webserver

type AIAssistant interface {
	// contains filtered or unexported methods
}

type ActiveTunnel struct {
	ID        string    `json:"id"`
	Host      string    `json:"host"`
	RecordKey string    `json:"record_key"`
	Mapping   string    `json:"mapping"`
	StartedAt time.Time `json:"started_at"`
	Error     string    `json:"error,omitempty"`
	// contains filtered or unexported fields
}

type ConfigBackendEntryBody map[string]interface{}

type ConfigSchemaResponse struct {
	JSONSchema map[string]interface{} `json:"json_schema"`
	UISchema   any                    `json:"ui_schema"`
}

type CueExecDryRunResponse struct {
	Plan           string            `json:"plan"`
	RiskAssessment []engine.StepRisk `json:"risk_assessment,omitempty"`
}

type CueExecExecuteResponse struct {
	Results []engine.HostExecResult `json:"results"`
}

type CueExecRequest struct {
	RecipePath    string                 `json:"recipe_path,omitempty"`
	RecipeContent map[string]interface{} `json:"recipe_content,omitempty"`
	Execute       bool                   `json:"execute"`
	SSHUser       string                 `json:"ssh_user"`
	ApprovalID    string                 `json:"approval_id,omitempty"`
	Records       []hosts.Record         `json:"records"`
	Env           []string               `json:"env,omitempty"`
	RecordSession bool                   `json:"record_session"`
	Timeout       string                 `json:"timeout,omitempty"` // per-host command timeout (e.g. "30s"); empty uses config default
}

type DeviceCA struct {
	// contains filtered or unexported fields
}

type DeviceRecord struct {
	CN          string    `json:"cn"`
	Fingerprint string    `json:"fingerprint"`
	IssuedAt    time.Time `json:"issued_at"`
	NotAfter    time.Time `json:"not_after"`
}

type EnrollAPI struct {
	// contains filtered or unexported fields
}

type ExecRequest struct {
	SSHUser               string         `json:"ssh_user"`
	Command               string         `json:"command"`
	ExecMode              string         `json:"exec_mode,omitempty"`
	ScriptInterpreter     string         `json:"script_interpreter,omitempty"`
	InterpreterArgsQuoted bool           `json:"interpreter_args_quoted,omitempty"`
	FileExtension         string         `json:"file_extension,omitempty"`
	RemoveTmpFile         *bool          `json:"remove_tmp_file,omitempty"`
	RunAs                 string         `json:"run_as,omitempty"`
	ScriptArgs            []string       `json:"script_args,omitempty"`
	Records               []hosts.Record `json:"records"`
	RecordSession         bool           `json:"record_session"`
	Timeout               string         `json:"timeout,omitempty"`          // per-host command timeout (e.g. "30s"); empty uses config default
	MaxOutputBytes        int            `json:"max_output_bytes,omitempty"` // 0 = default (6000), < 0 = unlimited
}

type ExecResponse struct {
	Results []engine.HostExecResult `json:"results"`
}

type FilesAPI struct {
	// contains filtered or unexported fields
}

type FilesAgentTransferRequest struct {
	SSHUser         string                   `json:"ssh_user"`
	AgentLocalPath  string                   `json:"agent_local_path,omitempty"`
	AgentRemoteDir  string                   `json:"agent_remote_dir,omitempty"`
	SourceRecord    hosts.Record             `json:"source_record"`
	SourcePath      string                   `json:"source_path"`
	DestRecord      hosts.Record             `json:"dest_record"`
	DestPath        string                   `json:"dest_path"`
	Cloud           engine.AgentCloudBackend `json:"cloud"`
	CloudBackendRef *engine.CloudBackendRef  `json:"cloud_backend_ref,omitempty"`
	Credentials     map[string]string        `json:"credentials"`
	KeepObject      bool                     `json:"keep_object,omitempty"`
	MaxRetries      int                      `json:"max_retries,omitempty"`
}

type FilesAgentTransferResponse struct {
	Events []engine.AgentTransferEvent `json:"events"`
}

type FilesCopyRequest struct {
	Direction  string       `json:"direction"`
	SSHUser    string       `json:"ssh_user"`
	Record     hosts.Record `json:"record"`
	LocalPath  string       `json:"local_path"`
	RemotePath string       `json:"remote_path"`
}

