tailscale

type ACL struct {
	ACLs                []ACLEntry          `json:"acls,omitempty" hujson:"ACLs,omitempty"`
	AutoApprovers       *ACLAutoApprovers   `json:"autoApprovers,omitempty" hujson:"AutoApprovers,omitempty"`
	Groups              map[string][]string `json:"groups,omitempty" hujson:"Groups,omitempty"`
	Hosts               map[string]string   `json:"hosts,omitempty" hujson:"Hosts,omitempty"`
	TagOwners           map[string][]string `json:"tagOwners,omitempty" hujson:"TagOwners,omitempty"`
	DERPMap             *ACLDERPMap         `json:"derpMap,omitempty" hujson:"DerpMap,omitempty"`
	Tests               []ACLTest           `json:"tests,omitempty" hujson:"Tests,omitempty"`
	SSH                 []ACLSSH            `json:"ssh,omitempty" hujson:"SSH,omitempty"`
	NodeAttrs           []NodeAttrGrant     `json:"nodeAttrs,omitempty" hujson:"NodeAttrs,omitempty"`
	DisableIPv4         bool                `json:"disableIPv4,omitempty" hujson:"DisableIPv4,omitempty"`
	OneCGNATRoute       string              `json:"oneCGNATRoute,omitempty" hujson:"OneCGNATRoute,omitempty"`
	RandomizeClientPort bool                `json:"randomizeClientPort,omitempty" hujson:"RandomizeClientPort,omitempty"`
	Grants              []Grant             `json:"grants,omitempty" hujson:"Grants,omitempty"`
	IPSets              map[string][]string `json:"ipsets,omitempty" hujson:"IPSets,omitempty"`

	Postures             map[string][]string `json:"postures,omitempty" hujson:"Postures,omitempty"`
	DefaultSourcePosture []string            `json:"defaultSrcPosture,omitempty" hujson:"DefaultSrcPosture,omitempty"`

	// AttrConfig maps attribute names to their configuration for custom device attributes.
	AttrConfig map[string]ACLAttrConfig `json:"attrConfig,omitempty" hujson:"AttrConfig,omitempty"`

	// ETag is the etag corresponding to this version of the ACL
	ETag string `json:"-"`
}

type ACLAttrConfig struct {
	// Type can be one of "string", "bool", or "number".
	Type string `json:"type,omitempty" hujson:"Type,omitempty"`
	// AllowSetByNode indicates if nodes can set this attribute via LocalAPI.
	AllowSetByNode bool `json:"allowSetByNode,omitempty" hujson:"AllowSetByNode,omitempty"`
	// BroadcastToPeers is a list of destinations which should receive this attribute value, e.g. ["tag:admin"].
	BroadcastToPeers []string `json:"broadcastToPeers,omitempty" hujson:"BroadcastToPeers,omitempty"`
}

type ACLAutoApprovers struct {
	Routes   map[string][]string `json:"routes,omitempty" hujson:"Routes,omitempty"`
	ExitNode []string            `json:"exitNode,omitempty" hujson:"ExitNode,omitempty"`
}

type ACLDERPMap struct {
	Regions            map[int]*ACLDERPRegion `json:"regions" hujson:"Regions"`
	OmitDefaultRegions bool                   `json:"omitDefaultRegions,omitempty" hujson:"OmitDefaultRegions,omitempty"`
}

type ACLDERPNode struct {
	Name     string `json:"name" hujson:"Name"`
	RegionID int    `json:"regionID" hujson:"RegionID"`
	HostName string `json:"hostName" hujson:"HostName"`
	CertName string `json:"certName,omitempty" hujson:"CertName,omitempty"`
	IPv4     string `json:"ipv4,omitempty" hujson:"IPv4,omitempty"`
	IPv6     string `json:"ipv6,omitempty" hujson:"IPv6,omitempty"`
	STUNPort int    `json:"stunPort,omitempty" hujson:"STUNPort,omitempty"`
	STUNOnly bool   `json:"stunOnly,omitempty" hujson:"STUNOnly,omitempty"`
	DERPPort int    `json:"derpPort,omitempty" hujson:"DERPPort,omitempty"`
}

