backend

type AsyncConfig struct {
	// QueueSize is the buffer size for pending records (default: 10000).
	QueueSize int

	// BatchSize is the number of records to batch before writing (default: 100).
	BatchSize int

	// FlushPeriod is how often to flush partial batches (default: 100ms).
	FlushPeriod time.Duration

	// Workers is the number of concurrent workers (default: 2).
	Workers int

	// Metrics for observability (optional).
	Metrics Metrics
}

type AsyncTrafficStore interface {
	TrafficStore

	// QueueDepth returns the current number of records waiting to be stored.
	QueueDepth() int

	// Flush blocks until all queued records are stored.
	Flush(ctx context.Context) error
}

type AsyncTrafficStoreWrapper struct {
	// contains filtered or unexported fields
}

type CertCache interface {
	// Get retrieves a certificate for the given hostname.
	// Returns nil, false if not found or expired.
	Get(host string) (*tls.Certificate, bool)

	// Set stores a certificate for the given hostname.
	Set(host string, cert *tls.Certificate)

	// Delete removes a certificate from the cache.
	Delete(host string)

	// Clear removes all certificates from the cache.
	Clear()

	// Close releases any resources held by the cache.
	Close() error
}

type ConfigStore interface {
	// GetProxyConfig retrieves configuration for a proxy instance.
	GetProxyConfig(ctx context.Context, proxyID string) (*ProxyConfig, error)

	// SaveProxyConfig stores configuration for a proxy instance.
	SaveProxyConfig(ctx context.Context, cfg *ProxyConfig) error

	// ListProxyConfigs returns all proxy configurations for an org.
	ListProxyConfigs(ctx context.Context, orgID string) ([]*ProxyConfig, error)

	// DeleteProxyConfig removes a proxy configuration.
	DeleteProxyConfig(ctx context.Context, proxyID string) error

	// Close releases any resources held by the store.
	Close() error
}

type DBConfig struct {
	// Type is the database type (sqlite, postgres).
	Type DBType

	// DriverName is the driver name for sql.Open().
	DriverName string

	// DSN is the data source name for sql.Open().
	DSN string

	// Path is the file path (for SQLite only).
	Path string

	// Host is the database host (for PostgreSQL only).
	Host string

	// Port is the database port (for PostgreSQL only).
	Port string

	// Database is the database name (for PostgreSQL only).
	Database string

	// User is the database user (for PostgreSQL only).
	User string

	// Password is the database password (for PostgreSQL only).
	Password string

	// SSLMode is the SSL mode (for PostgreSQL only).
	SSLMode string
}

type DBType string

type DatabaseTrafficStore struct {
	// contains filtered or unexported fields
}

type DatabaseTrafficStoreConfig struct {
	// DatabaseURL is the database connection URL.
	// Formats:
	//   - sqlite://path/to/file.db
	//   - postgres://user:password@host:port/database
	DatabaseURL string

	// ProxyID is the ID of the proxy to associate traffic with.
	// If 0, a default proxy will be created/used.
	ProxyID int

	// ProxyName is the name for the default proxy (if ProxyID is 0).
	ProxyName string

	// Metrics for observability (optional).
	Metrics Metrics

	// Debug enables SQL query logging.
	Debug bool
}

type DiscardTrafficStore struct{}

type FileTrafficStore struct {
	// contains filtered or unexported fields
}

type FileTrafficStoreConfig struct {
	// Path is the file path to write to. Empty means stdout.
	Path string

	// Writer is an alternative to Path for custom output destinations.
	// If set, Path is ignored.
	Writer io.Writer

	// Format specifies the output format (default: ndjson).
	Format Format

	// Metrics for observability (optional).
	Metrics Metrics
}

type Format string

type LRUCertCache struct {
	// contains filtered or unexported fields
}

type LRUCertCacheConfig struct {
	// Capacity is the maximum number of certificates to cache.
	Capacity int

	// Metrics for observability (optional).
	Metrics Metrics
}

type MemoryCertCache struct {
	// contains filtered or unexported fields
}

type MemoryCertCacheConfig struct {
	// TTL is how long certificates are cached (default: 1 hour).
	TTL time.Duration

	// CleanupInterval is how often expired entries are removed (default: 5 minutes).
	CleanupInterval time.Duration

	// Metrics for observability (optional).
	Metrics Metrics
}

type Metrics interface {
	// IncStoreSuccess increments successful store counter.
	IncStoreSuccess()

