model

type ActionRoute struct {
	ID      string       `yaml:"id" json:"id"`
	Match   MatchFilter  `yaml:"match" json:"match"`
	Actions []ActionSpec `yaml:"actions" json:"actions"`
}

type ActionRouteSet struct {
	Routes []ActionRoute `yaml:"routes" json:"routes"`
}

type ActionSpec struct {
	Type    string            `yaml:"type" json:"type"` // webhook, email, script
	URL     string            `yaml:"url,omitempty"`    // for webhook
	Headers map[string]string `yaml:"headers,omitempty"`

	Command string   `yaml:"command,omitempty"` // for script
	Args    []string `yaml:"args,omitempty"`    // optional args
}

type Agent struct {
	AgentID  string            `json:"agent_id"`
	HostID   string            `json:"host_id"`
	Hostname string            `json:"hostname"`
	IP       string            `json:"ip"`
	OS       string            `json:"os"`
	Arch     string            `json:"arch"`
	Version  string            `json:"version"`
	Labels   map[string]string `json:"labels"`

	EndpointID    string    `json:"endpoint_id"` // Computed from HostID
	LastSeen      time.Time `json:"last_seen"`
	Status        string    `json:"status"` // online/offline
	Since         string    `json:"since"`  // How long in current state
	StartTime     time.Time `json:"-"`
	UptimeSeconds float64   `json:"uptime_seconds"`
	Updated       bool      `json:"-"` // For in-memory use only
}

type AlertInstance struct {
	ID         string            `json:"id"`
	RuleID     string            `json:"rule_id"`
	EndpointID string            `json:"endpoint_id,omitempty"`
	State      string            `json:"state"`       // "ok", "firing", "resolved", "no_data"
	Previous   string            `json:"previous"`    // previous state
	Scope      string            `json:"scope"`       // "global", "endpoint", "agent", "user", "cloud" etc
	Target     string            `json:"target"`      // e.g. "endpoint_id", "agent_id", "user_id"
	FirstFired time.Time         `json:"first_fired"` // when it first started firing
	LastFired  time.Time         `json:"last_fired"`  // when it last evaluated as firing
	LastOK     time.Time         `json:"last_ok"`     // last time condition returned OK
	LastValue  float64           `json:"last_value"`  // most recent value
	Level      string            `json:"level"`       // from rule (info/warning/critical)
	Message    string            `json:"message"`     // expanded from template
	Labels     map[string]string `json:"labels"`
	ResolvedAt *time.Time        `json:"resolved_at,omitempty"` // when it was resolved
}

type AlertQuery struct {
	RuleID string
	State  string
	Level  string
	Target string
	Scope  string
	Sort   string // e.g. "first_fired desc"
	Limit  int
	Offset int
	Order  string
	Tags   map[string]string
}

type AlertRule struct {
	ID          string        `json:"id" yaml:"id"`
	Name        string        `json:"name" yaml:"name"`
	Description string        `json:"description,omitempty" yaml:"description,omitempty"`
	Message     string        `json:"message" yaml:"message"` // message template for alert
	Level       string        `json:"level" yaml:"level"`     // info, warning, critical
	Enabled     bool          `json:"enabled" yaml:"enabled"`
	Type        string        `json:"type" yaml:"type"` // metric, log, event, composite
	Match       MatchCriteria `json:"match" yaml:"match"`
	Scope       Scope         `json:"scope" yaml:"scope"`
	Expression  Expression    `json:"expression" yaml:"expression"`
	Actions     []string      `json:"actions" yaml:"actions"`
	Options     Options       `json:"options" yaml:"options"`
}

type AlertSummary struct {
	RuleID     string    `json:"rule_id"`
	State      string    `json:"state"`       // "firing", "resolved", etc.
	LastChange time.Time `json:"last_change"` // based on LastFired
}

