runbeam-sdk 0.11.0

use serde::{Deserialize, Serialize};

// ========================================================================================
// SHARED CONFIGURATION STRUCTURES
// ========================================================================================

/// Normalized connection configuration shared across peers, targets, endpoints, and backends
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct ConnectionConfig {
    #[serde(default)]
    pub host: Option<String>,
    #[serde(default)]
    pub port: Option<u16>,
    #[serde(default)]
    pub protocol: Option<String>,
    #[serde(default)]
    pub base_path: Option<String>,
}


// ========================================================================================
// PAGINATED RESPONSE STRUCTURES
// ========================================================================================

/// Paginated response wrapper
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct PaginatedResponse<T> {
    pub data: Vec<T>,
    #[serde(default)]
    pub links: Option<PaginationLinks>,
    #[serde(default)]
    pub meta: Option<PaginationMeta>,
}

/// Pagination links
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct PaginationLinks {
    pub first: Option<String>,
    pub last: Option<String>,
    pub prev: Option<String>,
    pub next: Option<String>,
}

/// Pagination metadata
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct PaginationMeta {
    pub current_page: u32,
    pub from: Option<u32>,
    pub last_page: u32,
    #[serde(default)]
    pub links: Option<Vec<serde_json::Value>>, // Laravel pagination links array
    pub path: Option<String>,
    pub per_page: u32,
    pub to: Option<u32>,
    pub total: u32,
}

/// Single resource response wrapper
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct ResourceResponse<T> {
    pub data: T,
}

// ========================================================================================
// RESOURCE TYPES
// ========================================================================================

/// Peer resource - represents external systems that send requests to Harmony
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Peer {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub gateway_id: Option<String>,
    #[serde(default)]
    pub connection: Option<ConnectionConfig>,
    /// Protocol type - the type of protocol used by this peer (http, https, dicom, etc.)
    #[serde(default)]
    pub protocol: Option<String>,
    #[serde(default)]
    pub description: Option<String>,
    #[serde(default)]
    pub enabled: Option<bool>,
    /// Reference to an authentication defined in main config
    #[serde(default)]
    pub authentication: Option<String>,
    #[serde(default)]
    pub tags: Option<Vec<String>>,
    #[serde(default)]
    pub timeout_secs: Option<u32>,
    #[serde(default)]
    pub max_retries: Option<u32>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Target resource - represents external systems that receive requests from Harmony
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Target {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub gateway_id: Option<String>,
    #[serde(default)]
    pub connection: Option<ConnectionConfig>,
    /// Protocol type - the type of protocol used by this target (http, https, dicom, etc.)
    #[serde(default)]
    pub protocol: Option<String>,
    #[serde(default)]
    pub description: Option<String>,
    #[serde(default)]
    pub enabled: Option<bool>,
    /// Reference to an authentication defined in main config
    #[serde(default)]
    pub authentication: Option<String>,
    #[serde(default)]
    pub tags: Option<Vec<String>>,
    #[serde(default)]
    pub timeout_secs: Option<u32>,
    #[serde(default)]
    pub max_retries: Option<u32>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Gateway resource
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Gateway {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub enabled: Option<bool>,
    #[serde(default)]
    pub pipelines_path: Option<String>,
    #[serde(default)]
    pub transforms_path: Option<String>,
    #[serde(default)]
    pub jwks_cache_duration_hours: Option<u32>,
    #[serde(default)]
    pub management_enabled: Option<bool>,
    #[serde(default)]
    pub management_base_path: Option<String>,
    #[serde(default)]
    pub management_network_id: Option<String>,
    #[serde(default)]
    pub dns: Option<Vec<String>>,
    #[serde(default)]
    pub settings: Option<serde_json::Value>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// User who authorized a gateway
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct AuthorizedByInfo {
    pub id: String,
    pub name: String,
    pub email: String,
}

