models

type APIEnrollmentKey struct {
	Expiration        int64    `json:"expiration" swaggertype:"primitive,integer" format:"int64"`
	UsesRemaining     int      `json:"uses_remaining"`
	Networks          []string `json:"networks"`
	Unlimited         bool     `json:"unlimited"`
	Tags              []string `json:"tags" validate:"required,dive,min=3,max=32"`
	Type              KeyType  `json:"type"`
	Relay             string   `json:"relay"`
	Groups            []TagID  `json:"groups"`
	Default           bool     `json:"default"`
	AutoEgress        bool     `json:"auto_egress"`
	AutoAssignGateway bool     `json:"auto_assign_gw"`
}

type Acl = schema.Acl

type AclGroupType = schema.AclGroupType

type AclPolicy struct {
	TypeID        AclPolicyType
	PrefixTagUser AclGroupType
}

type AclPolicyTag = schema.AclPolicyTag

type AclPolicyType = schema.AclPolicyType

type AclPolicyTypes struct {
	ProtocolTypes []ProtocolType
	RuleTypes     []AclPolicyType `json:"policy_types"`
	SrcGroupTypes []AclGroupType  `json:"src_grp_types"`
	DstGroupTypes []AclGroupType  `json:"dst_grp_types"`
}

type AclRule struct {
	ID              string                  `json:"id"`
	IPList          []net.IPNet             `json:"ip_list"`
	IP6List         []net.IPNet             `json:"ip6_list"`
	AllowedProtocol Protocol                `json:"allowed_protocols"`
	AllowedPorts    []string                `json:"allowed_ports"`
	Direction       AllowedTrafficDirection `json:"direction"`
	Dst             []net.IPNet             `json:"dst"`
	Dst6            []net.IPNet             `json:"dst6"`
	Allowed         bool
}

type AllowedTrafficDirection = schema.AllowedTrafficDirection

type ApiHost struct {
	ID                      string     `json:"id"`
	Verbosity               int        `json:"verbosity"`
	FirewallInUse           string     `json:"firewallinuse"`
	Version                 string     `json:"version"`
	Name                    string     `json:"name"`
	OS                      string     `json:"os"`
	OSFamily                string     `json:"os_family" yaml:"os_family"`
	OSVersion               string     `json:"os_version"                      yaml:"os_version"`
	KernelVersion           string     `json:"kernel_version" yaml:"kernel_version"`
	Debug                   bool       `json:"debug"`
	IsStaticPort            bool       `json:"isstaticport"`
	IsStatic                bool       `json:"isstatic"`
	ListenPort              int        `json:"listenport"`
	WgPublicListenPort      int        `json:"wg_public_listen_port" yaml:"wg_public_listen_port"`
	TcpProxyEnabled         bool       `json:"tcp_proxy_enabled"`
	TcpProxyListenPort      int        `json:"tcp_proxy_listen_port"`
	TcpProxyTLSMode         string     `json:"tcp_proxy_tls_mode"`
	TcpProxyListenAddr      string     `json:"tcp_proxy_listen_addr,omitempty"`
	TcpProxyPublicHostname  string     `json:"tcp_proxy_public_hostname,omitempty"`
	TcpProxyCertFingerprint string     `json:"tcp_proxy_cert_fingerprint,omitempty"`
	MTU                     int        `json:"mtu"                   yaml:"mtu"`
	Interfaces              []ApiIface `json:"interfaces"            yaml:"interfaces"`
	DefaultInterface        string     `json:"defaultinterface"      yaml:"defautlinterface"`
	EndpointIP              string     `json:"endpointip"            yaml:"endpointip"`
	EndpointIPv6            string     `json:"endpointipv6"            yaml:"endpointipv6"`
	PublicKey               string     `json:"publickey"`
	MacAddress              string     `json:"macaddress"`
	Nodes                   []string   `json:"nodes"`
	IsDefault               bool       `json:"isdefault"             yaml:"isdefault"`
	NatType                 string     `json:"nat_type"              yaml:"nat_type"`
	PersistentKeepalive     int        `json:"persistentkeepalive"   yaml:"persistentkeepalive"`
	AutoUpdate              bool       `json:"autoupdate"              yaml:"autoupdate"`
	DNS                     string     `json:"dns"               yaml:"dns"`
	EnableFlowLogs          bool       `json:"enable_flow_logs" yaml:"enable_flow_logs"`
	Location                string     `json:"location"`
	CountryCode             string     `json:"country_code"`
	// Device-matching identifiers reported by netclient; read-only via the API.
	EntraDeviceID string `json:"entra_device_id" yaml:"entra_device_id"`
	SerialNumber  string `json:"serial_number"   yaml:"serial_number"`
	HardwareUUID  string `json:"hardware_uuid"   yaml:"hardware_uuid"`
}

type ApiIface struct {
	Name          string `json:"name"`
	AddressString string `json:"addressString"`
}

type ApiNode struct {
	ID                     string            `json:"id,omitempty" validate:"required,min=5,id_unique"`
	TenantID               string            `json:"tenant_id"`
	HostID                 string            `json:"hostid,omitempty" validate:"required,min=5,id_unique"`
	Address                string            `json:"address" validate:"omitempty,cidrv4"`
	Address6               string            `json:"address6" validate:"omitempty,cidrv6"`
	LocalAddress           string            `json:"localaddress" validate:"omitempty,cidr"`
	AllowedIPs             []string          `json:"allowedips"`
	LastModified           int64             `json:"lastmodified" swaggertype:"primitive,integer" format:"int64"`
	ExpirationDateTime     int64             `json:"expdatetime" swaggertype:"primitive,integer" format:"int64"`
	LastCheckIn            int64             `json:"lastcheckin" swaggertype:"primitive,integer" format:"int64"`
	LastPeerUpdate         int64             `json:"lastpeerupdate" swaggertype:"primitive,integer" format:"int64"`
	Network                string            `json:"network"`
	NetworkRange           string            `json:"networkrange"`
	NetworkRange6          string            `json:"networkrange6"`
	IsRelayed              bool              `json:"isrelayed"`
	IsRelay                bool              `json:"isrelay"`
	IsGw                   bool              `json:"is_gw"`
	IsAutoRelay            bool              `json:"is_auto_relay"`
	AutoRelayedPeers       map[string]string `json:"auto_relayed_peers"`
	AutoAssignGateway      bool              `json:"auto_assign_gw"`
	TcpProxyEnabled        bool              `json:"tcp_proxy_enabled"`
	TcpProxyListenPort     int               `json:"tcp_proxy_listen_port"`
	TcpProxyTLSMode        string            `json:"tcp_proxy_tls_mode"`
	TcpProxyListenAddr     string            `json:"tcp_proxy_listen_addr,omitempty"`
	TcpProxyPublicHostname string            `json:"tcp_proxy_public_hostname,omitempty"`
	UseTcpUplink           bool              `json:"use_tcp_uplink"`
	//AutoRelayedBy                 uuid.UUID           `json:"auto_relayed_by"`
	RelayedBy                     string              `json:"relayedby" bson:"relayedby" yaml:"relayedby"`
	RelayedNodes                  []string            `json:"relaynodes" yaml:"relayedNodes"`
	IsEgressGateway               bool                `json:"isegressgateway"`
	IsIngressGateway              bool                `json:"isingressgateway"`
	EgressGatewayRanges           []string            `json:"egressgatewayranges"`
	EgressGatewayNatEnabled       bool                `json:"egressgatewaynatenabled"`
	EgressGatewayRangesWithMetric []EgressRangeMetric `json:"egressgatewayranges_with_metric"`
	DNSOn                         bool                `json:"dnson"`
	IngressDns                    string              `json:"ingressdns"`
	IngressPersistentKeepalive    int32               `json:"ingresspersistentkeepalive"`
	IngressMTU                    int32               `json:"ingressmtu"`
	Server                        string              `json:"server"`
	Connected                     bool                `json:"connected"`
	PendingDelete                 bool                `json:"pendingdelete"`
	Metadata                      string              `json:"metadata"`
	// == PRO ==
	DefaultACL                        string              `json:"defaultacl,omitempty" validate:"checkyesornoorunset"`
	IsFailOver                        bool                `json:"is_fail_over"`
	FailOverPeers                     map[string]struct{} `json:"fail_over_peers" yaml:"fail_over_peers"`
	FailedOverBy                      uuid.UUID           `json:"failed_over_by" yaml:"failed_over_by"`
	IsInternetGateway                 bool                `json:"isinternetgateway" yaml:"isinternetgateway"`
	InetNodeReq                       InetNodeReq         `json:"inet_node_req" yaml:"inet_node_req"`
	InternetGwID                      string              `json:"internetgw_node_id" yaml:"internetgw_node_id"`
	SelectedInternetEgressID          string              `json:"selected_internet_egress_id" yaml:"selected_internet_egress_id"`
	AdditionalRagIps                  []string            `json:"additional_rag_ips" yaml:"additional_rag_ips"`
	Tags                              map[TagID]struct{}  `json:"tags" yaml:"tags"`
	IsStatic                          bool                `json:"is_static"`
	IsUserNode                        bool                `json:"is_user_node"`
	StaticNode                        ExtClient           `json:"static_node"`
	Status                            schema.NodeStatus   `json:"status"`
	Location                          string              `json:"location"`
	Country                           string              `json:"country"`
	PostureChecksViolations           []Violation         `json:"posture_check_violations"`
	PostureCheckVolationSeverityLevel schema.Severity     `json:"posture_check_violation_severity_level"`
	LastEvaluatedAt                   time.Time           `json:"last_evaluated_at"`
}

