database

type AIListener struct {
	ID                 string     `db:"id" json:"id"`
	ListenerID         string     `db:"listener_id" json:"listener_id"`
	AIProviderID       string     `db:"ai_provider_id" json:"ai_provider_id"`
	OpenAPISpec        string     `db:"openapi_spec" json:"openapi_spec"`
	SystemPrompt       string     `db:"system_prompt" json:"system_prompt"`
	ConversationThread string     `db:"conversation_thread" json:"conversation_thread"`
	GeneratedResponses string     `db:"generated_responses" json:"generated_responses"`
	LastGeneratedAt    *time.Time `db:"last_generated_at" json:"last_generated_at"`
	GenerationStatus   string     `db:"generation_status" json:"generation_status"`
	GenerationError    string     `db:"generation_error" json:"generation_error"`
	CreatedAt          time.Time  `db:"created_at" json:"created_at"`
	UpdatedAt          time.Time  `db:"updated_at" json:"updated_at"`
}

type AIProvider struct {
	ID           string     `db:"id" json:"id"`
	Name         string     `db:"name" json:"name"`
	ProviderType string     `db:"provider_type" json:"provider_type"` // "openai", "claude"
	APIKey       string     `db:"api_key" json:"-"`                   // Encrypted, never sent to client
	APIEndpoint  string     `db:"api_endpoint" json:"api_endpoint"`
	Model        string     `db:"model" json:"model"`
	MaxTokens    int        `db:"max_tokens" json:"max_tokens"`
	Temperature  float64    `db:"temperature" json:"temperature"`
	Enabled      bool       `db:"enabled" json:"enabled"`
	CreatedAt    time.Time  `db:"created_at" json:"created_at"`
	UpdatedAt    time.Time  `db:"updated_at" json:"updated_at"`
	CreatedBy    string     `db:"created_by" json:"created_by"`
	TestStatus   string     `db:"test_status" json:"test_status"` // "untested", "success", "failed"
	TestMessage  string     `db:"test_message" json:"test_message"`
	TestAt       *time.Time `db:"test_at" json:"test_at"`
}

type AIResponseVersion struct {
	ID                 string    `db:"id" json:"id"`
	AIListenerID       string    `db:"ai_listener_id" json:"ai_listener_id"`
	VersionNumber      int       `db:"version_number" json:"version_number"`
	OpenAPISpec        string    `db:"openapi_spec" json:"openapi_spec"`
	SystemPrompt       string    `db:"system_prompt" json:"system_prompt"`
	UserInstructions   string    `db:"user_instructions" json:"user_instructions"`
	GeneratedResponses string    `db:"generated_responses" json:"generated_responses"`
	GenerationStatus   string    `db:"generation_status" json:"generation_status"`
	GenerationError    string    `db:"generation_error" json:"generation_error"`
	IsActive           bool      `db:"is_active" json:"is_active"`
	CreatedAt          time.Time `db:"created_at" json:"created_at"`
}

type Auth0Config struct {
	Domain       string   `json:"domain"`
	ClientID     string   `json:"client_id"`
	ClientSecret string   `json:"client_secret"`
	RedirectURL  string   `json:"redirect_url"`
	Scopes       []string `json:"scopes"`
}

type Connection struct {
	ID        string     `db:"id" json:"id"`
	TunnelID  string     `db:"tunnel_id" json:"tunnel_id"`
	ClientIP  string     `db:"client_ip" json:"client_ip"`
	StartTime time.Time  `db:"start_time" json:"start_time"`
	EndTime   *time.Time `db:"end_time" json:"end_time,omitempty"`
	BytesSent int64      `db:"bytes_sent" json:"bytes_sent"`
	BytesRecv int64      `db:"bytes_recv" json:"bytes_recv"`
	Status    string     `db:"status" json:"status"` // "active", "closed", "error"
}

