models

type AgentConfig struct {
	CheckersDir string          `json:"checkers_dir"` // e.g., /etc/serviceradar/checkers
	ListenAddr  string          `json:"listen_addr"`  // e.g., :50051
	ServiceName string          `json:"service_name"` // e.g., "agent"
	Security    *SecurityConfig `json:"security"`
	KVAddress   string          `json:"kv_address,omitempty"` // Optional KV store address
}

type AgentDefinition struct {
	Address string  `json:"address"` // gRPC address of the agent
	Checks  []Check `json:"checks"`  // List of checks to run on this agent
}

type AuthConfig struct {
	// Secret key used for signing JWT tokens (SENSITIVE: never store in DB or display in UI)
	JWTSecret string `json:"jwt_secret" example:"very-secret-key-do-not-share" sensitive:"true"`
	// Optional JWT signing algorithm. Defaults to HS256. Set to RS256 to enable RSA signing.
	JWTAlgorithm string `json:"jwt_algorithm,omitempty" example:"RS256"`
	// PEM-encoded RSA private key used for RS256 signing (SENSITIVE)
	JWTPrivateKeyPEM string `json:"jwt_private_key_pem,omitempty" sensitive:"true"`
	// PEM-encoded RSA public key (optional; derived from private key if omitted)
	JWTPublicKeyPEM string `json:"jwt_public_key_pem,omitempty"`
	// Key ID placed in JWT header as `kid` for JWKS lookup
	JWTKeyID string `json:"jwt_key_id,omitempty" example:"main-2025-09"`
	// How long JWT tokens are valid
	JWTExpiration time.Duration `json:"jwt_expiration" example:"24h"`
	// OAuth callback URL
	CallbackURL string `json:"callback_url" example:"https://api.example.com/auth/callback"`
	// Map of local usernames to password hashes (SENSITIVE: never store in DB or display in UI)
	LocalUsers map[string]string `json:"local_users" sensitive:"true"`
	// Configuration for SSO providers like Google, GitHub, etc. (SENSITIVE: may contain secrets)
	SSOProviders map[string]SSOConfig `json:"sso_providers" sensitive:"true"`
	// RBAC configuration for users
	RBAC RBACConfig `json:"rbac"`
}

type CNPGDatabase struct {
	Host               string            `json:"host"`
	Port               int               `json:"port"`
	Database           string            `json:"database"`
	Username           string            `json:"username"`
	Password           string            `json:"password" sensitive:"true"`
	ApplicationName    string            `json:"application_name,omitempty"`
	SSLMode            string            `json:"ssl_mode,omitempty"`
	CertDir            string            `json:"cert_dir,omitempty"`
	TLS                *TLSConfig        `json:"tls,omitempty"`
	MaxConnections     int32             `json:"max_connections,omitempty"`
	MinConnections     int32             `json:"min_connections,omitempty"`
	MaxConnLifetime    Duration          `json:"max_conn_lifetime,omitempty"`
	HealthCheckPeriod  Duration          `json:"health_check_period,omitempty"`
	StatementTimeout   Duration          `json:"statement_timeout,omitempty"`
	ExtraRuntimeParams map[string]string `json:"runtime_params,omitempty"`
}

type CORSConfig struct {
	// List of origins allowed to access the API
	AllowedOrigins []string `json:"allowed_origins" example:"['*','https://example.com']"`
	// Whether to allow credentials (cookies, authorization headers) in CORS requests
	AllowCredentials bool `json:"allow_credentials" example:"true"`
}

type CPUClusterMetric struct {
	// Cluster name (e.g., ECPU, PCPU)
	Name string `json:"name" example:"ECPU"`
	// Instantaneous frequency in Hz, if available.
	FrequencyHz float64 `json:"frequency_hz" example:"1700000000"`
	// When this metric was collected
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Host identifier for the agent that collected this metric
	HostID string `json:"host_id,omitempty" example:"server-east-1"`
	// Host IP address for the agent that collected this metric
	HostIP string `json:"host_ip,omitempty" example:"192.168.1.100"`
	// ServiceRadar agent identifier
	AgentID string `json:"agent_id,omitempty" example:"agent-1234"`
}

type CPUMetric struct {
	// ID number of the CPU core
	CoreID int32 `json:"core_id" example:"0"`
	// Platform label for the CPU core (e.g., ECPU0, PCPU3)
	Label string `json:"label,omitempty" example:"ECPU0"`
	// Cluster identifier this core belongs to (e.g., ECPU, PCPU)
	Cluster string `json:"cluster,omitempty" example:"ECPU"`
	// Usage percentage (0-100)
	UsagePercent float64 `json:"usage_percent" example:"45.2"`
	// Instantaneous frequency in Hz, if available.
	FrequencyHz float64 `json:"frequency_hz" example:"2400000000"`
	// When this metric was collected
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Host identifier for the agent that collected this metric
	HostID string `json:"host_id,omitempty" example:"server-east-1"`
	// Host IP address for the agent that collected this metric
	HostIP string `json:"host_ip,omitempty" example:"192.168.1.100"`
	// ServiceRadar agent identifier
	AgentID string `json:"agent_id,omitempty" example:"agent-1234"`
}

type Check struct {
	ServiceType string          `json:"service_type"` // e.g., "grpc", "process", "port"
	ServiceName string          `json:"service_name"`
	Details     string          `json:"details,omitempty"` // Service-specific details
	Port        int32           `json:"port,omitempty"`    // For port checkers
	Config      json.RawMessage `json:"config,omitempty"`  // Checker-specific configuration
}

type CloudConfig struct {
	ListenAddr     string          `json:"listen_addr"`
	GrpcAddr       string          `json:"grpc_addr,omitempty"`
	DBPath         string          `json:"db_path"`
	AlertThreshold Duration        `json:"alert_threshold"`
	KnownGateways  []string        `json:"known_gateways"`
	Webhooks       []WebhookConfig `json:"webhooks,omitempty"`
}

type CollectorCapability struct {
	DeviceID     string    `json:"device_id"`
	Capabilities []string  `json:"capabilities"`
	AgentID      string    `json:"agent_id,omitempty"`
	GatewayID    string    `json:"gateway_id,omitempty"`
	LastSeen     time.Time `json:"last_seen"`
	ServiceName  string    `json:"service_name,omitempty"`
}

type CollectorDownloadResult struct {
	Package         *CollectorPackage `json:"package"`
	NatsCredsFile   string            `json:"nats_creds_file"`  // .creds file content
	CollectorConfig string            `json:"collector_config"` // Collector-specific config
	MTLSBundle      []byte            `json:"mtls_bundle"`      // mTLS certificates from deployment CA
	InstallScript   string            `json:"install_script"`   // Installation instructions
}

type CollectorPackage struct {
	PackageID              string                 `json:"package_id"`
	CollectorType          CollectorType          `json:"collector_type"`
	UserName               string                 `json:"user_name"`
	Site                   string                 `json:"site,omitempty"`
	Hostname               string                 `json:"hostname,omitempty"`
	Status                 CollectorPackageStatus `json:"status"`
	NatsCredentialID       string                 `json:"nats_credential_id,omitempty"`
	DownloadTokenHash      string                 `json:"download_token_hash,omitempty"`
	DownloadTokenExpiresAt time.Time              `json:"download_token_expires_at,omitempty"`
	DownloadedAt           *time.Time             `json:"downloaded_at,omitempty"`
	DownloadedByIP         string                 `json:"downloaded_by_ip,omitempty"`
	InstalledAt            *time.Time             `json:"installed_at,omitempty"`
	RevokedAt              *time.Time             `json:"revoked_at,omitempty"`
	RevokeReason           string                 `json:"revoke_reason,omitempty"`
	ErrorMessage           string                 `json:"error_message,omitempty"`
	ConfigOverrides        map[string]interface{} `json:"config_overrides,omitempty"`
	CreatedAt              time.Time              `json:"created_at"`
	UpdatedAt              time.Time              `json:"updated_at"`
}

type CollectorPackageStatus string

type CollectorType string

type ColumnDefinition struct {
	Key       ColumnKey
	Name      string
	Type      string
	Codec     string
	Alias     string
	Default   string
	Mandatory bool
}

type ColumnKey int

type Config struct {
	Networks      []string       `json:"networks"`
	Ports         []int          `json:"ports"`
	SweepModes    []SweepMode    `json:"sweep_modes"`
	DeviceTargets []DeviceTarget `json:"device_targets,omitempty"` // Per-device sweep configuration
	Interval      time.Duration  `json:"interval"`
	Concurrency   int            `json:"concurrency"`
	Timeout       time.Duration  `json:"timeout"`
	ICMPCount     int            `json:"icmp_count"`
	MaxIdle       int            `json:"max_idle"`
	MaxLifetime   time.Duration  `json:"max_lifetime"`
	IdleTimeout   time.Duration  `json:"idle_timeout"`
	// Agent/Partition information for proper device identification
	AgentID   string `json:"agent_id,omitempty"`
	GatewayID string `json:"gateway_id,omitempty"`
	Partition string `json:"partition,omitempty"`
	// Execution tracking for sweep results
	SweepGroupID string `json:"sweep_group_id,omitempty"` // Sweep group UUID for result tracking
	ConfigHash   string `json:"config_hash,omitempty"`    // Hash of config for change detection
	ICMPSettings struct {
		RateLimit int // Packets per second
		Timeout   time.Duration
		MaxBatch  int
	}
	TCPSettings struct {
		Concurrency        int
		Timeout            time.Duration
		MaxBatch           int
		RouteDiscoveryHost string `json:"route_discovery_host,omitempty"` // Target for local IP discovery (default: "8.8.8.8:80")

		// Ring buffer tuning for SYN scanner memory vs performance tradeoffs
		// These values will be clamped to safe limits automatically
		RingBlockSize  int `json:"ring_block_size,omitempty"`  // Block size in bytes (default: 1MB, max: 8MB)
		RingBlockCount int `json:"ring_block_count,omitempty"` // Number of blocks (default: 8, max: 32, total max: 64MB)

		// Network interface selection for multi-homed hosts
		Interface string `json:"interface,omitempty"` // Network interface (e.g., "eth0", "wlan0") - auto-detected if empty

		// Advanced NAT/firewall compatibility options
		SuppressRSTReply bool `json:"suppress_rst_reply,omitempty"` // Suppress RST packet generation (optional)

