types

type AuthSignals struct {
	CookiesPresent    bool     `json:"cookies_present"`
	BearerPresent     bool     `json:"bearer_present"`
	CustomAuthHeaders []string `json:"custom_auth_headers,omitempty"`
}

type BodyFingerprint struct {
	ReqHash   string `json:"req_hash,omitempty"`
	ReqBytes  int    `json:"req_bytes"`
	RespHash  string `json:"resp_hash,omitempty"`
	RespBytes int    `json:"resp_bytes"`
}

type Cluster struct {
	ID              string           `json:"cluster_id"`
	Host            string           `json:"host"`
	Method          string           `json:"method"`
	PathTemplate    string           `json:"path_template"`
	Count           int              `json:"count"`
	Category        EndpointCategory `json:"category"`
	Stats           ClusterStats     `json:"stats"`
	ExampleEntryIDs []string         `json:"example_entry_ids,omitzero"`
	ContentTypeHint string           `json:"content_type_hint,omitempty"`
}

type ClusterFilters struct {
	Category EndpointCategory // Filter clusters by category
	MinCount int              // Minimum requests per cluster
}

type ClusterKey struct {
	Host         string
	Method       string
	PathTemplate string
}

type ClusterOptions struct {
	NormalizeIDs           bool // Default true - convert numeric/uuid segments
	StripVolatileQueryKeys bool // Default true
	ExamplesPerCluster     int  // Default 3, max 10
	MaxClusters            int  // Default 200, max 2000
}

type ClusterScope struct {
	Host         string
	Method       string // Filter entries by HTTP method before clustering
	ProcessName  string
	PID          int
	TimeWindowMs int64
	SinceMs      int64
	UntilMs      int64
}

type ClusterStats struct {
	StatusProfile map[string]int `json:"status_profile,omitzero"` // e.g. {"2xx": 95, "4xx": 3}
	ErrorRate     float64        `json:"error_rate"`              // fraction of non-2xx (0.0-1.0)
	AvgRespBytes  int            `json:"avg_resp_bytes"`          // average response body size
	HasAuth       bool           `json:"has_auth"`                // any entry had auth signals
}

type DescribeRequest struct {
	ClusterID   string
	SessionID   string
	MaxExamples int // Default 5
}

type DiffOptions struct {
	CompareHeaderOrder  bool     // Default true
	CompareHeaderValues bool     // Default true
	CompareTLS          bool     // Default true
	CompareHTTP2        bool     // Default true
	IgnoreHeaders       []string // Default from DefaultIgnoreHeaders
	IgnoreQueryKeys     []string // Default from DefaultIgnoreQueryKeys
	MaxBytes            int      // Default from config
}

type DiffRequest struct {
	BaselineEntryID  string
	CandidateEntryID string
	SessionID        string // Default "active"
	Options          *DiffOptions
}

type DiffResult struct {
	Baseline       *EntrySummary  `json:"baseline"`
	Candidate      *EntrySummary  `json:"candidate"`
	ImportantDiffs ImportantDiffs `json:"important_diffs"`
	NoisyDiffs     NoisyDiffs     `json:"noisy_diffs"`
}

type EndpointCategory string

type EndpointDescription struct {
	ClusterID         string            `json:"cluster_id"`
	Host              string            `json:"host"`
	Method            string            `json:"method"`
	PathTemplate      string            `json:"path_template"`
	Count             int               `json:"count"`
	TypicalHeaders    []HeaderFrequency `json:"typical_headers,omitzero"`
	AuthSignals       AuthSignals       `json:"auth_signals"`
	QueryKeys         QueryKeyAnalysis  `json:"query_keys"`
	RequestBodyShape  any               `json:"request_body_shape,omitempty"`
	ResponseBodyShape any               `json:"response_body_shape,omitempty"`
	Examples          []ExampleEntry    `json:"examples,omitzero"`
}

type EntrySummary struct {
	EntryID     string       `json:"entry_id"`
	TsMs        int64        `json:"ts_ms"`
	Method      string       `json:"method"`
	URL         string       `json:"url"`
	Host        string       `json:"host"`
	Path        string       `json:"path"`
	Status      int          `json:"status"`
	HTTPVersion string       `json:"http_version"`
	ProcessName string       `json:"process_name"`
	PID         int          `json:"pid"`
	TLS         TLSSummary   `json:"tls"`
	HTTP2       HTTP2Summary `json:"http2,omitempty"`
	Sizes       SizeSummary  `json:"sizes,omitempty"`
}

type ExampleEntry struct {
	EntryID string        `json:"entry_id"`
	Summary *EntrySummary `json:"summary"`
}

type ExtractRequest struct {
	SessionID string
	Scope     *ClusterScope
	Filters   *ClusterFilters
	Options   *ClusterOptions
	Limit     int // Default 50, for returned clusters
	Offset    int
}

type ExtractResponse struct {
	Clusters   []Cluster `json:"clusters"`
	TotalCount int       `json:"total_count"`
	ScopeHash  string    `json:"scope_hash"`
}

