wire

type BodyCodec struct {
	// Transforms is the ordered transform chain (e.g. decryption, decompression, de-framing).
	Transforms []string `json:"transforms,omitempty"`
	// ContentType is the logical content-type.
	ContentType string `json:"content_type,omitempty"`
}

type Capabilities struct {
	EarlyClaims      []EarlyClaim      `json:"early_claims,omitempty"`
	UpgradeClaims    []UpgradeClaim    `json:"upgrade_claims,omitempty"`
	InjectionTargets []InjectionTarget `json:"injection_targets,omitempty"`
}

type ClaimProbeParams struct {
	Host     string `json:"host,omitempty"`
	Port     int    `json:"port,omitempty"`
	PeerAddr string `json:"peer_addr,omitempty"`
	SNI      string `json:"sni,omitempty"`
	Data     []byte `json:"data,omitempty"`
}

type ClaimProbeResult struct {
	Claim bool `json:"claim"`
}

type CoreInvokeParams struct {
	Tool   string          `json:"tool"`
	Params json.RawMessage `json:"params,omitempty"`
}

type CoreInvokeResult struct {
	Content string `json:"content"`
	IsError bool   `json:"is_error,omitempty"`
}

type DialUpstreamParams struct {
	// Host and Port, when omitted, default to the original destination of
	// ParentFlowID's connection; supplying them redirects to a different upstream.
	Host         string           `json:"host,omitempty"`
	Port         int              `json:"port,omitempty"`
	TLS          *DialUpstreamTLS `json:"tls,omitempty"`
	ParentFlowID string           `json:"parent_flow_id,omitempty"`
}

type DialUpstreamResult struct {
	StreamID string `json:"stream_id"`
}

type DialUpstreamTLS struct {
	Enabled    bool     `json:"enabled"`
	SNI        string   `json:"sni,omitempty"`
	ALPN       []string `json:"alpn,omitempty"`
	SkipVerify bool     `json:"skip_verify,omitempty"`
}

type EarlyClaim struct {
	PortRange PortRange `json:"port_range"`
	TLS       *TLSClaim `json:"tls,omitempty"`
	// MagicBytesPrefix carries base64-encoded opening bytes.
	MagicBytesPrefix string `json:"magic_bytes_prefix,omitempty"`
	HostMatch        string `json:"host_match,omitempty"`
	Probe            bool   `json:"probe,omitempty"`
	ProbeMaxBytes    int    `json:"probe_max_bytes,omitempty"`
}

type Error struct {
	Code    int        `json:"code"`
	Message string     `json:"message"`
	Data    *ErrorData `json:"data,omitempty"`
}

type ErrorData struct {
	Adapter         string `json:"adapter,omitempty"`
	ConflictAdapter string `json:"conflict_adapter,omitempty"`
	FlowID          string `json:"flow_id,omitempty"`
	StreamID        string `json:"stream_id,omitempty"`
}

type Flow struct {
	// FlowID is empty on first emission (sectool assigns) and set to re-target an
	// existing flow for two-phase completion or session/stream teardown.
	FlowID       string         `json:"flow_id,omitempty"`
	Adapter      string         `json:"adapter,omitempty"`
	ProtocolTag  string         `json:"protocol_tag,omitempty"`
	Direction    string         `json:"direction,omitempty"`
	ParentFlowID string         `json:"parent_flow_id,omitempty"`
	Scheme       string         `json:"scheme,omitempty"`
	Port         int            `json:"port,omitempty"`
	Request      *FlowMessage   `json:"request,omitempty"`
	Response     *FlowMessage   `json:"response,omitempty"`
	StartedAt    time.Time      `json:"started_at,omitempty"`
	CompletedAt  time.Time      `json:"completed_at,omitempty"`
	Annotations  map[string]any `json:"annotations,omitempty"`
}

type FlowMessage struct {
	Method     string   `json:"method,omitempty"`
	Path       string   `json:"path,omitempty"`
	Query      string   `json:"query,omitempty"`
	StatusCode int      `json:"status_code,omitempty"`
	StatusText string   `json:"status_text,omitempty"`
	Headers    []Header `json:"headers,omitempty"`
	// Body is the logical payload every tool operates on.
	Body []byte `json:"body,omitempty"`
	// BodyRaw and BodyCodec carry the wire form when Body is not natively decodable by sectool.
	BodyRaw   []byte     `json:"body_raw,omitempty"`
	BodyCodec *BodyCodec `json:"body_codec,omitempty"`
}