		// Global ring buffer memory cap (in MB) to be distributed across all CPU cores
		// If 0, defaults to 64MB total. This prevents excessive memory usage on high-CPU systems.
		GlobalRingMemoryMB int `json:"global_ring_memory_mb,omitempty"`

		// Ring readers and poll timeout tuning
		RingReaders       int `json:"ring_readers,omitempty"`         // number of AF_PACKET ring readers
		RingPollTimeoutMs int `json:"ring_poll_timeout_ms,omitempty"` // poll() timeout per reader in ms
	}
	EnableHighPerformanceICMP bool `json:"high_perf_icmp,omitempty"`
	ICMPRateLimit             int  `json:"icmp_rate_limit,omitempty"`
}

type CoreServiceConfig struct {
	ListenAddr      string            `json:"listen_addr"`
	GrpcAddr        string            `json:"grpc_addr"`
	DBPath          string            `json:"db_path"` // Keep for compatibility, can be optional
	AlertThreshold  time.Duration     `json:"alert_threshold"`
	GatewayPatterns []string          `json:"gateway_patterns"`
	KnownGateways   []string          `json:"known_gateways,omitempty"`
	Metrics         Metrics           `json:"metrics"`
	SNMP            SNMPConfig        `json:"snmp"`
	Security        *SecurityConfig   `json:"security"`
	KVSecurity      *SecurityConfig   `json:"kv_security,omitempty"`
	Auth            *AuthConfig       `json:"auth,omitempty"`
	CORS            CORSConfig        `json:"cors,omitempty"`
	CNPG            *CNPGDatabase     `json:"cnpg"`
	WriteBuffer     WriteBufferConfig `json:"write_buffer,omitempty"`
	NATS            *NATSConfig       `json:"nats,omitempty"`
	Events          *EventsConfig     `json:"events,omitempty"`
	Logging         *logger.Config    `json:"logging,omitempty"`
	MCP             *MCPConfigRef     `json:"mcp,omitempty"`
	SRQL            *SRQLConfig       `json:"srql,omitempty"`
	// KV endpoints for admin config operations (hub/leaf mappings)
	KVEndpoints    []KVEndpoint                  `json:"kv_endpoints,omitempty"`
	SpireAdmin     *SpireAdminConfig             `json:"spire_admin,omitempty"`
	EdgeOnboarding *EdgeOnboardingConfig         `json:"edge_onboarding,omitempty"`
	Features       FeatureFlags                  `json:"features,omitempty"`
	Reaper         *ReaperConfig                 `json:"reaper,omitempty"`
	Identity       *IdentityReconciliationConfig `json:"identity_reconciliation,omitempty"`
}

type Device struct {
	DeviceID         string                 `json:"device_id"`
	AgentID          string                 `json:"agent_id"`
	GatewayID        string                 `json:"gateway_id"`
	DiscoverySources []string               `json:"discovery_sources"`
	IP               string                 `json:"ip"`
	MAC              string                 `json:"mac,omitempty"`
	Hostname         string                 `json:"hostname,omitempty"`
	FirstSeen        time.Time              `json:"first_seen"`
	LastSeen         time.Time              `json:"last_seen"`
	IsAvailable      bool                   `json:"is_available"`
	ServiceType      string                 `json:"service_type,omitempty"`
	ServiceStatus    string                 `json:"service_status,omitempty"`
	LastHeartbeat    *time.Time             `json:"last_heartbeat,omitempty"`
	DeviceType       string                 `json:"device_type,omitempty"`
	OSInfo           string                 `json:"os_info,omitempty"`
	VersionInfo      string                 `json:"version_info,omitempty"`
	Metadata         map[string]interface{} `json:"metadata,omitempty"`
}

type DeviceCapabilityEvent struct {
	EventID       string         `json:"event_id"`
	DeviceID      string         `json:"device_id"`
	ServiceID     string         `json:"service_id,omitempty"`
	ServiceType   string         `json:"service_type,omitempty"`
	Capability    string         `json:"capability"`
	State         string         `json:"state,omitempty"`
	Enabled       bool           `json:"enabled"`
	LastChecked   time.Time      `json:"last_checked"`
	LastSuccess   *time.Time     `json:"last_success,omitempty"`
	LastFailure   *time.Time     `json:"last_failure,omitempty"`
	FailureReason string         `json:"failure_reason,omitempty"`
	Metadata      map[string]any `json:"metadata,omitempty"`
	RecordedBy    string         `json:"recorded_by,omitempty"`
}

type DeviceCapabilitySnapshot struct {
	DeviceID      string         `json:"device_id"`
	ServiceID     string         `json:"service_id,omitempty"`
	ServiceType   string         `json:"service_type,omitempty"`
	Capability    string         `json:"capability"`
	State         string         `json:"state,omitempty"`
	Enabled       bool           `json:"enabled"`
	LastChecked   time.Time      `json:"last_checked"`
	LastSuccess   *time.Time     `json:"last_success,omitempty"`
	LastFailure   *time.Time     `json:"last_failure,omitempty"`
	FailureReason string         `json:"failure_reason,omitempty"`
	Metadata      map[string]any `json:"metadata,omitempty"`
	RecordedBy    string         `json:"recorded_by,omitempty"`
}

type DeviceIdentifier struct {
	DeviceID   string            `json:"device_id"`
	IDType     string            `json:"id_type"`
	IDValue    string            `json:"id_value"`
	Partition  string            `json:"partition,omitempty"`
	Confidence string            `json:"confidence"`
	Source     string            `json:"source,omitempty"`
	FirstSeen  time.Time         `json:"first_seen"`
	LastSeen   time.Time         `json:"last_seen"`
	Verified   bool              `json:"verified,omitempty"`
	Metadata   map[string]string `json:"metadata,omitempty"`
}

type DeviceLifecycleEventData struct {
	DeviceID   string            `json:"device_id"`
	Partition  string            `json:"partition,omitempty"`
	Action     string            `json:"action"` // e.g. deleted, restored
	Actor      string            `json:"actor,omitempty"`
	Reason     string            `json:"reason,omitempty"`
	Timestamp  time.Time         `json:"timestamp"`
	Severity   string            `json:"severity,omitempty"`
	Level      int32             `json:"level,omitempty"`
	RemoteAddr string            `json:"remote_addr,omitempty"`
	Metadata   map[string]string `json:"metadata,omitempty"`
}

type DeviceStatsMeta struct {
	RawRecords                int `json:"raw_records"`
	ProcessedRecords          int `json:"processed_records"`
	SkippedNilRecords         int `json:"skipped_nil_records"`
	SkippedTombstonedRecords  int `json:"skipped_tombstoned_records"`
	SkippedServiceComponents  int `json:"skipped_service_components"`
	SkippedNonCanonical       int `json:"skipped_non_canonical_records"`
	InferredCanonicalFallback int `json:"inferred_canonical_records"`
	SkippedSweepOnlyRecords   int `json:"skipped_sweep_only_records"`
}

type DeviceStatsSnapshot struct {
	Timestamp             time.Time        `json:"timestamp"`
	TotalDevices          int              `json:"total_devices"`
	AvailableDevices      int              `json:"available_devices"`
	UnavailableDevices    int              `json:"unavailable_devices"`
	ActiveDevices         int              `json:"active_devices"`
	DevicesWithCollectors int              `json:"devices_with_collectors"`
	DevicesWithICMP       int              `json:"devices_with_icmp"`
	DevicesWithSNMP       int              `json:"devices_with_snmp"`
	DevicesWithSysmon     int              `json:"devices_with_sysmon"`
	Partitions            []PartitionStats `json:"partitions"`
}

type DeviceTarget struct {
	Network    string            `json:"network"`               // CIDR or IP address
	SweepModes []SweepMode       `json:"sweep_modes,omitempty"` // Specific sweep modes for this device
	QueryLabel string            `json:"query_label,omitempty"` // Source query label
	Source     string            `json:"source,omitempty"`      // Discovery source (armis, netbox, etc.)
	Metadata   map[string]string `json:"metadata,omitempty"`    // Additional metadata from discovery
}

type DeviceUpdate struct {
	DeviceID    string            `json:"device_id"`
	IP          string            `json:"ip"`
	Source      DiscoverySource   `json:"source"`
	AgentID     string            `json:"agent_id"`
	GatewayID   string            `json:"gateway_id"`
	Partition   string            `json:"partition,omitempty"`    // Optional partition for isolated deployments
	ServiceType *ServiceType      `json:"service_type,omitempty"` // Type of service component (gateway/agent/checker)
	ServiceID   string            `json:"service_id,omitempty"`   // ID of the service component
	Timestamp   time.Time         `json:"timestamp"`
	Hostname    *string           `json:"hostname,omitempty"`
	MAC         *string           `json:"mac,omitempty"`
	Metadata    map[string]string `json:"metadata,omitempty"`
	IsAvailable bool              `json:"is_available"`
	Confidence  int               `json:"confidence"`
}

type DictionaryConfig struct {
	Name       string   `json:"name"`       // e.g., "asn_dictionary"
	Source     string   `json:"source"`     // e.g., "/path/to/asn.csv"
	Keys       []string `json:"keys"`       // e.g., ["ip"]
	Attributes []string `json:"attributes"` // e.g., ["asn", "name"]
	Layout     string   `json:"layout"`     // e.g., "hashed"
}

type DiscoveredInterface struct {
	Timestamp     time.Time       `json:"timestamp"`
	AgentID       string          `json:"agent_id"`
	GatewayID     string          `json:"gateway_id"`
	DeviceIP      string          `json:"device_ip"`
	DeviceID      string          `json:"device_id"`
	IfIndex       int32           `json:"ifIndex"`
	IfName        string          `json:"ifName"`
	IfDescr       string          `json:"ifDescr"`
	IfAlias       string          `json:"ifAlias"`
	IfSpeed       uint64          `json:"ifSpeed"`
	IfPhysAddress string          `json:"ifPhysAddress"`
	IPAddresses   []string        `json:"ip_addresses"`
	IfAdminStatus int32           `json:"ifAdminStatus"`
	IfOperStatus  int32           `json:"ifOperStatus"`
	Metadata      json.RawMessage `json:"metadata"`
}

