runtime

type Counters struct {

	// Global counters
	TotalWhitelistIPv4 int64
	TotalWhitelistIPv6 int64
	TotalBlacklistIPv4 int64
	TotalBlacklistIPv6 int64

	// Per-source counters
	FeedsIPv4  int64
	FeedsIPv6  int64
	GeoBanIPv4 int64
	GeoBanIPv6 int64
	// Removed: Fail2BanIPv4, Fail2BanIPv6 (v1.0 migration to Suricata)
	ManualIPv4 int64
	ManualIPv6 int64

	// Operations counters
	BansTotal       int64
	UnbansTotal     int64
	ReloadsTotal    int64
	SyncsTotal      int64
	SyncErrorsTotal int64
	// contains filtered or unexported fields
}

type IPEntry struct {
	IP        string
	Source    string // "whitelist", "blacklist", "feeds", "geoban", "tempban" (v1.0: removed fail2ban)
	AddedAt   time.Time
	BanCount  int        // Number of times this IP was banned
	LastBanAt time.Time  // Last time this IP was banned
	ExpireAt  *time.Time // Optional: expiration time for temporary bans
	Reason    string     // Why this IP was added
}

type RuntimeState struct {

	// Whitelist sets (IPv4 and IPv6 separated)
	WhitelistIPv4 map[string]*IPEntry
	WhitelistIPv6 map[string]*IPEntry

	// Blacklist sets (IPv4 and IPv6 separated)
	BlacklistIPv4 map[string]*IPEntry
	BlacklistIPv6 map[string]*IPEntry

	// Effective sets (computed from sources)
	EffectiveBlackIPv4 map[string]bool
	EffectiveBlackIPv6 map[string]bool

	// Per-source tracking
	Sources map[string]*SourceStats

	// Counters
	Counters *Counters

	// Config directory
	ConfigDir string

	// Last reload time
	LastReload time.Time
	// contains filtered or unexported fields
}

type SourceStats struct {
	Name         string
	IPv4Count    int
	IPv6Count    int
	LastUpdate   time.Time
	TotalAdded   int64 // Lifetime counter
	TotalRemoved int64 // Lifetime counter
}