type AnsibleCommandResult struct {
	Output       string
	ExitCode     int
	ErrorMessage string
	Duration     time.Duration
	StartedAt    time.Time
	Changed      bool                   // was something changed?
	Stats        map[string]interface{} // from parsed play recap
}

type CommandRequest struct {
	AgentID     string   `json:"agent_id"`       // Unique identifier for the agent
	CommandType string   `json:"command_type"`   // e.g., "shell" or "ansible"
	CommandData string   `json:"command_data"`   // The actual shell command or playbook content
	Args        []string `json:"args,omitempty"` // Optional arguments for shell commands
}

type CommandResponse struct {
	Success      bool
	Output       string
	ErrorMessage string
}

type CommandResult struct {
	EndpointID   string `json:"endpoint_id"`
	Output       string `json:"output"`
	Success      bool   `json:"success"`
	ErrorMessage string `json:"error_message,omitempty"`
	Timestamp    string `json:"timestamp"` // ISO format
}

type Container struct {
	ContainerID string
	Name        string
	ImageName   string
	ImageID     string
	Runtime     string
	Status      string
	Heartbeat   string
	EndpointID  string
	HostID      string
	LastSeen    time.Time
	Labels      map[string]string
	Updated     bool
}

type Endpoint struct {
	EndpointID    string            `json:"endpoint_id"` // Computed from HostID
	HostID        string            `json:"host_id"`
	Hostname      string            `json:"hostname"`
	ContainerName string            `json:"container_name,omitempty"` // Only for containers
	IP            string            `json:"ip"`
	OS            string            `json:"os,omitempty"`
	Arch          string            `json:"arch,omitempty"`
	Version       string            `json:"version,omitempty"`
	Labels        map[string]string `json:"labels"`
	ContainerID   string            `json:"container_id,omitempty"` // Only for containers
	Name          string            `json:"name,omitempty"`         // Only for containers
	ImageName     string            `json:"image_name,omitempty"`   // Only for containers
	ImageID       string            `json:"image_id,omitempty"`     // Only for containers
	Runtime       string            `json:"runtime,omitempty"`      // Only for containers
	LastSeen      time.Time         `json:"last_seen"`
	Status        string            `json:"status"` // online/offline
	UptimeSeconds float64           `json:"uptime_seconds"`
	Updated       bool              `json:"-"` // For in-memory use only
}

type EventEntry struct {
	ID         string            `json:"id"`
	Timestamp  time.Time         `json:"timestamp"`
	Level      string            `json:"level"`    // info, warning, critical
	Type       string            `json:"type"`     // event type (system / alert)
	Category   string            `json:"category"` // metric, log, system, security
	Message    string            `json:"message"`
	Source     string            `json:"source"` // metric name, log source, etc.
	Scope      string            `json:"scope"`  // "endpoint", "system", etc.
	Target     string            `json:"target"` // "host-123", "gosight-core", etc.
	EndpointID string            `json:"endpoint_id"`
	Meta       map[string]string `json:"meta"` // additional tags/labels

}

type EventFilter struct {
	Limit      int
	Level      string
	HostID     string
	EndpointID string
	Type       string
	Category   string
	Scope      string
	Target     string
	Source     string
	Contains   string
	Start      *time.Time
	End        *time.Time
	SortOrder  string // "asc" or "desc"
}

type Expression struct {
	Operator string      `json:"operator" yaml:"operator"`                     // >, <, =, !=, contains, regex
	Value    interface{} `json:"value" yaml:"value"`                           // number or string
	Datatype string      `json:"datatype,omitempty" yaml:"datatype,omitempty"` // percent, numeric, status
}

type LogEntry struct {
	Timestamp time.Time         `json:"timestamp"`      // When the log was emitted
	Level     string            `json:"level"`          // info, warn, error, debug, etc.
	Message   string            `json:"message"`        // The actual log content
	Source    string            `json:"source"`         // Collector name or service name (e.g., journald, nginx)
	Category  string            `json:"category"`       // Optional: auth, network, system, app, etc.
	PID       int               `json:"pid,omitempty"`  // Process ID if available
	Fields    map[string]string `json:"fields"`         // Structured fields (JSON logs, key/values)
	Tags      map[string]string `json:"tags"`           // Custom labels/tags (user-defined or enriched)
	Meta      *LogMeta          `json:"meta,omitempty"` // Optional platform/service-specific metadata
}

type LogFilter struct {
	// Time range filter
	Start time.Time // Filter logs from this time onward
	End   time.Time // Filter logs until this time