type Fingerprint struct {
	Entry              *EntrySummary       `json:"entry"`
	HeadersOrdered     [][]string          `json:"headers_ordered,omitzero"`
	HeadersNormalized  map[string][]string `json:"headers_normalized,omitzero"`
	HTTP2PseudoHeaders [][]string          `json:"http2_pseudo_headers,omitempty"`
	Body               BodyFingerprint     `json:"body"`
	TLSSummary         *TLSFingerprint     `json:"tls_summary,omitempty"`
	HTTP2Summary       *HTTP2Fingerprint   `json:"http2_summary,omitempty"`
}

type FingerprintOptions struct {
	IncludeTLSSummary   bool // Default true
	IncludeHTTP2Summary bool // Default true
	MaxBytes            int  // Default from config.ToolMaxBytesDefault
}

type FlowEdge struct {
	From   string `json:"from"`   // Entry ID
	To     string `json:"to"`     // Entry ID
	Reason string `json:"reason"` // temporal, same_tls, same_h2, auth_chain, same_auth, same_session_cookie, same_api_key, session_cookie_origin
}

type FlowGraph struct {
	Nodes []FlowNode `json:"nodes"`
	Edges []FlowEdge `json:"edges"`
}

type FlowNode struct {
	EntryID string        `json:"entry_id"`
	Summary *EntrySummary `json:"summary"`
}

type HTTP2Diff struct {
	BaselineStreamID  int  `json:"baseline_stream_id"`
	CandidateStreamID int  `json:"candidate_stream_id"`
	PseudoHeadersDiff bool `json:"pseudo_headers_diff"`
}

type HTTP2Fingerprint struct {
	ConnectionID string         `json:"connection_id,omitempty"`
	StreamID     int            `json:"stream_id,omitempty"`
	FrameCounts  map[string]int `json:"frame_counts,omitempty"`
}

type HTTP2Summary struct {
	ConnectionID string `json:"connection_id,omitempty"`
	StreamID     int    `json:"stream_id,omitempty"`
}

type HeaderFrequency struct {
	Name      string  `json:"name"`
	Frequency float64 `json:"frequency"` // 0.0 to 1.0
}

type HeaderOrderDiff struct {
	BaselineOrder  []string      `json:"baseline_order,omitzero"`
	CandidateOrder []string      `json:"candidate_order,omitzero"`
	Moves          []OrderChange `json:"moves,omitempty"`
}

type HeaderValueDiff struct {
	Name      string   `json:"name"`
	Baseline  []string `json:"baseline,omitzero"`
	Candidate []string `json:"candidate,omitzero"`
}

type ImportantDiffs struct {
	Protocol            *ProtocolDiff     `json:"protocol,omitempty"`
	TLS                 *TLSDiff          `json:"tls,omitempty"`
	HTTP2               *HTTP2Diff        `json:"http2,omitempty"`
	HeadersMissing      []string          `json:"headers_missing,omitempty"`
	HeadersExtra        []string          `json:"headers_extra,omitempty"`
	HeadersValueChanged []HeaderValueDiff `json:"headers_value_changed,omitempty"`
	HeaderOrderChanges  *HeaderOrderDiff  `json:"header_order_changes,omitempty"`
}

type InferSchemaOutput struct {
	// Shape analysis result (contains content_category and format-specific fields)
	Shape any `json:"shape,omitzero"`

	// Summary of the inference process
	Summary InferSchemaSummary `json:"summary"`

	// Hint for the next step
	Hint string `json:"hint,omitempty"`
}

type InferSchemaSummary struct {
	EntriesRequested int    `json:"entries_requested"`
	EntriesProcessed int    `json:"entries_processed"`
	EntriesSkipped   int    `json:"entries_skipped"`
	ContentCategory  string `json:"content_category"`
}

type NoisyDiffs struct {
	IgnoredHeaders []string `json:"ignored_headers,omitempty"`
	QueryKeyDiffs  []string `json:"query_key_diffs,omitempty"`
}

type OrderChange struct {
	Header       string `json:"header"`
	BaselinePos  int    `json:"baseline_pos"`
	CandidatePos int    `json:"candidate_pos"`
}

type ProtocolDiff struct {
	BaselineVersion  string `json:"baseline_version"`
	CandidateVersion string `json:"candidate_version"`
}

type QueryEntryResult struct {
	EntryID    string        `json:"entry_id"`
	Target     string        `json:"target"`
	ValueCount int           `json:"value_count"`
	Summary    *EntrySummary `json:"summary,omitempty"`
	Skipped    bool          `json:"skipped,omitempty"`
	SkipReason string        `json:"skip_reason,omitempty"`
}

type QueryKeyAnalysis struct {
	Stable   []string `json:"stable,omitzero"`   // Keys present in most requests
	Volatile []string `json:"volatile,omitzero"` // Keys that vary (timestamps, nonces)
}

