policy

type Action struct {
	ActionType string `yaml:"action"`
	Policy     string
	Paths      []string `yaml:"paths"`
	MaxRules   int      `yaml:"max-rules"`
	Nets       IPNets
}

type AddCustomRulesPrefixesInput struct {
	BaseCLIInput
	Session        *session.Session
	Policy         *armfrontdoor.WebApplicationFirewallPolicy
	SubscriptionID string
	RawResourceID  string
	ResourceID     config.ResourceID
	Action         armfrontdoor.ActionType
	Output         bool
	DryRun         bool
	Filepath       string
	Addrs          IPNets
	RuleNamePrefix RuleNamePrefix
	PriorityStart  int
	// StartRuleNumber int
	MaxRules int
	// can be called from external so allow override
	LogLevel *logrus.Level
}

type AddManagedRuleExclusionCLIInput struct {
	BaseCLIInput
	ShowDiff              bool
	SubscriptionID        string
	PolicyID              string
	RID                   config.ResourceID
	RuleSet               string
	RuleGroup             string
	RuleID                string
	ExclusionRuleVariable string
	ExclusionRuleOperator string
	ExclusionRuleSelector string
}

type AddManagedRuleExclusionInput struct {
	Session *session.Session
	// included for test injection only
	RuleSetDefinitions    []*armfrontdoor.ManagedRuleSetDefinition
	DryRun                bool
	AutoBackup            bool
	RuleSets              []*armfrontdoor.ManagedRuleSet
	PolicyResourceID      config.ResourceID
	RuleSetType           *string
	RuleSetVersion        *string
	RuleGroup             string
	RuleID                string
	ExclusionRuleVariable armfrontdoor.ManagedRuleExclusionMatchVariable
	ExclusionRuleOperator armfrontdoor.ManagedRuleExclusionSelectorMatchOperator
	ExclusionRuleSelector string
	Debug                 bool
	ShowDiff              bool
	AppVersion            string
	// helper attribute: used to assess scope of change
	Scope string
}

type ApplyRemoveNetsInput struct {
	BaseCLIInput
	RID         config.ResourceID
	MatchPrefix RuleNamePrefix
	Action      *armfrontdoor.ActionType
	RuleType    *armfrontdoor.RuleType
	Output      bool
	DryRun      bool
	Filepath    string
	Addrs       IPNets
	MaxRules    int
	// can be called from external so allow override
	LogLevel *logrus.Level
}

type ApplyRemoveNetsResult struct {
	Addr     netip.Prefix
	PolicyID string
	Removed  bool
}

type ApplyRemoveNetsResults []ApplyRemoveNetsResult

type BackupPoliciesInput struct {
	BaseCLIInput
	Path                     string
	RIDs                     []string
	StorageAccountResourceID string
	ContainerURL             string
	FailFast                 bool
}

type BaseCLIInput struct {
	AppVersion     string
	AutoBackup     bool
	Debug          bool
	ConfigPath     string
	SubscriptionID string
	Quiet          bool
	DryRun         bool
}

type BotRuleSetStatsOutput struct {
	// rule set
	RuleSetType    string
	RuleSetVersion string

	// rules
	Rules         int
	RulesEnabled  int
	RulesDisabled int
	BlockTotal    int
	AllowTotal    int
	LogTotal      int
	RedirectTotal int
	GroupCount    int

	// exclusions
	RuleSetScopeExclusionsTotal   int
	RuleGroupScopeExclusionsTotal int
	RuleScopeExclusionsTotal      int
	TotalExclusions               int
}

type CopyRulesInput struct {
	BaseCLIInput
	SubscriptionID   string
	Source           string
	Target           string
	CustomRulesOnly  bool
	ManagedRulesOnly bool
	DryRun           bool
	ShowDiff         bool
	Debug            bool
	Async            bool
	Quiet            bool
	AppVersion       string
}

type DeleteCustomRulesCLIInput struct {
	BaseCLIInput   BaseCLIInput
	SubscriptionID string
	PolicyID       string
	DryRun         bool
	ConfigPath     string
	RID            config.ResourceID
	Name           string
	NameMatch      *regexp.Regexp
	Priority       string
	MaxRules       int
	Debug          bool
}