type ApiNodeStatus struct {
	ID         string            `json:"id"`
	IsStatic   bool              `json:"is_static"`
	IsUserNode bool              `json:"is_user_node"`
	Status     schema.NodeStatus `json:"status"`
}

type AuthParams struct {
	MacAddress string `json:"macaddress"`
	ID         string `json:"id"`
	Password   string `json:"password"`
}

type AutoRelayMeReq struct {
	NodeID        string `json:"node_id"`
	AutoRelayGwID string `json:"auto_relay_gw_id"`
}

type BulkDeleteError struct {
	ID    string `json:"id"`
	Error string `json:"error"`
}

type BulkDeleteRequest struct {
	IDs []string `json:"ids"`
}

type BulkDeleteResponse struct {
	Deleted []string          `json:"deleted"`
	Failed  []BulkDeleteError `json:"failed,omitempty"`
}

type BulkExtClientStatusUpdate struct {
	IDs     []string `json:"ids"`
	Enabled bool     `json:"enabled"`
}

type BulkNodeStatusUpdate struct {
	IDs       []string `json:"ids"`
	Connected bool     `json:"connected"`
}

type BulkStatusResponse struct {
	Updated []string          `json:"updated"`
	Failed  []BulkDeleteError `json:"failed,omitempty"`
}

type BulkUserStatusUpdate struct {
	IDs     []string `json:"ids"`
	Disable bool     `json:"disable"`
}

type CheckInResponse struct {
	Success          bool   `json:"success" bson:"success"`
	NeedPeerUpdate   bool   `json:"needpeerupdate" bson:"needpeerupdate"`
	NeedConfigUpdate bool   `json:"needconfigupdate" bson:"needconfigupdate"`
	NeedKeyUpdate    bool   `json:"needkeyupdate" bson:"needkeyupdate"`
	NeedDelete       bool   `json:"needdelete" bson:"needdelete"`
	NodeMessage      string `json:"nodemessage" bson:"nodemessage"`
	IsPending        bool   `json:"ispending" bson:"ispending"`
}

type Claims struct {
	ID         string
	MacAddress string
	Network    string
	jwt.RegisteredClaims
}

type CommonNode struct {
	ID                     uuid.UUID `json:"id"                  yaml:"id"`
	TenantID               string    `json:"tenant_id"`
	HostID                 uuid.UUID `json:"hostid"              yaml:"hostid"`
	Network                string    `json:"network"             yaml:"network"`
	NetworkRange           net.IPNet `json:"networkrange"        yaml:"networkrange"        swaggertype:"primitive,integer"`
	NetworkRange6          net.IPNet `json:"networkrange6"       yaml:"networkrange6"       swaggertype:"primitive,number"`
	Server                 string    `json:"server"              yaml:"server"`
	Connected              bool      `json:"connected"           yaml:"connected"`
	Address                net.IPNet `json:"address"             yaml:"address"`
	Address6               net.IPNet `json:"address6"            yaml:"address6"`
	Action                 string    `json:"action"              yaml:"action"`
	LocalAddress           net.IPNet `json:"localaddress"        yaml:"localaddress"`
	IsEgressGateway        bool      `json:"isegressgateway"     yaml:"isegressgateway"`
	EgressGatewayRanges    []string  `json:"egressgatewayranges" yaml:"egressgatewayranges"`
	IsIngressGateway       bool      `json:"isingressgateway"    yaml:"isingressgateway"`
	IsRelayed              bool      `json:"isrelayed"           yaml:"isrelayed"`
	RelayedBy              string    `json:"relayedby"           yaml:"relayedby"`
	IsRelay                bool      `json:"isrelay"             yaml:"isrelay"`
	IsGw                   bool      `json:"is_gw"             yaml:"is_gw"`
	RelayedNodes           []string  `json:"relaynodes"          yaml:"relayedNodes"`
	IngressDNS             string    `json:"ingressdns"          yaml:"ingressdns"`
	AutoAssignGateway      bool      `json:"auto_assign_gw"`
	TcpProxyEnabled        bool      `json:"tcp_proxy_enabled"`
	TcpProxyListenPort     int       `json:"tcp_proxy_listen_port"`
	TcpProxyTLSMode        string    `json:"tcp_proxy_tls_mode"`
	TcpProxyListenAddr     string    `json:"tcp_proxy_listen_addr,omitempty"`
	TcpProxyPublicHostname string    `json:"tcp_proxy_public_hostname,omitempty"`
	UseTcpUplink           bool      `json:"use_tcp_uplink"`
}

type CreateGwReq struct {
	IngressRequest
	RelayRequest
	InetNodeReq
	TcpProxyEnabled        bool   `json:"tcp_proxy_enabled"`
	TcpProxyListenPort     int    `json:"tcp_proxy_listen_port"`
	TcpProxyTLSMode        string `json:"tcp_proxy_tls_mode"`
	TcpProxyListenAddr     string `json:"tcp_proxy_listen_addr,omitempty"`
	TcpProxyPublicHostname string `json:"tcp_proxy_public_hostname,omitempty"`
}

type CreateTagReq struct {
	TagName     string           `json:"tag_name"`
	Network     schema.NetworkID `json:"network"`
	ColorCode   string           `json:"color_code"`
	TaggedNodes []ApiNode        `json:"tagged_nodes"`
}

type CustomExtClient struct {
	ClientID                   string              `json:"clientid,omitempty"`
	PublicKey                  string              `json:"publickey,omitempty"`
	DNS                        string              `json:"dns,omitempty"`
	ExtraAllowedIPs            []string            `json:"extraallowedips,omitempty"`
	Enabled                    bool                `json:"enabled,omitempty"`
	DeniedACLs                 map[string]struct{} `json:"deniednodeacls" bson:"acls,omitempty"`
	RemoteAccessClientID       string              `json:"remote_access_client_id"` // unique ID (MAC address) of RAC machine
	PostUp                     string              `json:"postup" bson:"postup" validate:"max=1024"`
	PostDown                   string              `json:"postdown" bson:"postdown" validate:"max=1024"`
	Tags                       map[TagID]struct{}  `json:"tags"`
	DeviceID                   string              `json:"device_id"`
	DeviceName                 string              `json:"device_name"`
	IsAlreadyConnectedToInetGw bool                `json:"is_already_connected_to_inet_gw"`
	PublicEndpoint             string              `json:"public_endpoint"`
	OS                         string              `json:"os"`
	OSFamily                   string              `json:"os_family" yaml:"os_family"`
	OSVersion                  string              `json:"os_version"                      yaml:"os_version"`
	KernelVersion              string              `json:"kernel_version" yaml:"kernel_version"`
	ClientVersion              string              `json:"client_version"`
	Country                    string              `json:"country"`
	Location                   string              `json:"location"` //format: lat,long
	UseInternetEgress          *bool               `json:"use_internet_egress,omitempty"`
	SelectedInternetEgressID   string              `json:"selected_internet_egress_id,omitempty"`
}

type DNSEntry = schema.DNSEntry

type DNSEntryType = schema.DNSEntryType

type DNSError struct {
	ErrorStrings []string
}

type DNSUpdate struct {
	Action     DNSUpdateAction
	Name       string
	NewName    string
	Address    string
	NewAddress string
}

type DNSUpdateAction int

type DeleteGw struct {
}

type DeviceExitNode struct {
	EgressID        string `json:"egress_id"`
	Name            string `json:"name"`
	Description     string `json:"description,omitempty"`
	Network         string `json:"network"`
	RoutingNodeID   string `json:"routing_node_id,omitempty"`
	RoutingHostName string `json:"routing_host_name,omitempty"`
	// TcpProxyEnabled is true when the routing node (or its host) accepts TCP uplinks.
	TcpProxyEnabled    bool `json:"tcp_proxy_enabled"`
	TcpProxyListenPort int  `json:"tcp_proxy_listen_port,omitempty"`
	Selected           bool `json:"selected"`
	Status             bool `json:"status"`
}

type DeviceExitNodeSelectionReq struct {
	EgressID     string `json:"egress_id"`
	UseTcpUplink bool   `json:"use_tcp_uplink"`
}

type DeviceJoinResult struct {
	Status string `json:"status"` // joined | pending
}

type DeviceNetwork struct {
	NetworkID   string `json:"network_id"`
	DisplayName string `json:"display_name,omitempty"`
	Joined      bool   `json:"joined"`
	Connected   bool   `json:"connected"`
	Pending     bool   `json:"pending"`
	Status      string `json:"status"` // available | joined | pending | blocked | jit_required | approval_required