type ACLDERPRegion struct {
	RegionID   int            `json:"regionID" hujson:"RegionID"`
	RegionCode string         `json:"regionCode" hujson:"RegionCode"`
	RegionName string         `json:"regionName" hujson:"RegionName"`
	Avoid      bool           `json:"avoid,omitempty" hujson:"Avoid,omitempty"`
	Nodes      []*ACLDERPNode `json:"nodes" hujson:"Nodes"`
}

type ACLEntry struct {
	Action      string   `json:"action,omitempty" hujson:"Action,omitempty"`
	Ports       []string `json:"ports,omitempty" hujson:"Ports,omitempty"`
	Users       []string `json:"users,omitempty" hujson:"Users,omitempty"`
	Source      []string `json:"src,omitempty" hujson:"Src,omitempty"`
	Destination []string `json:"dst,omitempty" hujson:"Dst,omitempty"`
	Protocol    string   `json:"proto,omitempty" hujson:"Proto,omitempty"`

	SourcePosture []string `json:"srcPosture,omitempty" hujson:"SrcPosture,omitempty"`
}

type ACLSSH struct {
	Action          string         `json:"action,omitempty" hujson:"Action,omitempty"`
	Users           []string       `json:"users,omitempty" hujson:"Users,omitempty"`
	Source          []string       `json:"src,omitempty" hujson:"Src,omitempty"`
	Destination     []string       `json:"dst,omitempty" hujson:"Dst,omitempty"`
	CheckPeriod     SSHCheckPeriod `json:"checkPeriod,omitempty" hujson:"CheckPeriod,omitempty"`
	Recorder        []string       `json:"recorder,omitempty" hujson:"Recorder,omitempty"`
	EnforceRecorder bool           `json:"enforceRecorder,omitempty" hujson:"EnforceRecorder,omitempty"`
}

type ACLTest struct {
	User            string         `json:"user,omitempty" hujson:"User,omitempty"`
	Allow           []string       `json:"allow,omitempty" hujson:"Allow,omitempty"`
	Deny            []string       `json:"deny,omitempty" hujson:"Deny,omitempty"`
	Source          string         `json:"src,omitempty" hujson:"Src,omitempty"`
	Accept          []string       `json:"accept,omitempty" hujson:"Accept,omitempty"`
	SrcPostureAttrs map[string]any `json:"srcPostureAttrs,omitempty" hujson:"SrcPostureAttrs,omitempty"`
}

type APIError struct {
	Message string         `json:"message"`
	Data    []APIErrorData `json:"data"`
	Status  int            `json:"status"`
}

type APIErrorData struct {
	User   string   `json:"user"`
	Errors []string `json:"errors"`
}

type AWSExternalID struct {
	ExternalID            string `json:"externalId,omitempty"`
	TailscaleAWSAccountID string `json:"tailscaleAwsAccountId,omitempty"`
}

type Auth interface {
	// HTTPClient builds an http.Client that uses orig as a starting point and
	// adds its own authentication to outgoing requests. baseURL is the base URL
	// of the API server to which we will be authenticating.
	HTTPClient(orig *http.Client, baseURL string) *http.Client
}

type Client struct {
	// BaseURL is the base URL for accessing the Tailscale API server. Defaults to https://api.tailscale.com.
	BaseURL *url.URL
	// UserAgent configures the User-Agent HTTP header for requests. Defaults to "tailscale-client-go".
	UserAgent string
	// APIKey allows specifying an APIKey to use for authentication.
	// To use OAuth Client credentials, specify OAuth in the Auth field instead.
	// To use Identity Federation, specify IdentityFederation in the Auth field instead.
	APIKey string
	// Auth specifies a mechanism for adding authentication to outgoing requests.
	// If provided, APIKey is ignored.
	Auth Auth
	// Tailnet allows specifying a specific tailnet by name, to which this Client will connect by default.
	// If Tailnet is left blank, the client will connect to default tailnet based on the client's credential,
	// using the "-" (dash) default tailnet path.
	Tailnet string