type Handler interface {
	HandleRequest(ctx context.Context, method string, params json.RawMessage) (any, *Error)
	HandleNotification(ctx context.Context, method string, params json.RawMessage)
}

type HandlerFuncs struct {
	Request      func(ctx context.Context, method string, params json.RawMessage) (any, *Error)
	Notification func(ctx context.Context, method string, params json.RawMessage)
}

type Header struct {
	Name  string `json:"name"`
	Value string `json:"value"`
}

type InjectionTarget struct {
	TargetSchema json.RawMessage `json:"target_schema,omitempty"`
}

type InvokeAdapterParams struct {
	Adapter         string          `json:"adapter"`
	Target          json.RawMessage `json:"target,omitempty"`
	Payload         json.RawMessage `json:"payload,omitempty"`
	Mutations       []Mutation      `json:"mutations,omitempty"`
	WaitForResponse *bool           `json:"wait_for_response,omitempty"`
}

type InvokeAdapterResult struct {
	NewFlowIDs []string     `json:"new_flow_ids,omitempty"`
	Response   *FlowMessage `json:"response,omitempty"`
}

type InvokeToolParams struct {
	Name      string          `json:"name"`
	Arguments json.RawMessage `json:"arguments,omitempty"`
}

type InvokeToolResult struct {
	// Content is markdown text.
	Content string `json:"content,omitempty"`
	// StructuredContent is optional structured content.
	StructuredContent json.RawMessage `json:"structured_content,omitempty"`
	IsError           bool            `json:"is_error,omitempty"`
}

type LogParams struct {
	Level   string         `json:"level,omitempty"`
	Message string         `json:"message"`
	Fields  map[string]any `json:"fields,omitempty"`
}

type MCPTool struct {
	Name        string          `json:"name"`
	Description string          `json:"description,omitempty"`
	InputSchema json.RawMessage `json:"input_schema,omitempty"`
	Annotations json.RawMessage `json:"annotations,omitempty"`
}

type Message struct {
	JSONRPC string          `json:"jsonrpc"`
	ID      json.RawMessage `json:"id,omitempty"`
	Method  string          `json:"method,omitempty"`
	Params  json.RawMessage `json:"params,omitempty"`
	Result  json.RawMessage `json:"result,omitempty"`
	Error   *Error          `json:"error,omitempty"`
}

type Mutation struct {
	// Op names a shared mutation: set_header/remove_header, set_json/remove_json,
	// set_form/remove_form, set_query/remove_query, method, path, query, body.
	Op string `json:"op"`
	// Name holds the header name, JSON/query path, or form field for the keyed ops.
	Name string `json:"name,omitempty"`
	// Value holds the new value (the whole payload for method/path/query/body).
	Value string `json:"value,omitempty"`
}

type Peer struct {
	// contains filtered or unexported fields
}

type PortRange struct {
	Low  int `json:"low"`
	High int `json:"high"`
}

type ProtocolVersion struct {
	Major int `json:"major"`
	Minor int `json:"minor"`
}

type PushFlowParams = Flow

type PushFlowResult struct {
	FlowID string `json:"flow_id"`
}

type RegisterParams struct {
	Name            string          `json:"name"`
	ProtocolVersion ProtocolVersion `json:"protocol_version"`
	Protocols       []string        `json:"protocols"`
	Capabilities    Capabilities    `json:"capabilities"`
	MCPTools        []MCPTool       `json:"mcp_tools,omitempty"`
	InstanceID      string          `json:"instance_id,omitempty"`
	Resume          bool            `json:"resume,omitempty"`
}

type RegisterResult struct {
	ProtocolVersion ProtocolVersion `json:"protocol_version"`
	RulesSnapshot   []Rule          `json:"rules_snapshot"`
	ServerTime      string          `json:"server_time"`
}

type ReportMetricsParams struct {
	Counters map[string]int64   `json:"counters,omitempty"`
	Gauges   map[string]float64 `json:"gauges,omitempty"`
}

