api

type API interface {
	GetNodeInfo() (*NodeInfo, error)
	GetUserList() ([]UserInfo, error)
	GetNodeRule() ([]DetectRule, error)

	// ReportUserTraffic carries reset-then-report semantics (doc/10 §7.1).
	// windowID names the accounting period and MUST be identical on any re-send
	// of the same payload, so a panel that dedups on it can drop a duplicate
	// without dropping a genuinely new report (doc/14 C-08).
	ReportUserTraffic(userTraffic []UserTraffic, windowID string) error

	ReportNodeOnlineUsers(onlineUsers []OnlineUser) error // deduped online IPs (T8)
	ReportIllegal(detectResults []DetectResult) error     // SSpanel /mod_mu/users/detectlog (T6)
	ReportNodeStatus(nodeStatus *NodeStatus) error

	Describe() ClientInfo
	Debug()
}

type AccessLogEntry struct {
	UserID       *int    `json:"user_id"`
	Email        *string `json:"email"`
	Ts           int64   `json:"ts"`
	SrcIP        string  `json:"src_ip"`
	SrcPort      *int    `json:"src_port"`
	Action       string  `json:"action"` // accepted / rejected
	Network      *string `json:"network"`
	DestHost     *string `json:"dest_host"`
	DestPort     *int    `json:"dest_port"`
	RejectReason *string `json:"reject_reason"`
}

type AccessLogReporter interface {
	ReportAccessLog(entries []AccessLogEntry) error
}

type ClientInfo struct {
	APIHost  string
	NodeID   int
	Key      string
	NodeType string
}

type Config struct {
	// PanelType is NOT read from the ApiConfig block — it lives one level up at
	// Nodes[].PanelType and the panel layer copies it in. Declared here so the
	// api client can see it without widening every constructor.
	PanelType string `mapstructure:"-"`

	APIHost      string  `mapstructure:"ApiHost"`
	NodeID       int     `mapstructure:"NodeID"`
	Key          string  `mapstructure:"ApiKey"`
	NodeType     string  `mapstructure:"NodeType"`
	EnableVless  bool    `mapstructure:"EnableVless"`
	VlessFlow    string  `mapstructure:"VlessFlow"`
	Timeout      int     `mapstructure:"Timeout"`
	SpeedLimit   float64 `mapstructure:"SpeedLimit"`
	DeviceLimit  int     `mapstructure:"DeviceLimit"`
	RuleListPath string  `mapstructure:"RuleListPath"`
	// DisableCustomConfig is XrayR compatibility: parsed, warned about, never
	// applied (2026-07-29). It used to force the legacy `server`-string parser
	// on a panel that also offered custom_config. PanelType now decides that
	// outright — SSpanel is always the server string, Rigel is always
	// custom_config — so there is nothing left for it to switch.
	DisableCustomConfig bool `mapstructure:"DisableCustomConfig"`
}

type DetectResult struct {
	UID    int // 命中用户（join key 尾部 uid）
	RuleID int // 命中的规则 ID
}

type DetectRule struct {
	ID      int
	Pattern *regexp.Regexp
}

type Dialect uint8

type InFlightCanceler interface {
	CancelInFlight()
}

type NameServer struct {
	Address   string
	Port      int
	Domains   []string // 命中域名 → 走此上游
	ExpectIPs []string // 期望 IP 段（分流）
}

type NodeInfo struct {
	// 方言
	Dialect Dialect

	// NativeType is the sing-box inbound type ("vless", "hysteria2", …) resolved
	// from custom_config.type. Only set for DialectSingboxNative.
	NativeType string

	// NativeRaw is the panel's custom_config with the panel-only keys removed
	// (`type`, `client`) — i.e. the inbound body verbatim. Only set for
	// DialectSingboxNative. The translation layer merges tag/listen/users into it
	// and lets the base fork unmarshal the result, so every field the fork
	// understands works without a per-field mapping here (doc/13 §2.3).
	NativeRaw json.RawMessage