	// HTTP is the [http.Client] to use for requests to the API server.
	// If not specified, a new [http.Client] with a Timeout of 1 minute will be used.
	HTTP *http.Client
	// contains filtered or unexported fields
}

type ClientConnectivity struct {
	Endpoints             []string `json:"endpoints"`
	DERP                  string   `json:"derp"`
	MappingVariesByDestIP bool     `json:"mappingVariesByDestIP"`
	// DERPLatency is mapped by region name (e.g. "New York City", "Seattle").
	DERPLatency    map[string]DERPRegion `json:"latency"`
	ClientSupports ClientSupports        `json:"clientSupports"`
}

type ClientSupports struct {
	HairPinning bool `json:"hairPinning"`
	IPV6        bool `json:"ipv6"`
	PCP         bool `json:"pcp"`
	PMP         bool `json:"pmp"`
	UDP         bool `json:"udp"`
	UPNP        bool `json:"upnp"`
}

type CompressionFormat string

type Contact struct {
	Email string `json:"email"`
	// FallbackEmail is the email used when Email has not been verified.
	FallbackEmail string `json:"fallbackEmail,omitempty"`
	// NeedsVerification is true if Email needs to be verified.
	NeedsVerification bool `json:"needsVerification"`
}

type ContactType string

type Contacts struct {
	Account  Contact `json:"account"`
	Support  Contact `json:"support"`
	Security Contact `json:"security"`
}

type ContactsResource struct {
	*Client
}

type CreateFederatedIdentityRequest struct {
	Scopes           []string          `json:"scopes"`
	Tags             []string          `json:"tags"`
	Audience         string            `json:"audience"`
	Issuer           string            `json:"issuer"`
	Subject          string            `json:"subject"`
	CustomClaimRules map[string]string `json:"customClaimRules"`
	Description      string            `json:"description"`
}

type CreateKeyRequest struct {
	Capabilities  KeyCapabilities `json:"capabilities"`
	ExpirySeconds int64           `json:"expirySeconds"`
	Description   string          `json:"description"`
}

type CreateOAuthClientRequest struct {
	Scopes      []string `json:"scopes"`
	Tags        []string `json:"tags"`
	Description string   `json:"description"`
}

type CreatePostureIntegrationRequest struct {
	Provider     PostureIntegrationProvider `json:"provider,omitempty"`
	CloudID      string                     `json:"cloudId,omitempty"`
	ClientID     string                     `json:"clientId,omitempty"`
	TenantID     string                     `json:"tenantId,omitempty"`
	ClientSecret string                     `json:"clientSecret,omitempty"`
}

type CreateWebhookRequest struct {
	EndpointURL   string                    `json:"endpointUrl"`
	ProviderType  WebhookProviderType       `json:"providerType"`
	Subscriptions []WebhookSubscriptionType `json:"subscriptions"`
}

type DERPRegion struct {
	Preferred           bool    `json:"preferred,omitempty"`
	LatencyMilliseconds float64 `json:"latencyMs"`
}

type DNSConfiguration struct {
	Nameservers []DNSConfigurationResolver            `json:"nameservers,omitempty"`
	SplitDNS    map[string][]DNSConfigurationResolver `json:"splitDNS,omitempty"`
	SearchPaths []string                              `json:"searchPaths,omitempty"`
	Preferences DNSConfigurationPreferences           `json:"preferences,omitempty"`
}

type DNSConfigurationPreferences struct {
	OverrideLocalDNS bool `json:"overrideLocalDNS,omitempty"`
	MagicDNS         bool `json:"magicDNS,omitempty"`
}

type DNSConfigurationResolver struct {
	Address         string `json:"address,omitempty"`
	UseWithExitNode bool   `json:"useWithExitNode,omitempty"`
}