	ApprovalRequired    bool   `json:"approval_required"`
	ApprovalRequestedAt *int64 `json:"approval_requested_at,omitempty"`

	JITEnabled        bool   `json:"jit_enabled"`
	JITAppliesToUser  bool   `json:"jit_applies_to_user"`
	HasJITAccess      bool   `json:"has_jit_access"`
	JITPendingRequest bool   `json:"jit_pending_request"`
	JITGrant          any    `json:"jit_grant,omitempty"`
	JITRequest        any    `json:"jit_request,omitempty"`
	JITExpiresAt      *int64 `json:"jit_expires_at,omitempty"`
}

type Diff struct {
	Old interface{}
	New interface{}
}

type DisplayKey struct {
	Name string `json:"name" bson:"name"`
	Uses int    `json:"uses" bson:"uses"`
}

type EgressDetails struct {
	EgressGatewayNatEnabled bool
	EgressGatewayRequest    EgressGatewayRequest
	IsEgressGateway         bool
	EgressGatewayRanges     []string
}

type EgressDomain struct {
	ID          string      `json:"id"`
	Node        Node        `json:"node"`
	Host        schema.Host `json:"host"`
	Domain      string      `json:"domain"`
	ResolvedIPs []string    `json:"resolved_ips,omitempty"`
}

type EgressGatewayRequest struct {
	NodeID           string              `json:"nodeid" bson:"nodeid"`
	NetID            string              `json:"netid" bson:"netid"`
	NatEnabled       string              `json:"natenabled" bson:"natenabled"`
	Ranges           []string            `json:"ranges" bson:"ranges"`
	RangesWithMetric []EgressRangeMetric `json:"ranges_with_metric"`
}

type EgressInfo struct {
	EgressID      string               `json:"egress_id" yaml:"egress_id"`
	Network       net.IPNet            `json:"network" yaml:"network"`
	EgressGwAddr  net.IPNet            `json:"egress_gw_addr" yaml:"egress_gw_addr"`
	Network6      net.IPNet            `json:"network6" yaml:"network6"`
	EgressGwAddr6 net.IPNet            `json:"egress_gw_addr6" yaml:"egress_gw_addr6"`
	EgressGWCfg   EgressGatewayRequest `json:"egress_gateway_cfg" yaml:"egress_gateway_cfg"`
	EgressFwRules map[string]AclRule   `json:"egress_fw_rules"`
}

type EgressNetworkRoutes struct {
	PeerKey                string              `json:"peer_key"`
	EgressGwAddr           net.IPNet           `json:"egress_gw_addr" yaml:"egress_gw_addr"`
	EgressGwAddr6          net.IPNet           `json:"egress_gw_addr6" yaml:"egress_gw_addr6"`
	NodeAddr               net.IPNet           `json:"node_addr"`
	NodeAddr6              net.IPNet           `json:"node_addr6"`
	EgressRanges           []string            `json:"egress_ranges"`
	EgressRangesWithMetric []EgressRangeMetric `json:"egress_ranges_metric"`
	Network                string              `json:"network"`
}

type EgressPresetApp struct {
	Name            string   `json:"name"`
	ID              string   `json:"id"`
	Description     string   `json:"description,omitempty"`
	Sources         []string `json:"sources"`
	Domains         []string `json:"domains"`
	Routes          []string `json:"routes,omitempty"`
	Group           string   `json:"group"`
	SuggestedDomain string   `json:"suggestedDomain"`
}

type EgressRangeMetric struct {
	// EgressID is the ID of the egress gateway that this EgressRangeMetric originated
	// from. Might not be always set.
	EgressID string `json:"-"`
	// EgressName is the name of the egress gateway identified by EgressID. Might not be always set.
	EgressName     string               `json:"-"`
	Network        string               `json:"network"`
	VirtualNetwork string               `json:"virtual_network"`
	RouteMetric    uint32               `json:"route_metric"` // preffered range 1-999
	Nat            bool                 `json:"nat"`
	Mode           schema.EgressNATMode `json:"nat_mode"`
}

type EgressReq struct {
	ID          string            `json:"id"`
	Name        string            `json:"name"`
	Network     string            `json:"network"`
	Description string            `json:"description"`
	Type        schema.EgressType `json:"type"`
	Nodes       map[string]int    `json:"nodes"`
	Tags        map[string]int    `json:"tags"`
	Range       string            `json:"range"`
	// Domains optional list of logical hostnames for domain-based egress (exact or *.example.com).
	Domains []string             `json:"domains"`
	Nat     bool                 `json:"nat"`
	Mode    schema.EgressNATMode `json:"mode"`
	Status  bool                 `json:"status"`
	// PresetID optional: reference to a catalog preset (see GET /api/v1/egress/presets). Explicit name/domain in the body override preset defaults.
	PresetID string `json:"preset_id"`
}

type EnrollmentKey struct {
	Expiration        time.Time `json:"expiration"`
	UsesRemaining     int       `json:"uses_remaining"`
	Value             string    `json:"value"`
	Networks          []string  `json:"networks"`
	Unlimited         bool      `json:"unlimited"`
	Tags              []string  `json:"tags"`
	Token             string    `json:"token,omitempty"` // B64 value of EnrollmentToken
	Type              KeyType   `json:"type"`
	Relay             uuid.UUID `json:"relay"`
	Groups            []TagID   `json:"groups"`
	Default           bool      `json:"default"`
	AutoEgress        bool      `json:"auto_egress"`
	AutoAssignGateway bool      `json:"auto_assign_gw"`
	// SkipDeviceApproval bypasses pending-host approval (device JWT API only; not serialized).
	SkipDeviceApproval bool `json:"-"`
}

type EnrollmentToken struct {
	Server   string `json:"server"`
	TenantID string `json:"tenant_id"`
	Value    string `json:"value"`
}

type Error string

type ErrorResponse struct {
	Code     int
	Message  string
	Response interface{}
}

type Event struct {
	TenantID    string
	Action      schema.Action
	Source      Subject
	Origin      schema.Origin
	Target      Subject
	TriggeredBy string
	NetworkID   schema.NetworkID
	Diff        Diff
}

type ExporterFeatureFlags struct {
	EnableFlowLogs bool
}

type ExtClient = schema.ExtClient

type ExtClientInfo struct {
	IngGwAddr   net.IPNet                `json:"ingress_gw_addr" yaml:"ingress_gw_addr"`
	Network     net.IPNet                `json:"network" yaml:"network"`
	Masquerade  bool                     `json:"masquerade" yaml:"masquerade"`
	ExtPeerAddr net.IPNet                `json:"ext_peer_addr" yaml:"ext_peer_addr"`
	ExtPeerKey  string                   `json:"ext_peer_key" yaml:"ext_peer_key"`
	Peers       map[string]PeerRouteInfo `json:"peers" yaml:"peers"`
}

type ExtPeersResponse struct {
	PublicKey       string `json:"publickey" bson:"publickey"`
	Endpoint        string `json:"endpoint" bson:"endpoint"`
	Address         string `json:"address" bson:"address"`
	Address6        string `json:"address6" bson:"address6"`
	LocalAddress    string `json:"localaddress" bson:"localaddress"`
	LocalListenPort int32  `json:"locallistenport" bson:"locallistenport"`
	ListenPort      int32  `json:"listenport" bson:"listenport"`
	KeepAlive       int32  `json:"persistentkeepalive" bson:"persistentkeepalive"`
}

type FeatureFlags struct {
	EnableEgressHA                bool `json:"enable_egress_ha"`
	EnableNetworkActivity         bool `json:"enable_network_activity"`
	EnableOAuth                   bool `json:"enable_oauth"`
	EnableIDPIntegration          bool `json:"enable_idp_integration"`
	EnableGwsHA                   bool `json:"enable_gws_ha"`
	EnableDeviceApproval          bool `json:"enable_device_approval"`
	EnableFlowLogs                bool `json:"enable_flow_logs"`
	EnablePostureChecks           bool `json:"enable_posture_checks"`
	EnableJIT                     bool `json:"enable_jit"`
	EnableOverlappingEgressRanges bool `json:"enable_overlapping_egress_ranges"`
	EnableSIEMIntegration         bool `json:"enable_siem_integration"`
}

type FormField struct {
	Id    string `json:"id"`
	Value any    `json:"value"`
}

type FormFields []FormField

type FwRule struct {
	SrcIP           net.IPNet `json:"src_ip"`
	DstIP           net.IPNet `json:"dst_ip"`
	AllowedProtocol Protocol  `json:"allowed_protocols"` // tcp, udp, etc.
	AllowedPorts    []string  `json:"allowed_ports"`
	Allow           bool      `json:"allow"`
}

