controlapi

type APIError struct {
	StatusCode int
	Message    string
	Body       []byte
}

type ApplyResponse struct {
	Revision       string             `json:"revision"`
	Writable       bool               `json:"writable"`
	UDPMaxSessions int                `json:"udp_max_sessions"`
	Rules          []engine.Rule      `json:"rules"`
	Result         engine.ApplyResult `json:"result"`
	ETag           string             `json:"-"`
}

type AuthInfo struct {
	Name string `json:"name"`
	Role string `json:"role"`
}

type Authenticator struct {
	// contains filtered or unexported fields
}

type BotConfigRequest struct {
	BotToken        string `json:"bot_token"`
	BotChat         int64  `json:"bot_chat"`
	BotControlToken string `json:"bot_control_token"`
}

type BotConfigResponse struct {
	Revision        string `json:"revision"`
	BotToken        string `json:"bot_token"`
	BotChat         int64  `json:"bot_chat"`
	BotControlToken string `json:"bot_control_token"`
	Running         bool   `json:"running"`
	ETag            string `json:"-"`
}

type BotController interface {
	// Apply stops any running bot and starts a new one with settings. If Token
	// or ChatID are zero, the bot is stopped and not restarted.
	Apply(settings BotSettings) error
	// Stop stops the running bot without changing persisted configuration.
	Stop() error
	// Running reports whether a bot goroutine is currently active.
	Running() bool
}

type BotSettings struct {
	Token        string
	ChatID       int64
	ControlToken string
}

type BotUnavailableError struct {
	Err error
}

type BotValidationError struct {
	Err error
}

type Client struct {
	// contains filtered or unexported fields
}

type ClientTLSFlags struct {
	// contains filtered or unexported fields
}

type ClientTLSOptions struct {
	CAFile             string // CA bundle to verify the server certificate (for private/self-signed CAs)
	ClientCertFile     string // client certificate (required for mTLS when the server sets client_ca_file)
	ClientKeyFile      string // client key (required together with ClientCertFile)
	InsecureSkipVerify bool   // skip server certificate verification (debug only)
}

type ConfigRuleDiff struct {
	RuleID        string `json:"rule_id"`
	ConfigAction  string `json:"config_action"`
	RuntimeAction string `json:"runtime_action"`
}

type ConfigRulesRequest struct {
	UDPMaxSessions int           `json:"udp_max_sessions"`
	Rules          []engine.Rule `json:"rules"`
}

type ConfigRulesResponse struct {
	Revision       string        `json:"revision"`
	Writable       bool          `json:"writable"`
	UDPMaxSessions int           `json:"udp_max_sessions"`
	Rules          []engine.Rule `json:"rules"`
	ETag           string        `json:"-"`
}

type CurrentPrecheckResponse struct {
	ConfigPath string          `json:"config_path,omitempty"`
	RuleCount  int             `json:"rule_count,omitempty"`
	Error      string          `json:"error,omitempty"`
	Result     precheck.Result `json:"result"`
}

type HeaderFlags []string

type PrecheckResponse struct {
	Revision              string           `json:"revision"`
	UDPMaxSessionsChanged bool             `json:"udp_max_sessions_changed"`
	Diff                  []ConfigRuleDiff `json:"diff"`
	Precheck              precheck.Result  `json:"precheck"`
}

type ReloadApplyError struct {
	Transaction engine.TransactionalApplyResult `json:"transaction"`
}

type ReloadResponse struct {
	ConfigPath  string `json:"config_path"`
	ControlPort int    `json:"control_port"`
	RuleCount   int    `json:"rule_count"`
}

type RestartRequiredError struct {
	Fields []string `json:"fields"`
}

type RulesResponse struct {
	Items []engine.Rule `json:"items"`
}

type Runtime struct {
	ConfigPath      string
	ServerVersion   string
	Commit          string
	StartedAt       time.Time
	Manager         *engine.Manager
	Logger          *slog.Logger
	Auth            *Authenticator
	Metrics         *metrics.Collector
	PrecheckOptions *precheck.Options
	CertStore       *certstore.Store
	CertReviewer    *certreview.Reviewer
	// HostNetwork returns a snapshot of the daemon host. It is optional so
	// embedders can omit host-level inspection from their control surface.
	HostNetwork func(context.Context) (netinfo.Snapshot, error)
	// Bot controls the Telegram bot lifecycle at runtime. May be nil when bot
	// support is disabled; bot config endpoints report unavailable then.
	Bot BotController
	// StartupConfig is the normalized file configuration used to start the
	// daemon. Reload uses it to reject changes to restart-only fields.
	StartupConfig *config.File
	// contains filtered or unexported fields
}

type SessionCapabilities struct {
	RulesWrite bool `json:"rules_write"`
}

type SessionResponse struct {
	Actor         string              `json:"actor"`
	Role          string              `json:"role"`
	Capabilities  SessionCapabilities `json:"capabilities"`
	APIVersion    string              `json:"api_version,omitempty"`
	ServerVersion string              `json:"server_version,omitempty"`
	Commit        string              `json:"commit,omitempty"`
	StartedTime   int64               `json:"started_time,omitempty"`
	Degraded      bool                `json:"degraded"`
	DegradedCause string              `json:"degraded_cause,omitempty"`
}

type SetupConfigUpdate struct {
	Language         string
	Auth             config.AuthConfig
	Rules            []engine.Rule
	RulesHeadComment string
}

type StatsResponse struct {
	Items       []TrafficSnapshot `json:"items"`
	HostNetwork *netinfo.Snapshot `json:"host_network,omitempty"`
}

type TrafficSnapshot = engine.TrafficSnapshot