models

type Account struct {
	Name         string        `json:"name,omitempty"`
	Email        string        `json:"email,omitempty"`
	UserID       string        `json:"user_id,omitempty"`
	SshUsername  string        `json:"user_name,omitempty"`
	SshKey       string        `json:"sshkey,omitempty"`
	Organization *Organization `json:"primary_organization"`
}

type AddSocketToPolicyRequest struct {
	Actions []PolicyActionUpdateRequest `json:"actions" binding:"required"`
}

type ClientResource struct {
	IPAddress                      string   `json:"ip_address,omitempty"`
	SocketType                     string   `json:"socket_type,omitempty"`
	SocketName                     string   `json:"socket_name,omitempty"`
	Description                    string   `json:"description,omitempty"`
	SocketPorts                    []int    `json:"socket_ports,omitempty"`
	Domains                        []string `json:"domains,omitempty"`
	DatabaseType                   string   `json:"database_type,omitempty"`
	SshType                        string   `json:"ssh_type,omitempty"`
	ConnectorAuthenticationEnabled bool     `json:"connector_authentication_enabled,omitempty"`
	EndToEndEncryptionEnabled      bool     `json:"end_to_end_encryption_enabled,omitempty"`
	HasUpstreamUsername            bool     `json:"has_upstream_username,omitempty"`
}

type ClientResources struct {
	RefreshHint        int              `json:"refresh_hint,omitempty"`
	Resources          []ClientResource `json:"resources,omitempty"`
	DefaultIPAddresses []string         `json:"ip_addresses,omitempty"`
}

type Condition struct {
	Who   ConditionWho   `json:"who,omitempty" mapstructure:"who"`
	Where ConditionWhere `json:"where,omitempty" mapstructure:"where"`
	When  ConditionWhen  `json:"when,omitempty" mapstructure:"when"`
}

type ConditionWhat struct{}

type ConditionWhen struct {
	After           string `json:"after,omitempty" mapstructure:"after"`
	Before          string `json:"before,omitempty" mapstructure:"before"`
	TimeOfDayAfter  string `json:"time_of_day_after,omitempty" mapstructure:"time_of_day_after"`
	TimeOfDayBefore string `json:"time_of_day_before,omitempty" mapstructure:"time_of_day_before"`
}

type ConditionWhere struct {
	AllowedIP  []string `json:"allowed_ip,omitempty" mapstructure:"allowed_ip"`
	Country    []string `json:"country,omitempty" mapstructure:"country"`
	CountryNot []string `json:"country_not,omitempty" mapstructure:"country_not"`
}

type ConditionWho struct {
	Email          []string `json:"email,omitempty" mapstructure:"email"`
	Domain         []string `json:"domain,omitempty" mapstructure:"domain"`
	Group          []string `json:"group,omitempty" mapstructure:"group"`
	ServiceAccount []string `json:"service_account,omitempty" mapstructure:"service_account"`
}

type Connector struct {
	Name                           string                                  `json:"name"`
	ConnectorID                    string                                  `json:"connector_id"`
	BuiltInSshServiceEnabled       bool                                    `json:"built_in_ssh_service_enabled"`
	BuiltInSshServiceConfiguration *service.BuiltInSshServiceConfiguration `json:"built_in_ssh_service_configuration,omitempty"`
	Description                    string                                  `json:"description"`
	ActiveTokens                   int                                     `json:"active_tokens"`
	Metadata                       map[string]interface{}                  `json:"metadata"`
	CreatedAt                      *time.Time                              `json:"created_at"`
	UpdatedAt                      *time.Time                              `json:"updated_at"`
	LastSeenAt                     *time.Time                              `json:"last_seen_at"`
}

type ConnectorData struct {
	Name           string
	Connector      string
	ProviderEnv    string
	ProviderType   string
	ProviderRegion string
	Type           string
	Port           int
	TargetHostname string
	PolicyGroup    string
	Ec2Tag         string
	InstanceId     string
	PluginName     string
	ManagedBy      string
}