type FwUpdate struct {
	AllowAll        bool                   `json:"allow_all"`
	AllowedNetworks []AclRule              `json:"networks"`
	IsEgressGw      bool                   `json:"is_egress_gw"`
	IsIngressGw     bool                   `json:"is_ingress_gw"`
	EgressInfo      map[string]EgressInfo  `json:"egress_info"`
	IngressInfo     map[string]IngressInfo `json:"ingress_info"`
	AclRules        map[string]AclRule     `json:"acl_rules"`
}

type GetClientConfReqDto struct {
	PreferredIp string `json:"preferred_ip"`
}

type GlobalConfig struct {
	Name string `json:"name" bson:"name"`
}

type HookCommand struct {
	ID       string // Hook ID to target
	Command  HookCommandType
	Interval time.Duration // Optional: new interval for restart command (0 means use existing)
}

type HookCommandType int

type HookDetails struct {
	ID       string        // Unique identifier for the hook (optional, auto-generated if empty)
	Hook     HookFunc      // Hook function that accepts optional variadic parameters
	Params   []interface{} // Optional parameters to pass to the hook function
	Interval time.Duration
}

type HookFunc func(...interface{}) error

type Host struct {
	ID                      uuid.UUID        `json:"id"                      yaml:"id"`
	Verbosity               int              `json:"verbosity"               yaml:"verbosity"`
	FirewallInUse           string           `json:"firewallinuse"           yaml:"firewallinuse"`
	Version                 string           `json:"version"                 yaml:"version"`
	IPForwarding            bool             `json:"ipforwarding"            yaml:"ipforwarding"`
	DaemonInstalled         bool             `json:"daemoninstalled"         yaml:"daemoninstalled"`
	AutoUpdate              bool             `json:"autoupdate"              yaml:"autoupdate"`
	HostPass                string           `json:"hostpass"                yaml:"hostpass"`
	Name                    string           `json:"name"                    yaml:"name"`
	OS                      string           `json:"os"                      yaml:"os"`
	OSFamily                string           `json:"os_family" yaml:"os_family"`
	OSVersion               string           `json:"os_version"                      yaml:"os_version"`
	KernelVersion           string           `json:"kernel_version" yaml:"kernel_version"`
	Interface               string           `json:"interface"               yaml:"interface"`
	Debug                   bool             `json:"debug"                   yaml:"debug"`
	ListenPort              int              `json:"listenport"              yaml:"listenport"`
	WgPublicListenPort      int              `json:"wg_public_listen_port"   yaml:"wg_public_listen_port"`
	TcpProxyEnabled         bool             `json:"tcp_proxy_enabled"       yaml:"tcp_proxy_enabled"`
	TcpProxyListenPort      int              `json:"tcp_proxy_listen_port"   yaml:"tcp_proxy_listen_port"`
	TcpProxyTLSMode         string           `json:"tcp_proxy_tls_mode"      yaml:"tcp_proxy_tls_mode"`
	TcpProxyListenAddr      string           `json:"tcp_proxy_listen_addr,omitempty" yaml:"tcp_proxy_listen_addr,omitempty"`
	TcpProxyPublicHostname  string           `json:"tcp_proxy_public_hostname,omitempty" yaml:"tcp_proxy_public_hostname,omitempty"`
	TcpProxyCertFingerprint string           `json:"tcp_proxy_cert_fingerprint,omitempty" yaml:"tcp_proxy_cert_fingerprint,omitempty"`
	MTU                     int              `json:"mtu"                     yaml:"mtu"`
	PublicKey               wgtypes.Key      `json:"publickey"               yaml:"publickey"`
	MacAddress              net.HardwareAddr `json:"macaddress"              yaml:"macaddress"`
	TrafficKeyPublic        []byte           `json:"traffickeypublic"        yaml:"traffickeypublic"`
	Nodes                   []string         `json:"nodes"                   yaml:"nodes"`
	Interfaces              []schema.Iface   `json:"interfaces"              yaml:"interfaces"`
	DefaultInterface        string           `json:"defaultinterface"        yaml:"defaultinterface"`
	EndpointIP              net.IP           `json:"endpointip"              yaml:"endpointip"`
	EndpointIPv6            net.IP           `json:"endpointipv6"            yaml:"endpointipv6"`
	IsDocker                bool             `json:"isdocker"                yaml:"isdocker"`
	IsK8S                   bool             `json:"isk8s"                   yaml:"isk8s"`
	IsStaticPort            bool             `json:"isstaticport"            yaml:"isstaticport"`
	IsStatic                bool             `json:"isstatic"        yaml:"isstatic"`
	IsDefault               bool             `json:"isdefault"               yaml:"isdefault"`
	DNS                     string           `json:"dns_status"               yaml:"dns_status"`
	NatType                 string           `json:"nat_type,omitempty"      yaml:"nat_type,omitempty"`
	TurnEndpoint            *netip.AddrPort  `json:"turn_endpoint,omitempty" yaml:"turn_endpoint,omitempty"`
	PersistentKeepalive     time.Duration    `json:"persistentkeepalive" swaggertype:"primitive,integer" format:"int64" yaml:"persistentkeepalive"`
	Location                string           `json:"location"` // Format: "lat,lon"
	CountryCode             string           `json:"country_code"`
	EnableFlowLogs          bool             `json:"enable_flow_logs" yaml:"enable_flow_logs"`

	// MDM device-matching identifiers. Reported by netclient on host check-in
	// and consumed by the MDM sync worker to match a Netmaker host to its
	// upstream MDM-managed device record.
	EntraDeviceID string `json:"entra_device_id" yaml:"entra_device_id"`
	SerialNumber  string `json:"serial_number"   yaml:"serial_number"`
	HardwareUUID  string `json:"hardware_uuid"   yaml:"hardware_uuid"`
	OwnerUsername string `json:"owner_username" yaml:"owner_username"`
}

type HostEDRStatus struct {
	Provider       string    `json:"provider"`
	MatchedBy      string    `json:"matched_by"`
	AgentInstalled bool      `json:"agent_installed"`
	AgentHealthy   bool      `json:"agent_healthy"`
	RiskLevel      string    `json:"risk_level"`
	LastSyncedAt   time.Time `json:"last_synced_at"`
	LastSeenAt     time.Time `json:"last_seen_at"`
	LastError      string    `json:"last_error,omitempty"`
}

type HostInfoMap map[string]HostNetworkInfo

type HostMDMStatus struct {
	Provider     string    `json:"provider"`
	MatchedBy    string    `json:"matched_by"`
	Enrolled     bool      `json:"enrolled"`
	Compliant    bool      `json:"compliant"`
	LastSyncedAt time.Time `json:"last_synced_at"`
}

type HostMqAction string

type HostNetworkInfo struct {
	Interfaces              []schema.Iface `json:"interfaces" yaml:"interfaces"`
	ListenPort              int            `json:"listen_port" yaml:"listen_port"`
	IsStaticPort            bool           `json:"is_static_port"`
	IsStatic                bool           `json:"is_static"`
	Version                 string         `json:"version"`
	TcpProxyEnabled         bool           `json:"tcp_proxy_enabled,omitempty"`
	TcpProxyListenPort      int            `json:"tcp_proxy_listen_port,omitempty"`
	TcpProxyTLSMode         string         `json:"tcp_proxy_tls_mode,omitempty"`
	TcpProxyListenAddr      string         `json:"tcp_proxy_listen_addr,omitempty"`
	TcpProxyPublicHostname  string         `json:"tcp_proxy_public_hostname,omitempty"`
	TcpProxyCertFingerprint string         `json:"tcp_proxy_cert_fingerprint,omitempty"`
}

type HostPeerInfo struct {
	NetworkPeerIDs map[schema.NetworkID]PeerMap `json:"network_peers"`
}

type HostPeerUpdate struct {
	Host               schema.Host                 `json:"host"`
	Nodes              []Node                      `json:"nodes"`
	ChangeDefaultGw    bool                        `json:"change_default_gw"`
	DefaultGwIp        net.IP                      `json:"default_gw_ip"`
	DefaultGwIp6       net.IP                      `json:"default_gw_ip6"`
	IsInternetGw       bool                        `json:"is_inet_gw"`
	NodeAddrs          []net.IPNet                 `json:"nodes_addrs"`
	Server             string                      `json:"server"`
	ServerVersion      string                      `json:"serverversion"`
	ServerAddrs        []ServerAddr                `json:"serveraddrs"`
	NodePeers          []wgtypes.PeerConfig        `json:"node_peers"`
	Peers              []wgtypes.PeerConfig        `json:"host_peers"`
	PeerIDs            PeerMap                     `json:"peerids"`
	HostNetworkInfo    HostInfoMap                 `json:"host_network_info,omitempty"`
	EgressRoutes       []EgressNetworkRoutes       `json:"egress_network_routes"`
	FwUpdate           FwUpdate                    `json:"fw_update"`
	ReplacePeers       bool                        `json:"replace_peers"`
	NameServers        []string                    `json:"name_servers"`
	DnsNameservers     []Nameserver                `json:"dns_nameservers"`
	EgressWithDomains  []EgressDomain              `json:"egress_with_domains"`
	AutoRelayNodes     map[schema.NetworkID][]Node `json:"auto_relay_nodes"`
	GwNodes            map[schema.NetworkID][]Node `json:"gw_nodes"`
	AddressIdentityMap map[string]PeerIdentity     `json:"address_identity_map"`
	ServerConfig
	OldPeerUpdateFields
}