	// Filtering by log properties
	EndpointID    string // Filter by endpoint ID (e.g., "host-123", "container-xyz")
	Target        string // Filter by target (e.g., "gosight-core", "host-123")
	Level         string // Filter by log level (e.g., "info", "warning", "error")
	Category      string // Filter by category (e.g., "system", "metric", "security")
	Source        string // Filter by source (e.g., "docker", "podman", "system")
	Contains      string // Filter by a substring match in the message
	Unit          string // Filter by systemd unit name (e.g., "nginx.service")
	AppName       string // Filter by application name (e.g., "nginx", "sshd")
	Service       string // For syslog/Windows Event Log
	EventID       string
	User          string
	ContainerID   string // if inside a container
	Platform      string
	ContainerName string // Windows event ID, etc.
	Meta          map[string]string
	Tags          map[string]string // Additional tags to filter by
	Extra         map[string]string
	Fields        map[string]string // Additional fields to filter by
	// Limit and sorting
	Limit  int    // Max number of logs to return
	Order  string // Order direction: "asc" or "desc"
	Cursor time.Time
	Offset int
}

type LogMeta struct {
	Platform      string            `json:"platform,omitempty"`       // journald, eventlog, syslog, etc.
	AppName       string            `json:"app_name,omitempty"`       // e.g., nginx, sshd
	AppVersion    string            `json:"app_version,omitempty"`    // if known
	ContainerID   string            `json:"container_id,omitempty"`   // if inside a container
	ContainerName string            `json:"container_name,omitempty"` // optional
	Unit          string            `json:"unit,omitempty"`           // For journald: systemd unit name
	Service       string            `json:"service,omitempty"`        // For syslog/Windows Event Log
	EventID       string            `json:"event_id,omitempty"`       // Windows event ID, etc.
	User          string            `json:"user,omitempty"`           // User associated with log entry
	Executable    string            `json:"exe,omitempty"`            // Path to binary if available
	Path          string            `json:"path,omitempty"`           // Original source log path
	Extra         map[string]string `json:"extra,omitempty"`          // For collector-specific fields
}

type LogPayload struct {
	AgentID    string
	HostID     string
	Hostname   string
	EndpointID string
	Timestamp  time.Time
	Logs       []LogEntry
	Meta       *Meta
}

type MatchCriteria struct {
	EndpointIDs []string          `json:"endpoint_ids,omitempty" yaml:"endpoint_ids,omitempty"`
	Labels      map[string]string `json:"labels,omitempty" yaml:"labels,omitempty"`
	Category    string            `json:"category,omitempty" yaml:"category,omitempty"`
	Source      string            `json:"source,omitempty" yaml:"source,omitempty"`
	Scope       string            `json:"scope,omitempty" yaml:"scope,omitempty"`
}

type MatchFilter struct {
	Level  string            `yaml:"level,omitempty" json:"level,omitempty"`     // warning, critical, etc
	RuleID string            `yaml:"rule_id,omitempty" json:"rule_id,omitempty"` // specific rule
	Tags   map[string]string `yaml:"tags,omitempty" json:"tags,omitempty"`       // meta.Tags match
}

type Meta struct {
	// Agent Information
	AgentID      string `json:"agent_id"`      // Unique ID for the agent
	AgentVersion string `json:"agent_version"` // Version of the agent running

