admin

type Admin struct {
	// contains filtered or unexported fields
}

type AuditEvent struct {
	ID int64 `json:"id"`
	// Time is the server time (RFC3339) for sorting and debugging.
	Time time.Time `json:"time"`

	Host        string `json:"host"`
	Method      string `json:"method"`
	Path        string `json:"path"`
	ContentType string `json:"content_type"`
	// ContentEncoding is the request body's Content-Encoding (empty means uncompressed/unknown).
	ContentEncoding string `json:"content_encoding,omitempty"`

	// Attempted indicates whether this request entered the "redactable text body" scanning flow.
	Attempted bool `json:"attempted"`
	// RedactedCount is the number of replacements performed (matches may be truncated for display, but the count is accurate).
	RedactedCount int          `json:"redacted_count"`
	Matches       []AuditMatch `json:"matches"`

	// Note explains why scanning was skipped (e.g. no_body / not_text / too_large / read_error).
	Note string `json:"note,omitempty"`

	// ResponseStatus is the upstream response status code (0 if no response).
	ResponseStatus int `json:"response_status,omitempty"`
	// ResponseContentType is the upstream response Content-Type (empty means unknown/no response).
	ResponseContentType string `json:"response_content_type,omitempty"`
	// RestoreApplied indicates whether placeholder restore was attempted on the response side (text responses like JSON/SSE).
	RestoreApplied bool `json:"restore_applied,omitempty"`
	// RestoredCount is the number of placeholders restored in the response (rough count: matched placeholder tokens).
	RestoredCount int `json:"restored_count,omitempty"`
}

type AuditMatch struct {
	Category    string `json:"category"`
	Placeholder string `json:"placeholder"`
	// Value is the "display value": when privacy mode is enabled it is a preview (masked/truncated),
	// otherwise it is the original (still truncated).
	Value string `json:"value"`
	// IsPreview indicates whether Value is a preview (true in privacy mode).
	IsPreview bool `json:"is_preview"`
	// Length is the length of the original hit (before truncation), useful for validating expected matches.
	Length int `json:"length"`
	// Truncated indicates whether Value was truncated due to length.
	Truncated bool `json:"truncated"`
}

type AuditResponse struct {
	RedactLog bool         `json:"redact_log"`
	MaxEvents int          `json:"max_events"`
	Events    []AuditEvent `json:"events"`
}

type AuditStore struct {
	// contains filtered or unexported fields
}

type AuthManager struct {
	// contains filtered or unexported fields
}

type AuthStatusResponse struct {
	Configured    bool   `json:"configured"`
	Authenticated bool   `json:"authenticated"`
	Broken        bool   `json:"broken"`
	BrokenError   string `json:"broken_error,omitempty"`
}

type CertResponse struct {
	CA struct {
		Subject           string `json:"subject"`
		NotBefore         string `json:"not_before"`
		NotAfter          string `json:"not_after"`
		FingerprintSHA256 string `json:"fingerprint_sha256"`
		IsTrusted         bool   `json:"is_trusted"`
		// TrustStatus indicates trust detection result for the current runtime environment:
		// - trusted: detected as trusted
		// - untrusted: detected as not trusted
		// - unknown: cannot reliably detect (e.g. running inside a container; cannot tell if the host/browser trusts the exported ca.crt)
		TrustStatus string `json:"trust_status"`
		CertPath    string `json:"cert_path"`
	} `json:"ca"`
}

type DebugBody struct {
	Text      string `json:"text"`
	Bytes     int    `json:"bytes"`
	Truncated bool   `json:"truncated"`
}

type DebugEvent struct {
	ID   int64     `json:"id"`
	Time time.Time `json:"time"`

	Host   string `json:"host"`
	Method string `json:"method"`
	Path   string `json:"path"`
	URL    string `json:"url,omitempty"`

	Request  DebugHTTP `json:"request"`
	Response DebugHTTP `json:"response"`
}

type DebugEventSummary struct {
	ID   int64     `json:"id"`
	Time time.Time `json:"time"`

	Host   string `json:"host"`
	Method string `json:"method"`
	Path   string `json:"path"`
	URL    string `json:"url,omitempty"`

	HasRequest  bool `json:"has_request"`
	HasResponse bool `json:"has_response"`

	RequestTruncated  bool `json:"request_truncated,omitempty"`
	ResponseTruncated bool `json:"response_truncated,omitempty"`