type ConnectorList struct {
	List []Connector `json:"list"`
}

type ConnectorLocalData struct {
	UpstreamUsername               string
	UpstreamPassword               string
	UpstreamCertFile               string
	UpstreamKeyFile                string
	UpstreamCACertFile             string
	UpstreamCertBlock              []byte
	UpstreamKeyBlock               []byte
	UpstreamCACertBlock            []byte
	UpstreamTLS                    *bool
	UpstreamIdentifyFile           string
	UpstreamIdentityPrivateKey     []byte
	SqlAuthProxy                   bool
	RdsIAMAuth                     bool
	AWSRegion                      string
	CloudSQLConnector              bool
	CloudSQLIAMAuth                bool
	CloudSQLInstance               string
	GoogleCredentialsFile          string
	GoogleCredentialsJSON          []byte
	SSHServer                      bool
	AWSECSCluster                  string
	AWSECSServices                 []string
	AWSECSTasks                    []string
	AWSECSContainers               []string
	AwsEC2InstanceId               string
	AWSEC2InstanceConnectEnabled   bool
	AwsCredentials                 *common.AwsCredentials
	IsDockerExec                   bool
	DockerContainerNameAllowlist   []string
	IsKubectlExec                  bool
	K8sNamespaceAllowlist          []string
	K8sNamespaceSelectorsAllowlist map[string]map[string][]string
	K8sMasterUrl                   string
	K8sKubeconfigPath              string
	IsAwsEks                       bool
	AwsEksCluster                  string
	AzureAD                        bool
	Kerberos                       bool

	// vpn sockets
	DHCPPoolSubnet   string
	AdvertisedRoutes []string
}

type ConnectorPlugin struct {
	ID            string                        `json:"id"`
	Enabled       bool                          `json:"enabled"`
	PluginType    string                        `json:"plugin_type"`
	Configuration connector.PluginConfiguration `json:"configuration"`
}

type ConnectorPluginRequest struct {
	ConnectorId   string                         `json:"connector_id"`
	Enabled       bool                           `json:"enabled"`
	PluginType    string                         `json:"plugin_type"`
	Configuration *connector.PluginConfiguration `json:"configuration"`
}

type ConnectorToken struct {
	ConnectorName string `json:"connector_name,omitempty"`
	Name          string `json:"name,omitempty"`
	ExpiresAt     string `json:"expires_at,omitempty"`
	Token         string `json:"token,omitempty"`
}

type ConnectorTokenRequest struct {
	ConnectorId string `json:"connector_id,omitempty"`
	Name        string `json:"name,omitempty"`
	ExpiresAt   int64  `json:"expires_at,omitempty"`
}

type ConnectorWithInstallTokenRequest struct {
	Connector
	InstallToken string `json:"install_token"`
}

type ConnectorWithInstallTokenResponse struct {
	Connector      Connector      `json:"connector"`
	ConnectorToken ConnectorToken `json:"connector_token"`
}

type CreatePolicyRequest struct {
	Name        string     `json:"name" binding:"required"`
	Description string     `json:"description"`
	PolicyData  PolicyData `json:"policy_data" binding:"required"`
	Orgwide     bool       `json:"org_wide"`
	Version     string     `json:"version"`
}

type Credentials struct {
	AccessToken string `json:"access_token"`
	ExpiresIn   int    `json:"expires_in"`
	TokenType   string `json:"token_type"`
}

type DatabasePermission struct {
	Database          string    `json:"database"`
	AllowedQueryTypes *[]string `json:"allowed_query_types,omitempty"`
}

type DatabasePermissions struct {
	AllowedDatabases          *[]DatabasePermission `json:"allowed_databases,omitempty"`
	MaxSessionDurationSeconds *int                  `json:"max_session_duration_seconds,omitempty"`
}

type Domain struct {
	Domain  string `json:"domain"`
	Default bool   `json:"default"`
}

type EvaluatePolicyRequest struct {
	ClientIP   string `json:"client_ip"`
	UserEmail  string `json:"user_email"`
	SessionKey string `json:"session_key"`
}

type EvaluatePolicyResponse struct {
	Permissions map[string][]any    `json:"permissions,omitempty"`
	Actions     map[string][]string `json:"allowed_actions,omitempty"`
	Info        map[string][]string `json:"info"`
}

type HTTPPermissions struct{}

type KubectlExecNamespace struct {
	Namespace   string             `json:"namespace"`
	PodSelector *map[string]string `json:"pod_selector,omitempty"`
}

type LoginForm struct {
	Email    string `json:"email"`
	Password string `json:"password"`
}

type LoginRefresh struct {
}

type LoginRequest struct {
	Email    string `json:"email"`
	Password string `json:"password"`
}

type LoginResponse struct {
	Token string `json:"token"`
	MFA   bool   `json:"require_mfa"`
}

type Metadata struct {
	Principal      string // e.g. "token:${token_uuid}" OR "user:${user_uuid}"
	ProviderEnv    string // e.g. "prod, or "dev"
	ProviderRegion string // e.g. "us-east-1
	ProviderType   string // e.g. "aws
}

type MfaForm struct {
	Code string `json:"code"`
}

type Notification struct {
	Name            string   `json:"name"`
	Type            string   `json:"type"`
	Enabled         bool     `json:"enabled"`
	Events          []string `json:"events"`
	WebhookURL      string   `json:"webhook_url,omitempty"`
	EmailRecipients []string `json:"email_recipients,omitempty"`
}