/// Service resource
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Service {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub gateway_id: String,
    #[serde(default)]
    pub description: Option<String>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Endpoint resource
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Endpoint {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub gateway_id: Option<String>,
    #[serde(default)]
    pub service_id: Option<String>,
    /// Reference to a peer defined in main config (inherits peer's connection settings)
    #[serde(default)]
    pub peer_ref: Option<String>,
    /// Connection configuration (overrides peer_ref settings if both specified)
    #[serde(default)]
    pub connection: Option<ConnectionConfig>,
    /// Authentication reference (overrides peer_ref settings if both specified)
    #[serde(default)]
    pub authentication: Option<String>,
    #[serde(default)]
    pub path: Option<String>,
    #[serde(default)]
    pub methods: Option<Vec<String>>,
    #[serde(default)]
    pub description: Option<String>,
    /// Service-specific options (highest precedence)
    #[serde(default)]
    pub options: Option<serde_json::Value>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Backend resource
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Backend {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub gateway_id: Option<String>,
    #[serde(default)]
    pub service_id: Option<String>,
    /// Reference to a target defined in main config (inherits target's connection settings)
    #[serde(default)]
    pub target_ref: Option<String>,
    /// Connection configuration (overrides target_ref settings if both specified)
    #[serde(default)]
    pub connection: Option<ConnectionConfig>,
    /// Authentication reference (overrides target_ref settings if both specified)
    #[serde(default)]
    pub authentication: Option<String>,
    #[serde(default)]
    pub url: Option<String>,
    #[serde(default)]
    pub timeout_seconds: Option<u32>,
    /// Maximum retry attempts (overrides target_ref.max_retries)
    #[serde(default)]
    pub max_retries: Option<u32>,
    /// Service-specific options (highest precedence)
    #[serde(default)]
    pub options: Option<serde_json::Value>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Pipeline resource
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Pipeline {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub description: String,
    pub team_id: String,
    pub gateway_id: Option<String>,
    #[serde(default)]
    pub networks: Option<Vec<String>>,
    #[serde(default)]
    pub endpoints: Option<serde_json::Value>,
    #[serde(default)]
    pub backends: Option<serde_json::Value>,
    #[serde(default)]
    pub middleware: Option<serde_json::Value>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Middleware resource  
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Middleware {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub middleware_type: String,
    /// Reference to an authentication defined in main config
    #[serde(default)]
    pub authentication: Option<String>,
    #[serde(default)]
    pub options: Option<serde_json::Value>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Transform resource
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Transform {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub gateway_id: String,
    #[serde(default)]
    pub options: Option<TransformOptions>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Transform options
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct TransformOptions {
    pub instructions: Option<String>,
}

/// Array of rule IDs for a policy.
///
/// In harmony-dsl v1.7.0+, policies reference rules by ID using a simple array of strings.
/// Each ID in this array corresponds to a top-level `[rules.*]` table definition.
///
/// # Example
///
/// ```json
/// ["rate_limit_rule_1", "rate_limit_rule_2", "allow_internal"]
/// ```
#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
pub struct PolicyRules(pub Vec<String>);

impl PolicyRules {
    /// Create a new PolicyRules from a vector of rule IDs
    pub fn new(rules: Vec<String>) -> Self {
        PolicyRules(rules)
    }

    /// Get a reference to the underlying rule IDs
    pub fn rules(&self) -> &[String] {
        &self.0
    }

    /// Convert into the underlying vector of rule IDs
    pub fn into_inner(self) -> Vec<String> {
        self.0
    }
}

/// Rule resource
///
/// Represents a rule definition that can be referenced by policies.
/// Rules define access control logic with configurable options.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Rule {
    #[serde(rename = "type")]
    pub resource_type: String,
    pub id: String,
    pub code: String,
    #[serde(default)]
    pub name: Option<String>,
    pub rule_type: String,
    pub team_id: String,
    pub gateway_id: String,
    #[serde(default)]
    pub weight: Option<u32>,
    #[serde(default)]
    pub enabled: Option<bool>,
    #[serde(default)]
    pub options: Option<serde_json::Value>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Policy resource
///
/// Represents a policy that contains references to rules.
/// In v1.7.0+, rules are defined as top-level resources and referenced by ID.
///
/// # Example (v1.7.0 format)
///
/// ```json
/// {
///   "type": "policy",
///   "id": "policy-123",
///   "code": "rate-limit",
///   "name": "Rate Limiting Policy",
///   "enabled": 1,
///   "team_id": "team-456",
///   "gateway_id": "gateway-789",
///   "rules": ["rate_limit_rule_1", "rate_limit_rule_2"],
///   "created_at": "2024-01-01T00:00:00Z",
///   "updated_at": "2024-01-01T00:00:00Z"
/// }
/// ```
///
/// # Breaking Change (v1.6.0 → v1.7.0)
///
/// In v1.7.0, the `rules` field format changed from nested objects to an array of rule ID strings.
/// This aligns with the new flat/reusable policies and rules structure in harmony-dsl.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Policy {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub enabled: u32,
    pub team_id: String,
    pub gateway_id: String,
    /// Array of rule IDs referenced by this policy.
    ///
    /// In v1.7.0+, rules are defined as top-level `[rules.*]` tables and referenced by ID.
    /// Each ID in this array should correspond to a rule defined at the top level.
    /// Rules are represented as a typed array of string IDs for better type safety.
    #[serde(default)]
    pub rules: Option<PolicyRules>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Network resource
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Network {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub gateway_id: Option<String>,
    pub enable_wireguard: bool,
    #[serde(default)]
    pub interface: Option<String>,
    #[serde(default, alias = "http")]
    pub tcp_config: Option<TcpConfig>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// TCP configuration for network - used by all protocol adapters (HTTP, DIMSE, etc.)
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct TcpConfig {
    pub bind_address: Option<String>,
    pub bind_port: Option<u16>,
}