type FilesCopyResponse struct {
	Status string `json:"status"`
	Local  string `json:"local"`
	Remote string `json:"remote"`
}

type FilesLocalListRequest struct {
	Path string `json:"path"`
}

type FilesLocalListResponse struct {
	Root    string              `json:"root"`
	Path    string              `json:"path"`
	Entries []ui.LocalFileEntry `json:"entries"`
}

type FilesRemoteListRequest struct {
	SSHUser string       `json:"ssh_user"`
	Record  hosts.Record `json:"record"`
	Path    string       `json:"path"`
}

type FilesRemoteListResponse struct {
	Path    string                   `json:"path"`
	Entries []engine.RemoteFileEntry `json:"entries"`
}

type FilesRemoteMkdirRequest struct {
	SSHUser string       `json:"ssh_user"`
	Record  hosts.Record `json:"record"`
	Path    string       `json:"path"`
}

type FilesRemoteMkdirResponse struct {
	Success bool `json:"success"`
}

type FilesRemoteRemoveRequest struct {
	SSHUser   string       `json:"ssh_user"`
	Record    hosts.Record `json:"record"`
	Path      string       `json:"path"`
	Recursive bool         `json:"recursive"`
}

type FilesRemoteRemoveResponse struct {
	Success bool `json:"success"`
}

type FilesRemoteStatRequest struct {
	SSHUser string       `json:"ssh_user"`
	Record  hosts.Record `json:"record"`
	Path    string       `json:"path"`
}

type FilesRemoteStatResponse struct {
	Entry engine.RemoteFileEntry `json:"entry"`
}

type ForwardingAPI struct {
	// contains filtered or unexported fields
}

type GraphPlanRequest struct {
	Path             string                 `json:"path,omitempty"`
	RecipeContent    map[string]interface{} `json:"recipe_content,omitempty"`
	RecipeContentRaw string                 `json:"recipe_content_raw,omitempty"`
}

type HostPortsRequest struct {
	SSHUser string       `json:"ssh_user"`
	Record  hosts.Record `json:"record"`
}

type HostPortsResponse struct {
	Ports []string `json:"ports"`
}

type LibraryCategory struct {
	Name    string          `json:"name"`
	Recipes []LibraryRecipe `json:"recipes"`
}

type LibraryRecipe struct {
	Name        string `json:"name"`
	Filename    string `json:"filename"`
	Description string `json:"description"`
	Content     string `json:"content"`
	Category    string `json:"category"`
}

type LibraryResponse struct {
	Categories []LibraryCategory `json:"categories"`
}

type LintDiagnostic struct {
	Line     int    `json:"line"`
	Col      int    `json:"col"`
	Severity string `json:"severity"` // "error" | "warning"
	Message  string `json:"message"`
}

type LintRequest struct {
	Language string `json:"language"` // "bash" or "python"
	Content  string `json:"content"`
}

type LintResponse struct {
	Available   bool             `json:"available"`
	Tool        string           `json:"tool,omitempty"`
	Diagnostics []LintDiagnostic `json:"diagnostics"`
}

type MetaResponse struct {
	Version                   string `json:"version"`
	Commit                    string `json:"commit"`
	Date                      string `json:"date"`
	ConfigPath                string `json:"config_path"`
	SessionRecordingAvailable bool   `json:"session_recording_available"`
	SessionRecordingRetention string `json:"session_recording_retention,omitempty"`
	SessionRecordingLastPurge string `json:"session_recording_last_purge_at,omitempty"`
	TerminalAssistAvailable   bool   `json:"terminal_assist_available"`
	LogsCommandAllowed        bool   `json:"logs_command_allowed"`
	MetricsURL                string `json:"metrics_url,omitempty"`
}