type NotificationUpdate struct {
	Enabled         *bool    `json:"enabled,omitempty"`
	Events          []string `json:"events,omitempty"`
	WebhookURL      *string  `json:"webhook_url,omitempty"`
	EmailRecipients []string `json:"email_recipients,omitempty"`
}

type Organization struct {
	ID           string            `json:"id"`
	Name         string            `json:"name"`
	Subdomain    string            `json:"subdomain"`
	Certificates map[string]string `json:"certificate"`
}

type Permissions struct {
	Database *DatabasePermissions `json:"database,omitempty"`
	SSH      *SSHPermissions      `json:"ssh,omitempty"`
	HTTP     *HTTPPermissions     `json:"http,omitempty"`
	TLS      *TLSPermissions      `json:"tls,omitempty"`
	VNC      *VNCPermissions      `json:"vnc,omitempty"`
	RDP      *RDPPermissions      `json:"rdp,omitempty"`
	VPN      *VPNPermissions      `json:"vpn,omitempty"`
}

type Policy struct {
	ID          string     `json:"id"`
	Name        string     `json:"name"`
	Description string     `json:"description"`
	PolicyData  PolicyData `json:"policy_data"`
	SocketIDs   []string   `json:"socket_ids"`
	OrgID       string     `json:"org_id"`
	OrgWide     bool       `json:"org_wide"`
	CreatedAt   time.Time  `json:"created_at"`
	Version     string     `json:"version"`
}

type PolicyActionUpdateRequest struct {
	Action string `json:"action" binding:"required"`
	ID     string `json:"id" binding:"required"`
}

type PolicyData struct {
	Action      []string       `json:"action,omitempty" mapstructure:"action"`
	Permissions map[string]any `json:"permissions,omitempty" mapstructure:"permissions"`
	Condition   Condition      `json:"condition" mapstructure:"condition"`
}

type PolicyTest struct {
	Email     string `json:"email" binding:"required"`
	IPAddress string `json:"ip_address" binding:"required"`
	Time      string `json:"time" binding:"required"`
}

type PolicyTestRespone struct {
	Actions map[string][]string `json:"Actions,omitempty"`
	Info    struct {
		Allowed []string `json:"allowed,omitempty"`
		Failed  []string `json:"failed,omitempty"`
	} `json:"Info,omitempty"`
}

type RDPPermissions struct{}

type RegisterForm struct {
	Name     string `json:"name"`
	Email    string `json:"email"`
	Password string `json:"password"`
	Sshkey   string `json:"sshkey"`
}

type ResultValue string

type SSHDockerExecPermission struct {
	AllowedContainers *[]string `json:"allowed_containers,omitempty"`
}

type SSHExecPermission struct {
	Commands *[]string `json:"commands,omitempty"`
}

type SSHKubectlExecPermission struct {
	AllowedNamespaces *[]KubectlExecNamespace `json:"allowed_namespaces,omitempty"`
}

type SSHPermissions struct {
	Shell                     *SSHShellPermission         `json:"shell,omitempty"`
	Exec                      *SSHExecPermission          `json:"exec,omitempty"`
	SFTP                      *SSHSFTPPermission          `json:"sftp,omitempty"`
	TCPForwarding             *SSHTCPForwardingPermission `json:"tcp_forwarding,omitempty"`
	KubectlExec               *SSHKubectlExecPermission   `json:"kubectl_exec,omitempty"`
	DockerExec                *SSHDockerExecPermission    `json:"docker_exec,omitempty"`
	MaxSessionDurationSeconds *int                        `json:"max_session_duration_seconds,omitempty"`
	AllowedUsernames          *[]string                   `json:"allowed_usernames,omitempty"`
}

type SSHSFTPPermission struct{}

type SSHShellPermission struct{}

type SSHTCPForwardingPermission struct {
	AllowedConnections *[]SSHTcpForwardingConnection `json:"allowed_connections,omitempty"`
}

type SSHTcpForwardingConnection struct {
	DestinationAddress *string `json:"destination_address,omitempty"`
	DestinationPort    *string `json:"destination_port,omitempty"`
}

type SessionTokenForm struct {
	Token string `json:"token"`
	MFA   bool   `json:"require_mfa"`
	State string `json:"state"`
}

type SessionUpdate struct {
	SessionKey string
	Socket     *Socket
	UserData   string
}

type SignSshOrgCertificateRequest struct {
	SocketID   string `json:"socket_id"`
	SessionKey string `json:"session_key"`
	UserEmail  string `json:"user_email"`
	Ticket     string `json:"ticket"`
	PublicKey  string `json:"public_key"`
}

type SignSshOrgCertificateResponse struct {
	Certificate string `json:"certificate"`
}