type DiscoverySource string

type DiscoverySourceInfo struct {
	Source     DiscoverySource `json:"source"`
	AgentID    string          `json:"agent_id"`
	GatewayID  string          `json:"gateway_id"`
	FirstSeen  time.Time       `json:"first_seen"`
	LastSeen   time.Time       `json:"last_seen"`
	Confidence int             `json:"confidence"`
}

type DiskMetric struct {
	// Mount point path
	MountPoint string `json:"mount_point" example:"/var"`
	// Bytes currently in use
	UsedBytes uint64 `json:"used_bytes" example:"10737418240"`
	// Total capacity in bytes
	TotalBytes uint64 `json:"total_bytes" example:"107374182400"`
	// When this metric was collected
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Host identifier for the agent that collected this metric
	HostID string `json:"host_id,omitempty" example:"server-east-1"`
	// Host IP address for the agent that collected this metric
	HostIP string `json:"host_ip,omitempty" example:"192.168.1.100"`
	// ServiceRadar agent identifier
	AgentID string `json:"agent_id,omitempty" example:"agent-1234"`
}

type Duration time.Duration

type EdgeOnboardingComponentType string

type EdgeOnboardingConfig struct {
	Enabled                bool                         `json:"enabled"`
	EncryptionKey          string                       `json:"encryption_key" sensitive:"true"`
	DefaultSelectors       []string                     `json:"default_selectors,omitempty"`
	DefaultMetadata        map[string]map[string]string `json:"default_metadata,omitempty"`
	DownstreamPathTemplate string                       `json:"downstream_path_template,omitempty"`
	JoinTokenTTL           Duration                     `json:"join_token_ttl,omitempty"`
	DownloadTokenTTL       Duration                     `json:"download_token_ttl,omitempty"`
	GatewayIDPrefix        string                       `json:"gateway_id_prefix,omitempty"`
	MTLSCertBaseDir        string                       `json:"mtls_cert_base_dir,omitempty"`
}

type EdgeOnboardingCreateRequest struct {
	Label              string
	ComponentID        string
	ComponentType      EdgeOnboardingComponentType
	ParentType         EdgeOnboardingComponentType
	SecurityMode       string
	ParentID           string
	GatewayID          string
	Site               string
	Selectors          []string
	MetadataJSON       string
	CheckerKind        string
	CheckerConfigJSON  string
	Notes              string
	CreatedBy          string
	JoinTokenTTL       time.Duration
	DownloadTokenTTL   time.Duration
	DownstreamSPIFFEID string
	DataSvcEndpoint    string // DataSvc gRPC endpoint (e.g., "23.138.124.23:50057")
}

type EdgeOnboardingCreateResult struct {
	Package           *EdgeOnboardingPackage
	JoinToken         string
	DownloadToken     string
	BundlePEM         []byte
	MTLSBundle        []byte
	DownstreamEntryID string
}

type EdgeOnboardingDeliverRequest struct {
	PackageID     string
	DownloadToken string
	Actor         string
	SourceIP      string
}

type EdgeOnboardingDeliverResult struct {
	Package    *EdgeOnboardingPackage
	JoinToken  string
	BundlePEM  []byte
	MTLSBundle []byte
}

type EdgeOnboardingEvent struct {
	PackageID   string    `json:"package_id"`
	EventTime   time.Time `json:"event_time"`
	EventType   string    `json:"event_type"`
	Actor       string    `json:"actor"`
	SourceIP    string    `json:"source_ip,omitempty"`
	DetailsJSON string    `json:"details_json,omitempty"`
}

type EdgeOnboardingListFilter struct {
	GatewayID   string
	ComponentID string
	ParentID    string
	Statuses    []EdgeOnboardingStatus
	Limit       int
	Types       []EdgeOnboardingComponentType
}

type EdgeOnboardingPackage struct {
	PackageID              string                      `json:"package_id"`
	Label                  string                      `json:"label"`
	ComponentID            string                      `json:"component_id"`
	ComponentType          EdgeOnboardingComponentType `json:"component_type"`
	ParentType             EdgeOnboardingComponentType `json:"parent_type,omitempty"`
	ParentID               string                      `json:"parent_id,omitempty"`
	GatewayID              string                      `json:"gateway_id"`
	Site                   string                      `json:"site,omitempty"`
	Status                 EdgeOnboardingStatus        `json:"status"`
	SecurityMode           string                      `json:"security_mode,omitempty"`
	DownstreamEntryID      string                      `json:"downstream_entry_id,omitempty"`
	DownstreamSPIFFEID     string                      `json:"downstream_spiffe_id"`
	Selectors              []string                    `json:"selectors,omitempty"`
	JoinTokenCiphertext    string                      `json:"join_token_ciphertext"`
	JoinTokenExpiresAt     time.Time                   `json:"join_token_expires_at"`
	BundleCiphertext       string                      `json:"bundle_ciphertext"`
	DownloadTokenHash      string                      `json:"download_token_hash"`
	DownloadTokenExpiresAt time.Time                   `json:"download_token_expires_at"`
	CreatedBy              string                      `json:"created_by"`
	CreatedAt              time.Time                   `json:"created_at"`
	UpdatedAt              time.Time                   `json:"updated_at"`
	DeliveredAt            *time.Time                  `json:"delivered_at,omitempty"`
	ActivatedAt            *time.Time                  `json:"activated_at,omitempty"`
	ActivatedFromIP        *string                     `json:"activated_from_ip,omitempty"`
	LastSeenSPIFFEID       *string                     `json:"last_seen_spiffe_id,omitempty"`
	RevokedAt              *time.Time                  `json:"revoked_at,omitempty"`
	DeletedAt              *time.Time                  `json:"deleted_at,omitempty"`
	DeletedBy              string                      `json:"deleted_by,omitempty"`
	DeletedReason          string                      `json:"deleted_reason,omitempty"`
	MetadataJSON           string                      `json:"metadata_json,omitempty"`
	CheckerKind            string                      `json:"checker_kind,omitempty"`
	CheckerConfigJSON      string                      `json:"checker_config_json,omitempty"`
	KVRevision             uint64                      `json:"kv_revision,omitempty"`
	Notes                  string                      `json:"notes,omitempty"`
}

type EdgeOnboardingRevokeRequest struct {
	PackageID string
	Actor     string
	Reason    string
	SourceIP  string
}

type EdgeOnboardingRevokeResult struct {
	Package *EdgeOnboardingPackage
}

type EdgeOnboardingStatus string

type EdgeTemplate struct {
	ComponentType EdgeOnboardingComponentType `json:"component_type"` // Component type (e.g., "checker")
	Kind          string                      `json:"kind"`           // Component kind (e.g., "sysmon", "snmp", "rperf")
	SecurityMode  string                      `json:"security_mode"`  // Security mode for the template (e.g., "mtls", "spire")
	TemplateKey   string                      `json:"template_key"`   // Full KV key path (e.g., "templates/checkers/mtls/sysmon.json")
}

type ErrorResponse struct {
	// Error message
	Message string `json:"message" example:"Invalid request parameters"`
	// HTTP status code
	Status int `json:"status" example:"400"`
}

type EventsConfig struct {
	Enabled    bool     `json:"enabled"`
	StreamName string   `json:"stream_name"`
	Subjects   []string `json:"subjects"`
}

type FeatureFlags struct {
	UseLogDigest           *bool `json:"use_log_digest,omitempty"`
	UseStatsCache          *bool `json:"use_stats_cache,omitempty"`
	UseDeviceSearchPlanner *bool `json:"use_device_search_planner,omitempty"`
	RequireDeviceRegistry  *bool `json:"require_device_registry,omitempty"`
}

type FingerprintingConfig struct {
	Enabled    bool     `json:"enabled"`
	PortBudget int      `json:"port_budget,omitempty"`
	Timeout    Duration `json:"timeout,omitempty"`
}

type GatewayConfig struct {
	Agents       map[string]AgentDefinition `json:"agents"`        // Map of agent ID to agent definition
	CloudAddress string                     `json:"cloud_address"` // Address of cloud service
	PollInterval Duration                   `json:"poll_interval"` // How often to poll agents
	GatewayID    string                     `json:"gateway_id"`    // Unique identifier for this gateway
}

type GatewayHealthEventData struct {
	GatewayID      string    `json:"gateway_id"`
	PreviousState  string    `json:"previous_state"`
	CurrentState   string    `json:"current_state"`
	Timestamp      time.Time `json:"timestamp"`
	LastSeen       time.Time `json:"last_seen"`
	Host           string    `json:"host,omitempty"`
	RemoteAddr     string    `json:"remote_addr,omitempty"`
	SourceIP       string    `json:"source_ip,omitempty"`
	Partition      string    `json:"partition,omitempty"`
	AlertSent      bool      `json:"alert_sent"`
	RecoveryReason string    `json:"recovery_reason,omitempty"`
}

type GatewayHistory struct {
	// Unique identifier for the gateway
	GatewayID string `json:"gateway_id" example:"gateway-prod-east-01"`
	// When this status was recorded
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Whether the gateway was healthy at this time
	IsHealthy bool `json:"is_healthy" example:"true"`
	// Services status at this time
	Services []ServiceStatus `json:"services"`
}

type GatewayHistoryPoint struct {
	// When this status was recorded
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Whether the gateway was healthy at this time
	IsHealthy bool `json:"is_healthy" example:"true"`
}

type GatewayStatus struct {
	// Unique identifier for the gateway
	GatewayID string `json:"gateway_id" example:"gateway-prod-east-01"`
	// Whether the gateway is currently healthy
	IsHealthy bool `json:"is_healthy" example:"true"`
	// List of services monitored by this gateway
	Services []ServiceStatus `json:"services"`
	// How long the gateway has been running
	UpTime string `json:"uptime" example:"3d 2h 15m"`
	// When the gateway was first seen by the system
	FirstSeen time.Time `json:"first_seen" example:"2025-04-20T10:00:00Z"`
	// Last time the gateway reported its status
	LastSeen time.Time `json:"last_seen" example:"2025-04-24T14:15:22Z"`
	// IP address of the host where the gateway is running
	HostIP string `json:"host_ip,omitempty" example:"192.168.1.100"`
	// Optional metrics data points
	Metrics []MetricPoint `json:"metrics,omitempty"`
	// Metadata about the gateway
	LastEvaluated time.Time `json:"last_evaluated" example:"2025-04-24T14:15:22Z"`
	// AlertSent indicates if an alert has been sent for this gateway
	AlertSent bool `json:"alert_sent" example:"false"`
}