type DeleteCustomRulesPrefixesInput struct {
	Policy      *armfrontdoor.WebApplicationFirewallPolicy
	RID         config.ResourceID
	Name        string
	NameMatch   *regexp.Regexp
	Priority    int
	PrioritySet bool
	MaxRules    int
	Debug       bool
}

type DeleteManagedRuleExclusionCLIInput struct {
	BaseCLIInput
	SubscriptionID        string
	PolicyID              string
	RID                   config.ResourceID
	RuleSet               string
	RuleGroup             string
	RuleID                string
	ShowDiff              bool
	ExclusionRuleVariable string
	ExclusionRuleOperator string
	ExclusionRuleSelector string
	Debug                 bool
}

type DeleteManagedRuleExclusionInput struct {
	DryRun                bool
	RID                   config.ResourceID
	RuleSetType           *string
	RuleSetVersion        *string
	RuleGroup             string
	RuleID                string
	ShowDiff              bool
	ExclusionRuleVariable armfrontdoor.ManagedRuleExclusionMatchVariable
	ExclusionRuleOperator armfrontdoor.ManagedRuleExclusionSelectorMatchOperator
	ExclusionRuleSelector string
	Debug                 bool
	// helper attribute: used to assess scope of change
	Scope string
}

type FrontDoor struct {
	// contains filtered or unexported fields
}

type FrontDoorEndpoint struct {
	// contains filtered or unexported fields
}

type FrontDoors []FrontDoor

type GenCustomRulesFromIPNetsInput struct {
	PositiveMatchNets          IPNets
	NegativeMatchNets          IPNets
	RuleType                   *armfrontdoor.RuleType
	RateLimitDurationInMinutes *int32
	RateLimitThreshold         *int32
	Action                     *armfrontdoor.ActionType
	MaxRules                   int
	CustomNamePrefix           RuleNamePrefix
	CustomPriorityStart        int
}

type GeneratePolicyPatchInput struct {
	Original interface{}
	New      armfrontdoor.WebApplicationFirewallPolicy
}

type GeneratePolicyPatchOutput struct {
	TotalDifferences        int
	TotalRuleDifferences    int
	CustomRuleAdditions     int
	CustomRuleChanges       int
	CustomRuleRemovals      int
	CustomRuleReplacements  int
	ManagedRuleChanges      int
	ManagedRuleAdditions    int
	ManagedRuleRemovals     int
	ManagedRuleReplacements int
}

type GetPolicyInput struct {
	Session *session.Session
	// CLIPolicyID    string
	PolicyID config.ResourceID
}

type GetPolicyOutput struct {
	Policy *armfrontdoor.WebApplicationFirewallPolicy
}

type GetWAFPolicyResourceIDInput struct {
	SubscriptionID string
	RawPolicyID    string
	ConfigPath     string
}

type GetWrappedPoliciesInput struct {
	SubscriptionID    string
	AppVersion        string
	Config            string
	FilterResourceIDs []string
	Max               int
}

type GetWrappedPoliciesOutput struct {
	Policies []WrappedPolicy
}

type IPNets []netip.Prefix

type ListPoliciesInput struct {
	SubscriptionID, AppVersion string
	Max                        int
	Full                       bool
}

type LogIPsInput struct {
	RID      config.ResourceID
	Output   bool
	DryRun   bool
	Filepath string
	Nets     IPNets
	MaxRules int
	Debug    bool
}

type OutputManagedRuleExclusionsTableInput struct {
	// contains filtered or unexported fields
}

type OutputManagedRuleInput struct {
	Policy                  *armfrontdoor.WebApplicationFirewallPolicy
	PolicyName              string
	PolicyType              string
	PolicyProvisioningState string
	PolicyResourceState     *armfrontdoor.PolicyResourceState
	PolicyEnabledState      string
	PolicySettingsMode      string
	Rule                    *armfrontdoor.ManagedRuleOverride
	RuleGroupExclusions     []*armfrontdoor.ManagedRuleExclusion
	RuleSetExclusions       []*armfrontdoor.ManagedRuleExclusion
	RuleSetDefinition       *armfrontdoor.ManagedRuleSetDefinition
	RuleGroupDefinition     *armfrontdoor.ManagedRuleGroupDefinition
	RuleDefinition          *armfrontdoor.ManagedRuleDefinition
}