	// IncStoreError increments store error counter.
	IncStoreError()

	// ObserveStoreDuration records store operation duration.
	ObserveStoreDuration(d time.Duration)

	// IncCacheHit increments cache hit counter.
	IncCacheHit()

	// IncCacheMiss increments cache miss counter.
	IncCacheMiss()

	// SetQueueDepth sets the current queue depth gauge.
	SetQueueDepth(n int)
}

type NoopMetrics struct{}

type ProxyConfig struct {
	ID           string
	OrgID        string
	Name         string
	Slug         string
	Mode         string // "forward", "reverse", "transparent"
	Port         int
	Host         string
	MITMEnabled  bool
	SkipHosts    []string
	IncludeHosts []string
	ExcludeHosts []string
	IncludePaths []string
	ExcludePaths []string
	Upstream     string
	SkipBinary   bool
	Active       bool
	CreatedAt    time.Time
	UpdatedAt    time.Time
}

type SamplingConfig struct {
	// SampleRate is the fraction of requests to capture (0.0 to 1.0).
	SampleRate float64

	// AlwaysCapture is a list of hosts to always capture (overrides SampleRate).
	AlwaysCapture []string

	// NeverCapture is a list of hosts to never capture.
	NeverCapture []string
}

type SamplingTrafficStore struct {
	// contains filtered or unexported fields
}

type TrafficDetail struct {
	TrafficRecord

	// Request details
	Scheme             string              `json:"scheme"`
	Query              string              `json:"query,omitempty"`
	RequestHeaders     map[string][]string `json:"request_headers,omitempty"`
	RequestBody        string              `json:"request_body,omitempty"`
	RequestBodySize    int64               `json:"request_body_size"`
	RequestIsBinary    bool                `json:"request_is_binary"`
	RequestContentType string              `json:"request_content_type,omitempty"`

	// Response details
	StatusText          string              `json:"status_text,omitempty"`
	ResponseHeaders     map[string][]string `json:"response_headers,omitempty"`
	ResponseBody        string              `json:"response_body,omitempty"`
	ResponseBodySize    int64               `json:"response_body_size"`
	ResponseIsBinary    bool                `json:"response_is_binary"`
	ResponseContentType string              `json:"response_content_type,omitempty"`

	// Additional timing
	TTFBMs *float64 `json:"ttfb_ms,omitempty"`

	// Metadata
	ClientIP string   `json:"client_ip,omitempty"`
	Tags     []string `json:"tags,omitempty"`
}

type TrafficFilter struct {
	// Time range
	StartTime time.Time
	EndTime   time.Time

	// Request filters
	Hosts   []string // Filter by host (supports wildcards)
	Paths   []string // Filter by path (supports wildcards)
	Methods []string // Filter by HTTP method

	// Response filters
	StatusCodes []int // Filter by status code
	MinStatus   int   // Minimum status code (e.g., 400 for errors)
	MaxStatus   int   // Maximum status code

	// Pagination
	Limit  int
	Offset int

	// Sorting
	OrderBy string // Field to sort by
	Desc    bool   // Sort descending
}

type TrafficQuerier interface {
	// Query returns traffic records matching the filter.
	Query(ctx context.Context, filter *TrafficFilter) ([]*TrafficRecord, error)

	// GetByID returns full traffic details for a single record.
	GetByID(ctx context.Context, id string) (*TrafficDetail, error)

	// Count returns the number of records matching the filter.
	Count(ctx context.Context, filter *TrafficFilter) (int64, error)

	// Stats returns aggregate statistics.
	Stats(ctx context.Context, filter *TrafficFilter) (*TrafficStats, error)
}

type TrafficRecord struct {
	ID        string
	Method    string
	URL       string
	Host      string
	Path      string
	Status    int
	Duration  time.Duration
	StartTime time.Time
	Error     string
}

type TrafficStats struct {
	TotalRequests    int64
	TotalErrors      int64
	AvgDurationMs    float64
	P50DurationMs    float64
	P95DurationMs    float64
	P99DurationMs    float64
	UniqueHosts      int64
	RequestsByMethod map[string]int64
	RequestsByStatus map[int]int64
}

type TrafficStore interface {
	// Store saves a single traffic record.
	Store(ctx context.Context, rec *capture.Record) error

	// StoreBatch saves multiple traffic records efficiently.
	StoreBatch(ctx context.Context, recs []*capture.Record) error

	// Close releases any resources held by the store.
	Close() error
}