type Header struct {
	Key   string `json:"key"`
	Value string `json:"value"`
}

type HostResult struct {
	Host         string              `json:"host"`
	Available    bool                `json:"available"`
	FirstSeen    time.Time           `json:"first_seen"`
	LastSeen     time.Time           `json:"last_seen"`
	PortResults  []*PortResult       `json:"port_results,omitempty"`
	PortMap      map[int]*PortResult `json:"-"` // O(1) port lookup, excluded from JSON
	ICMPStatus   *ICMPStatus         `json:"icmp_status,omitempty"`
	ResponseTime time.Duration       `json:"response_time"`
}

type ICMPStatus struct {
	Available  bool          `json:"available"`
	RoundTrip  time.Duration `json:"round_trip"`
	PacketLoss float64       `json:"packet_loss"`
}

type IdentityDriftConfig struct {
	BaselineDevices  int  `json:"baseline_devices,omitempty"`
	TolerancePercent int  `json:"tolerance_percent,omitempty"`
	PauseOnDrift     bool `json:"pause_on_drift,omitempty"`
	AlertOnDrift     bool `json:"alert_on_drift,omitempty"`
}

type IdentityReaperConfig struct {
	Interval Duration                         `json:"interval,omitempty"`
	Profiles map[string]IdentityReaperProfile `json:"profiles,omitempty"`
}

type IdentityReaperProfile struct {
	TTL         Duration `json:"ttl"`
	AllowIPAsID bool     `json:"allow_ip_as_id,omitempty"`
}

type IdentityReconciliationConfig struct {
	Enabled        bool                 `json:"enabled"`
	SightingsOnly  bool                 `json:"sightings_only_mode,omitempty"`
	Promotion      PromotionConfig      `json:"promotion,omitempty"`
	Fingerprinting FingerprintingConfig `json:"fingerprinting,omitempty"`
	Reaper         IdentityReaperConfig `json:"reaper,omitempty"`
	Drift          IdentityDriftConfig  `json:"drift,omitempty"`
}

type KVEndpoint struct {
	ID      string `json:"id"`
	Name    string `json:"name"`
	Address string `json:"address"`
	Domain  string `json:"domain"`
	Type    string `json:"type,omitempty"` // hub | leaf | other

}

type LogCounters struct {
	UpdatedAt time.Time            `json:"updated_at"`
	Window1H  SeverityWindowCounts `json:"window_1h"`
	Window24H SeverityWindowCounts `json:"window_24h"`
}

type LogDigestSnapshot struct {
	Entries  []LogSummary `json:"entries"`
	Counters LogCounters  `json:"counters"`
}

type LogSummary struct {
	Timestamp   time.Time `json:"timestamp"`
	Severity    string    `json:"severity"`
	ServiceName string    `json:"service_name,omitempty"`
	Body        string    `json:"body,omitempty"`
	TraceID     string    `json:"trace_id,omitempty"`
	SpanID      string    `json:"span_id,omitempty"`
}

type LoginRequest struct {
	// Username for authentication
	Username string `json:"username" example:"admin"`
	// Password for authentication
	Password string `json:"password" example:"p@ssw0rd"`
}

type MCPConfigRef struct {
	Enabled bool   `json:"enabled"`
	APIKey  string `json:"api_key" sensitive:"true"`
}

type MemoryMetric struct {
	// Bytes currently in use
	UsedBytes uint64 `json:"used_bytes" example:"4294967296"`
	// Total memory capacity in bytes
	TotalBytes uint64 `json:"total_bytes" example:"17179869184"`
	// When this metric was collected
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Host identifier for the agent that collected this metric
	HostID string `json:"host_id,omitempty" example:"server-east-1"`
	// Host IP address for the agent that collected this metric
	HostIP string `json:"host_ip,omitempty" example:"192.168.1.100"`
	// ServiceRadar agent identifier
	AgentID string `json:"agent_id,omitempty" example:"agent-1234"`
}

type MergeAuditEvent struct {
	EventID         string            `json:"event_id"`
	FromDeviceID    string            `json:"from_device_id"`
	ToDeviceID      string            `json:"to_device_id"`
	Reason          string            `json:"reason,omitempty"`
	ConfidenceScore *float64          `json:"confidence_score,omitempty"`
	Source          string            `json:"source,omitempty"`
	Details         map[string]string `json:"details,omitempty"`
	CreatedAt       time.Time         `json:"created_at"`
}

type MetricPoint struct {
	// The time when this metric was collected
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// The response time in milliseconds
	ResponseTime int64 `json:"response_time" example:"42"`
	// The name of the service this metric is for
	ServiceName string `json:"service_name" example:"postgres"`
	// The device ID this metric is associated with (partition:ip)
	DeviceID string `json:"device_id,omitempty" example:"default:192.168.1.100"`
	// The partition this metric belongs to
	Partition string `json:"partition,omitempty" example:"default"`
	// The agent ID that collected this metric
	AgentID string `json:"agent_id,omitempty" example:"agent-1234"`
	// The gateway ID that requested this metric
	GatewayID string `json:"gateway_id,omitempty" example:"demo-staging"`
}

type Metrics struct {
	Enabled             bool  `json:"enabled"`
	Retention           int32 `json:"retention"`
	MaxGateways         int32 `json:"max_gateways"`
	DeviceRetentionDays int32 `json:"device_retention_days,omitempty"` // Days to keep devices in ocsf_devices (default: 3)
}

type MetricsConfig struct {
	// Whether metrics collection is enabled
	Enabled bool `json:"metrics_enabled" example:"true"`
	// How long metrics are kept before being purged (in days)
	Retention int32 `json:"metrics_retention" example:"30"`
	// Maximum number of gateways to track metrics for
	MaxGateways int32 `json:"max_gateways" example:"1000"`
}

type NATSConfig struct {
	URL       string          `json:"url"`
	Domain    string          `json:"domain,omitempty"`
	Security  *SecurityConfig `json:"security,omitempty"`
	CredsFile string          `json:"creds_file,omitempty"`
}

type NatsCredential struct {
	CredentialID   string                 `json:"credential_id"`
	UserName       string                 `json:"user_name"`
	UserPublicKey  string                 `json:"user_public_key"`
	CredentialType string                 `json:"credential_type"` // collector, service, admin
	CollectorType  CollectorType          `json:"collector_type,omitempty"`
	Status         string                 `json:"status"` // active, revoked, expired
	IssuedAt       time.Time              `json:"issued_at"`
	ExpiresAt      *time.Time             `json:"expires_at,omitempty"`
	RevokedAt      *time.Time             `json:"revoked_at,omitempty"`
	RevokeReason   string                 `json:"revoke_reason,omitempty"`
	Metadata       map[string]interface{} `json:"metadata,omitempty"`
}

type NetflowConfig struct {
	ListenAddr     string             `json:"listen_addr"`
	NATSURL        string             `json:"nats_url"`
	NATSCredsFile  string             `json:"nats_creds_file,omitempty"`
	StreamName     string             `json:"stream_name"`
	ConsumerName   string             `json:"consumer_name"`
	Security       *SecurityConfig    `json:"security"`
	EnabledFields  []ColumnKey        `json:"enabled_fields"`
	DisabledFields []ColumnKey        `json:"disabled_fields"`
	Dictionaries   []DictionaryConfig `json:"dictionaries"`
	CNPG           *CNPGDatabase      `json:"cnpg"`
}

type NetflowMetric struct {
	Timestamp        time.Time `json:"timestamp"`
	SrcAddr          string    `json:"src_addr"`
	DstAddr          string    `json:"dst_addr"`
	SrcPort          uint32    `json:"src_port"`
	DstPort          uint32    `json:"dst_port"`
	Protocol         uint32    `json:"protocol"`
	Bytes            uint64    `json:"bytes"`
	Packets          uint64    `json:"packets"`
	ForwardingStatus uint32    `json:"forwarding_status"`
	NextHop          string    `json:"next_hop"`
	SamplerAddress   string    `json:"sampler_address"`
	SrcAs            uint32    `json:"src_as"`
	DstAs            uint32    `json:"dst_as"`
	IPTos            uint32    `json:"ip_tos"`
	VlanID           uint32    `json:"vlan_id"`
	BgpNextHop       string    `json:"bgp_next_hop"`
	Metadata         string    `json:"metadata"`
}

type NetworkSighting struct {
	SightingID    string                   `json:"sighting_id,omitempty"`
	Partition     string                   `json:"partition"`
	IP            string                   `json:"ip"`
	SubnetID      *string                  `json:"subnet_id,omitempty"`
	Source        DiscoverySource          `json:"source"`
	Status        NetworkSightingStatus    `json:"status"`
	FirstSeen     time.Time                `json:"first_seen"`
	LastSeen      time.Time                `json:"last_seen"`
	TTLExpiresAt  *time.Time               `json:"ttl_expires_at,omitempty"`
	FingerprintID *string                  `json:"fingerprint_id,omitempty"`
	Metadata      map[string]string        `json:"metadata,omitempty"`
	Promotion     *SightingPromotionStatus `json:"promotion,omitempty"`
}

type NetworkSightingStatus string

type OCSFAgent struct {
	UID        string `json:"uid,omitempty"`
	Name       string `json:"name,omitempty"`
	Type       string `json:"type,omitempty"`
	TypeID     *int   `json:"type_id,omitempty"`
	Version    string `json:"version,omitempty"`
	VendorName string `json:"vendor_name,omitempty"`
}

type OCSFAgentPolicy struct {
	Name    string `json:"name,omitempty"`
	UID     string `json:"uid,omitempty"`
	Version string `json:"version,omitempty"`
}

type OCSFAgentRecord struct {
	// OCSF Core Identity (per https://schema.ocsf.io/1.7.0/objects/agent)
	UID    string `json:"uid" db:"uid"`             // Unique agent identifier (sensor ID)
	Name   string `json:"name,omitempty" db:"name"` // Agent designation (e.g., "serviceradar-agent")
	TypeID int    `json:"type_id" db:"type_id"`     // OCSF agent type enum
	Type   string `json:"type,omitempty" db:"type"` // Human-readable agent type name