type OutputPolicyInput struct {
	// contains filtered or unexported fields
}

type ProcessPolicyChangesInput struct {
	Session          *session.Session
	PolicyName       string
	SubscriptionID   string
	ResourceGroup    string
	PolicyPostChange armfrontdoor.WebApplicationFirewallPolicy
	ShowDiff         bool
	DryRun           bool
	Backup           bool
	Debug            bool
}

type PushPolicyInput struct {
	Name          string
	Subscription  string
	ResourceGroup string
	Policy        armfrontdoor.WebApplicationFirewallPolicy
	Debug         bool
	Timeout       int64
	Async         bool
}

type RemoveNetsInput struct {
	BaseCLIInput
	Session       *session.Session
	RawResourceID string
	MatchPrefix   RuleNamePrefix
	ResourceID    config.ResourceID
	Action        *armfrontdoor.ActionType
	Filepath      string
	Nets          []netip.Prefix
	MaxRules      int
	// can be called from external so allow override
	LogLevel *logrus.Level
}

type RestorePoliciesInput struct {
	BaseCLIInput
	BackupsPaths     []string
	CustomRulesOnly  bool
	ManagedRulesOnly bool
	TargetPolicy     string
	ResourceGroup    string
	RIDs             []config.ResourceID
	ShowDiff         bool
	Force            bool
	FailFast         bool
}

type RuleNamePrefix string

type RuleSetStatsOutput struct {
	// rule set
	RuleSetType    string
	RuleSetVersion string

	// rules
	Rules                             int
	RulesEnabled                      int
	RulesDisabled                     int
	RulesDefaultEnabledStateOveridden int
	RulesDefaultActionOveridden       int
	BlockTotal                        int
	AllowTotal                        int
	LogTotal                          int
	RedirectTotal                     int
	GroupCount                        int

	// exclusions
	RuleSetScopeExclusionsTotal   int
	RuleGroupScopeExclusionsTotal int
	RuleScopeExclusionsTotal      int
	TotalExclusions               int
}

type ShowExclusionsCLIInput struct {
	BaseCLIInput
	SubscriptionID string
	PolicyID       string
	RuleSet        string
	RuleGroup      string
	RuleID         string
	Shadows        bool
}

type ShowPolicyInput struct {
	ConfigPath, SubscriptionID, PolicyID  string
	Full, Custom, Managed, Stats, Shadows bool
}

type UpdatePolicyCustomRulesIPMatchPrefixesInput struct {
	BaseCLIInput
	Policy                     *armfrontdoor.WebApplicationFirewallPolicy
	SubscriptionID             string
	RawResourceID              string
	ResourceID                 config.ResourceID
	Action                     *armfrontdoor.ActionType
	Output                     bool
	Filepath                   string
	Addrs                      IPNets
	ExcludedAddrs              IPNets
	RuleNamePrefix             RuleNamePrefix
	RuleType                   *armfrontdoor.RuleType
	RateLimitDurationInMinutes *int32
	RateLimitThreshold         *int32
	PriorityStart              int
	// StartRuleNumber int
	MaxRules int
	// can be called from external so allow override
	LogLevel *logrus.Level
}

type WAFResourceIDHashMap struct {
	Entries []WAFResourceIDHashMapEntry
}

type WAFResourceIDHashMapEntry struct {
	Hash       string
	ResourceID string
}

type WrappedManagedRuleSet struct {
	Date           time.Time
	SubscriptionID string
	ResourceGroup  string
	Name           string
	ManagedRuleSet armfrontdoor.ManagedRuleSet
	PolicyID       string
	AppVersion     string
}

type WrappedPolicy struct {
	Date           time.Time
	SubscriptionID string
	ResourceGroup  string
	Name           string
	Policy         armfrontdoor.WebApplicationFirewallPolicy
	PolicyID       string
	AppVersion     string
}