	// 身份
	NodeType string
	NodeID   int
	Port     uint32 // 节点实际监听端口

	// OutsidePort 是「订阅下发端口」——客户端实际拨号的端口，与 Port 之间由
	// 运维在主机上做 NAT/端口转发（传统 SSpanel 的 `outside_port`，doc/13 §2.7）。
	// 0 表示未设置（等同于 Port）。**不参与监听**，仅用于日志/诊断：面板自己已把
	// 订阅端口改写好了（Tools.php:538-544），节点端如果拿它去 listen 反而会错。
	OutsidePort uint32

	// 限速 / 协议
	SpeedLimit   uint64
	AlterID      uint16 // vmess
	EnableVless  bool
	VlessFlow    string
	CypherMethod string // shadowsocks
	Method       string // ss method
	ServerKey    string // ss2022

	// 传输层
	TransportProtocol   string // tcp/ws/grpc/h2/...
	FakeType            string // tcp header 伪装
	Host                string // ws/h2 host
	Path                string // ws/h2 path
	ServiceName         string // gRPC serviceName
	Authority           string // gRPC/h2
	Header              json.RawMessage
	Headers             map[string]string
	HttpHeaders         map[string][]string // 原 map[string]*conf.StringList
	AcceptProxyProtocol bool
	// ProxyProtoLoopbackPort is set by core/singbox, not by any panel: when
	// Sing2 owns the public port for PROXY protocol, the base inbound has to
	// move somewhere else, and both the translation layer and the relay need to
	// agree on where. 0 means the inbound keeps the real port (native mode).
	ProxyProtoLoopbackPort uint16
	// ListenIP is the address the inbound binds, taken from the node's
	// ControllerConfig.ListenIP — node-local, never from a panel, and injected
	// by the controller the same way the REALITY private key and the Mieru
	// user-hint override are (see Controller.applyLocalListen).
	//
	// Empty means 0.0.0.0, which is what it has always been. That matters: the
	// value is IPv4-only, so a node that must also serve IPv6 has to say "::"
	// explicitly. Until 2026-07-30 the whole field was hardcoded and no
	// configuration could reach it, which made IPv6 unreachable on every
	// protocol except Mieru — mieru binds a wildcard of its own and never
	// consults this (doc/14 C-09).
	ListenIP  string
	EnableTFO bool

	// TLS
	EnableTLS        bool
	RejectUnknownSni bool

	// REALITY（统一到嵌套结构，去扁平重复）
	EnableREALITY bool
	REALITYConfig *REALITYConfig

	// DNS（中立化）
	NameServers []NameServer // 原 []*conf.NameServerConfig

	// Mieru 专有（传统 SSpanel 无 custom_config，只能走 server 串的 extra 段；
	// Rigel 走 native 方言时这些字段不使用，参数直接在 NativeRaw 里）。
	MieruListenPorts []string // listen_ports，端口段如 "2090-2099"；非空则取代 Port
	MieruTrafficPat  string   // traffic_pattern（base64）
	MieruUserHint    bool     // user_hint_is_mandatory

	// 嗅探 / 杂项
	EnableSniffing bool
	RouteOnly      bool
	Flow           string
	Security       string
	Key            string
}

type NodeStatus struct {
	CPU    float64
	Mem    float64
	Disk   float64
	Uptime uint64
}

type OnlineUser struct {
	UID int
	IP  string
}

type REALITYConfig struct {
	Dest             string
	ProxyProtocolVer uint64
	ServerNames      []string
	PrivateKey       string // 敏感
	MinClientVer     string
	MaxClientVer     string
	MaxTimeDiff      uint64
	ShortIds         []string
}

type UserInfo struct {
	UID         int
	Email       string // SSpanel 面板直接下发，无需合成
	UUID        string // vmess/vless id
	Passwd      string // trojan/ss 密码（敏感）
	Port        uint32 // 单端口多用户面板用
	AlterID     uint16
	Method      string // ss method
	SpeedLimit  uint64 // per-user 限速 (Bps)
	DeviceLimit int    // per-user 设备上限
}

type UserTraffic struct {
	UID      int
	Email    string
	Upload   int64
	Download int64
}