type HostPostureStatus struct {
	HostID      string                 `json:"host_id"`
	EvaluatedAt time.Time              `json:"evaluated_at"`
	MDM         *HostMDMStatus         `json:"mdm,omitempty"`
	EDR         *HostEDRStatus         `json:"edr,omitempty"`
	Networks    []NetworkPostureStatus `json:"networks"`
}

type HostPull struct {
	Host               schema.Host                 `json:"host" yaml:"host"`
	Nodes              []Node                      `json:"nodes" yaml:"nodes"`
	Peers              []wgtypes.PeerConfig        `json:"peers" yaml:"peers"`
	ServerConfig       ServerConfig                `json:"server_config" yaml:"server_config"`
	PeerIDs            PeerMap                     `json:"peer_ids,omitempty" yaml:"peer_ids,omitempty"`
	HostNetworkInfo    HostInfoMap                 `json:"host_network_info,omitempty"  yaml:"host_network_info,omitempty"`
	EgressRoutes       []EgressNetworkRoutes       `json:"egress_network_routes"`
	FwUpdate           FwUpdate                    `json:"fw_update"`
	ChangeDefaultGw    bool                        `json:"change_default_gw"`
	DefaultGwIp        net.IP                      `json:"default_gw_ip"`
	DefaultGwIp6       net.IP                      `json:"default_gw_ip6"`
	IsInternetGw       bool                        `json:"is_inet_gw"`
	EndpointDetection  bool                        `json:"endpoint_detection"`
	NameServers        []string                    `json:"name_servers"`
	EgressWithDomains  []EgressDomain              `json:"egress_with_domains"`
	DnsNameservers     []Nameserver                `json:"dns_nameservers"`
	AutoRelayNodes     map[schema.NetworkID][]Node `json:"auto_relay_nodes"`
	GwNodes            map[schema.NetworkID][]Node `json:"gw_nodes"`
	ReplacePeers       bool                        `json:"replace_peers"`
	AddressIdentityMap map[string]PeerIdentity     `json:"address_identity_map"`
}

type HostRelayRequest struct {
	HostID       string   `json:"host_id"`
	RelayedHosts []string `json:"relayed_hosts"`
}

type HostTurnRegister struct {
	HostID       string `json:"host_id"`
	HostPassHash string `json:"host_pass_hash"`
}

type HostUpdate struct {
	Action       HostMqAction
	Host         schema.Host
	Node         Node
	Signal       Signal
	EgressDomain EgressDomain
	NewMetrics   Metrics
}

type IDPSyncStatus struct {
	// Status would be one of: in_progress, completed or failed.
	Status string `json:"status"`
	// Description is empty if the sync is ongoing or completed,
	// and describes the error when the sync fails.
	Description string `json:"description"`
}

type IDPSyncTestRequest struct {
	AuthProvider      string `json:"auth_provider"`
	ClientID          string `json:"client_id"`
	ClientSecret      string `json:"client_secret"`
	AzureTenantID     string `json:"azure_tenant_id"`
	GoogleAdminEmail  string `json:"google_admin_email"`
	GoogleSACredsJson string `json:"google_sa_creds_json"`
	OktaOrgURL        string `json:"okta_org_url"`
	OktaAPIToken      string `json:"okta_api_token"`
}

type IDandAddr struct {
	ID                      string `json:"id" bson:"id" yaml:"id"`
	HostID                  string `json:"host_id"`
	Address                 string `json:"address" bson:"address" yaml:"address"`
	Address4                string `json:"address4"`
	Address6                string `json:"address6"`
	Name                    string `json:"name" bson:"name" yaml:"name"`
	IsServer                string `json:"isserver" bson:"isserver" yaml:"isserver" validate:"checkyesorno"`
	Network                 string `json:"network" bson:"network" yaml:"network" validate:"network"`
	ListenPort              int    `json:"listen_port" yaml:"listen_port"`
	IsExtClient             bool   `json:"is_extclient"`
	UserName                string `json:"username"`
	TcpProxyEndpoint        string `json:"tcp_proxy_endpoint,omitempty"` // wss://host:port/uplink/v1 when peer is a TCP-enabled gateway
	TcpProxyCertFingerprint string `json:"tcp_proxy_cert_fingerprint,omitempty"`
}

type InetNodeReq struct {
	InetNodeClientIDs []string `json:"inet_node_client_ids"`
}

type IngressGwUsers struct {
	NodeID  string       `json:"node_id"`
	Network string       `json:"network"`
	Users   []ReturnUser `json:"users"`
}

type IngressInfo struct {
	IngressID     string      `json:"ingress_id"`
	Network       net.IPNet   `json:"network"`
	Network6      net.IPNet   `json:"network6"`
	StaticNodeIps []net.IP    `json:"static_node_ips"`
	Rules         []FwRule    `json:"rules"`
	EgressRanges  []net.IPNet `json:"egress_ranges"`
	EgressRanges6 []net.IPNet `json:"egress_ranges6"`
}

type IngressRequest struct {
	ExtclientDNS        string `json:"extclientdns"`
	IsInternetGateway   bool   `json:"is_internet_gw"`
	Metadata            string `json:"metadata"`
	PersistentKeepalive int32  `json:"persistentkeepalive"`
	MTU                 int32  `json:"mtu"`
}

type IntClient struct {
	ClientID             string `json:"clientid" bson:"clientid"`
	PrivateKey           string `json:"privatekey" bson:"privatekey"`
	PublicKey            string `json:"publickey" bson:"publickey"`
	AccessKey            string `json:"accesskey" bson:"accesskey"`
	Address              string `json:"address" bson:"address"`
	Address6             string `json:"address6" bson:"address6"`
	Network              string `json:"network" bson:"network"`
	ServerPublicEndpoint string `json:"serverpublicendpoint" bson:"serverpublicendpoint"`
	ServerAPIPort        string `json:"serverapiport" bson:"serverapiport"`
	ServerPrivateAddress string `json:"serverprivateaddress" bson:"serverprivateaddress"`
	ServerWGPort         string `json:"serverwgport" bson:"serverwgport"`
	ServerKey            string `json:"serverkey" bson:"serverkey"`
	IsServer             string `json:"isserver" bson:"isserver"`
}

type InviteUsersReq struct {
	UserEmails     []string                                            `json:"user_emails"`
	PlatformRoleID string                                              `json:"platform_role_id"`
	UserGroups     map[schema.UserGroupID]struct{}                     `json:"user_group_ids"`
	NetworkRoles   map[schema.NetworkID]map[schema.UserRoleID]struct{} `json:"network_roles"`
}

type JITAccessRequest struct {
	NetworkID string `json:"network_id"` // Network identifier
	Reason    string `json:"reason"`     // Reason for access request (required)
}

type JITOperationRequest struct {
	Action       string   `json:"action"` // enable, disable, update_jit_user_groups, request, approve, deny
	RequestID    string   `json:"request_id,omitempty"`
	GrantID      string   `json:"grant_id,omitempty"`
	Reason       string   `json:"reason,omitempty"`
	ExpiresAt    int64    `json:"expires_at,omitempty"`     // Unix epoch timestamp (seconds) for when access should expire
	UserGroupIDs []string `json:"user_group_ids,omitempty"` // optional JIT allowlist; empty on enable = all users
}

type JoinData struct {
	Host schema.Host `json:"host" yaml:"host"`
	Node Node        `json:"node" yaml:"node"`
	Key  string      `json:"key" yaml:"key"`
}

type KeyType int

type KeyUpdate struct {
	Network   string `json:"network" bson:"network"`
	Interface string `json:"interface" bson:"interface"`
}

type LicenseLimits struct {
	Servers  int `json:"servers"`
	Users    int `json:"users"`
	Hosts    int `json:"hosts"`
	Clients  int `json:"clients"`
	Networks int `json:"networks"`
}

type LoginMethodRequest struct {
	Username string `json:"username"`
}

type LoginMethodsAvailable struct {
	BasicAuth      bool   `json:"basic_auth"`
	SSO            bool   `json:"sso"`
	SSOProvider    string `json:"sso_provider,omitempty"`
	OrgAuth        bool   `json:"org_auth,omitempty"`
	OrganizationID string `json:"organization_id,omitempty"`
}

type LoginMethodsResponse struct {
	Options []LoginOption `json:"login_options"`
}

type LoginOption struct {
	Scope         scope.Scope           `json:"scope"`
	ScopeID       string                `json:"scope_id"`
	ScopeName     string                `json:"scope_name"`
	ScopeSlug     string                `json:"scope_slug"`
	ScopeMetadata string                `json:"scope_metadata"`
	Methods       LoginMethodsAvailable `json:"methods"`
}