type Database interface {
	Connect() error
	Close() error
	Migrate() error
	GetUser(username string) (*User, error)
	CreateUser(user *User) error
	UpdateUser(user *User) error
	DeleteUser(username string) error
	ListUsers() ([]*User, error)
	CreateSession(session *Session) error
	GetSession(sessionID string) (*Session, error)
	DeleteSession(sessionID string) error
	CreateTunnel(tunnel *Tunnel) error
	UpdateTunnel(tunnel *Tunnel) error
	DeleteTunnel(tunnelID string) error
	SoftDeleteTunnel(tunnelID string) error
	GetTunnel(tunnelID string) (*Tunnel, error)
	ListTunnels() ([]*Tunnel, error)
	ListActiveTunnels() ([]*Tunnel, error)
	CreateConnection(conn *Connection) error
	UpdateConnection(conn *Connection) error
	ListConnections(tunnelID string) ([]*Connection, error)
	GetStats() (*Stats, error)
	GetUserStats(username string) (*Stats, error)
	AddTunnelBytes(tunnelID string, sent, recv int64) error
	AddTunnelConnections(tunnelID string, delta int) error
	MarkStaleTunnelsClosed(age time.Duration) error
	DeleteClosedTunnels() error
	DeleteClosedTunnelsOlderThan(cutoff time.Time) error
	DeleteClosedTunnelsByUser(username string) error
	DeleteClosedTunnelsByUserOlderThan(username string, cutoff time.Time) error
	DeleteClosedSessionsByUser(username string) error
	DeleteClosedSessionsByUserOlderThan(username string, cutoff time.Time) error
	CloseActiveTunnelsByUserPorts(username string, localPort, remotePort int) error
	// Listener management
	CreateListener(listener *Listener) error
	UpdateListener(listener *Listener) error
	DeleteListener(listenerID string) error
	GetListener(listenerID string) (*Listener, error)
	ListListeners() ([]*Listener, error)
	ListActiveListeners() ([]*Listener, error)
	AddListenerBytes(listenerID string, sent, recv int64) error
	AddListenerConnections(listenerID string, delta int) error
	MarkStaleListenersClosed(age time.Duration) error

	// Multicast tunnels management
	CreateMulticastTunnel(mt *MulticastTunnel) error
	UpdateMulticastTunnel(mt *MulticastTunnel) error
	DeleteMulticastTunnel(id string) error
	GetMulticastTunnel(id string) (*MulticastTunnel, error)
	ListMulticastTunnels() ([]*MulticastTunnel, error)
	ListPublicMulticastTunnels() ([]*MulticastTunnel, error)
	AddMulticastBytes(id string, sent, recv int64) error
	AddMulticastConnections(id string, delta int) error

	// User token management
	CreateUserToken(token *UserToken) error
	GetUserToken(id string) (*UserToken, error)
	ListUserTokens(username string) ([]*UserToken, error)
	DeleteUserToken(id string) error
	UpdateUserTokenLastUsed(id string, lastUsed time.Time) error
	ValidateUserToken(token string) (*UserToken, error)

	// Port reservation management
	CreatePortReservation(reservation *PortReservation) error
	GetPortReservation(id string) (*PortReservation, error)
	ListPortReservations() ([]*PortReservation, error)
	ListUserPortReservations(username string) ([]*PortReservation, error)
	DeletePortReservation(id string) error
	GetReservedPortsThreshold() (int, error)
	SetReservedPortsThreshold(threshold int) error
	IsPortReserved(port int, username string) (bool, error)

	// User limits management
	CreateUserLimits(limits *UserLimits) error
	GetUserLimits(username string) (*UserLimits, error)
	UpdateUserLimits(limits *UserLimits) error
	DeleteUserLimits(username string) error
	GetEffectiveUserLimits(username string) (maxTunnels, maxListeners int, err error)
	CheckUserTunnelLimit(username string) (bool, error)
	CheckUserListenerLimit(username string) (bool, error)
	GetSettingInt(key string, defaultValue int) (int, error)
	GetSettingBool(key string, defaultValue bool) (bool, error)
	SetSettingString(key string, value string) error