type DNSPreferences struct {
	MagicDNS bool `json:"magicDNS"`
}

type DNSResource struct {
	*Client
}

type Device struct {
	Addresses                 []string `json:"addresses"`
	Name                      string   `json:"name"`
	ID                        string   `json:"id"`     // The legacy identifier for a device. Use NodeId instead.
	NodeID                    string   `json:"nodeId"` // The preferred identifier for a device.
	Authorized                bool     `json:"authorized"`
	User                      string   `json:"user"`
	Tags                      []string `json:"tags"`
	KeyExpiryDisabled         bool     `json:"keyExpiryDisabled"`
	BlocksIncomingConnections bool     `json:"blocksIncomingConnections"`
	ClientVersion             string   `json:"clientVersion"`
	Created                   Time     `json:"created"`
	Expires                   Time     `json:"expires"`
	Hostname                  string   `json:"hostname"`
	IsEphemeral               bool     `json:"isEphemeral"`
	IsExternal                bool     `json:"isExternal"`
	ConnectedToControl        bool     `json:"connectedToControl"`
	LastSeen                  *Time    `json:"lastSeen"` // Will be nil if ConnectedToControl is true.
	MachineKey                string   `json:"machineKey"`
	NodeKey                   string   `json:"nodeKey"`
	OS                        string   `json:"os"`
	TailnetLockError          string   `json:"tailnetLockError"`
	TailnetLockKey            string   `json:"tailnetLockKey"`
	UpdateAvailable           bool     `json:"updateAvailable"`

	// The below are only included in listings when querying `all` fields.
	SSHEnabled         bool                `json:"sshEnabled"`
	AdvertisedRoutes   []string            `json:"AdvertisedRoutes"`
	EnabledRoutes      []string            `json:"enabledRoutes"`
	ClientConnectivity *ClientConnectivity `json:"clientConnectivity"`
	Distro             *Distro             `json:"distro"`
}

type DeviceKey struct {
	KeyExpiryDisabled bool `json:"keyExpiryDisabled"` // Whether or not this device's key will ever expire.
}

type DevicePostureAttributeRequest struct {
	Value   any    `json:"value"`
	Expiry  Time   `json:"expiry"`
	Comment string `json:"comment"`
}

type DevicePostureAttributes struct {
	Attributes map[string]any  `json:"attributes"`
	Expiries   map[string]Time `json:"expiries"`
}

type DevicePostureResource struct {
	*Client
}

type DeviceRoutes struct {
	Advertised []string `json:"advertisedRoutes"`
	Enabled    []string `json:"enabledRoutes"`
}

type DevicesResource struct {
	*Client
}

type Distro struct {
	Name     string `json:"name"`
	Version  string `json:"version"`
	CodeName string `json:"codeName"`
}

type Grant struct {
	Source      []string                    `json:"src,omitempty" hujson:"Src,omitempty"`
	Destination []string                    `json:"dst,omitempty" hujson:"Dst,omitempty"`
	IP          []string                    `json:"ip,omitempty" hujson:"IP,omitempty"`
	App         map[string][]map[string]any `json:"app,omitempty" hujson:"App,omitempty"`
	SrcPosture  []string                    `json:"srcPosture,omitempty" hujson:"SrcPosture,omitempty"`
	Via         []string                    `json:"via,omitempty" hujson:"Via,omitempty"`
}

type IdentityFederation struct {
	// ClientID is the ID of the Tailscale OAuth client.
	ClientID string
	// IDTokenFunc returns an identity token from the IdP to exchange for a Tailscale API token.
	// The client calls this function to obtain a fresh ID token and reauthenticate when the API token
	// and cached ID token have expired. For static tokens, return the token directly. If a static token
	// expires, the client cannot automatically refresh the API token; the consumer is responsible to create a new client
	// with a fresh ID token.
	IDTokenFunc func() (string, error)
}

type IncludeFields string

type Key struct {
	ID               string            `json:"id"`
	KeyType          string            `json:"keyType"`
	Key              string            `json:"key"`
	Description      string            `json:"description"`
	ExpirySeconds    *time.Duration    `json:"expirySeconds"`
	Created          time.Time         `json:"created"`
	Updated          time.Time         `json:"updated"`
	Expires          time.Time         `json:"expires"`
	Revoked          time.Time         `json:"revoked"`
	Invalid          bool              `json:"invalid"`
	Capabilities     KeyCapabilities   `json:"capabilities"`
	Scopes           []string          `json:"scopes,omitempty"`
	Tags             []string          `json:"tags,omitempty"`
	UserID           string            `json:"userId"`
	Audience         string            `json:"audience"`
	Issuer           string            `json:"issuer"`
	Subject          string            `json:"subject"`
	CustomClaimRules map[string]string `json:"customClaimRules"`
}

type KeyCapabilities struct {
	Devices struct {
		Create struct {
			Reusable      bool     `json:"reusable"`
			Ephemeral     bool     `json:"ephemeral"`
			Tags          []string `json:"tags"`
			Preauthorized bool     `json:"preauthorized"`
		} `json:"create"`
	} `json:"devices"`
}