type Options struct {
	ListenAddr         string // e.g. 127.0.0.1:8765
	Token              string
	DisableAuth        bool   // when true, skip token auth entirely (trusted networks / authenticating proxy)
	ConfigPath         string // optional explicit --config
	Config             *config.File
	ExecRegistry       hostexec.Registry
	SearchRegistry     *searchrun.Registry
	RecordDir          string // optional session recording output dir
	LocalFilesRoot     string // optional root for local file browser/upload/download
	AgentBinaryPath    string // optional explicit honey-transfer-agent binary path
	AgentBuildCacheDir string // optional cache dir for auto-built agent binary
	Version            string
	Commit             string
	Date               string
	MaxUploadSize      int64 // default 100 << 20
	MetricsListenAddr  string
	Metrics            *metrics.Registry
	NoCache            bool
	Refresh            bool
	AllowLogsCommand   bool
	// EnableMesh, when true, additionally serves this webserver's existing API
	// on a second listener obtained from internal/meshnet.Listener() — so other
	// honey instances can reach this one through the libp2p mesh (Circuit Relay
	// v2 + DCUtR), in addition to (not instead of) the normal TCP ListenAddr.
	// A misconfigured or not-yet-ready mesh must never prevent the ordinary
	// TCP listener from serving — see Start's handling below.
	EnableMesh bool
	OnReady    func() // called after the listener is bound, before serving

	// AuditSink receives one event per security-relevant action (approval decisions,
	// recipe runs). nil is replaced with a no-op sink in NewServer.
	AuditSink audit.Sink

	// JWTPubKey, when non-nil, enables Ed25519 JWT identity resolution: a valid
	// bearer JWT's subject claim becomes the request actor. nil disables JWT.
	JWTPubKey ed25519.PublicKey
	// TrustedProxyNets lists peer networks allowed to assert caller identity via
	// the X-Honey-User header. nil disables the trusted-header path.
	TrustedProxyNets []*net.IPNet
	// Enforcer, when non-nil, gates every authenticated API request through OPA.
	// nil disables the API policy gate.
	Enforcer *policy.Enforcer
	// Approvals holds pending require_approval runs. When nil, NewServer creates a
	// default in-memory store so the approval endpoints and recipe gate share one.
	Approvals *approval.Store
	// WebAuthn, when non-nil, enables passkey biometric step-up for
	// require_biometric verdicts and the /api/v1/webauthn/* endpoints.
	WebAuthn *webauthn.Manager

	// WebhookRatePerSecond and WebhookBurst control the per-app-name rate limit on
	// unauthenticated webhook endpoints. Defaults: 10 req/s, burst 20.
	WebhookRatePerSecond float64
	WebhookBurst         int
}

type PostgresAPI struct {
	// contains filtered or unexported fields
}

type PromptChoicesRequest struct {
	URL      string `json:"url"`
	JSONPath string `json:"json_path"` // Unused for now, we'll do filtering on frontend
}

type PromptUploadResponse struct {
	ID       string `json:"id"`
	Path     string `json:"path"`
	Filename string `json:"filename"`
	SHA      string `json:"sha"`
}

type ProvidersResponse struct {
	Providers []string `json:"providers"`
}

type ProxyAPI struct {
	// contains filtered or unexported fields
}

type PveQemuVncOfferRequest struct {
	Record hosts.Record `json:"record"`
}

type PveQemuVncOfferResponse struct {
	SessionID   string `json:"session_id"`
	VNCPassword string `json:"vnc_password"`
}

type RecentRunEntry struct {
	RecipeName        string                  `json:"recipe_name"`
	RecipePath        string                  `json:"recipe_path"`
	HostCount         int                     `json:"host_count"`
	StartedAt         string                  `json:"started_at"`
	RecordingID       string                  `json:"recording_id"`
	RecipeContentHash string                  `json:"recipe_content_hash,omitempty"`
	Edited            bool                    `json:"edited"`
	Hosts             []hosts.Record          `json:"hosts,omitempty"`
	Plan              string                  `json:"plan,omitempty"`
	Graph             *cuetry.RecipeGraphPlan `json:"graph,omitempty"`
}

type RecentRunsResponse struct {
	Runs []RecentRunEntry `json:"runs"`
}

type RecipeListEntry struct {
	Name string `json:"name"`
	Path string `json:"path"`
}

type RecipeViewRequest struct {
	Path string `json:"path"`
}

type RecipeViewResponse struct {
	Content string `json:"content"`
}

type RecipesAIGraphResponse struct {
	Recipe      map[string]interface{} `json:"recipe"`
	Explanation string                 `json:"explanation,omitempty"`
}

type RecipesAPI struct {
	// contains filtered or unexported fields
}

type RecipesAssistFixRequest struct {
	RecipeContent map[string]interface{} `json:"recipe_content"`
	Errors        []ValidateContentError `json:"errors"`
	Model         string                 `json:"model"`
}