type LoginReqDto struct {
	Email    string `json:"email"`
	TenantID string `json:"tenant_id"`
}

type Metric = schema.Metric

type Metrics = schema.Metrics

type MetricsMap map[string]Metrics

type Nameserver struct {
	IPs            []string `json:"ips"`
	MatchDomain    string   `json:"match_domain"`
	IsSearchDomain bool     `json:"is_search_domain"`
	IsFallback     bool     `json:"is_fallback"`
	IsADDomain     bool     `json:"is_ad_domain"`
}

type NameserverReq struct {
	Name        string   `json:"name"`
	Network     string   `json:"network"`
	Description string   ` json:"description"`
	Servers     []string `json:"servers"`
	MatchDomain string   `json:"match_domain"`
	Tags        []string `json:"tags"`
	Status      bool     `gorm:"status" json:"status"`
}

type Network struct {
	AddressRange        string   `json:"addressrange" bson:"addressrange" validate:"omitempty,cidrv4"`
	AddressRange6       string   `json:"addressrange6" bson:"addressrange6" validate:"omitempty,cidrv6"`
	NetID               string   `json:"netid" bson:"netid" validate:"required,min=1,max=32,netid_valid"`
	NodesLastModified   int64    `json:"nodeslastmodified" bson:"nodeslastmodified" swaggertype:"primitive,integer" format:"int64"`
	NetworkLastModified int64    `json:"networklastmodified" bson:"networklastmodified" swaggertype:"primitive,integer" format:"int64"`
	DefaultKeepalive    int32    `json:"defaultkeepalive" bson:"defaultkeepalive" validate:"omitempty,max=1000"`
	IsIPv4              string   `json:"isipv4" bson:"isipv4" validate:"checkyesorno"`
	IsIPv6              string   `json:"isipv6" bson:"isipv6" validate:"checkyesorno"`
	DefaultMTU          int32    `json:"defaultmtu" bson:"defaultmtu"`
	DefaultACL          string   `json:"defaultacl" bson:"defaultacl" yaml:"defaultacl" validate:"checkyesorno"`
	NameServers         []string `json:"dns_nameservers"`
	AutoJoin            string   `json:"auto_join"`
	AutoRemove          string   `json:"auto_remove"`
	AutoRemoveTags      []string `json:"auto_remove_tags"`
	AutoRemoveThreshold int      `json:"auto_remove_threshold_mins"`
	JITEnabled          string   `json:"jit_enabled" bson:"jit_enabled" validate:"checkyesorno"`
	// VirtualNATPoolIPv4 is the IPv4 CIDR pool from which virtual NAT ranges are allocated for egress gateways
	VirtualNATPoolIPv4 string `json:"virtual_nat_pool_ipv4"`
	// VirtualNATSitePrefixLenIPv4 is the prefix length (e.g., 24) for individual site allocations from the IPv4 virtual NAT pool
	VirtualNATSitePrefixLenIPv4 int    `json:"virtual_nat_site_prefixlen_ipv4"`
	CreatedBy                   string `json:"created_by"`
	CreatedAt                   time.Time
}

type NetworkMetrics struct {
	Nodes MetricsMap `json:"nodes" bson:"nodes" yaml:"nodes"`
}

type NetworkPostureStatus struct {
	NetworkID  string          `json:"network_id"`
	NodeID     string          `json:"node_id"`
	Severity   schema.Severity `json:"severity"`
	Status     string          `json:"status"` // pass | warn | fail
	Violations []Violation     `json:"violations"`
}

type NetworkUsage struct {
	Nodes            int `json:"nodes"`
	Clients          int `json:"clients"`
	Ingresses        int `json:"ingresses"`
	Egresses         int `json:"egresses"`
	Relays           int `json:"relays"`
	InternetGateways int `json:"internet_gateways"`
	FailOvers        int `json:"fail_overs"`
}

type Node struct {
	CommonNode
	PendingDelete              bool                 `json:"pendingdelete"`
	LastModified               time.Time            `json:"lastmodified"`
	LastCheckIn                time.Time            `json:"lastcheckin"`
	LastPeerUpdate             time.Time            `json:"lastpeerupdate"`
	ExpirationDateTime         time.Time            `json:"expdatetime"`
	EgressGatewayNatEnabled    bool                 `json:"egressgatewaynatenabled"`
	EgressGatewayRequest       EgressGatewayRequest `json:"egressgatewayrequest"`
	IngressGatewayRange        string               `json:"ingressgatewayrange"`
	IngressGatewayRange6       string               `json:"ingressgatewayrange6"`
	IngressPersistentKeepalive int32                `json:"ingresspersistentkeepalive"`
	IngressMTU                 int32                `json:"ingressmtu"`
	Metadata                   string               `json:"metadata"`
	// == PRO ==
	OwnerID     string `json:"ownerid,omitempty"`
	IsFailOver  bool   `json:"is_fail_over"`
	IsAutoRelay bool   `json:"is_auto_relay"`
	//AutoRelayedPeers   map[string]struct{} `json:"auto_relayed_peers"`
	AutoRelayedPeers map[string]string `json:"auto_relayed_peers_v1"`
	//AutoRelayedBy     uuid.UUID           `json:"auto_relayed_by"`
	FailOverPeers     map[string]struct{} `json:"fail_over_peers"`
	FailedOverBy      uuid.UUID           `json:"failed_over_by"`
	IsInternetGateway bool                `json:"isinternetgateway"`
	InetNodeReq       InetNodeReq         `json:"inet_node_req"`
	InternetGwID      string              `json:"internetgw_node_id"`
	// SelectedInternetEgressID is the internet-type egress this node uses as its exit node (empty = none).
	SelectedInternetEgressID           string             `json:"selected_internet_egress_id"`
	AdditionalRagIps                   []net.IP           `json:"additional_rag_ips" swaggertype:"array,number"`
	Tags                               map[TagID]struct{} `json:"tags"`
	IsStatic                           bool               `json:"is_static"`
	IsUserNode                         bool               `json:"is_user_node"`
	StaticNode                         ExtClient          `json:"static_node"`
	Status                             schema.NodeStatus  `json:"node_status"`
	Mutex                              *sync.Mutex        `json:"-"`
	EgressDetails                      EgressDetails      `json:"-"`
	PostureChecksViolations            []Violation        `json:"posture_check_violations"`
	PostureCheckViolationSeverityLevel schema.Severity    `json:"posture_check_violation_severity_level"`
	LastEvaluationCycleID              string             `json:"last_evaluation_cycle_id"`
	LastEvaluatedAt                    time.Time          `json:"last_evaluated_at"`
	Location                           string             `json:"location"` // Format: "lat,lon"
	CountryCode                        string             `json:"country_code"`
}

type NodeAuth struct {
	Network    string
	Password   string
	MacAddress string // Depricated
	ID         string
}

type NodeCheckin struct {
	Version   string
	Connected bool
	Ifaces    []schema.Iface
}

type NodeExitNodeSelectionReq struct {
	EgressID     string `json:"egress_id"`
	UseTcpUplink bool   `json:"use_tcp_uplink"`
}

type NodeGet struct {
	Node         Node                 `json:"node" bson:"node" yaml:"node"`
	Host         schema.Host          `json:"host" yaml:"host"`
	Peers        []wgtypes.PeerConfig `json:"peers" bson:"peers" yaml:"peers"`
	HostPeers    []wgtypes.PeerConfig `json:"host_peers" bson:"host_peers" yaml:"host_peers"`
	ServerConfig ServerConfig         `json:"serverconfig" bson:"serverconfig" yaml:"serverconfig"`
	PeerIDs      PeerMap              `json:"peerids,omitempty" bson:"peerids,omitempty" yaml:"peerids,omitempty"`
}

type NodeJoinResponse struct {
	Node         Node                 `json:"node" bson:"node" yaml:"node"`
	Host         schema.Host          `json:"host" yaml:"host"`
	ServerConfig ServerConfig         `json:"serverconfig" bson:"serverconfig" yaml:"serverconfig"`
	Peers        []wgtypes.PeerConfig `json:"peers" bson:"peers" yaml:"peers"`
}