type KeysResource struct {
	*Client
}

type ListDevicesOptions func(*listDevicesOptions)

type LogType string

type LoggingResource struct {
	*Client
}

type LogstreamConfiguration struct {
	LogType              LogType               `json:"logType,omitempty"`
	DestinationType      LogstreamEndpointType `json:"destinationType,omitempty"`
	URL                  string                `json:"url,omitempty"`
	User                 string                `json:"user,omitempty"`
	UploadPeriodMinutes  int                   `json:"uploadPeriodMinutes,omitempty"`
	CompressionFormat    CompressionFormat     `json:"compressionFormat,omitempty"`
	S3Bucket             string                `json:"s3Bucket,omitempty"`
	S3Region             string                `json:"s3Region,omitempty"`
	S3KeyPrefix          string                `json:"s3KeyPrefix,omitempty"`
	S3AuthenticationType S3AuthenticationType  `json:"s3AuthenticationType,omitempty"`
	S3AccessKeyID        string                `json:"s3AccessKeyId,omitempty"`
	S3RoleARN            string                `json:"s3RoleArn,omitempty"`
	S3ExternalID         string                `json:"s3ExternalId,omitempty"`
	GCSBucket            string                `json:"gcsBucket,omitempty"`
	GCSKeyPrefix         string                `json:"gcsKeyPrefix,omitempty"`
	GCSScopes            []string              `json:"gcsScopes,omitzero"`
	GCSCredentials       string                `json:"gcsCredentials,omitempty"`
}

type LogstreamEndpointType string

type NetworkFlowLog struct {
	Logged          time.Time      `json:"logged"`                    // the time at which this log was captured by the server
	NodeID          string         `json:"nodeId"`                    // the node ID for which the flow statistics apply
	Start           time.Time      `json:"start"`                     // the start of the sample period (node's local clock)
	End             time.Time      `json:"end"`                       // the end of the sample period (node's local clock)
	VirtualTraffic  []TrafficStats `json:"virtualTraffic,omitempty"`  // traffic between Tailscale nodes
	SubnetTraffic   []TrafficStats `json:"subnetTraffic,omitempty"`   // traffic involving subnet routes
	ExitTraffic     []TrafficStats `json:"exitTraffic,omitempty"`     // traffic via exit nodes
	PhysicalTraffic []TrafficStats `json:"physicalTraffic,omitempty"` // WireGuard transport-level statistics
}

type NetworkFlowLogHandler func(log NetworkFlowLog) error

type NetworkFlowLogsRequest struct {
	// Start must be set to a non-zero time within the log retention period (last 30 days).
	// The server may adjust times that are too old.
	Start time.Time
	// End must be set to a non-zero time after Start.
	End time.Time
}

type NodeAttrGrant struct {
	Target []string                       `json:"target,omitempty" hujson:"Target,omitempty"`
	Attr   []string                       `json:"attr,omitempty" hujson:"Attr,omitempty"`
	App    map[string][]*NodeAttrGrantApp `json:"app,omitempty" hujson:"App,omitempty"`

	IPPool []string `json:"ipPool,omitempty" hujson:"IpPool,omitempty"`
}

type NodeAttrGrantApp struct {
	Name       string   `json:"name,omitempty" hujson:"Name,omitempty"`
	Connectors []string `json:"connectors,omitempty" hujson:"Connectors,omitempty"`
	Domains    []string `json:"domains,omitempty" hujson:"Domains,omitempty"`
}

type OAuth struct {
	// ClientID is the client ID of the OAuth client.
	ClientID string
	// ClientSecret is the client secret of the OAuth client.
	ClientSecret string
	// Scopes are the scopes to request when generating tokens for this OAuth client.
	Scopes []string
}

type OAuthConfig struct {
	// ClientID is the client ID of the OAuth client.
	ClientID string
	// ClientSecret is the client secret of the OAuth client.
	ClientSecret string
	// Scopes are the scopes to request when generating tokens for this OAuth client.
	Scopes []string
	// BaseURL is an optional base URL for the API server to which we'll connect. Defaults to https://api.tailscale.com.
	BaseURL string
}