type RecipesAssistRequest struct {
	RecipePath string         `json:"recipe_path"`
	Model      string         `json:"model"`
	UserPrompt string         `json:"user_prompt"`
	SSHUser    string         `json:"ssh_user"`
	Records    []hosts.Record `json:"records"`
}

type RecipesAssistResponse struct {
	Reply string `json:"reply"`
}

type RecipesGenerateRequest struct {
	Intent string `json:"intent"`
	Model  string `json:"model"`
}

type RecipesListResponse struct {
	Recipes []RecipeListEntry `json:"recipes"`
}

type RecipesParseRequest struct {
	Path string `json:"path"`
}

type RecipesParseResponse struct {
	Recipe map[string]interface{} `json:"recipe"`
}

type RecordingListEntry struct {
	FileName       string `json:"file_name"`
	ModifiedUnixMS int64  `json:"modified_unix_ms"`
	SizeBytes      int64  `json:"size_bytes"`
	Trigger        string `json:"trigger,omitempty"`
	Mode           string `json:"mode,omitempty"`
	Provider       string `json:"provider,omitempty"`
	HostName       string `json:"host_name,omitempty"`
	HostIP         string `json:"host_ip,omitempty"`
	User           string `json:"user,omitempty"`
}

type RecordingsListResponse struct {
	Items      []RecordingListEntry     `json:"items"`
	FileCount  int                      `json:"file_count"`
	TotalBytes int64                    `json:"total_bytes"`
	Retention  *RecordingsRetentionInfo `json:"retention,omitempty"`
}

type RecordingsPlayRequest struct {
	FileName string `json:"file_name"`
}

type RecordingsPlayResponse struct {
	FileName string             `json:"file_name"`
	Events   []recordings.Event `json:"events"`
}

type RecordingsRetentionInfo struct {
	Enabled bool   `json:"enabled"`
	MaxAge  string `json:"max_age,omitempty"`
}

type RecordingsSummarizeRequest struct {
	FileName string `json:"file_name"`
	Model    string `json:"model"`
}

type RecordingsSummarizeResponse struct {
	Reply string `json:"reply"`
}

type ResolvedStepSummary struct {
	Index   int      `json:"index"`
	ID      string   `json:"id,omitempty"`
	Depends []string `json:"depends,omitempty"`
	Wave    int      `json:"wave,omitempty"`
	Kind    string   `json:"kind"`
	Host    string   `json:"host"`
	RunAs   string   `json:"run_as,omitempty"`
	When    string   `json:"when,omitempty"`
	Retry   string   `json:"retry,omitempty"`
	Notify  bool     `json:"notify,omitempty"`
	Preview string   `json:"preview"`
}

type RunAgentInput struct {
	ThreadID string            `json:"threadId"`
	RunID    string            `json:"runId"`
	Model    string            `json:"model,omitempty"`
	Messages []agtypes.Message `json:"messages"`
	Tools    []agtypes.Tool    `json:"tools,omitempty"`
}

type ScheduleListItem struct {
	AppName      string            `json:"app_name"`
	ScheduleName string            `json:"schedule_name"`
	Cron         string            `json:"cron"`
	TimeZone     string            `json:"timezone,omitempty"`
	Env          map[string]string `json:"env,omitempty"`
	RecipePath   string            `json:"recipe_path"`
}

type SealSecretRequest struct {
	Plaintext string `json:"plaintext"`
}

type SealSecretResponse struct {
	Sealed string `json:"sealed"`
}

type Server struct {
	// contains filtered or unexported fields
}

type StartTunnelRequest struct {
	SSHUser string       `json:"ssh_user"`
	Record  hosts.Record `json:"record"`
	Mapping string       `json:"mapping"`
}

type StatusResponse struct {
	Status string `json:"status"`
	Path   string `json:"path"`
}

type StoreLoadResponse struct {
	Recipe map[string]interface{}  `json:"recipe"`
	RawCUE string                  `json:"raw_cue"`
	Plan   string                  `json:"plan,omitempty"`
	Steps  []ResolvedStepSummary   `json:"steps,omitempty"`
	Graph  *cuetry.RecipeGraphPlan `json:"graph,omitempty"`
	Errors []ValidateContentError  `json:"errors,omitempty"`
}

type SyncASTRequest struct {
	OriginalCUE   string                 `json:"original_cue"`
	RecipeContent map[string]interface{} `json:"recipe_content"`
}