type QueryRequest struct {
	SessionID   string
	EntryIDs    []string // Query specific entries
	ClusterID   string   // Or query all entries in a cluster
	Expression  string   // JQ expression
	Target      string   // "request", "response", or "both"
	Deduplicate bool
	MaxEntries  int // Default 20, max 100
	MaxResults  int // Default 1000
}

type QueryResponse struct {
	Summary QuerySummary       `json:"summary"`
	Values  []any              `json:"values,omitzero"`
	Entries []QueryEntryResult `json:"entries,omitempty"`
	Errors  []string           `json:"errors,omitempty"`
	Hints   []string           `json:"hints,omitempty"`
}

type QueryResult struct {
	Values   []any    `json:"values"`           // Extracted values
	Errors   []string `json:"errors,omitempty"` // Per-item errors
	RawCount int      `json:"raw_count"`        // Count before deduplication
}

type QuerySummary struct {
	EntriesProcessed int  `json:"entries_processed"`
	EntriesMatched   int  `json:"entries_matched"`
	EntriesSkipped   int  `json:"entries_skipped"`
	TotalValues      int  `json:"total_values"`
	UniqueValues     int  `json:"unique_values,omitempty"`
	Deduplicated     bool `json:"deduplicated"`
	Truncated        bool `json:"truncated,omitempty"`
}

type ResourceRef struct {
	URI  string `json:"uri"`
	MIME string `json:"mime"`
	Hint string `json:"hint,omitempty"`
}

type SchemaFormat string

type SearchFilters struct {
	Host            string
	PathContains    string
	URLContains     string
	Method          string
	Status          int
	HTTPVersion     string
	ProcessName     string
	PID             int
	HeaderName      string
	HeaderContains  string
	BodyContains    string
	TLSConnectionID string
	JA3             string
	JA4             string
	SinceMs         int64 // Unix timestamp in ms
	UntilMs         int64 // Unix timestamp in ms
	TimeWindowMs    int64 // Alternative to since/until (relative to now)
}

type SearchRequest struct {
	SessionID string         // Session to search within
	Query     string         // Free text query
	Filters   *SearchFilters // Optional structured filters
	Limit     int            // Default 20, safety cap via MAX_SEARCH_RESULTS (default 10000)
	Offset    int            // Pagination offset
}

type SearchResponse struct {
	Results    []SearchResult `json:"results"`
	TotalHint  int            `json:"total_hint,omitempty"`
	SyncedAtMs int64          `json:"synced_at_ms"`
	Scope      *SearchScope   `json:"scope,omitempty"`
	Capped     bool           `json:"-"` // true if results were truncated by safety cap
}

type SearchResult struct {
	Summary    *EntrySummary `json:"summary"`
	Score      float64       `json:"score"`
	Highlights []string      `json:"highlights,omitempty"`
	MatchedIn  []string      `json:"matched_in,omitempty"`
}

type SearchScope struct {
	BodyIndexEnabled   bool   `json:"body_index_enabled"`
	BodySearchCoverage string `json:"body_search_coverage,omitempty"`
}

type SizeSummary struct {
	ReqBodyBytes    int    `json:"req_body_bytes"`
	RespBodyBytes   int    `json:"resp_body_bytes"`
	RespContentType string `json:"resp_content_type,omitempty"` // e.g., "application/json"
}

type TLSDiff struct {
	JA3Different     bool   `json:"ja3_different"`
	JA4Different     bool   `json:"ja4_different"`
	BaselineJA3      string `json:"baseline_ja3,omitempty"`
	CandidateJA3     string `json:"candidate_ja3,omitempty"`
	BaselineJA4      string `json:"baseline_ja4,omitempty"`
	CandidateJA4     string `json:"candidate_ja4,omitempty"`
	CipherDifferent  bool   `json:"cipher_different,omitempty"`
	VersionDifferent bool   `json:"version_different,omitempty"`
}

type TLSFingerprint struct {
	ConnectionID string `json:"connection_id,omitempty"`
	TLSVersion   string `json:"tls_version,omitempty"`
	CipherSuite  string `json:"cipher_suite,omitempty"`
	JA3          string `json:"ja3,omitempty"`
	JA4          string `json:"ja4,omitempty"`
	ALPN         string `json:"alpn,omitempty"`
}

type TLSSummary struct {
	ConnectionID string `json:"connection_id,omitempty"`
	JA3          string `json:"ja3,omitempty"`
	JA4          string `json:"ja4,omitempty"`
}

type TraceOptions struct {
	TimeWindowMs int64 // Default 120000 (2 minutes)
	SamePIDOnly  bool  // Default true
	SameHostOnly bool  // Default true
}

type TraceRequest struct {
	SessionID   string
	SeedEntryID string
	MaxDepth    int // Default 50, max 500
	Options     *TraceOptions
	Limit       int // Default 50 for returned nodes
}

type ValidationResult struct {
	Valid  bool     `json:"valid"`
	Errors []string `json:"errors,omitempty"`
}