type Socket struct {
	Tunnels                        []Tunnel          `json:"tunnels,omitempty"`
	Username                       string            `json:"user_name,omitempty"`
	SocketID                       string            `json:"socket_id,omitempty"`
	SocketTcpPorts                 []int             `json:"socket_tcp_ports,omitempty"`
	Dnsname                        string            `json:"dnsname,omitempty"`
	Name                           string            `json:"name,omitempty"`
	Description                    string            `json:"description,omitempty"`
	SocketType                     string            `json:"socket_type,omitempty"`
	AllowedEmailAddresses          []string          `json:"cloud_authentication_email_allowed_addressses,omitempty"`
	AllowedEmailDomains            []string          `json:"cloud_authentication_email_allowed_domains,omitempty"`
	SSHCa                          string            `json:"ssh_ca,omitempty"`
	UpstreamUsername               *string           `json:"upstream_username,omitempty"`
	UpstreamPassword               *string           `json:"upstream_password,omitempty"`
	UpstreamCert                   *string           `json:"upstream_cert,omitempty"`
	UpstreamKey                    *string           `json:"upstream_key,omitempty"`
	UpstreamCa                     *string           `json:"upstream_ca,omitempty"`
	UpstreamHttpHostname           *string           `json:"upstream_http_hostname,omitempty"`
	UpstreamType                   string            `json:"upstream_type,omitempty"`
	CloudAuthEnabled               bool              `json:"cloud_authentication_enabled,omitempty"`
	ConnectorAuthenticationEnabled bool              `json:"connector_authentication_enabled,omitempty"`
	EndToEndEncryptionEnabled      bool              `json:"end_to_end_encryption_enabled,omitempty"`
	RecordingEnabled               bool              `json:"recording_enabled,omitempty"`
	Tags                           map[string]string `json:"tags,omitempty"`
	CustomDomains                  []string          `json:"custom_domains,omitempty"`
	PolicyNames                    []string          `json:"policy_names,omitempty"`
	Policies                       []Policy          `json:"policies,omitempty"`
	OrgCustomDomain                string            `json:"org_custom_domain,omitempty"`

	TargetHostname     string              `json:"-"`
	TargetPort         int                 `json:"-"`
	PolicyGroup        string              `json:"-"`
	Ec2Tag             string              `json:"-"`
	InstanceId         string              `json:"-"`
	PluginName         string              `json:"-"`
	ManagedBy          string              `json:"-"`
	ConnectorData      *ConnectorData      `json:"-"`
	ConnectorLocalData *ConnectorLocalData `json:"-"`

	IsBorder0Certificate bool `json:"-"`

	UpstreamCertFile      string `json:"-"`
	UpstreamKeyFile       string `json:"-"`
	UpstreamCACertFile    string `json:"-"`
	UpstreamIdentifyFile  string `json:"-"`
	UpstreamTLS           *bool  `json:"-"`
	RdsIAMAuth            bool   `json:"-"`
	AWSRegion             string `json:"-"`
	CloudSQLConnector     bool   `json:"-"`
	CloudSQLIAMAuth       bool   `json:"-"`
	CloudSQLInstance      string `json:"-"`
	GoogleCredentialsFile string `json:"-"`
	SSHServer             bool   `json:"-"`
}

type SshCsr struct {
	SSHPublicKey  string `json:"ssh_public_key"`
	SSHSignedCert string `json:"signed_ssh_cert,omitempty"`
	HostKey       string `json:"host_key,omitempty"`
}

type SwitchOrgRequest struct {
	OrgName string `json:"org_name"`
}

type SwitchOrgResponse struct {
	Token   string `json:"token"`
	OrgName string `json:"org_name"`
	OrgID   string `json:"org_id"`
}

type TLSPermissions struct{}

type Token struct {
	ExpiresAt int64  `json:"expires_at,omitempty"`
	Name      string `json:"name,omitempty"`
	Role      string `json:"role,omitempty"`
	Token     string `json:"token,omitempty"`
}

type TokenForm struct {
	Token string `json:"token"`
	MFA   bool   `json:"require_mfa"`
}

type Tunnel struct {
	TunnelID     string `json:"tunnel_id,omitempty"`
	LocalPort    int    `json:"local_port,omitempty"`
	TunnelServer string `json:"tunnel_server,omitempty"`
}

type UpdatePolicyRequest struct {
	Name        *string     `json:"name"`
	Description *string     `json:"description"`
	PolicyData  *PolicyData `json:"policy_data" binding:"required"`
}

type UpdateSessionRequest struct {
	UserData   string `json:"user_data"`
	SessionKey string `json:"session_key"`
}

type VNCPermissions struct{}

type VPNPermissions struct{}