	// General Host Information
	HostID               string `json:"host_id"`     // Unique ID for the host
	EndpointID           string `json:"endpoint_id"` // Unique ID for the endpoint
	Hostname             string `json:"hostname"`
	IPAddress            string `json:"ip_address"`
	OS                   string `json:"os,omitempty"`
	OSVersion            string `json:"os_version,omitempty"`
	Platform             string `json:"platform,omitempty"`
	PlatformFamily       string `json:"platform_family,omitempty"`
	PlatformVersion      string `json:"platform_version,omitempty"`
	KernelArchitecture   string `json:"kernel_architecture,omitempty"`
	VirtualizationSystem string `json:"virtualization_system,omitempty"`
	VirtualizationRole   string `json:"virtualization_role,omitempty"`
	KernelVersion        string `json:"kernel_version,omitempty"`
	Architecture         string `json:"architecture,omitempty"`

	// Cloud Provider Specific
	CloudProvider    string `json:"cloud_provider,omitempty"` // AWS, Azure, GCP
	Region           string `json:"region,omitempty"`
	AvailabilityZone string `json:"availability_zone,omitempty"` // or Zone
	InstanceID       string `json:"instance_id,omitempty"`
	InstanceType     string `json:"instance_type,omitempty"`
	AccountID        string `json:"account_id,omitempty"`
	ProjectID        string `json:"project_id,omitempty"`     // GCP
	ResourceGroup    string `json:"resource_group,omitempty"` //Azure
	VPCID            string `json:"vpc_id,omitempty"`         // AWS, GCP
	SubnetID         string `json:"subnet_id,omitempty"`      // AWS, GCP, Azure
	ImageID          string `json:"image_id,omitempty"`       // AMI, Image, etc.
	ServiceID        string `json:"service_id,omitempty"`     // if a managed service is the source

	// Containerization/Orchestration
	ContainerID        string `json:"container_id,omitempty"`
	ContainerName      string `json:"container_name,omitempty"`
	PodName            string `json:"pod_name,omitempty"`
	Namespace          string `json:"namespace,omitempty"` // K8s namespace
	ClusterName        string `json:"cluster_name,omitempty"`
	NodeName           string `json:"node_name,omitempty"`
	ContainerImageID   string `json:"contianer_image_id,omitempty"` // Docker image ID
	ContainerImageName string `json:"image_name,omitempty"`         // Docker image name

	// Application Specific
	Application  string `json:"application,omitempty"`
	Environment  string `json:"environment,omitempty"` // dev, staging, prod
	Service      string `json:"service,omitempty"`     // if a microservice
	Version      string `json:"version,omitempty"`
	DeploymentID string `json:"deployment_id,omitempty"`

	// Network Information
	PublicIP         string `json:"public_ip,omitempty"`
	PrivateIP        string `json:"private_ip,omitempty"`
	MACAddress       string `json:"mac_address,omitempty"`
	NetworkInterface string `json:"network_interface,omitempty"`

	// Custom Metadata
	Tags map[string]string `json:"tags,omitempty"` // Allow for arbitrary key-value pairs
}

type Metric struct {
	Namespace         string            `json:"namespace,omitempty"`
	SubNamespace      string            `json:"subnamespace,omitempty"`
	Name              string            `json:"name"`
	Timestamp         time.Time         `json:"timestamp"`
	Value             float64           `json:"value"`
	StatisticValues   *StatisticValues  `json:"stats"`
	Unit              string            `json:"unit,omitempty"`
	Dimensions        map[string]string `json:"dimensions,omitempty"`
	StorageResolution int               `json:"resolution,omitempty"`
	Type              string            `json:"type,omitempty"`
}

type MetricPayload struct {
	AgentID    string    `json:"agent_id"`
	HostID     string    `json:"host_id"`
	Hostname   string    `json:"hostname"`
	EndpointID string    `json:"endpoint_id"`
	Metrics    []Metric  `json:"metrics"`
	Meta       *Meta     `json:"meta,omitempty"`
	Timestamp  time.Time `json:"timestamp"`
}