	// Security webhooks
	ListSecurityWebhooks(onlyEnabled bool) ([]SecurityWebhook, error)
	GetSecurityWebhook(id int) (*SecurityWebhook, error)
	CreateSecurityWebhook(w *SecurityWebhook) error
	UpdateSecurityWebhook(w *SecurityWebhook) error
	DeleteSecurityWebhook(id int) error

	// Security events
	InsertSecurityEvent(ev *SecurityEventLog) error
	ListSecurityEvents(limit int) ([]SecurityEventLog, error)

	// SSO configuration management
	CreateSSOConfig(config *SSOConfig) error
	GetSSOConfig(provider SSOProvider) (*SSOConfig, error)
	ListSSOConfigs() ([]*SSOConfig, error)
	DeleteSSOConfig(provider SSOProvider) error

	// User authentication sources
	CreateUserAuthSource(source *UserAuthSource) error
	GetUserAuthSource(username string) (*UserAuthSource, error)
	UpdateUserAuthSource(source *UserAuthSource) error
	ListUserAuthSources() ([]*UserAuthSource, error)
	ListUserAuthSourcesByUsername(username string) ([]*UserAuthSource, error)
	DeleteUserAuthSource(id int) error

	// User preferences management
	GetUserPreference(username, key string) (*UserPreference, error)
	SetUserPreference(username, key, value string) error
	DeleteUserPreference(username, key string) error
	ListUserPreferences(username string) ([]*UserPreference, error)

	// AI provider management
	CreateAIProvider(provider *AIProvider) error
	GetAIProvider(id string) (*AIProvider, error)
	GetAIProviders() ([]*AIProvider, error)
	UpdateAIProvider(provider *AIProvider) error
	DeleteAIProvider(id string) error

	// AI listener management
	CreateAIListener(listener *AIListener) error
	GetAIListener(id string) (*AIListener, error)
	GetAIListenerByListenerID(listenerID string) (*AIListener, error)
	UpdateAIListener(listener *AIListener) error
	DeleteAIListener(id string) error

	// AI Response Version methods
	CreateAIResponseVersion(version *AIResponseVersion) error
	GetAIResponseVersion(id string) (*AIResponseVersion, error)
	GetActiveAIResponseVersion(aiListenerID string) (*AIResponseVersion, error)
	ListAIResponseVersions(aiListenerID string) ([]*AIResponseVersion, error)
	UpdateAIResponseVersion(version *AIResponseVersion) error
	SetActiveAIResponseVersion(aiListenerID, versionID string) error
	DeleteAIResponseVersion(id string) error
}

type DatabaseConfig struct {
	Type     string // "sqlite" or "postgres"
	Host     string
	Port     int
	Database string
	Username string
	Password string
	SSLMode  string
	FilePath string // for SQLite
}

type Listener struct {
	ID          string    `db:"id" json:"id"`
	Name        string    `db:"name" json:"name"` // human-friendly name
	Username    string    `db:"username" json:"username"`
	Port        int       `db:"port" json:"port"`
	Mode        string    `db:"mode" json:"mode"`                       // "sink" or "proxy"
	TargetURL   string    `db:"target_url" json:"target_url,omitempty"` // for proxy mode
	Response    string    `db:"response" json:"response,omitempty"`     // for sink mode
	UseTLS      bool      `db:"use_tls" json:"use_tls"`                 // whether to use TLS
	Status      string    `db:"status" json:"status"`                   // "open", "closed", "error"
	CreatedAt   time.Time `db:"created_at" json:"created_at"`
	UpdatedAt   time.Time `db:"updated_at" json:"updated_at"`
	BytesSent   int64     `db:"bytes_sent" json:"bytes_sent"`
	BytesRecv   int64     `db:"bytes_recv" json:"bytes_recv"`
	Connections int       `db:"connections" json:"connections"`
}