type SyncASTResponse struct {
	CUE string `json:"cue"`
}

type TerminalAssistModelsResponse struct {
	Models []string `json:"models"`
}

type TerminalAssistRequest struct {
	UserPrompt string `json:"user_prompt"`
	Scrollback string `json:"scrollback"`
	MaxLines   int    `json:"max_lines"`
	Model      string `json:"model"`
}

type TerminalAssistResponse struct {
	Reply             string `json:"reply"`
	ScrollbackClipped bool   `json:"scrollback_clipped"`
}

type TunnelDeleteResponse struct {
	Success bool `json:"success"`
}

type TunnelLogsResponse struct {
	Logs string `json:"logs"`
}

type TunnelStartResponse struct {
	Tunnel ActiveTunnel `json:"tunnel"`
}

type TunnelsAPI struct {
	// contains filtered or unexported fields
}

type TunnelsListResponse struct {
	Tunnels []ActiveTunnel `json:"tunnels"`
}

type UploadRequestMeta struct {
	SSHUser    string       `json:"ssh_user"`
	RemotePath string       `json:"remote_path"`
	Record     hosts.Record `json:"record"`
}

type UploadResponse struct {
	Results []engine.HostExecResult `json:"results"`
}

type ValidateContentError struct {
	Path    string `json:"path,omitempty"`
	Kind    string `json:"kind"`
	Message string `json:"message"`
}

type ValidateContentRequest struct {
	RecipeContent    map[string]interface{} `json:"recipe_content,omitempty"`
	RecipeContentRaw string                 `json:"recipe_content_raw,omitempty"`
}

type ValidateContentResponse struct {
	Plan   string                  `json:"plan,omitempty"`
	Steps  []ResolvedStepSummary   `json:"steps,omitempty"`
	Graph  *cuetry.RecipeGraphPlan `json:"graph,omitempty"`
	Errors []ValidateContentError  `json:"errors,omitempty"`
	Risk   *cuetry.RiskReport      `json:"risk,omitempty"`
}

type WSExecHello struct {
	SSHUser string       `json:"ssh_user"`
	Record  hosts.Record `json:"record"`
	Command string       `json:"command"`
}

type WSHello struct {
	SessionID     string       `json:"session_id"`
	SSHUser       string       `json:"ssh_user"`
	Record        hosts.Record `json:"record"`
	Cols          int          `json:"cols"`
	Rows          int          `json:"rows"`
	RecordSession bool         `json:"record_session"`
	Console       string       `json:"console,omitempty"` // "truenas_api" for TrueNAS /websocket/shell
}

type WSRemoteForwardHello struct {
	SSHUser      string       `json:"ssh_user"`
	Record       hosts.Record `json:"record"`
	RemoteBind   string       `json:"remote_bind"`
	RemoteListen int          `json:"remote_listen"`
}

type WSTunnelHello struct {
	SSHUser string       `json:"ssh_user"`
	Record  hosts.Record `json:"record"`
	Target  string       `json:"target"` // The target address to dial (e.g. "127.0.0.1:8080")
}

type WSUDPRelayHello struct {
	Target string `json:"target"`
}

type WebhookDelivery struct {
	ID             string                  `json:"id"`
	Source         string                  `json:"source"` // live | test | dry_run
	ReceivedAt     time.Time               `json:"received_at"`
	RemoteAddr     string                  `json:"remote_addr,omitempty"`
	ContentType    string                  `json:"content_type,omitempty"`
	Body           string                  `json:"body"`
	AuthOK         bool                    `json:"auth_ok"`
	Extracted      map[string]string       `json:"extracted,omitempty"`
	Actor          string                  `json:"actor,omitempty"`
	IdempotencyKey string                  `json:"idempotency_key,omitempty"`
	Async          bool                    `json:"async"`
	Outcome        string                  `json:"outcome"` // executed | queued | dry_run | unauthorized | duplicate | error | completed | failed
	ExecID         string                  `json:"exec_id,omitempty"`
	Error          string                  `json:"error,omitempty"`
	Results        []engine.HostExecResult `json:"results,omitempty"`
}

type WebhookResultResponse struct {
	ID        string                  `json:"id"`
	Status    string                  `json:"status"`
	StartedAt string                  `json:"started_at,omitempty"`
	Results   []engine.HostExecResult `json:"results,omitempty"`
}