	ResponseStatus      int    `json:"response_status,omitempty"`
	ResponseContentType string `json:"response_content_type,omitempty"`
}

type DebugHTTP struct {
	HeadersOriginal  http.Header `json:"headers_original,omitempty"`
	HeadersForwarded http.Header `json:"headers_forwarded,omitempty"`
	BodyOriginal     DebugBody   `json:"body_original,omitempty"`
	BodyForwarded    DebugBody   `json:"body_forwarded,omitempty"`
	ContentType      string      `json:"content_type,omitempty"`
	ContentEncoding  string      `json:"content_encoding,omitempty"`
	ResponseStatus   int         `json:"response_status,omitempty"`
}

type DebugRequestCapture struct {
	Time   time.Time
	Host   string
	Method string
	Path   string
	URL    string

	ContentType     string
	ContentEncoding string

	HeadersOriginal  http.Header
	HeadersForwarded http.Header

	BodyOriginalText  string
	BodyOriginalBytes int
	BodyOriginalTrunc bool

	BodyForwardedText  string
	BodyForwardedBytes int
	BodyForwardedTrunc bool
}

type DebugResponseCapture struct {
	ContentType string

	// Keep status/code on DebugHTTP (ResponseStatus) to avoid extra nesting.
	Status int

	HeadersOriginal  http.Header
	HeadersForwarded http.Header

	BodyUpstreamText  string
	BodyUpstreamBytes int
	BodyUpstreamTrunc bool

	BodyClientText  string
	BodyClientBytes int
	BodyClientTrunc bool
}

type DebugStatus struct {
	Enabled      bool `json:"enabled"`
	MaxBodyBytes int  `json:"max_body_bytes"`
	MaxEvents    int  `json:"max_events"`
	MaskHeaders  bool `json:"mask_headers"`
	Count        int  `json:"count"`
}

type DebugStore struct {
	// contains filtered or unexported fields
}

type LogsResponse struct {
	ConfiguredPath string   `json:"configured_path"`
	EffectivePath  string   `json:"effective_path"`
	Exists         bool     `json:"exists"`
	Lines          []string `json:"lines"`
	Warning        string   `json:"warning,omitempty"`
}

type NERSettings struct {
	Enabled     bool     `json:"enabled"`
	PresidioURL string   `json:"presidio_url"`
	Language    string   `json:"language"`
	Entities    []string `json:"entities"`
	MinScore    float64  `json:"min_score"`
}

type PatternsResponse struct {
	Keywords    []config.KeywordPattern   `json:"keywords"`
	Exclude     []string                  `json:"exclude"`
	SecretFiles []config.SecretFileConfig `json:"secret_files"`
}

type RuleListItem struct {
	ID       string `json:"id"`
	Name     string `json:"name"`
	Path     string `json:"path,omitempty"`
	URL      string `json:"url,omitempty"`
	Kind     string `json:"kind"` // local|subscription
	Enabled  bool   `json:"enabled"`
	Priority int    `json:"priority"`
	Exists   bool   `json:"exists"`

	// Subscription-only fields (for displaying subscription health in the admin UI).
	Verified  bool   `json:"verified,omitempty"`
	LastError string `json:"last_error,omitempty"`
	CheckedAt int64  `json:"checked_at,omitempty"`
	UpdatedAt int64  `json:"updated_at,omitempty"`
}

type RuleListsResponse struct {
	RuleLists []RuleListItem `json:"rule_lists"`
}

type SessionMapping struct {
	Placeholder string `json:"placeholder"`
	Category    string `json:"category"`
	CreatedAt   string `json:"created_at,omitempty"`
	ExpiresAt   string `json:"expires_at,omitempty"`
}

type SessionsResponse struct {
	Total                     int              `json:"total"`
	Mappings                  []SessionMapping `json:"mappings"`
	DeterministicPlaceholders bool             `json:"deterministic_placeholders"`
}

type SettingsProxyPayload struct {
	WebSocketRedactionBeta bool `json:"websocket_redaction_beta"`
}

type SettingsResponse struct {
	Lang  string               `json:"lang"`
	Proxy SettingsProxyPayload `json:"proxy"`
}

type StatsCollector struct {
	TotalRequests    atomic.Int64
	RedactedRequests atomic.Int64
	RestoredRequests atomic.Int64
	Errors           atomic.Int64
}

type StatsResponse struct {
	Proxy struct {
		Status        string `json:"status"`
		UptimeSeconds int64  `json:"uptime_seconds"`
		ListenAddress string `json:"listen_address"`
	} `json:"proxy"`
	Session struct {
		ActiveMappings int `json:"active_mappings"`
		MaxMappings    int `json:"max_mappings"`
		TTLSeconds     int `json:"ttl_seconds"`
	} `json:"session"`
	Requests struct {
		Total    int64 `json:"total"`
		Redacted int64 `json:"redacted"`
		Restored int64 `json:"restored"`
		Errors   int64 `json:"errors"`
	} `json:"requests"`
}