type NodeWithHost struct {
	ID                                string                                `json:"id"`
	TenantID                          string                                `json:"tenant_id"`
	HostID                            string                                `json:"host_id"`
	Host                              *ApiHost                              `json:"host,omitempty"`
	NetworkID                         string                                `json:"network_id"`
	Address                           string                                `json:"address"`
	Address6                          string                                `json:"address6"`
	Connected                         bool                                  `json:"connected"`
	Action                            string                                `json:"action"`
	Status                            schema.NodeStatus                     `json:"status"`
	PendingDelete                     bool                                  `json:"pending_delete"`
	AutoAssignGateway                 bool                                  `json:"auto_assign_gateway"`
	IsGateway                         bool                                  `json:"is_gateway"`
	IsAutoRelay                       bool                                  `json:"is_auto_relay"`
	IsInternetGateway                 bool                                  `json:"is_internet_gateway"`
	RelayedClients                    datatypes.JSONMap                     `json:"relayed_clients"`
	RelayedIGWClients                 datatypes.JSONMap                     `json:"relayed_igw_clients"`
	RelayedByNodeID                   *string                               `json:"relayed_by_node_id"`
	IsIGWClient                       bool                                  `json:"is_igw_client"`
	SelectedInternetEgressID          string                                `json:"selected_internet_egress_id"`
	AutoRelayedPeers                  datatypes.JSONType[map[string]string] `json:"auto_relayed_peers"`
	Tags                              datatypes.JSONMap                     `json:"tags"`
	PostureCheckSeverity              schema.Severity                       `json:"posture_check_severity"`
	PostureCheckLastEvaluationCycleID string                                `json:"posture_check_last_evaluation_cycle_id"`
	Metadata                          string                                `json:"metadata"`
	LastCheckIn                       time.Time                             `json:"last_check_in"`
	ExpirationDateTime                time.Time                             `json:"expiration_date_time"`
	CreatedAt                         time.Time                             `json:"created_at"`
	UpdatedAt                         time.Time                             `json:"updated_at"`
}

type NodesArray []Node

type OldPeerUpdateFields struct {
	NodePeers         []wgtypes.PeerConfig `json:"peers" bson:"peers" yaml:"peers"`
	OldPeers          []wgtypes.PeerConfig `json:"Peers"`
	EndpointDetection bool                 `json:"endpoint_detection"`
}

type OnboardingStatus struct {
	ShowOnboarding bool `json:"show_onboarding"`
	NetworkCount   int  `json:"network_count"`
}

type PaginatedResponse struct {
	Data       interface{} `json:"data"`
	Page       int         `json:"page"`
	PerPage    int         `json:"per_page"`
	Total      int         `json:"total"`
	TotalPages int         `json:"total_pages"`
}

type PartialUserLoginResponse struct {
	UserName     string `json:"user_name"`
	PreAuthToken string `json:"pre_auth_token"`
}

type PeerIdentity struct {
	ID   string   `json:"id"`
	Type PeerType `json:"type"`
	Name string   `json:"name"`
}

type PeerMap map[string]IDandAddr

type PeerRouteInfo struct {
	PeerAddr net.IPNet `json:"peer_addr" yaml:"peer_addr"`
	PeerKey  string    `json:"peer_key" yaml:"peer_key"`
	Allow    bool      `json:"allow" yaml:"allow"`
	ID       string    `json:"id,omitempty" yaml:"id,omitempty"`
}

type PeerType int

type PeersResponse struct {
	PublicKey           string `json:"publickey" bson:"publickey"`
	Endpoint            string `json:"endpoint" bson:"endpoint"`
	Address             string `json:"address" bson:"address"`
	Address6            string `json:"address6" bson:"address6"`
	LocalAddress        string `json:"localaddress" bson:"localaddress"`
	LocalListenPort     int32  `json:"locallistenport" bson:"locallistenport"`
	IsEgressGateway     string `json:"isegressgateway" bson:"isegressgateway"`
	EgressGatewayRanges string `json:"egressgatewayrange" bson:"egressgatewayrange"`
	ListenPort          int32  `json:"listenport" bson:"listenport"`
	KeepAlive           int32  `json:"persistentkeepalive" bson:"persistentkeepalive"`
}

type PostureCheckDeviceInfo struct {
	ClientLocation string
	ClientVersion  string
	OS             string
	OSFamily       string
	OSVersion      string
	KernelVersion  string
	AutoUpdate     bool
	SkipAutoUpdate bool
	Tags           map[TagID]struct{}
	IsUser         bool
	UserGroups     map[schema.UserGroupID]struct{}
	// HostID is the Netmaker host's UUID; used to look up MDM state.
	HostID string
	// MDMState is the most recent sync snapshot for the configured MDM
	// provider; nil if MDM is not configured or the host hasn't synced yet.
	MDMState *schema.DeviceMDMState
	// EDRState is the most recent sync snapshot for the configured EDR
	// provider; nil if EDR is not configured or the host hasn't synced yet.
	EDRState *schema.DeviceEDRState
}

type Protocol = schema.Protocol

type ProtocolType struct {
	Name             string     `json:"name"`
	AllowedProtocols []Protocol `json:"allowed_protocols"`
	PortRange        string     `json:"port_range"`
	AllowPortSetting bool       `json:"allow_port_setting"`
}

type RegisterMsg struct {
	RegisterHost schema.Host `json:"host"`
	Network      string      `json:"network,omitempty"`
	User         string      `json:"user,omitempty"`
	Password     string      `json:"password,omitempty"`
	JoinAll      bool        `json:"join_all,omitempty"`
	Relay        string      `json:"relay,omitempty"`
}

type RegisterResponse struct {
	ServerConf    ServerConfig `json:"server_config"`
	RequestedHost schema.Host  `json:"requested_host"`
}

type RelayRequest struct {
	NodeID       string   `json:"nodeid"`
	NetID        string   `json:"netid"`
	RelayedNodes []string `json:"relayaddrs"`
}

type ReturnUser struct {
	UserName                   string                                              `json:"username"`
	ExternalIdentityProviderID string                                              `json:"external_identity_provider_id"`
	IsMFAEnabled               bool                                                `json:"is_mfa_enabled"`
	EmailValidated             bool                                                `json:"email_validated"`
	DisplayName                string                                              `json:"display_name"`
	AccountDisabled            bool                                                `json:"account_disabled"`
	IsAdmin                    bool                                                `json:"isadmin"`
	IsSuperAdmin               bool                                                `json:"issuperadmin"`
	AuthType                   schema.AuthType                                     `json:"auth_type"`
	RemoteGwIDs                map[string]struct{}                                 `json:"remote_gw_ids"` // deprecated
	UserGroups                 map[schema.UserGroupID]struct{}                     `json:"user_group_ids"`
	PlatformRoleID             schema.UserRoleID                                   `json:"platform_role_id"`
	NetworkRoles               map[schema.NetworkID]map[schema.UserRoleID]struct{} `json:"network_roles"`
	LastLoginTime              time.Time                                           `json:"last_login_time"`
	NumAccessTokens            int                                                 `json:"num_access_tokens"`
	CreatedBy                  string                                              `json:"created_by"`
	CreatedAt                  time.Time                                           `json:"created_at"`
	UpdatedAt                  time.Time                                           `json:"updated_at"`
}

type RsrcURLInfo struct {
	Method string
	Path   string
}

type SaveData struct {
	NetID string `json:"netid" bson:"netid" validate:"required,min=1,max=32,netid_valid"`
}

type ServerAddr struct {
	IsLeader bool   `json:"isleader" bson:"isleader" yaml:"isleader"`
	Address  string `json:"address" bson:"address" yaml:"address"`
}

type ServerConfig struct {
	TenantID                    string `yaml:"tenant_id"`
	CoreDNSAddr                 string `yaml:"corednsaddr"`
	API                         string `yaml:"api"`
	APIHost                     string `yaml:"apihost"`
	APIPort                     string `yaml:"apiport"`
	GRPC                        string `yaml:"grpc"`
	DNSMode                     string `yaml:"dnsmode"`
	Version                     string `yaml:"version"`
	MQPort                      string `yaml:"mqport"`
	MQUserName                  string `yaml:"mq_username"`
	MQPassword                  string `yaml:"mq_password"`
	BrokerType                  string `yaml:"broker_type"`
	Server                      string `yaml:"server"`
	Broker                      string `yaml:"broker"`
	IsPro                       bool   `yaml:"isee" json:"Is_EE"`
	TrafficKey                  []byte `yaml:"traffickey"`
	MetricInterval              string `yaml:"metric_interval"`
	MetricsPort                 int    `yaml:"metrics_port"`
	IPDetectionInterval         int    `yaml:"ip_detection_interval"`
	ManageDNS                   bool   `yaml:"manage_dns"`
	Stun                        bool   `yaml:"stun"`
	StunServers                 string `yaml:"stun_servers"`
	EndpointDetection           bool   `yaml:"endpoint_detection"`
	DefaultDomain               string `yaml:"default_domain"`
	PeerConnectionCheckInterval string `yaml:"peer_connection_check_interval"`
	OldAClsSupport              bool   `json:"-"`
}

type ServerIDs struct {
	ServerIDs []string `json:"server_ids"`
}

type ServerSettings = schema.TenantSettings

type SignInReqDto struct {
	FormFields FormFields `json:"formFields"`
}

type SignInResDto struct {
	Status string `json:"status"`
	User   User   `json:"user"`
}

type Signal struct {
	Server               string           `json:"server"`
	FromHostPubKey       string           `json:"from_host_pubkey"`
	ToHostPubKey         string           `json:"to_host_pubkey"`
	FromHostID           string           `json:"from_host_id"`
	ToHostID             string           `json:"to_host_id"`
	FromNodeID           string           `json:"from_node_id"`
	ToNodeID             string           `json:"to_node_id"`
	NetworkID            string           `json:"networkID"`
	Reply                bool             `json:"reply"`
	AutoRelayNodeMetrics map[string]int64 `json:"auto_relay_node_metrics"`
	Action               SignalAction     `json:"action"`
	IsPro                bool             `json:"is_pro"`
	TimeStamp            int64            `json:"timestamp"`
}