	// OCSF Extended Identity
	Version    string            `json:"version,omitempty" db:"version"`         // Semantic version of the agent
	VendorName string            `json:"vendor_name,omitempty" db:"vendor_name"` // Agent vendor (e.g., "ServiceRadar")
	UIDAlt     string            `json:"uid_alt,omitempty" db:"uid_alt"`         // Alternate unique identifier
	Policies   []OCSFAgentPolicy `json:"policies,omitempty" db:"policies"`       // Applied policies array

	// ServiceRadar Extensions
	GatewayID     string            `json:"gateway_id,omitempty" db:"gateway_id"`     // Parent gateway reference
	Capabilities  []string          `json:"capabilities,omitempty" db:"capabilities"` // Registered checker capabilities
	IP            string            `json:"ip,omitempty" db:"ip"`                     // Agent IP address
	FirstSeenTime time.Time         `json:"first_seen_time,omitempty" db:"first_seen_time"`
	LastSeenTime  time.Time         `json:"last_seen_time,omitempty" db:"last_seen_time"`
	CreatedTime   time.Time         `json:"created_time" db:"created_time"`
	ModifiedTime  time.Time         `json:"modified_time" db:"modified_time"`
	Metadata      map[string]string `json:"metadata,omitempty" db:"metadata"`
}

type OCSFDevice struct {
	// OCSF Core Identity
	UID      string `json:"uid" db:"uid"`             // Canonical device ID from DIRE (sr: prefixed UUID)
	TypeID   int    `json:"type_id" db:"type_id"`     // OCSF device type enum
	Type     string `json:"type,omitempty" db:"type"` // Human-readable device type name
	Name     string `json:"name,omitempty" db:"name"` // Administrator-assigned device name
	Hostname string `json:"hostname,omitempty" db:"hostname"`
	IP       string `json:"ip,omitempty" db:"ip"`
	MAC      string `json:"mac,omitempty" db:"mac"`

	// OCSF Extended Identity
	UIDAlt     string `json:"uid_alt,omitempty" db:"uid_alt"`         // Alternate unique identifier
	VendorName string `json:"vendor_name,omitempty" db:"vendor_name"` // Device manufacturer
	Model      string `json:"model,omitempty" db:"model"`             // Device model
	Domain     string `json:"domain,omitempty" db:"domain"`           // Network domain
	Zone       string `json:"zone,omitempty" db:"zone"`               // Network zone
	SubnetUID  string `json:"subnet_uid,omitempty" db:"subnet_uid"`   // Subnet identifier
	VlanUID    string `json:"vlan_uid,omitempty" db:"vlan_uid"`       // VLAN identifier
	Region     string `json:"region,omitempty" db:"region"`           // Geographic region

	// OCSF Temporal
	FirstSeenTime *time.Time `json:"first_seen_time,omitempty" db:"first_seen_time"`
	LastSeenTime  *time.Time `json:"last_seen_time,omitempty" db:"last_seen_time"`
	CreatedTime   time.Time  `json:"created_time" db:"created_time"`
	ModifiedTime  time.Time  `json:"modified_time" db:"modified_time"`

	// OCSF Risk and Compliance
	RiskLevelID *int   `json:"risk_level_id,omitempty" db:"risk_level_id"`
	RiskLevel   string `json:"risk_level,omitempty" db:"risk_level"`
	RiskScore   *int   `json:"risk_score,omitempty" db:"risk_score"`
	IsManaged   *bool  `json:"is_managed,omitempty" db:"is_managed"`
	IsCompliant *bool  `json:"is_compliant,omitempty" db:"is_compliant"`
	IsTrusted   *bool  `json:"is_trusted,omitempty" db:"is_trusted"`

	// OCSF Nested Objects (stored as JSONB in DB)
	OS                *OCSFDeviceOS          `json:"os,omitempty" db:"os"`
	HWInfo            *OCSFDeviceHWInfo      `json:"hw_info,omitempty" db:"hw_info"`
	NetworkInterfaces []OCSFNetworkInterface `json:"network_interfaces,omitempty" db:"network_interfaces"`
	Owner             *OCSFUser              `json:"owner,omitempty" db:"owner"`
	Org               *OCSFOrganization      `json:"org,omitempty" db:"org"`
	Groups            []OCSFGroup            `json:"groups,omitempty" db:"groups"`
	AgentList         []OCSFAgent            `json:"agent_list,omitempty" db:"agent_list"`

	// ServiceRadar-specific fields
	GatewayID        string            `json:"gateway_id,omitempty" db:"gateway_id"`
	AgentID          string            `json:"agent_id,omitempty" db:"agent_id"`
	DiscoverySources []string          `json:"discovery_sources,omitempty" db:"discovery_sources"`
	IsAvailable      *bool             `json:"is_available,omitempty" db:"is_available"`
	Metadata         map[string]string `json:"metadata,omitempty" db:"metadata"`
}

type OCSFDeviceHWInfo struct {
	CPUArchitecture  string `json:"cpu_architecture,omitempty"`  // CPU architecture (x86_64, arm64)
	CPUBits          *int   `json:"cpu_bits,omitempty"`          // CPU bits (32 or 64)
	CPUCores         *int   `json:"cpu_cores,omitempty"`         // Number of CPU cores
	CPUCount         *int   `json:"cpu_count,omitempty"`         // Number of physical CPUs
	CPUSpeedMhz      *int   `json:"cpu_speed_mhz,omitempty"`     // CPU speed in MHz
	CPUType          string `json:"cpu_type,omitempty"`          // CPU model name
	RAMSize          *int64 `json:"ram_size,omitempty"`          // Total RAM in bytes
	SerialNumber     string `json:"serial_number,omitempty"`     // Device serial number
	Chassis          string `json:"chassis,omitempty"`           // Chassis type
	BIOSManufacturer string `json:"bios_manufacturer,omitempty"` // BIOS manufacturer
	BIOSVer          string `json:"bios_ver,omitempty"`          // BIOS version
	BIOSDate         string `json:"bios_date,omitempty"`         // BIOS release date
	UUID             string `json:"uuid,omitempty"`              // Hardware UUID
}

type OCSFDeviceOS struct {
	Name          string `json:"name,omitempty"`
	Type          string `json:"type,omitempty"`           // OS family (Windows, Linux, macOS)
	TypeID        *int   `json:"type_id,omitempty"`        // OCSF OS type enum
	Version       string `json:"version,omitempty"`        // OS version string
	Build         string `json:"build,omitempty"`          // OS build number
	Edition       string `json:"edition,omitempty"`        // OS edition (Enterprise, Pro)
	KernelRelease string `json:"kernel_release,omitempty"` // Kernel version for Linux/Unix
	CPUBits       *int   `json:"cpu_bits,omitempty"`       // Architecture bits (32 or 64)
	SPName        string `json:"sp_name,omitempty"`        // Service pack name
	SPVer         string `json:"sp_ver,omitempty"`         // Service pack version
	Lang          string `json:"lang,omitempty"`           // OS language
}

type OCSFEventRow struct {
	ID           string
	Time         time.Time
	ClassUID     int32
	CategoryUID  int32
	TypeUID      int32
	ActivityID   int32
	ActivityName string
	SeverityID   int32
	Severity     string
	Message      string
	StatusID     *int32
	Status       string
	StatusCode   string
	StatusDetail string
	Metadata     json.RawMessage
	Observables  json.RawMessage
	TraceID      string
	SpanID       string
	Actor        json.RawMessage
	Device       json.RawMessage
	SrcEndpoint  json.RawMessage
	DstEndpoint  json.RawMessage
	LogName      string
	LogProvider  string
	LogLevel     string
	LogVersion   string
	Unmapped     json.RawMessage
	RawData      string
	CreatedAt    time.Time
}

type OCSFGroup struct {
	UID  string `json:"uid,omitempty"`
	Name string `json:"name,omitempty"`
	Type string `json:"type,omitempty"`
	Desc string `json:"desc,omitempty"`
}

type OCSFNetworkActivity struct {
	// OCSF Core Fields
	Time        time.Time `json:"time" db:"time"`
	ClassUID    int       `json:"class_uid" db:"class_uid"`
	CategoryUID int       `json:"category_uid" db:"category_uid"`
	ActivityID  int       `json:"activity_id" db:"activity_id"`
	TypeUID     int       `json:"type_uid" db:"type_uid"`
	SeverityID  int       `json:"severity_id" db:"severity_id"`

	// Timestamps
	StartTime *time.Time `json:"start_time,omitempty" db:"start_time"`
	EndTime   *time.Time `json:"end_time,omitempty" db:"end_time"`

	// Source Endpoint (extracted for indexing)
	SrcEndpointIP   string `json:"src_endpoint_ip,omitempty" db:"src_endpoint_ip"`
	SrcEndpointPort *int   `json:"src_endpoint_port,omitempty" db:"src_endpoint_port"`
	SrcASNumber     *int   `json:"src_as_number,omitempty" db:"src_as_number"`

	// Destination Endpoint (extracted for indexing)
	DstEndpointIP   string `json:"dst_endpoint_ip,omitempty" db:"dst_endpoint_ip"`
	DstEndpointPort *int   `json:"dst_endpoint_port,omitempty" db:"dst_endpoint_port"`
	DstASNumber     *int   `json:"dst_as_number,omitempty" db:"dst_as_number"`

	// Connection Info (extracted for filtering)
	ProtocolNum  *int   `json:"protocol_num,omitempty" db:"protocol_num"`
	ProtocolName string `json:"protocol_name,omitempty" db:"protocol_name"`
	TCPFlags     *int   `json:"tcp_flags,omitempty" db:"tcp_flags"`

	// Traffic (extracted for aggregations)
	BytesTotal   int64 `json:"bytes_total" db:"bytes_total"`
	PacketsTotal int64 `json:"packets_total" db:"packets_total"`
	BytesIn      int64 `json:"bytes_in" db:"bytes_in"`
	BytesOut     int64 `json:"bytes_out" db:"bytes_out"`

	// Observer
	SamplerAddress string `json:"sampler_address,omitempty" db:"sampler_address"`

	// Full OCSF event
	OCSFPayload json.RawMessage `json:"ocsf_payload" db:"ocsf_payload"`