type PolicyFileResource struct {
	*Client
}

type PostureIntegration struct {
	ID       string                     `json:"id,omitempty"`
	Provider PostureIntegrationProvider `json:"provider,omitempty"`
	CloudID  string                     `json:"cloudId,omitempty"`
	ClientID string                     `json:"clientId,omitempty"`
	TenantID string                     `json:"tenantId,omitempty"`
}

type PostureIntegrationProvider string

type RawACL struct {
	// HuJSON is the raw HuJSON ACL string
	HuJSON string

	// ETag is the etag corresponding to this version of the ACL
	ETag string
}

type RoleAllowedToJoinExternalTailnets string

type S3AuthenticationType string

type SSHCheckPeriod time.Duration

type Service struct {
	Name        string            `json:"name,omitempty"`
	Addrs       []string          `json:"addrs,omitempty"`
	Comment     string            `json:"comment,omitempty"`
	Annotations map[string]string `json:"annotations,omitempty"`
	Ports       []string          `json:"ports,omitempty"`
	Tags        []string          `json:"tags,omitempty"`
}

type ServiceApproval struct {
	Approved     bool `json:"approved"`
	AutoApproved bool `json:"autoApproved"`
}

type ServiceHost struct {
	StableNodeID  string `json:"stableNodeID,omitempty"`
	ApprovalLevel string `json:"approvalLevel,omitempty"`
	Configured    string `json:"configured,omitempty"`
}

type ServicesResource struct {
	*Client
}

type SetFederatedIdentityRequest struct {
	Scopes           []string          `json:"scopes"`
	Tags             []string          `json:"tags"`
	Audience         string            `json:"audience"`
	Issuer           string            `json:"issuer"`
	Subject          string            `json:"subject"`
	CustomClaimRules map[string]string `json:"customClaimRules"`
	Description      string            `json:"description"`
}

type SetLogstreamConfigurationRequest struct {
	DestinationType      LogstreamEndpointType `json:"destinationType,omitempty"`
	URL                  string                `json:"url,omitempty"`
	User                 string                `json:"user,omitempty"`
	Token                string                `json:"token,omitempty"`
	UploadPeriodMinutes  int                   `json:"uploadPeriodMinutes,omitempty"`
	CompressionFormat    CompressionFormat     `json:"compressionFormat,omitempty"`
	S3Bucket             string                `json:"s3Bucket,omitempty"`
	S3Region             string                `json:"s3Region,omitempty"`
	S3KeyPrefix          string                `json:"s3KeyPrefix,omitempty"`
	S3AuthenticationType S3AuthenticationType  `json:"s3AuthenticationType,omitempty"`
	S3AccessKeyID        string                `json:"s3AccessKeyId,omitempty"`
	S3SecretAccessKey    string                `json:"s3SecretAccessKey,omitempty"`
	S3RoleARN            string                `json:"s3RoleArn,omitempty"`
	S3ExternalID         string                `json:"s3ExternalId,omitempty"`
	GCSBucket            string                `json:"gcsBucket,omitempty"`
	GCSKeyPrefix         string                `json:"gcsKeyPrefix,omitempty"`
	GCSScopes            []string              `json:"gcsScopes,omitzero"`
	GCSCredentials       string                `json:"gcsCredentials,omitempty"`
}

type SetOAuthClientRequest struct {
	Scopes      []string `json:"scopes"`
	Tags        []string `json:"tags"`
	Description string   `json:"description"`
}

type SplitDNSRequest map[string][]string

type SplitDNSResponse SplitDNSRequest

type TailnetSettings struct {
	ACLsExternallyManagedOn bool   `json:"aclsExternallyManagedOn"`
	ACLsExternalLink        string `json:"aclsExternalLink"`

	DevicesApprovalOn      bool `json:"devicesApprovalOn"`
	DevicesAutoUpdatesOn   bool `json:"devicesAutoUpdatesOn"`
	DevicesKeyDurationDays int  `json:"devicesKeyDurationDays"` // days before device key expiry

	UsersApprovalOn                        bool                              `json:"usersApprovalOn"`
	UsersRoleAllowedToJoinExternalTailnets RoleAllowedToJoinExternalTailnets `json:"usersRoleAllowedToJoinExternalTailnets"`