type Rule struct {
	RuleID  string `json:"rule_id"`
	Type    string `json:"type"`
	Label   string `json:"label,omitempty"`
	IsRegex bool   `json:"is_regex,omitempty"`
	Find    string `json:"find,omitempty"`
	Replace string `json:"replace,omitempty"`
	// Adapter scopes the rule: empty applies to every adapter, otherwise names the owning sidecar.
	Adapter string `json:"adapter,omitempty"`
}

type ShutdownParams struct {
	DrainSeconds int `json:"drain_seconds"`
}

type ShutdownResult struct {
	Ack bool `json:"ack"`
}

type SidecarSendParams struct {
	// FlowID, when set, selects the flow to replay.
	FlowID string `json:"flow_id,omitempty"`
	// Flow carries the resolved source so the adapter has body/body_raw/body_codec without a round-trip.
	Flow *Flow `json:"flow,omitempty"`
	// Destination is an optional scheme://host[:port] routing override (replay).
	Destination     string          `json:"destination,omitempty"`
	Target          json.RawMessage `json:"target,omitempty"`
	Payload         json.RawMessage `json:"payload,omitempty"`
	Mutations       []Mutation      `json:"mutations,omitempty"`
	FollowRedirects bool            `json:"follow_redirects,omitempty"`
	Force           bool            `json:"force,omitempty"`
	// WaitForResponse defaults to true when nil.
	WaitForResponse *bool  `json:"wait_for_response,omitempty"`
	StreamStrategy  string `json:"stream_strategy,omitempty"`
}

type SidecarSendResult struct {
	// NewFlowIDs are the flows the replay/origination produced.
	NewFlowIDs []string `json:"new_flow_ids,omitempty"`
	// Writes are the optional first outbound bytes.
	Writes []StreamWrite `json:"writes,omitempty"`
	// Response is the completed response form when WaitForResponse was set.
	Response *FlowMessage `json:"response,omitempty"`
}

type StreamEndedParams struct {
	StreamID string `json:"stream_id"`
	Reason   string `json:"reason,omitempty"`
}

type StreamOpenParams struct {
	StreamID string `json:"stream_id"`
	Host     string `json:"host,omitempty"`
	Path     string `json:"path,omitempty"`
	PeerAddr string `json:"peer_addr,omitempty"`
	// RequestFlowID is the captured triggering request's flow, set only for an
	// upgrade_claim; absent for an early_claim.
	RequestFlowID string `json:"request_flow_id,omitempty"`
	// RequestHeaders are the triggering request's headers, set only for an
	// upgrade_claim; absent for an early_claim.
	RequestHeaders []Header `json:"request_headers,omitempty"`
}

type StreamResult struct {
	Writes []StreamWrite `json:"writes,omitempty"`
}

type StreamWrite struct {
	// StreamID names the target stream, which may differ from the stream the event arrived on.
	StreamID string `json:"stream_id"`
	Data     []byte `json:"data"`
}

type StreamWriteParams struct {
	StreamID string `json:"stream_id"`
	Data     []byte `json:"data"`
}

type SyncRulesParams struct {
	SnapshotVersion uint64 `json:"snapshot_version"`
	Rules           []Rule `json:"rules"`
}

type SyncRulesResult struct {
	Ack            bool   `json:"ack"`
	AppliedVersion uint64 `json:"applied_version"`
}

type TLSCertSpec struct {
	DNSNames    []string `json:"dns_names,omitempty"`
	IPAddresses []string `json:"ip_addresses,omitempty"`
	URIs        []string `json:"uris,omitempty"`
	Emails      []string `json:"emails,omitempty"`
	CommonName  string   `json:"common_name,omitempty"`
}

type TLSClaim struct {
	Terminate bool   `json:"terminate"`
	SNIMatch  string `json:"sni_match,omitempty"`
	// Cert declares additive SANs for the leaf sectool mints when terminating.
	Cert *TLSCertSpec `json:"cert,omitempty"`
}

type UpgradeClaim struct {
	HostPattern   string   `json:"host_pattern,omitempty"`
	PathPattern   string   `json:"path_pattern,omitempty"`
	UpgradeSignal string   `json:"upgrade_signal,omitempty"` // http_101 | connect
	MethodSet     []string `json:"method_set,omitempty"`
}