	// ServiceRadar metadata
	Partition string    `json:"partition" db:"partition"`
	CreatedAt time.Time `json:"created_at" db:"created_at"`
}

type OCSFNetworkInterface struct {
	MAC      string `json:"mac,omitempty"`
	IP       string `json:"ip,omitempty"`
	Hostname string `json:"hostname,omitempty"`
	Name     string `json:"name,omitempty"`    // Interface name (eth0, ens192)
	UID      string `json:"uid,omitempty"`     // Interface unique identifier
	Type     string `json:"type,omitempty"`    // Interface type name
	TypeID   *int   `json:"type_id,omitempty"` // OCSF interface type enum
}

type OCSFOrganization struct {
	UID    string `json:"uid,omitempty"`
	Name   string `json:"name,omitempty"`
	OUUid  string `json:"ou_uid,omitempty"`
	OUName string `json:"ou_name,omitempty"`
}

type OCSFUser struct {
	UID    string `json:"uid,omitempty"`
	Name   string `json:"name,omitempty"`
	Email  string `json:"email,omitempty"`
	Type   string `json:"type,omitempty"`
	TypeID *int   `json:"type_id,omitempty"`
}

type OTELLogRow struct {
	Timestamp          time.Time
	ObservedTimestamp  *time.Time
	TraceID            string
	SpanID             string
	TraceFlags         *int32
	SeverityText       string
	SeverityNumber     int32
	Body               string
	EventName          string
	Source             string
	ServiceName        string
	ServiceVersion     string
	ServiceInstance    string
	ScopeName          string
	ScopeVersion       string
	ScopeAttributes    string
	Attributes         string
	ResourceAttributes string
}

type OTELMetricRow struct {
	Timestamp       time.Time
	TraceID         string
	SpanID          string
	ServiceName     string
	SpanName        string
	SpanKind        string
	DurationMs      float64
	DurationSeconds float64
	MetricType      string
	HTTPMethod      string
	HTTPRoute       string
	HTTPStatusCode  string
	GRPCService     string
	GRPCMethod      string
	GRPCStatusCode  string
	IsSlow          bool
	Component       string
	Level           string
	Unit            string // Unit of measurement (e.g., "ms", "s", "bytes", "1" for counts)
}

type OTELTraceRow struct {
	Timestamp          time.Time
	TraceID            string
	SpanID             string
	ParentSpanID       string
	Name               string
	Kind               int32
	StartTimeUnixNano  int64
	EndTimeUnixNano    int64
	ServiceName        string
	ServiceVersion     string
	ServiceInstance    string
	ScopeName          string
	ScopeVersion       string
	StatusCode         int32
	StatusMessage      string
	Attributes         string
	ResourceAttributes string
	Events             string
	Links              string
}

type PartitionStats struct {
	PartitionID    string `json:"partition_id"`
	DeviceCount    int    `json:"device_count"`
	ActiveCount    int    `json:"active_count"`
	AvailableCount int    `json:"available_count"`
}

type PortCount struct {
	Port      int `json:"port"`
	Available int `json:"available"`
}

type PortResult struct {
	Port      int           `json:"port"`
	Available bool          `json:"available"`
	RespTime  time.Duration `json:"response_time"`
	Service   string        `json:"service,omitempty"` // Optional service identification
}

type PortStatus struct {
	Port      int32 `json:"port"`
	Available int32 `json:"available"`
}

type ProcessMetric struct {
	// Process ID
	PID uint32 `json:"pid" example:"1234"`
	// Process name
	Name string `json:"name" example:"nginx"`
	// CPU usage percentage
	CPUUsage float32 `json:"cpu_usage" example:"2.5"`
	// Memory usage in bytes
	MemoryUsage uint64 `json:"memory_usage" example:"104857600"`
	// Process status
	Status string `json:"status" example:"Running"`
	// Process start time
	StartTime string `json:"start_time" example:"2025-04-24T14:15:22Z"`
	// When this metric was collected
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Host identifier for the agent that collected this metric
	HostID string `json:"host_id,omitempty" example:"server-east-1"`
	// Host IP address for the agent that collected this metric
	HostIP string `json:"host_ip,omitempty" example:"192.168.1.100"`
	// ServiceRadar agent identifier
	AgentID string `json:"agent_id,omitempty" example:"agent-1234"`
}

type PromotionConfig struct {
	Enabled            bool     `json:"enabled"`
	ShadowMode         bool     `json:"shadow_mode,omitempty"`
	MinPersistence     Duration `json:"min_persistence,omitempty"`
	RequireHostname    bool     `json:"require_hostname,omitempty"`
	RequireFingerprint bool     `json:"require_fingerprint,omitempty"`
}

type QueryConfig struct {
	Label      string      `json:"label"`       // Name or description of the query
	Query      string      `json:"query"`       // The query string
	SweepModes []SweepMode `json:"sweep_modes"` // Sweep modes to apply to devices from this query
}

type RBACConfig struct {
	// Map of identities to roles. Keys can be one of:
	// - "provider:subject" (preferred, e.g., "google:1122334455")
	// - "provider:email" (lowercased, e.g., "github:admin@company.com")
	// - legacy "username-or-email" (lowercased)
	// Example: {"local:admin":["admin"], "google:1122334455":["admin"], "user1":["user"]}
	UserRoles map[string][]string `json:"user_roles"`
	// Map of roles to their permissions
	RolePermissions map[string][]string `json:"role_permissions" example:"admin:[config:read,config:write,config:delete],user:[config:read]"`
	// Map of routes to required roles (can be string array or map of methods to roles)
	RouteProtection map[string]interface{} `json:"route_protection"`
}

type ReaperConfig struct {
	Interval Duration `json:"interval"`
	TTL      Duration `json:"ttl"`
}

type RefreshTokenRequest struct {
	// JWT refresh token
	RefreshToken string `json:"refresh_token" example:"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."`
}

type Result struct {
	Target     Target
	Available  bool
	FirstSeen  time.Time
	LastSeen   time.Time
	RespTime   time.Duration
	PacketLoss float64
	Error      error
	Metadata   map[string]interface{}
}

type ResultFilter struct {
	Host      string
	Port      int
	StartTime time.Time
	EndTime   time.Time
	Available *bool
}

type RperfMetric struct {
	// When the test was performed
	Timestamp time.Time `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Test name or identifier
	Name string `json:"name" example:"rperf_tcp_test"`
	// Network throughput in bits per second
	BitsPerSec float64 `json:"bits_per_second" example:"943215000"`
	// Total bytes received during the test
	BytesReceived int64 `json:"bytes_received" example:"12582912"`
	// Total bytes sent during the test
	BytesSent int64 `json:"bytes_sent" example:"12582912"`
	// Test duration in seconds
	Duration float64 `json:"duration" example:"10.05"`
	// Network jitter in milliseconds
	JitterMs float64 `json:"jitter_ms" example:"0.85"`
	// Percentage of packets lost during the test
	LossPercent float64 `json:"loss_percent" example:"0.02"`
	// Number of packets lost during the test
	PacketsLost int64 `json:"packets_lost" example:"2"`
	// Number of packets received during the test
	PacketsReceived int64 `json:"packets_received" example:"9998"`
	// Number of packets sent during the test
	PacketsSent int64 `json:"packets_sent" example:"10000"`
	// Whether the test was successful
	Success bool `json:"success" example:"true"`
	// Target hostname or IP address
	Target string `json:"target" example:"192.168.1.1"`
	// ResponseTime in milliseconds
	ResponseTime int64 `json:"response_time" example:"15"`
	// Error message if test failed (null if successful)
	Error *string `json:"error,omitempty" example:"connection refused"`
	// AgentID of the agent that performed the test
	AgentID string `json:"agent_id"`
	// ServiceName of the service that performed the test
	ServiceName string `json:"service_name"`
	// ServiceType of the service that performed the test
	ServiceType string `json:"service_type"`
	// Version of the rperf service used for the test
	Version string `json:"version"`
}

type RperfMetricData struct {
	// Array of test results for different targets
	Results []struct {
		// Target hostname or IP address
		Target string `json:"target" example:"192.168.1.1"`
		// Whether the test was successful
		Success bool `json:"success" example:"true"`
		// Error message if test failed
		Error *string `json:"error" example:"connection refused"`
		// Performance test summary results
		Summary struct {
			// Network throughput in bits per second
			BitsPerSecond float64 `json:"bits_per_second" example:"943215000"`
			// Total bytes received during the test
			BytesReceived int64 `json:"bytes_received" example:"12582912"`
			// Total bytes sent during the test
			BytesSent int64 `json:"bytes_sent" example:"12582912"`
			// Test duration in seconds
			Duration float64 `json:"duration" example:"10.05"`
			// Network jitter in milliseconds
			JitterMs float64 `json:"jitter_ms" example:"0.85"`
			// Percentage of packets lost during the test
			LossPercent float64 `json:"loss_percent" example:"0.02"`
			// Number of packets lost during the test
			PacketsLost int64 `json:"packets_lost" example:"2"`
			// Number of packets received during the test
			PacketsReceived int64 `json:"packets_received" example:"9998"`
			// Number of packets sent during the test
			PacketsSent int64 `json:"packets_sent" example:"10000"`
		} `json:"summary"`
	} `json:"results"`
	// ISO8601 timestamp when data was collected
	Timestamp string `json:"timestamp" example:"2025-04-24T14:15:22Z"`
}

type RperfMetricResponse struct {
	// Array of performance metrics
	Metrics []RperfMetric `json:"metrics"`
	// Error information if retrieval failed (not serialized)
	Err error `json:"-"`
}

type RperfMetrics struct {
	// Array of performance metrics for different targets
	Results []RperfMetric `json:"results"`
}

type SNMPConfig struct {
	NodeAddress string          `json:"node_address"`
	Timeout     Duration        `json:"timeout"`
	ListenAddr  string          `json:"listen_addr"`
	Security    *SecurityConfig `json:"security"`
	Targets     []Target        `json:"targets"`
}

type SNMPDiscoveryDataPayload struct {
	Devices    []*discoverypb.DiscoveredDevice    `json:"devices"`
	Interfaces []*discoverypb.DiscoveredInterface `json:"interfaces"`
	Topology   []*discoverypb.TopologyLink        `json:"topology"`
	AgentID    string                             `json:"agent_id"`   // Agent that ran the discovery engine
	GatewayID  string                             `json:"gateway_id"` // Gateway that initiated the discovery
}

type SNMPMetric struct {
	// The name of the OID (Object Identifier)
	// @example "sysUpTime"
	OIDName string `json:"oid_name"`

