zerotrust

type AccessApplication struct {
	ID                      string    `json:"id"`
	UID                     string    `json:"uid,omitempty"`
	Name                    string    `json:"name"`
	Domain                  string    `json:"domain"`
	Type                    string    `json:"type"` // self_hosted, saas, ssh, vnc, etc.
	SessionDuration         string    `json:"session_duration,omitempty"`
	AllowedIdPs             []string  `json:"allowed_idps,omitempty"`
	AutoRedirectToIdentity  bool      `json:"auto_redirect_to_identity,omitempty"`
	EnableBindingCookie     bool      `json:"enable_binding_cookie,omitempty"`
	HTTPOnlyCookieAttribute bool      `json:"http_only_cookie_attribute,omitempty"`
	LogoURL                 string    `json:"logo_url,omitempty"`
	CreatedAt               time.Time `json:"created_at,omitempty"`
	UpdatedAt               time.Time `json:"updated_at,omitempty"`
}

type AccessPolicy struct {
	ID         string       `json:"id"`
	Name       string       `json:"name"`
	Precedence int          `json:"precedence"`
	Decision   string       `json:"decision"` // allow, deny, non_identity, bypass
	Include    []PolicyRule `json:"include"`
	Exclude    []PolicyRule `json:"exclude,omitempty"`
	Require    []PolicyRule `json:"require,omitempty"`
	CreatedAt  time.Time    `json:"created_at,omitempty"`
	UpdatedAt  time.Time    `json:"updated_at,omitempty"`
}

type CloudflareClient interface {
	RunAPI(method, endpoint, body string) (string, error)
	RunAPIWithContext(ctx context.Context, method, endpoint, body string) (string, error)
	RunCloudflared(args ...string) (string, error)
	RunCloudflaredWithContext(ctx context.Context, args ...string) (string, error)
	GetAccountID() string
}

type Command struct {
	Tool     string   `json:"tool"` // cloudflared, api
	Args     []string `json:"args,omitempty"`
	Method   string   `json:"method,omitempty"`
	Endpoint string   `json:"endpoint,omitempty"`
	Body     string   `json:"body,omitempty"`
	Reason   string   `json:"reason"`
}

type Connection struct {
	ID            string    `json:"id"`
	ColoName      string    `json:"colo_name"`
	IsActive      bool      `json:"is_active"`
	ClientID      string    `json:"client_id,omitempty"`
	ClientVersion string    `json:"client_version,omitempty"`
	OpenedAt      time.Time `json:"opened_at,omitempty"`
	OriginIP      string    `json:"origin_ip,omitempty"`
}

type CountryRule struct {
	CountryCode string `json:"country_code"`
}

type EmailDomainRule struct {
	Domain string `json:"domain"`
}

type EmailRule struct {
	Email string `json:"email"`
}

type EveryoneRule struct{}

type GroupRule struct {
	ID string `json:"id"`
}

type IPRangesRule struct {
	IP string `json:"ip"`
}

type IngressRule struct {
	Hostname      string         `json:"hostname,omitempty"`
	Path          string         `json:"path,omitempty"`
	Service       string         `json:"service"`
	OriginRequest *OriginRequest `json:"originRequest,omitempty"`
}

type OriginRequest struct {
	ConnectTimeout         int    `json:"connectTimeout,omitempty"`
	TLSTimeout             int    `json:"tlsTimeout,omitempty"`
	TCPKeepAlive           int    `json:"tcpKeepAlive,omitempty"`
	NoHappyEyeballs        bool   `json:"noHappyEyeballs,omitempty"`
	KeepAliveTimeout       int    `json:"keepAliveTimeout,omitempty"`
	HTTPHostHeader         string `json:"httpHostHeader,omitempty"`
	OriginServerName       string `json:"originServerName,omitempty"`
	NoTLSVerify            bool   `json:"noTLSVerify,omitempty"`
	DisableChunkedEncoding bool   `json:"disableChunkedEncoding,omitempty"`
	ProxyAddress           string `json:"proxyAddress,omitempty"`
	ProxyPort              int    `json:"proxyPort,omitempty"`
	ProxyType              string `json:"proxyType,omitempty"`
}

type Plan struct {
	Summary  string    `json:"summary"`
	Commands []Command `json:"commands"`
}

type PolicyRule struct {
	Email        *EmailRule        `json:"email,omitempty"`
	EmailDomain  *EmailDomainRule  `json:"email_domain,omitempty"`
	Everyone     *EveryoneRule     `json:"everyone,omitempty"`
	IPRanges     *IPRangesRule     `json:"ip,omitempty"`
	Country      *CountryRule      `json:"geo,omitempty"`
	Group        *GroupRule        `json:"group,omitempty"`
	ServiceToken *ServiceTokenRule `json:"service_token,omitempty"`
}

type QueryAnalysis struct {
	IsReadOnly   bool
	Operation    string // list, get, create, delete, route
	ResourceType string // tunnel, access_app, access_policy
	ResourceName string
}

type QueryOptions struct {
	AccountID string `json:"account_id,omitempty"`
	ZoneID    string `json:"zone_id,omitempty"`
}

type Response struct {
	Type    ResponseType `json:"type"`
	Result  string       `json:"result,omitempty"`
	Plan    *Plan        `json:"plan,omitempty"`
	Error   error        `json:"error,omitempty"`
	Message string       `json:"message,omitempty"`
}

type ResponseType string

type ServiceTokenRule struct {
	TokenID string `json:"token_id"`
}

type SubAgent struct {
	// contains filtered or unexported fields
}

type Tunnel struct {
	ID              string       `json:"id"`
	Name            string       `json:"name"`
	Status          string       `json:"status"`
	CreatedAt       time.Time    `json:"created_at,omitempty"`
	DeletedAt       *time.Time   `json:"deleted_at,omitempty"`
	Connections     []Connection `json:"connections,omitempty"`
	ConnsActiveAt   *time.Time   `json:"conns_active_at,omitempty"`
	ConnsInactiveAt *time.Time   `json:"conns_inactive_at,omitempty"`
}

type TunnelConfig struct {
	Ingress       []IngressRule  `json:"ingress"`
	OriginRequest *OriginRequest `json:"originRequest,omitempty"`
	WARPRouting   *WARPRouting   `json:"warp-routing,omitempty"`
}

type TunnelConfiguration struct {
	TunnelID string       `json:"tunnel_id"`
	Config   TunnelConfig `json:"config"`
}

type WARPRouting struct {
	Enabled bool `json:"enabled"`
}