endpoint

type AmbiguousRefError struct {
	Ref        string
	Candidates []DirectoryEntry
}

type Directory struct {
	// contains filtered or unexported fields
}

type DirectoryEntry struct {
	ID         string    `json:"id"`
	Name       string    `json:"name,omitempty"`
	Hostname   string    `json:"hostname,omitempty"`
	LastSyncAt time.Time `json:"last_sync_at,omitempty"`
	CachedAt   time.Time `json:"cached_at"`
}

type EndpointGetter interface {
	Get(ctx context.Context, in GetInput) (*GetResult, error)
}

type EndpointLister interface {
	List(ctx context.Context, in ListInput) (*ListResult, error)
}

type GetInput struct {
	EndpointID string
	Window     TimeWindow
}

type GetResult struct {
	ID             string
	Identifier     string
	Hostname       string
	OS             string
	Arch           string
	LastSync       time.Time
	PerToolVolumes []ToolEventVolume
	LastInvocation *InvocationContext // nil if absent
}

type GuardAction string // CLI vocab; see Action* constants below.

type GuardCooldown struct {
	PublishDate      time.Time `json:"publish_date,omitempty"`
	CooldownDays     uint32    `json:"cooldown_days"`
	DaysSincePublish uint32    `json:"days_since_publish"`
	DaysRemaining    uint32    `json:"days_remaining"`
}

type GuardEvent struct {
	Timestamp   time.Time
	EndpointID  string
	Tool        string // outer header ToolName
	ToolVersion string // outer header ToolVersion
	Action      GuardAction
	// Verdict is the user-facing reason for a block: "malicious",
	// "suspicious", "cooldown", or "blocked". Empty for non-block actions.
	Verdict        string
	PackageName    string
	PackageVersion string
	Ecosystem      string
	InvocationID   string
	// Cooldown carries publish-date / days-remaining context for
	// COOLDOWN_BLOCKED events. Nil for any other verdict.
	Cooldown *GuardCooldown
	Raw      *controltowerv1.ListEndpointPackageGuardEventsResponse_PackageGuardEvent
}

type GuardEventLister interface {
	ListGuardEvents(ctx context.Context, in GuardEventsInput) (*GuardEventsResult, error)
}

type GuardEventsInput struct {
	Window       TimeWindow
	EndpointIDs  []string
	Actions      []GuardAction
	InvocationID string
	PageSize     uint32
	PageToken    string
}

type GuardEventsResult struct {
	Events   []GuardEvent
	NextPage string
}

type InventoryEvent struct {
	Timestamp    time.Time
	EndpointID   string
	Tool         string // outer header ToolName
	Kind         messagescontroltowerv1.InventoryItemKind
	ItemIdentity string // ItemObserved.ItemIdentity (dedup key)
	Name         string // ItemObserved.Name
	App          string // ItemObserved.App
	Scope        messagescontroltowerv1.InventoryScope
	ConfigPath   string
	Metadata     map[string]string
	InvocationID string
	// Raw exposes the original proto event so JSON output preserves
	// every field. Intentional v1 trade-off for the activity feed.
	Raw *controltowerv1.ListEndpointInventoryEventsResponse_InventoryEvent
}

type InventoryEventLister interface {
	ListInventoryEvents(ctx context.Context, in InventoryEventsInput) (*InventoryEventsResult, error)
}

type InventoryEventsInput struct {
	Window       TimeWindow
	EndpointIDs  []string
	ItemKinds    []messagescontroltowerv1.InventoryItemKind
	Scope        *messagescontroltowerv1.InventoryScope
	InvocationID string
	PageSize     uint32
	PageToken    string
}

type InventoryEventsResult struct {
	Events   []InventoryEvent
	NextPage string
}

type InvocationContext struct {
	Command    string
	WorkingDir string
	HasCI      bool
	HasAgent   bool
}

type ListEndpoint struct {
	ID               string
	Identifier       string // EndpointIdentity.Identifier (human label; falls back to hostname server-side)
	Hostname         string // EndpointIdentity.Metadata.Hostname
	OS               string // displayOS(EndpointIdentity.Metadata.Os)
	Arch             string // displayArch(EndpointIdentity.Metadata.Arch)
	LastSync         time.Time
	Capabilities     []controltowerv1.EndpointCapability
	PMGBlockedEvents uint64
	PMGTotalEvents   uint64
	InventoryEvents  uint64
}

type ListInput struct {
	Window        TimeWindow
	Capabilities  []controltowerv1.EndpointCapability
	MinPMGBlocked uint64 // 0 = no filter
	PageSize      uint32
	PageToken     string
}

type ListResult struct {
	Endpoints []ListEndpoint
	NextPage  string
}

type Service struct {
	// contains filtered or unexported fields
}

type StatsFetcher interface {
	Stats(ctx context.Context, in StatsInput) (*StatsResult, error)
}

type StatsInput struct{ Window TimeWindow }

type StatsResult struct {
	TotalEndpoints   uint64
	ActiveEndpoints  uint64
	SilentEndpoints  uint64 // derived: total - active
	TotalEvents      uint64
	PMGBlockedEvents uint64
}

type Store interface {
	Get(ctx context.Context) (map[string]DirectoryEntry, error)
	Put(ctx context.Context, v map[string]DirectoryEntry) error
}

type TimeWindow struct {
	// Both zero means "let the server apply defaults" (omit time_range).
	Start, End time.Time
}

type ToolEventVolume struct {
	Tool  string
	Count uint64
}