	// The value of the metric
	// @example 12345
	Value interface{} `json:"value"`

	// The type of the value (e.g., integer, string)
	// @example "integer"
	ValueType string `json:"value_type"`

	// The time when the metric was collected
	// @example "2025-04-24T14:15:22Z"
	Timestamp time.Time `json:"timestamp"`

	// The scale factor applied to the value
	// @example 1.0
	Scale float64 `json:"scale"`

	// Whether the metric represents a delta value
	// @example false
	IsDelta bool `json:"is_delta"`
}

type SNMPMetricsPayload struct {
	GatewayID string          `json:"gateway_id"` // Gateway that collected the metrics
	AgentID   string          `json:"agent_id"`   // Agent that the gateway belongs to
	Partition string          `json:"partition"`  // Partition from SNMP checker config
	Targets   json.RawMessage `json:"targets"`    // Target statuses and metrics (map[string]snmp.TargetStatus)
}

type SRQLConfig struct {
	Enabled bool     `json:"enabled"`
	BaseURL string   `json:"base_url"`
	APIKey  string   `json:"api_key,omitempty" sensitive:"true"`
	Timeout Duration `json:"timeout,omitempty"`
	Path    string   `json:"path,omitempty"`
}

type SSOConfig struct {
	// OAuth client ID
	ClientID string `json:"client_id" example:"oauth-client-id"`
	// OAuth client secret
	ClientSecret string `json:"client_secret" example:"oauth-client-secret"`
	// OAuth scopes requested
	Scopes []string `json:"scopes" example:"profile,email"`
}

type ScannerStats struct {
	// Packet statistics
	PacketsSent    uint64 `json:"packets_sent"`
	PacketsRecv    uint64 `json:"packets_recv"`
	PacketsDropped uint64 `json:"packets_dropped"`

	// Ring buffer statistics (TPACKET_V3)
	RingBlocksProcessed uint64 `json:"ring_blocks_processed"`
	RingBlocksDropped   uint64 `json:"ring_blocks_dropped"`

	// Retry statistics
	RetriesAttempted  uint64 `json:"retries_attempted"`
	RetriesSuccessful uint64 `json:"retries_successful"`

	// Port allocation statistics
	PortsAllocated      uint64 `json:"ports_allocated"`
	PortsReleased       uint64 `json:"ports_released"`
	PortExhaustionCount uint64 `json:"port_exhaustion_count"`

	// Rate limiting statistics
	RateLimitDeferrals uint64 `json:"rate_limit_deferrals"`

	// Computed metrics
	RxDropRatePercent float64 `json:"rx_drop_rate_percent"`
}

type SecurityConfig struct {
	Mode           SecurityMode `json:"mode"`
	CertDir        string       `json:"cert_dir"`
	ServerName     string       `json:"server_name,omitempty"`
	Role           ServiceRole  `json:"role"`
	TLS            TLSConfig    `json:"tls"`
	TrustDomain    string       `json:"trust_domain,omitempty"`     // For SPIFFE
	ServerSPIFFEID string       `json:"server_spiffe_id,omitempty"` // Expected SPIFFE ID when acting as client
	WorkloadSocket string       `json:"workload_socket,omitempty"`  // For SPIFFE
}

type SecurityMode string

type Service struct {
	GatewayID   string            `json:"gateway_id"`
	ServiceName string            `json:"service_name"`
	ServiceType string            `json:"service_type"`
	AgentID     string            `json:"agent_id"`
	DeviceID    string            `json:"device_id,omitempty"`
	Partition   string            `json:"partition,omitempty"`
	Timestamp   time.Time         `json:"timestamp"`
	Config      map[string]string `json:"config,omitempty"` // Service configuration including KV store info
}

type ServiceMetricsPayload struct {
	GatewayID   string          `json:"gateway_id"`   // Gateway that collected the metrics
	AgentID     string          `json:"agent_id"`     // Agent that the gateway belongs to
	Partition   string          `json:"partition"`    // Partition for the collection
	ServiceType string          `json:"service_type"` // Type of service (snmp, sysmon, icmp, etc.)
	ServiceName string          `json:"service_name"` // Name of the service instance
	Data        json.RawMessage `json:"data"`         // Service-specific data payload
}

type ServiceRole string

type ServiceStatus struct {
	// Name of the service
	Name string `json:"name" example:"postgres"`
	// Whether the service is currently available
	Available bool `json:"available" example:"true"`
	// Status message from the service
	Message string `json:"message" example:"Service is running normally"`
	// Type of service (e.g., "process", "port", "database", etc.)
	Type string `json:"type" example:"database"`
	// Detailed service-specific information as a JSON object
	Details     json.RawMessage `json:"details,omitempty"`
	GatewayID   string          `json:"gateway_id" example:"gateway-prod-east-01"`
	AgentID     string          `json:"agent_id" example:"agent-prod-east-01"`
	ServiceName string          `json:"service_name" example:"postgres"`
	ServiceType string          `json:"service_type" example:"database"`
	DeviceID    string          `json:"device_id,omitempty" example:"default:192.168.1.100"`
	Partition   string          `json:"partition,omitempty" example:"default"`
	Timestamp   time.Time       `json:"timestamp" example:"2020-11-10T23:00:00+09:00"`
}

type ServiceType string

type SeverityWindowCounts struct {
	Total   int `json:"total"`
	Fatal   int `json:"fatal"`
	Error   int `json:"error"`
	Warning int `json:"warning"`
	Info    int `json:"info"`
	Debug   int `json:"debug"`
	Other   int `json:"other"`
}

type SightingEvent struct {
	EventID    string            `json:"event_id,omitempty"`
	SightingID string            `json:"sighting_id"`
	DeviceID   string            `json:"device_id,omitempty"`
	EventType  string            `json:"event_type"`
	Actor      string            `json:"actor"`
	Details    map[string]string `json:"details,omitempty"`
	CreatedAt  time.Time         `json:"created_at"`
}

type SightingPromotionStatus struct {
	MeetsPolicy    bool       `json:"meets_policy"`
	Eligible       bool       `json:"eligible"`
	ShadowMode     bool       `json:"shadow_mode,omitempty"`
	Blockers       []string   `json:"blockers,omitempty"`
	Satisfied      []string   `json:"satisfied,omitempty"`
	NextEligibleAt *time.Time `json:"next_eligible_at,omitempty"`
}

type SourceConfig struct {
	Type               string            `json:"type"`                   // "armis", "netbox", etc.
	Endpoint           string            `json:"endpoint"`               // API endpoint
	Credentials        map[string]string `json:"credentials"`            // e.g., {"api_key": "xyz"}
	Prefix             string            `json:"prefix"`                 // Optional namespace prefix for device identifiers
	InsecureSkipVerify bool              `json:"insecure_skip_verify"`   // For TLS connections
	Queries            []QueryConfig     `json:"queries"`                // List of queries
	CustomField        string            `json:"custom_field,omitempty"` // Custom field for additional metadata

	// AgentID and GatewayID allow assigning discovered devices to specific
	// agents and gateways. When set, they override any global defaults for
	// the Sync service.
	AgentID   string `json:"agent_id,omitempty"`
	GatewayID string `json:"gateway_id,omitempty"`
	Partition string `json:"partition,omitempty"`

	SyncServiceID string `json:"sync_service_id,omitempty"`

	// SweepInterval allows configuring how often agents should sweep the
	// networks discovered by this source. If empty, a sensible default is
	// used by each integration.
	SweepInterval string `json:"sweep_interval,omitempty"`

	// PollInterval allows configuring how often this specific source should be polled.
	// If empty, uses the global PollInterval from the sync config.
	PollInterval Duration `json:"poll_interval,omitempty"`

	// DiscoveryInterval allows configuring how often full discovery runs should occur
	// for this source. If empty, uses the global DiscoveryInterval from the sync config.
	DiscoveryInterval Duration `json:"discovery_interval,omitempty"`

	// NetworkBlacklist contains CIDR ranges to filter out from this specific source
	NetworkBlacklist []string `json:"network_blacklist,omitempty"`

	// BatchSize configures the number of items to process in each batch
	// for bulk operations. If not specified, a default will be used.
	BatchSize int `json:"batch_size,omitempty"`
}

type SpireAdminConfig struct {
	Enabled        bool     `json:"enabled"`
	ServerAddress  string   `json:"server_address"`
	ServerSPIFFEID string   `json:"server_spiffe_id"`
	WorkloadSocket string   `json:"workload_socket,omitempty"`
	BundlePath     string   `json:"bundle_path,omitempty"`
	JoinTokenTTL   Duration `json:"join_token_ttl,omitempty"`
}

type SubnetPolicy struct {
	SubnetID       string                 `json:"subnet_id"`
	CIDR           string                 `json:"cidr"`
	Classification string                 `json:"classification"`
	PromotionRules map[string]interface{} `json:"promotion_rules,omitempty"`
	ReaperProfile  string                 `json:"reaper_profile"`
	AllowIPAsID    bool                   `json:"allow_ip_as_id"`
	CreatedAt      time.Time              `json:"created_at"`
	UpdatedAt      time.Time              `json:"updated_at"`
}

type SweepConfig struct {
	Networks      []string       `json:"networks,omitempty"`
	Ports         []int          `json:"ports,omitempty"`
	SweepModes    []string       `json:"sweep_modes,omitempty"`
	Interval      string         `json:"interval,omitempty"`
	Concurrency   int            `json:"concurrency,omitempty"`
	Timeout       string         `json:"timeout,omitempty"`
	ICMPCount     int            `json:"icmp_count,omitempty"`
	HighPerfICMP  bool           `json:"high_perf_icmp,omitempty"`
	ICMPRateLimit int            `json:"icmp_rate_limit,omitempty"`
	DeviceTargets []DeviceTarget `json:"device_targets,omitempty"` // Per-device sweep configuration
	SweepGroupID  string         `json:"sweep_group_id,omitempty"` // Sweep group UUID for result tracking
	ConfigHash    string         `json:"config_hash,omitempty"`    // Hash of config for change detection
}

type SweepData struct {
	Network        string       `json:"network"`
	TotalHosts     int32        `json:"total_hosts"`
	AvailableHosts int32        `json:"available_hosts"`
	LastSweep      int64        `json:"last_sweep"`
	Ports          []PortStatus `json:"ports"`
}