type MetricPoint struct {
	Timestamp int64   `json:"timestamp"` // Unix ms
	Value     float64 `json:"value"`     // Metric value
}

type MetricRow struct {
	Value     float64           `json:"value"`
	Tags      map[string]string `json:"tags"`
	Timestamp int64             `json:"timestamp"` // Unix ms
}

type MetricSelector struct {
	Name         string
	Namespace    string
	SubNamespace string
	Instant      bool // true = stat card, false = chart or long term
}

type Options struct {
	Cooldown        string `json:"cooldown,omitempty" yaml:"cooldown,omitempty"`
	EvalInterval    string `json:"eval_interval,omitempty" yaml:"eval_interval,omitempty"`
	RepeatInterval  string `json:"repeat_interval,omitempty" yaml:"repeat_interval,omitempty"`
	NotifyOnResolve bool   `json:"notify_on_resolve,omitempty" yaml:"notify_on_resolve,omitempty"`
}

type Point struct {
	Timestamp string  `json:"timestamp"`
	Value     float64 `json:"value"`
}

type ProcessInfo struct {
	PID        int               `json:"pid"`
	PPID       int               `json:"ppid"`
	User       string            `json:"user"`
	Executable string            `json:"exe"`
	Cmdline    string            `json:"cmdline"`
	CPUPercent float64           `json:"cpu_percent"`
	MemPercent float64           `json:"mem_percent"`
	Threads    int               `json:"threads"`
	StartTime  time.Time         `json:"start_time"`
	Tags       map[string]string `json:"tags,omitempty"` // container_id, container_name, etc
}

type ProcessPayload struct {
	AgentID    string        `json:"agent_id"`
	HostID     string        `json:"host_id"`
	Hostname   string        `json:"hostname"`
	EndpointID string        `json:"endpoint_id"`
	Processes  []ProcessInfo `json:"processes"`
	Meta       *Meta         `json:"meta,omitempty"`
	Timestamp  time.Time     `json:"timestamp"`
}

type ProcessQueryFilter struct {
	EndpointID      string
	Start           time.Time
	End             time.Time
	MinCPU          float64
	MaxCPU          float64
	MinMemory       float64
	MaxMemory       float64
	User            string
	PID             int
	PPID            int
	ExeContains     string
	CmdlineContains string
	Tags            map[string]string
	SortBy          string
	SortDesc        bool
	Limit           int
	Offset          int
}

type ProcessSnapshot struct {
	Timestamp  time.Time     `json:"timestamp"`
	HostID     string        `json:"host_id"`
	EndpointID string        `json:"endpoint_id"`
	Processes  []ProcessInfo `json:"processes"`
	Meta       *Meta         `json:"meta"` // Same as metric/log meta
}

type Scope struct {
	Namespace    string `json:"namespace,omitempty" yaml:"namespace,omitempty"`
	SubNamespace string `json:"subnamespace,omitempty" yaml:"subnamespace,omitempty"`
	Metric       string `json:"metric,omitempty" yaml:"metric,omitempty"`
}

type ShellCommandResult struct {
	Output       string        // Full stdout and stderr combined
	ExitCode     int           // Actual exit code (0 = success)
	ErrorMessage string        // Error description if command failed (e.g. exec errors)
	Duration     time.Duration // How long it took to run
	StartedAt    time.Time     // Optional: when the command started
}

type StatisticValues struct {
	Minimum     float64 `json:"min"`
	Maximum     float64 `json:"max"`
	SampleCount int     `json:"count"`
	Sum         float64 `json:"sum"`
}

type StoredLog struct {
	LogID string   `json:"log_id"`
	Log   LogEntry `json:"log"`
	Meta  *Meta    `json:"meta,omitempty"` // from LogPayload
}

type Tag struct {
	EndpointID string
	Key        string
	Value      string
}