/// Runbeam Cloud integration configuration
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Runbeam {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: String,
    pub name: String,
    pub team_id: String,
    pub gateway_id: Option<String>,
    #[serde(default)]
    pub enabled: Option<bool>,
    #[serde(default)]
    pub cloud_api_base_url: Option<String>,
    #[serde(default)]
    pub poll_interval_secs: Option<u32>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Authentication resource
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Authentication {
    #[serde(rename = "type")]
    pub resource_type: String,
    #[serde(default)]
    pub id: Option<String>,
    pub code: Option<String>,
    pub name: String,
    pub team_id: Option<String>,
    pub gateway_id: Option<String>,
    pub method: String,
    #[serde(default)]
    pub options: Option<serde_json::Value>,
    #[serde(default)]
    pub created_at: Option<String>,
    #[serde(default)]
    pub updated_at: Option<String>,
}

/// Full gateway configuration (for downloading complete config)
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct GatewayConfiguration {
    pub gateway: Gateway,
    #[serde(default)]
    pub peers: Vec<Peer>,
    #[serde(default)]
    pub targets: Vec<Target>,
    #[serde(default)]
    pub services: Vec<Service>,
    #[serde(default)]
    pub endpoints: Vec<Endpoint>,
    #[serde(default)]
    pub backends: Vec<Backend>,
    #[serde(default)]
    pub pipelines: Vec<Pipeline>,
    #[serde(default)]
    pub middlewares: Vec<Middleware>,
    #[serde(default)]
    pub transforms: Vec<Transform>,
    #[serde(default)]
    pub policies: Vec<Policy>,
    #[serde(default)]
    pub rules: Vec<Rule>,
    #[serde(default)]
    pub networks: Vec<Network>,
    #[serde(default)]
    pub runbeam: Option<Runbeam>,
    #[serde(default)]
    pub authentications: Vec<Authentication>,
}

/// Change resource for configuration change tracking (API v1.0)
///
/// This represents a configuration change that needs to be applied to a gateway.
/// The API returns two different levels of detail:
///
/// 1. ChangeMetadata (list view) - returned from `/api/harmony/changes` endpoints
///    Contains: id, status, type, gateway_id, created_at
///
/// 2. ChangeResource (detail view) - returned from `/api/harmony/changes/{change}` endpoint  
///    Contains all metadata fields plus: pipeline_id, toml_config, metadata, timestamps, error info
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct Change {
    pub id: String,
    #[serde(default)]
    pub status: Option<String>,
    #[serde(rename = "type")]
    pub resource_type: String,
    pub gateway_id: String,
    #[serde(default)]
    pub pipeline_id: Option<String>,
    /// TOML configuration content (only present in detail view)
    #[serde(default)]
    pub toml_config: Option<String>,
    /// Additional metadata (only present in detail view)
    #[serde(default)]
    pub metadata: Option<serde_json::Value>,
    pub created_at: String,
    #[serde(default)]
    pub acknowledged_at: Option<String>,
    #[serde(default)]
    pub applied_at: Option<String>,
    #[serde(default)]
    pub failed_at: Option<String>,
    #[serde(default)]
    pub error_message: Option<String>,
    #[serde(default)]
    pub error_details: Option<serde_json::Value>,
}

/// Response from the base URL discovery endpoint
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct BaseUrlResponse {
    /// Base URL for the Harmony API (e.g., https://runbeam.lndo.site/api)
    pub base_url: String,
    /// Optional path for changes API (e.g., "/")
    #[serde(default)]
    pub changes_path: Option<String>,
    /// Optional fully resolved URL (base_url + changes_path)
    #[serde(default)]
    pub full_url: Option<String>,
}

/// Request payload for acknowledging multiple changes
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct AcknowledgeChangesRequest {
    pub change_ids: Vec<String>,
}

/// Request payload for reporting a failed change
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct ChangeFailedRequest {
    pub error: String,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub details: Option<Vec<String>>,
}

/// Response from acknowledging multiple changes
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct AcknowledgeChangesResponse {
    pub acknowledged: Vec<String>,
    pub failed: Vec<String>,
}

/// Response from marking a change as applied or failed
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct ChangeStatusResponse {
    pub success: bool,
    pub message: String,
}

/// Type alias for change applied response
pub type ChangeAppliedResponse = ChangeStatusResponse;

/// Type alias for change failed response  
pub type ChangeFailedResponse = ChangeStatusResponse;

// ========================================================================================
// MESH AUTHENTICATION
// ========================================================================================

/// Request payload for mesh token
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct MeshTokenRequest {
    /// The mesh ID to authenticate against
    pub mesh_id: String,
    /// The destination URL the token is being requested for
    pub destination_url: String,
}

/// Response from mesh token request
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct MeshTokenResponse {
    /// The signed JWT token
    pub token: String,
    /// When the token expires (ISO 8601 format)
    pub expires_at: String,
    /// The mesh ID this token is valid for
    pub mesh_id: String,
}