type SweepHostState struct {
	HostIP           string            `json:"host_ip"`
	GatewayID        string            `json:"gateway_id"`
	AgentID          string            `json:"agent_id"`
	Partition        string            `json:"partition"`
	NetworkCIDR      *string           `json:"network_cidr,omitempty"`
	Hostname         *string           `json:"hostname,omitempty"`
	MAC              *string           `json:"mac,omitempty"`
	ICMPAvailable    bool              `json:"icmp_available"`
	ICMPResponseTime *int64            `json:"icmp_response_time_ns,omitempty"` // nanoseconds
	ICMPPacketLoss   *float64          `json:"icmp_packet_loss,omitempty"`
	TCPPortsScanned  []int             `json:"tcp_ports_scanned,omitempty"`
	TCPPortsOpen     []int             `json:"tcp_ports_open,omitempty"`
	PortScanResults  []PortResult      `json:"port_scan_results,omitempty"`
	LastSweepTime    time.Time         `json:"last_sweep_time"`
	FirstSeen        time.Time         `json:"first_seen"`
	Metadata         map[string]string `json:"metadata,omitempty"`
}

type SweepMode string

type SweepResult struct {
	AgentID         string            `json:"agent_id"`
	GatewayID       string            `json:"gateway_id"`
	Partition       string            `json:"partition"`
	DeviceID        string            `json:"device_id"`
	DiscoverySource string            `json:"discovery_source"`
	IP              string            `json:"ip"`
	MAC             *string           `json:"mac,omitempty"`
	Hostname        *string           `json:"hostname,omitempty"`
	Timestamp       time.Time         `json:"timestamp"`
	Available       bool              `json:"available,omitempty"`
	Metadata        map[string]string `json:"metadata,omitempty"`
	ExecutionID     string            `json:"execution_id,omitempty"`   // Sweep execution UUID for result tracking
	SweepGroupID    string            `json:"sweep_group_id,omitempty"` // Sweep group UUID this execution belongs to
}

type SweepSummary struct {
	Network        string       `json:"network"`
	TotalHosts     int          `json:"total_hosts"`
	AvailableHosts int          `json:"available_hosts"`
	LastSweep      int64        `json:"last_sweep"` // Unix timestamp
	Ports          []PortCount  `json:"ports"`
	Hosts          []HostResult `json:"hosts"`
	ExecutionID    string       `json:"execution_id,omitempty"`   // Sweep execution UUID for result tracking
	SweepGroupID   string       `json:"sweep_group_id,omitempty"` // Sweep group UUID this execution belongs to
}

type SysmonCPUResponse struct {
	Cpus      []CPUMetric        `json:"cpus"`
	Clusters  []CPUClusterMetric `json:"clusters,omitempty"`
	Timestamp time.Time          `json:"timestamp"`
}

type SysmonDiskResponse struct {
	Disks     []DiskMetric `json:"disks"`
	Timestamp time.Time    `json:"timestamp"`
}

type SysmonMemoryResponse struct {
	Memory    MemoryMetric `json:"memory"`
	Timestamp time.Time    `json:"timestamp"`
}

type SysmonMetricData struct {
	// ISO8601 timestamp when data was collected
	Timestamp string `json:"timestamp" example:"2025-04-24T14:15:22Z"`
	// Unique identifier for the host
	HostID string `json:"host_id" example:"server-east-1"`
	// IP address of the host
	HostIP string `json:"host_ip" example:"192.168.1.100"`
	// Partition identifier for device-centric model (optional)
	Partition *string `json:"partition,omitempty" example:"demo-staging"`
	// CPU metrics for each core
	CPUs []struct {
		// ID number of the CPU core
		CoreID int32 `json:"core_id" example:"0"`
		// Usage percentage (0-100)
		UsagePercent float32 `json:"usage_percent" example:"45.2"`
	} `json:"cpus"`
	// Disk usage metrics for each mount point
	Disks []struct {
		// Mount point path
		MountPoint string `json:"mount_point" example:"/var"`
		// Bytes currently in use
		UsedBytes uint64 `json:"used_bytes" example:"10737418240"`
		// Total capacity in bytes
		TotalBytes uint64 `json:"total_bytes" example:"107374182400"`
	} `json:"disks"`
	// Memory usage metrics
	Memory struct {
		// Bytes currently in use
		UsedBytes uint64 `json:"used_bytes" example:"4294967296"`
		// Total memory capacity in bytes
		TotalBytes uint64 `json:"total_bytes" example:"17179869184"`
	} `json:"memory"`
	// Process usage metrics for running processes
	Processes []struct {
		// Process ID
		PID uint32 `json:"pid" example:"1234"`
		// Process name
		Name string `json:"name" example:"nginx"`
		// CPU usage percentage
		CPUUsage float32 `json:"cpu_usage" example:"2.5"`
		// Memory usage in bytes
		MemoryUsage uint64 `json:"memory_usage" example:"104857600"`
		// Process status
		Status string `json:"status" example:"Running"`
		// Process start time
		StartTime string `json:"start_time" example:"2025-04-24T14:15:22Z"`
	} `json:"processes"`
}

type SysmonMetrics struct {
	// CPU usage metrics for individual cores
	CPUs []CPUMetric `json:"cpus"`
	// Aggregate CPU cluster metrics (e.g., big.LITTLE clusters)
	Clusters []CPUClusterMetric `json:"clusters,omitempty"`
	// Disk usage metrics for various mount points
	Disks []DiskMetric `json:"disks"`
	// Memory usage metrics
	Memory *MemoryMetric `json:"memory"`
	// Process usage metrics for running processes
	Processes []ProcessMetric `json:"processes"`
}

type SysmonProcessResponse struct {
	Processes []ProcessMetric `json:"processes"`
	Timestamp time.Time       `json:"timestamp"`
}

type SystemStatus struct {
	// Total number of gateways in the system
	TotalGateways int `json:"total_gateways" example:"15"`
	// Number of gateways that are currently healthy
	HealthyGateways int `json:"healthy_gateways" example:"12"`
	// Last time the system status was updated
	LastUpdate time.Time `json:"last_update" example:"2025-04-24T14:15:22Z"`
}

type TLSConfig struct {
	CertFile     string `json:"cert_file"`
	KeyFile      string `json:"key_file"`
	CAFile       string `json:"ca_file"`
	ClientCAFile string `json:"client_ca_file"`
}

type Target struct {
	Host     string
	Port     int
	Mode     SweepMode
	Metadata map[string]interface{} // Additional metadata about the scan

}

type TimeseriesMetric struct {
	GatewayID      string    `json:"gateway_id"` // Unique identifier for the gateway that collected this metric
	Name           string    `json:"name"`
	TargetDeviceIP string    `json:"target_device_ip"` // IP address of the device this metric is for
	DeviceID       string    `json:"device_id"`        // Device identifier in format "partition:ip"
	Partition      string    `json:"partition"`        // Partition identifier for this device
	IfIndex        int32     `json:"if_index"`
	Value          string    `json:"value"` // Store as string for flexibility
	Type           string    `json:"type"`  // Metric type identifier
	Timestamp      time.Time `json:"timestamp"`
	Metadata       string    `json:"metadata"`
}

type Token struct {
	// JWT access token used for API authorization
	AccessToken string `json:"access_token" example:"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."`
	// JWT refresh token used to obtain new access tokens
	RefreshToken string `json:"refresh_token" example:"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."`
	// When the access token expires
	ExpiresAt time.Time `json:"expires_at" example:"2025-04-25T12:00:00Z"`
}

type TopologyDiscoveryEvent struct {
	Timestamp              time.Time `json:"timestamp"`
	AgentID                string    `json:"agent_id"`
	GatewayID              string    `json:"gateway_id"`
	LocalDeviceIP          string    `json:"local_device_ip"`
	LocalDeviceID          string    `json:"local_device_id"`
	LocalIfIndex           int32     `json:"local_ifIndex"` // DB schema is int32; Postgres driver should handle
	LocalIfName            string    `json:"local_ifName"`
	ProtocolType           string    `json:"protocol_type"` // "LLDP" or "CDP"
	NeighborChassisID      string    `json:"neighbor_chassis_id"`
	NeighborPortID         string    `json:"neighbor_port_id"`
	NeighborPortDescr      string    `json:"neighbor_port_descr"`
	NeighborSystemName     string    `json:"neighbor_system_name"`
	NeighborManagementAddr string    `json:"neighbor_management_address"`
	// BGP specific fields - added
	NeighborBGPRouterID string          `json:"neighbor_bgp_router_id,omitempty"`
	NeighborIPAddress   string          `json:"neighbor_ip_address,omitempty"` // For BGP peer IP
	NeighborAS          uint32          `json:"neighbor_as,omitempty"`
	BGPSessionState     string          `json:"bgp_session_state,omitempty"`
	Metadata            json.RawMessage `json:"metadata"`
}

type User struct {
	// Unique identifier for the user
	ID string `json:"id" example:"u-1234567890"`
	// Email address of the user
	Email string `json:"email" example:"user@example.com"`
	// Display name of the user
	Name string `json:"name" example:"John Doe"`
	// Authentication provider (e.g., "local", "google", "github")
	Provider string `json:"provider" example:"google"`
	// User roles for RBAC
	Roles []string `json:"roles" example:"admin,user"`
	// User permissions for fine-grained access control
	Permissions []string `json:"permissions" example:"config:read,config:write"`
	// When the user account was created
	CreatedAt time.Time `json:"created_at" example:"2025-01-01T00:00:00Z"`
	// When the user account was last updated
	UpdatedAt time.Time `json:"updated_at" example:"2025-04-01T00:00:00Z"`
}

type WebhookConfig struct {
	Enabled  bool     `json:"enabled"`
	URL      string   `json:"url"`
	Cooldown Duration `json:"cooldown"`
	Template string   `json:"template"`
	Headers  []Header `json:"headers,omitempty"` // Optional custom headers
}

type WriteBufferConfig struct {
	MaxSize       int      `json:"max_size"`       // Maximum buffer size before forced flush (default: 500)
	FlushInterval Duration `json:"flush_interval"` // Maximum time to wait before flushing (default: 30s)
	Enabled       bool     `json:"enabled"`        // Whether buffering is enabled (default: true)
}