type MulticastTunnel struct {
	ID          string    `db:"id" json:"id"`
	Name        string    `db:"name" json:"name"`
	Owner       string    `db:"owner_username" json:"owner_username"`
	Port        int       `db:"port" json:"port"`
	Mode        string    `db:"mode" json:"mode"` // "webhook" | "bidirectional" (phase 2)
	Enabled     bool      `db:"enabled" json:"enabled"`
	Visible     bool      `db:"visible" json:"visible"`
	UseTLS      bool      `db:"use_tls" json:"use_tls"`
	Status      string    `db:"status" json:"status"` // "open", "closed", "error"
	CreatedAt   time.Time `db:"created_at" json:"created_at"`
	UpdatedAt   time.Time `db:"updated_at" json:"updated_at"`
	BytesSent   int64     `db:"bytes_sent" json:"bytes_sent"`
	BytesRecv   int64     `db:"bytes_recv" json:"bytes_recv"`
	Connections int       `db:"connections" json:"connections"`
}

type PortReservation struct {
	ID          string    `db:"id" json:"id"`
	Username    string    `db:"username" json:"username"`
	StartPort   int       `db:"start_port" json:"start_port"`
	EndPort     int       `db:"end_port" json:"end_port"`
	Description string    `db:"description" json:"description"`
	CreatedAt   time.Time `db:"created_at" json:"created_at"`
	UpdatedAt   time.Time `db:"updated_at" json:"updated_at"`
}

type SCIMConfig struct {
	BaseURL      string            `json:"base_url"`
	ClientID     string            `json:"client_id"`
	ClientSecret string            `json:"client_secret"`
	TenantID     string            `json:"tenant_id,omitempty"`
	AuthURL      string            `json:"auth_url"`
	TokenURL     string            `json:"token_url"`
	UserInfoURL  string            `json:"user_info_url"`
	RedirectURL  string            `json:"redirect_url"`
	Scopes       []string          `json:"scopes"`
	Attributes   map[string]string `json:"attributes"` // Maps SCIM attributes to local fields
}

type SQLDatabase struct {
	// contains filtered or unexported fields
}

type SSOConfig struct {
	ID         int         `db:"id" json:"id"`
	Provider   SSOProvider `db:"provider" json:"provider"`
	Enabled    bool        `db:"enabled" json:"enabled"`
	ConfigJSON string      `db:"config_json" json:"-"`
	Config     interface{} `json:"config"`
	CreatedAt  time.Time   `db:"created_at" json:"created_at"`
	UpdatedAt  time.Time   `db:"updated_at" json:"updated_at"`
}

type SSOProvider string

type SecurityEventLog struct {
	ID        int       `db:"id" json:"id"`
	Type      string    `db:"type" json:"type"`
	Severity  string    `db:"severity" json:"severity"`
	Username  string    `db:"username" json:"username"`
	IP        string    `db:"ip" json:"ip"`
	Message   string    `db:"message" json:"message"`
	At        time.Time `db:"at" json:"at"`
	CreatedAt time.Time `db:"created_at" json:"created_at"`
}

type SecurityWebhook struct {
	ID          int       `db:"id" json:"id"`
	URL         string    `db:"url" json:"url"`
	Type        string    `db:"type" json:"type"` // "slack" or "json"
	Enabled     bool      `db:"enabled" json:"enabled"`
	Description string    `db:"description" json:"description"`
	CreatedAt   time.Time `db:"created_at" json:"created_at"`
	UpdatedAt   time.Time `db:"updated_at" json:"updated_at"`
}

type Session struct {
	ID        string    `db:"id" json:"id"`
	Username  string    `db:"username" json:"username"`
	CreatedAt time.Time `db:"created_at" json:"created_at"`
	ExpiresAt time.Time `db:"expires_at" json:"expires_at"`
	IPAddress string    `db:"ip_address" json:"ip_address"`
}

