protocol

type AuthConfig struct {
	Type     string `json:"type"`               // "basic", "bearer", "digest"
	Username string `json:"username,omitempty"` // For basic/digest
	Password string `json:"password,omitempty"` // For basic/digest
	Token    string `json:"token,omitempty"`    // For bearer
}

type Cookie struct {
	Name    string `json:"name"`
	Value   string `json:"value"`
	Domain  string `json:"domain"`
	Path    string `json:"path"`
	Secure  bool   `json:"secure"`
	Expires int64  `json:"expires,omitempty"` // Unix timestamp
}

type CookieAllRequest struct {
	ID      string      `json:"id"`
	Type    MessageType `json:"type"`
	Session string      `json:"session"`
}

type CookieClearRequest struct {
	ID      string      `json:"id"`
	Type    MessageType `json:"type"`
	Session string      `json:"session"`
}

type CookieGetRequest struct {
	ID      string      `json:"id"`
	Type    MessageType `json:"type"`
	Session string      `json:"session"`
	URL     string      `json:"url"` // URL to get cookies for
}

type CookieResponse struct {
	ID      string              `json:"id"`
	Type    MessageType         `json:"type"`
	Cookies map[string]string   `json:"cookies,omitempty"` // For simple get (name -> value)
	All     map[string][]Cookie `json:"all,omitempty"`     // For all cookies (domain -> cookies)
	Error   *ErrorInfo          `json:"error,omitempty"`
}

type CookieSetRequest struct {
	ID      string      `json:"id"`
	Type    MessageType `json:"type"`
	Session string      `json:"session"`
	URL     string      `json:"url"`               // URL domain for the cookie
	Name    string      `json:"name"`              // Cookie name
	Value   string      `json:"value"`             // Cookie value
	Path    string      `json:"path"`              // Cookie path (optional)
	Domain  string      `json:"domain"`            // Cookie domain (optional)
	Secure  bool        `json:"secure"`            // Secure flag
	Expires int64       `json:"expires,omitempty"` // Unix timestamp (0 = session cookie)
}

type ErrorInfo struct {
	Code    string `json:"code"`              // Error code (e.g., "TIMEOUT", "CONNECTION_REFUSED")
	Message string `json:"message"`           // Human-readable error message
	Details string `json:"details,omitempty"` // Additional details
}

type MessageType string

type PingResponse struct {
	ID      string      `json:"id"`
	Type    MessageType `json:"type"`
	Version string      `json:"version"`
}

type PresetListResponse struct {
	ID      string      `json:"id"`
	Type    MessageType `json:"type"`
	Presets []string    `json:"presets"`
}

type Request struct {
	ID      string            `json:"id"`                // Unique request ID for correlation
	Type    MessageType       `json:"type"`              // Message type
	Session string            `json:"session,omitempty"` // Session ID (empty for one-shot requests)
	Method  string            `json:"method,omitempty"`  // HTTP method (GET, POST, etc.)
	URL     string            `json:"url,omitempty"`     // Target URL
	Headers map[string]string `json:"headers,omitempty"` // Custom headers
	Body    string            `json:"body,omitempty"`    // Request body (base64 encoded for binary)
	Options *RequestOptions   `json:"options,omitempty"` // Request options
}

type RequestOptions struct {
	// Timeout in milliseconds (0 = use session/default timeout)
	Timeout int `json:"timeout,omitempty"`

	// Redirect behavior
	FollowRedirects *bool `json:"followRedirects,omitempty"` // nil = use session default
	MaxRedirects    int   `json:"maxRedirects,omitempty"`

	// Protocol forcing
	ForceProtocol string `json:"forceProtocol,omitempty"` // "auto", "h2", "h3"

	// Fetch mode (affects Sec-Fetch-* headers)
	FetchMode string `json:"fetchMode,omitempty"` // "navigate" (default), "cors"
	FetchSite string `json:"fetchSite,omitempty"` // "auto", "none", "same-origin", "same-site", "cross-site"
	Referer   string `json:"referer,omitempty"`   // Referer header

	// Authentication
	Auth *AuthConfig `json:"auth,omitempty"`

	// Query parameters (merged with URL params)
	Params map[string]string `json:"params,omitempty"`

	// Disable retry for this request
	DisableRetry bool `json:"disableRetry,omitempty"`

	// User-Agent override (empty = use preset)
	UserAgent string `json:"userAgent,omitempty"`

	// Body encoding: "text" (default), "base64" (for binary data)
	BodyEncoding string `json:"bodyEncoding,omitempty"`
}

type Response struct {
	ID       string            `json:"id"`                 // Correlates with request ID
	Type     MessageType       `json:"type"`               // Message type
	Session  string            `json:"session,omitempty"`  // Session ID if applicable
	Status   int               `json:"status,omitempty"`   // HTTP status code
	Headers  map[string]string `json:"headers,omitempty"`  // Response headers
	Body     string            `json:"body,omitempty"`     // Response body
	URL      string            `json:"url,omitempty"`      // Final URL after redirects
	Protocol string            `json:"protocol,omitempty"` // "h2" or "h3"
	Timing   *Timing           `json:"timing,omitempty"`   // Request timing breakdown
	Error    *ErrorInfo        `json:"error,omitempty"`    // Error details if failed