type SignalAction string

type SsoLoginData struct {
	Expiration     time.Time `json:"expiration"`
	OauthProvider  string    `json:"oauthprovider,omitempty"`
	OauthCode      string    `json:"oauthcode,omitempty"`
	Username       string    `json:"username,omitempty"`
	AmbAccessToken string    `json:"ambaccesstoken,omitempty"`
}

type SsoLoginReqDto struct {
	OauthProvider string `json:"oauthprovider"`
}

type SsoLoginResDto struct {
	User      string `json:"UserName"`
	AuthToken string `json:"AuthToken"`
}

type SsoState = schema.SsoState

type Subject struct {
	ID   string             `json:"id"`
	Name string             `json:"name"`
	Type schema.SubjectType `json:"subject_type"`
	Info interface{}        `json:"info"`
}

type SuccessResponse struct {
	Code     int
	Message  string
	Response interface{}
}

type SuccessfulLoginResponse struct {
	ID        string
	AuthToken string
}

type SuccessfulUserLoginResponse struct {
	UserName  string
	AuthToken string
}

type TOTPInitiateResponse struct {
	OTPAuthURL          string `json:"otp_auth_url"`
	OTPAuthURLSignature string `json:"otp_auth_url_signature"`
	QRCode              string `json:"qr_code"`
}

type Tag = schema.Tag

type TagID = schema.TagID

type TagListResp struct {
	Tag
	UsedByCnt   int       `json:"used_by_count"`
	TaggedNodes []ApiNode `json:"tagged_nodes"`
}

type TagListRespNodes struct {
	Tag
	UsedByCnt   int       `json:"used_by_count"`
	TaggedNodes []ApiNode `json:"tagged_nodes"`
}

type TenantLoginResDto struct {
	Code     int    `json:"code"`
	Message  string `json:"message"`
	Response struct {
		UserName  string `json:"UserName"`
		AuthToken string `json:"AuthToken"`
	} `json:"response"`
}

type Theme = schema.Theme

type TokenType string

type TrafficKeys struct {
	Mine   []byte `json:"mine" bson:"mine" yaml:"mine"`
	Server []byte `json:"server" bson:"server" yaml:"server"`
}

type TransferOrgOwnerRequest struct {
	Username string `json:"username"`
}

type UpdateAclRequest struct {
	Acl
	NewName string `json:"new_name"`
}

type UpdateTagReq struct {
	Tag
	NewName     string    `json:"new_name"`
	ColorCode   string    `json:"color_code"`
	TaggedNodes []ApiNode `json:"tagged_nodes"`
}

type Usage struct {
	Servers          int                     `json:"servers"`
	Users            int                     `json:"users"`
	Hosts            int                     `json:"hosts"`
	Clients          int                     `json:"clients"`
	Networks         int                     `json:"networks"`
	Ingresses        int                     `json:"ingresses"`
	Egresses         int                     `json:"egresses"`
	Relays           int                     `json:"relays"`
	InternetGateways int                     `json:"internet_gateways"`
	FailOvers        int                     `json:"fail_overs"`
	NetworkUsage     map[string]NetworkUsage `json:"network_usage"`
}

type User struct {
	UserName                   string                                              `json:"username" bson:"username" validate:"min=3,in_charset|email"`
	ExternalIdentityProviderID string                                              `json:"external_identity_provider_id"`
	IsMFAEnabled               bool                                                `json:"is_mfa_enabled"`
	TOTPSecret                 string                                              `json:"totp_secret"`
	DisplayName                string                                              `json:"display_name"`
	AccountDisabled            bool                                                `json:"account_disabled"`
	Password                   string                                              `json:"password" bson:"password" validate:"required,min=5"`
	IsAdmin                    bool                                                `json:"isadmin" bson:"isadmin"` // deprecated
	IsSuperAdmin               bool                                                `json:"issuperadmin"`           // deprecated
	RemoteGwIDs                map[string]struct{}                                 `json:"remote_gw_ids"`          // deprecated
	AuthType                   schema.AuthType                                     `json:"auth_type"`
	UserGroups                 map[schema.UserGroupID]struct{}                     `json:"user_group_ids"`
	PlatformRoleID             schema.UserRoleID                                   `json:"platform_role_id"`
	NetworkRoles               map[schema.NetworkID]map[schema.UserRoleID]struct{} `json:"network_roles"`
	LastLoginTime              time.Time                                           `json:"last_login_time"`
	CreatedBy                  string                                              `json:"created_by"`
	CreatedAt                  time.Time                                           `json:"created_at"`
	UpdatedAt                  time.Time                                           `json:"updated_at"`
}

type UserAccessToken struct {
	ID        string    `gorm:"id,primary_key" json:"id"`
	Name      string    `gorm:"name" json:"name"`
	UserName  string    `gorm:"user_name" json:"user_name"`
	ExpiresAt time.Time `gorm:"expires_at" json:"expires_at"`
	LastUsed  time.Time `gorm:"last_used" json:"last_used"`
	CreatedBy string    `gorm:"created_by" json:"created_by"`
	CreatedAt time.Time `gorm:"created_at" json:"created_at"`
}

type UserAuthParams struct {
	UserName string `json:"username"`
	Password string `json:"password"`
}

type UserClaims struct {
	Scope          scope.Scope
	ScopeID        string
	UserName       string
	Api            string
	TokenType      TokenType
	RacAutoDisable bool
	jwt.RegisteredClaims
}

type UserEventLog struct {
	ReturnUser
	UserGroupsWithNames map[string]string `json:"user_groups_with_names"`
}

type UserIPMap struct {
	Mappings map[string]UserMapping `json:"mappings"`
}

type UserIdentityValidationRequest struct {
	Password string `json:"password"`
}

type UserIdentityValidationResponse struct {
	IdentityValidated bool `json:"identity_validated"`
}

type UserInvite struct {
	Email          string                                              `json:"email"`
	PlatformRoleID string                                              `json:"platform_role_id"`
	UserGroups     map[schema.UserGroupID]struct{}                     `json:"user_group_ids"`
	NetworkRoles   map[schema.NetworkID]map[schema.UserRoleID]struct{} `json:"network_roles"`
	InviteCode     string                                              `json:"invite_code"`
	InviteURL      string                                              `json:"invite_url"`
}

type UserJITNetworkStatus struct {
	NetworkID        string `json:"network_id"`
	NetworkName      string `json:"network_name,omitempty"`
	JITEnabled       bool   `json:"jit_enabled"`
	JitAppliesToUser bool   `json:"jit_applies_to_user"`
	HasAccess        bool   `json:"has_access"`
	Grant            any    `json:"grant,omitempty"`   // schema.JITGrant
	Request          any    `json:"request,omitempty"` // schema.JITRequest
	PendingRequest   bool   `json:"pending_request"`
}

type UserMapping struct {
	User   string   `json:"user"`
	Groups []string `json:"groups"`
}

type UserRAGs struct {
	GwID              string `json:"remote_access_gw_id"`
	GWName            string `json:"gw_name"`
	Network           string `json:"network"`
	Connected         bool   `json:"connected"`
	IsInternetGateway bool   `json:"is_internet_gateway"`
	Metadata          string `json:"metadata"`
}

type UserRemoteGws struct {
	GwID              string            `json:"remote_access_gw_id"`
	GWName            string            `json:"gw_name"`
	Network           string            `json:"network"`
	Connected         bool              `json:"connected"`
	IsInternetGateway bool              `json:"is_internet_gateway"`
	GwClient          ExtClient         `json:"gw_client"`
	GwPeerPublicKey   string            `json:"gw_peer_public_key"`
	GwListenPort      int               `json:"gw_listen_port"`
	Metadata          string            `json:"metadata"`
	AllowedEndpoints  []string          `json:"allowed_endpoints"`
	NetworkAddresses  []string          `json:"network_addresses"`
	Status            schema.NodeStatus `json:"status"`
	ManageDNS         bool              `json:"manage_dns"`
	DnsAddress        string            `json:"dns_address"`
	Addresses         string            `json:"addresses"`
	MatchDomains      []string          `json:"match_domains"`
	SearchDomains     []string          `json:"search_domains"`
	Nameservers       []Nameserver      `json:"nameservers"`
}

type UserRemoteGwsReq struct {
	RemoteAccessClientID string `json:"remote_access_clientid"`
}

type UserSettings struct {
	Theme         Theme  `json:"theme"`
	TextSize      string `json:"text_size"`
	ReducedMotion bool   `json:"reduced_motion"`
}

type UserTOTPVerificationParams struct {
	OTPAuthURL          string `json:"otp_auth_url"`
	OTPAuthURLSignature string `json:"otp_auth_url_signature"`
	TOTP                string `json:"totp"`
}

type Violation = schema.Violation