type Stats struct {
	TotalTunnels     int   `json:"total_tunnels"`
	ActiveTunnels    int   `json:"active_tunnels"`
	TotalListeners   int   `json:"total_listeners"`
	ActiveListeners  int   `json:"active_listeners"`
	TotalUsers       int   `json:"total_users"`
	ActiveSessions   int   `json:"active_sessions"`
	TotalConnections int   `json:"total_connections"`
	TotalBytesSent   int64 `json:"total_bytes_sent"`
	TotalBytesRecv   int64 `json:"total_bytes_recv"`
	UptimeSeconds    int64 `json:"uptime_seconds"`
}

type Tunnel struct {
	ID          string    `db:"id" json:"id"`
	Username    string    `db:"username" json:"username"`
	LocalPort   int       `db:"local_port" json:"local_port"`
	LocalHost   string    `db:"local_host" json:"local_host"`
	RemotePort  int       `db:"remote_port" json:"remote_port"`
	RemoteHost  string    `db:"remote_host" json:"remote_host"`
	Status      string    `db:"status" json:"status"` // "active", "inactive", "error"
	CreatedAt   time.Time `db:"created_at" json:"created_at"`
	UpdatedAt   time.Time `db:"updated_at" json:"updated_at"`
	BytesSent   int64     `db:"bytes_sent" json:"bytes_sent"`
	BytesRecv   int64     `db:"bytes_recv" json:"bytes_recv"`
	Connections int       `db:"connections" json:"connections"`
}

type User struct {
	ID          int       `db:"id" json:"id"`
	Username    string    `db:"username" json:"username"`
	Password    string    `db:"password" json:"password,omitempty"`
	Email       string    `db:"email" json:"email,omitempty"`
	DisplayName string    `db:"display_name" json:"display_name,omitempty"`
	IsAdmin     bool      `db:"is_admin" json:"is_admin"`
	Addresses   string    `db:"addresses" json:"addresses"` // JSON array of regex patterns
	CreatedAt   time.Time `db:"created_at" json:"created_at"`
	UpdatedAt   time.Time `db:"updated_at" json:"updated_at"`
}

type UserAuthSource struct {
	ID           int       `db:"id" json:"id"`
	Username     string    `db:"username" json:"username"`
	AuthSource   string    `db:"auth_source" json:"auth_source"`
	ExternalID   *string   `db:"external_id" json:"external_id,omitempty"`
	ProviderData *string   `db:"provider_data" json:"-"`
	CreatedAt    time.Time `db:"created_at" json:"created_at"`
	UpdatedAt    time.Time `db:"updated_at" json:"updated_at"`
}

type UserLimits struct {
	Username     string    `db:"username" json:"username"`
	MaxTunnels   *int      `db:"max_tunnels" json:"max_tunnels"`
	MaxListeners *int      `db:"max_listeners" json:"max_listeners"`
	CreatedAt    time.Time `db:"created_at" json:"created_at"`
	UpdatedAt    time.Time `db:"updated_at" json:"updated_at"`
}

type UserPreference struct {
	ID              int       `db:"id" json:"id"`
	Username        string    `db:"username" json:"username"`
	PreferenceKey   string    `db:"preference_key" json:"preference_key"`
	PreferenceValue string    `db:"preference_value" json:"preference_value"`
	CreatedAt       time.Time `db:"created_at" json:"created_at"`
	UpdatedAt       time.Time `db:"updated_at" json:"updated_at"`
}

type UserToken struct {
	ID        string     `db:"id" json:"id"`
	Username  string     `db:"username" json:"username"`
	Name      string     `db:"name" json:"name"`
	Token     string     `db:"token" json:"-"` // Don't expose token in JSON
	CreatedAt time.Time  `db:"created_at" json:"created_at"`
	LastUsed  *time.Time `db:"last_used" json:"last_used,omitempty"`
	ExpiresAt *time.Time `db:"expires_at" json:"expires_at,omitempty"`
}