.Time         `db:"created_at"`
	UpdatedAt    time.Time         `db:"updated_at"`
	KeyPrefix    *string           `db:"key_prefix"`
	AddressCount int               `db:"address_count"`
	LastSeenAt   *database.DBTime  `db:"last_seen_at"`
	OwnerID      auth.UserID       `db:"owner_id"`
	OwnerName    string            `db:"owner_name"`
}

type GroupRef struct {
	ID   hostaccess.HostGroupID
	Name string
}

type HTTPHandler struct {
	// contains filtered or unexported fields
}

type HostAccessKind string

type HostGroupWithMembers struct {
	ID          hostaccess.HostGroupID
	Name        string
	Color       *string
	Description *string
	Icon        *string
	CreatedAt   time.Time
	Hosts       []hostaccess.KnownHostRef
	MemberIDs   []hostaccess.KnownHostID
}

type HostSuggestion struct {
	FQDN        string          `db:"fqdn"`
	FirstSeen   database.DBTime `db:"first_seen"`
	AllowedHits int             `db:"allowed_hits"`
	DeniedHits  int             `db:"denied_hits"`
}

type HostSuggestionsPage struct {
	Suggestions []HostSuggestion
	Ignored     []hostaccess.IgnoredHostSuggestion
}

type KnownHostStats struct {
	ID        hostaccess.KnownHostID `db:"id"`
	FQDN      string                 `db:"fqdn"`
	Icon      *string                `db:"icon"`
	CreatedAt time.Time              `db:"created_at"`
	UserCount int                    `db:"user_count"`
	Groups    []GroupRef
}

type PolicyMapReader interface {
	GetPolicyMap() policy.PolicyMapSnapshot
}

type Repository struct {
	// contains filtered or unexported fields
}

type UserAccessEditor struct {
	User          UserSummary
	AllowAllHosts bool
	Summary       UserAccessSummary
	GroupOptions  []UserAccessGroupOption
	HostOptions   []UserAccessHostOption
}

type UserAccessGroupOption struct {
	ID       hostaccess.HostGroupID
	Name     string
	Icon     *string
	Selected bool
	Hosts    []hostaccess.KnownHostRef
}

type UserAccessHostOption struct {
	ID             hostaccess.KnownHostID
	FQDN           string
	Icon           *string
	DirectSelected bool
	Effective      bool
	GrantingGroups []GroupRef
	AccessKind     HostAccessKind
}

type UserAccessRow struct {
	ID                 auth.UserID
	DisplayName        string
	Email              string
	Role               auth.Role
	AllowAllHosts      bool
	EffectiveHostCount int
	GrantedGroups      []GroupRef
}

type UserAccessSummary struct {
	TotalHosts     int
	EffectiveHosts int
	DirectHosts    int
	// GroupOnlyHosts counts hosts reachable exclusively via a granted group (not also directly).
	// Useful for "you would lose access to N hosts if all groups were revoked."
	GroupOnlyHosts int
}

type UserSummary struct {
	ID          auth.UserID
	DisplayName string
	Email       string
	Role        auth.Role
}

type UserView struct {
	ID                  auth.UserID  `db:"id"`
	Username            string       `db:"username"`
	DisplayName         string       `db:"display_name"`
	Email               string       `db:"email"`
	Role                auth.Role    `db:"role"`
	MustChangePassword  bool         `db:"must_change_password"`
	BypassHostAllowlist bool         `db:"bypass_host_allowlist"`
	CreatedBy           *auth.UserID `db:"created_by"`
	CreatedAt           time.Time    `db:"created_at"`
}