	// Body metadata
	BodyEncoding string `json:"bodyEncoding,omitempty"` // "text" or "base64"
	BodySize     int    `json:"bodySize,omitempty"`     // Original body size in bytes
}

type SessionCloseRequest struct {
	ID      string      `json:"id"`
	Type    MessageType `json:"type"`
	Session string      `json:"session"`
}

type SessionConfig struct {
	// Browser fingerprint preset (e.g., "chrome-143", "firefox-133")
	Preset string `json:"preset,omitempty"`

	// Base URL for relative paths
	BaseURL string `json:"baseUrl,omitempty"`

	// Proxy URL (http://, https://, socks5://) - used for all protocols
	Proxy string `json:"proxy,omitempty"`

	// TCPProxy is the proxy URL for TCP-based protocols (HTTP/1.1 and HTTP/2)
	// Use with UDPProxy for split proxy configuration
	TCPProxy string `json:"tcpProxy,omitempty"`

	// UDPProxy is the proxy URL for UDP-based protocols (HTTP/3 via MASQUE)
	// Use with TCPProxy for split proxy configuration
	UDPProxy string `json:"udpProxy,omitempty"`

	// Default timeout in milliseconds
	Timeout int `json:"timeout,omitempty"`

	// Redirect behavior
	FollowRedirects bool `json:"followRedirects,omitempty"`
	MaxRedirects    int  `json:"maxRedirects,omitempty"`

	// Retry configuration
	RetryEnabled  bool  `json:"retryEnabled,omitempty"`
	MaxRetries    int   `json:"maxRetries,omitempty"`
	RetryWaitMin  int   `json:"retryWaitMin,omitempty"`  // Milliseconds
	RetryWaitMax  int   `json:"retryWaitMax,omitempty"`  // Milliseconds
	RetryOnStatus []int `json:"retryOnStatus,omitempty"` // Status codes to retry

	// TLS options
	InsecureSkipVerify bool `json:"insecureSkipVerify,omitempty"`

	// Connection options
	DisableKeepAlives bool `json:"disableKeepAlives,omitempty"`
	DisableHTTP3      bool `json:"disableHttp3,omitempty"`
	ForceHTTP1        bool `json:"forceHttp1,omitempty"`
	ForceHTTP2        bool `json:"forceHttp2,omitempty"`
	ForceHTTP3        bool `json:"forceHttp3,omitempty"`

	// Network options
	PreferIPv4   bool   `json:"preferIpv4,omitempty"`   // Prefer IPv4 addresses over IPv6
	LocalAddress string `json:"localAddress,omitempty"` // Local IP to bind outgoing connections (for IPv6 rotation)

	// Domain fronting: request_host -> connect_host mapping
	ConnectTo map[string]string `json:"connectTo,omitempty"`

	// Domain to fetch ECH config from (e.g., "cloudflare-ech.com")
	ECHConfigDomain string `json:"echConfigDomain,omitempty"`

	// TLS-only mode: use TLS fingerprint but skip preset HTTP headers
	// Useful when you want to set all headers manually
	TLSOnly bool `json:"tlsOnly,omitempty"`

	// QUIC idle timeout in seconds (default: 30)
	// Connections are closed after this duration of inactivity
	QuicIdleTimeout int `json:"quicIdleTimeout,omitempty"`

	// KeyLogFile is the path to write TLS key log for Wireshark decryption.
	// If set, overrides the global SSLKEYLOGFILE environment variable for this session.
	KeyLogFile string `json:"keyLogFile,omitempty"`

	// DisableECH skips ECH (Encrypted Client Hello) DNS lookup for faster first request
	// ECH adds ~15-20ms to first connection but provides extra privacy
	DisableECH bool `json:"disableEch,omitempty"`

	// DisableSpeculativeTLS disables the speculative TLS optimization for proxy connections.
	// When false (default), CONNECT request and TLS ClientHello are sent together,
	// saving one round-trip (~25% faster proxy connections). Set to true if you
	// experience issues with certain proxies.
	DisableSpeculativeTLS bool `json:"disableSpeculativeTls,omitempty"`

	// SwitchProtocol is the protocol to switch to after Refresh().
	// Valid values: "h1", "h2", "h3", "" (no switch).
	// When set, Refresh() will close connections and switch to this protocol,
	// enabling warm-up on one protocol (e.g. H3) then serving on another (e.g. H2)
	// with TLS session resumption.
	SwitchProtocol string `json:"switchProtocol,omitempty"`

	// Default authentication (can be overridden per-request)
	Auth *AuthConfig `json:"auth,omitempty"`
}

type SessionCreateRequest struct {
	ID      string         `json:"id"`
	Type    MessageType    `json:"type"`
	Options *SessionConfig `json:"options,omitempty"`
}

type SessionCreateResponse struct {
	ID      string      `json:"id"`
	Type    MessageType `json:"type"`
	Session string      `json:"session"`
	Error   *ErrorInfo  `json:"error,omitempty"`
}

type SessionListResponse struct {
	ID       string      `json:"id"`
	Type     MessageType `json:"type"`
	Sessions []string    `json:"sessions"`
}

type Timing struct {
	DNSLookup    float64 `json:"dnsLookup"`    // DNS lookup time (0 = cached/reused)
	TCPConnect   float64 `json:"tcpConnect"`   // TCP connection time (0 = reused)
	TLSHandshake float64 `json:"tlsHandshake"` // TLS handshake time (0 = reused)
	FirstByte    float64 `json:"firstByte"`    // Time to first response byte
	Total        float64 `json:"total"`        // Total request time
}