	NetworkFlowLoggingOn        bool `json:"networkFlowLoggingOn"`
	RegionalRoutingOn           bool `json:"regionalRoutingOn"`
	PostureIdentityCollectionOn bool `json:"postureIdentityCollectionOn"`
	HTTPSEnabled                bool `json:"httpsEnabled"`
}

type TailnetSettingsResource struct {
	*Client
}

type Time struct {
	time.Time
}

type TrafficStats struct {
	Proto   int    `json:"proto,omitempty"`   // IP protocol number (e.g., 6 for TCP, 17 for UDP)
	Src     string `json:"src,omitempty"`     // Source address and port
	Dst     string `json:"dst,omitempty"`     // Destination address and port
	TxPkts  uint64 `json:"txPkts,omitempty"`  // Transmitted packets
	TxBytes uint64 `json:"txBytes,omitempty"` // Transmitted bytes
	RxPkts  uint64 `json:"rxPkts,omitempty"`  // Received packets
	RxBytes uint64 `json:"rxBytes,omitempty"` // Received bytes
}

type UpdateContactRequest struct {
	Email *string `json:"email,omitempty"`
}

type UpdatePostureIntegrationRequest struct {
	CloudID  string `json:"cloudId,omitempty"`
	ClientID string `json:"clientId,omitempty"`
	TenantID string `json:"tenantId,omitempty"`
	// ClientSecret may be omitted to preserve the existing value
	ClientSecret *string `json:"clientSecret,omitempty"`
}

type UpdateTailnetSettingsRequest struct {
	ACLsExternallyManagedOn *bool   `json:"aclsExternallyManagedOn"`
	ACLsExternalLink        *string `json:"aclsExternalLink"`

	DevicesApprovalOn      *bool `json:"devicesApprovalOn,omitempty"`
	DevicesAutoUpdatesOn   *bool `json:"devicesAutoUpdatesOn,omitempty"`
	DevicesKeyDurationDays *int  `json:"devicesKeyDurationDays,omitempty"` // days before device key expiry

	UsersApprovalOn                        *bool                              `json:"usersApprovalOn,omitempty"`
	UsersRoleAllowedToJoinExternalTailnets *RoleAllowedToJoinExternalTailnets `json:"usersRoleAllowedToJoinExternalTailnets,omitempty"`

	NetworkFlowLoggingOn        *bool `json:"networkFlowLoggingOn,omitempty"`
	RegionalRoutingOn           *bool `json:"regionalRoutingOn,omitempty"`
	PostureIdentityCollectionOn *bool `json:"postureIdentityCollectionOn,omitempty"`
	HTTPSEnabled                *bool `json:"httpsEnabled,omitempty"`
}

type User struct {
	ID                 string     `json:"id"`
	DisplayName        string     `json:"displayName"`
	LoginName          string     `json:"loginName"`
	ProfilePicURL      string     `json:"profilePicUrl"`
	TailnetID          string     `json:"tailnetId"`
	Created            time.Time  `json:"created"`
	Type               UserType   `json:"type"`
	Role               UserRole   `json:"role"`
	Status             UserStatus `json:"status"`
	DeviceCount        int        `json:"deviceCount"`
	LastSeen           time.Time  `json:"lastSeen"`
	CurrentlyConnected bool       `json:"currentlyConnected"`
}

type UserRole string

type UserStatus string

type UserType string

type UsersResource struct {
	*Client
}

type VIPService = Service

type VIPServiceApproval = ServiceApproval

type VIPServicesResource = ServicesResource

type Webhook struct {
	EndpointID       string                    `json:"endpointId"`
	EndpointURL      string                    `json:"endpointUrl"`
	ProviderType     WebhookProviderType       `json:"providerType"`
	CreatorLoginName string                    `json:"creatorLoginName"`
	Created          time.Time                 `json:"created"`
	LastModified     time.Time                 `json:"lastModified"`
	Subscriptions    []WebhookSubscriptionType `json:"subscriptions"`
	// Secret is only populated on Webhook creation and after secret rotation.
	Secret *string `json:"secret,omitempty"`
}

type WebhookProviderType string

type WebhookSubscriptionType string

type WebhooksResource struct {
	*Client
}