export interface Archetype {
  slug: string;
  name: string;
  services: string[];
  icon: string;
}

export interface ServiceDef {
  slug: string;
  name: string;
  port: number;
  proto: 'tcp' | 'udp';
  icon: string;
  risk: 'low' | 'med' | 'high';
  group: ServiceGroup;
}

export type ServiceGroup =
  | 'Remote Access'
  | 'Web'
  | 'File Transfer'
  | 'Directory'
  | 'Databases'
  | 'Mail'
  | 'Communications'
  | 'IoT / OT'
  | 'Observability'
  | 'Containers'
  | 'Miscellaneous';

// Rendering order for the palette.
export const SERVICE_GROUP_ORDER: ServiceGroup[] = [
  'Remote Access',
  'Web',
  'File Transfer',
  'Directory',
  'Databases',
  'Mail',
  'Communications',
  'IoT / OT',
  'Observability',
  'Containers',
  'Miscellaneous',
];

export const ARCHETYPES: Archetype[] = [
  { slug: 'linux-server',        name: 'Linux Server',        services: ['ssh', 'http'],                             icon: 'server' },
  { slug: 'windows-workstation', name: 'Windows Workstation', services: ['smb', 'rdp'],                              icon: 'monitor' },
  { slug: 'domain-controller',   name: 'Domain Controller',   services: ['smb', 'rdp', 'ldap', 'llmnr', 'kerberos'], icon: 'shield' },
  { slug: 'database-server',     name: 'Database Server',     services: ['mysql', 'postgres', 'redis'],              icon: 'database' },
  { slug: 'iot-device',          name: 'IoT / OT Device',     services: ['modbus', 'mqtt', 'coap'],                  icon: 'cpu' },
  { slug: 'web-application',     name: 'Web Application',     services: ['http', 'https'],                           icon: 'globe' },
];

export const DEFAULT_SERVICES: ServiceDef[] = [
  // Remote Access
  { slug: 'ssh',         name: 'SSH',         port: 22,    proto: 'tcp', icon: 'terminal',   risk: 'high', group: 'Remote Access' },
  { slug: 'telnet',      name: 'Telnet',      port: 23,    proto: 'tcp', icon: 'terminal',   risk: 'high', group: 'Remote Access' },
  { slug: 'rdp',         name: 'RDP',         port: 3389,  proto: 'tcp', icon: 'monitor',    risk: 'high', group: 'Remote Access' },
  { slug: 'vnc',         name: 'VNC',         port: 5900,  proto: 'tcp', icon: 'monitor',    risk: 'high', group: 'Remote Access' },
  // Web
  { slug: 'http',        name: 'HTTP',        port: 80,    proto: 'tcp', icon: 'globe',      risk: 'med',  group: 'Web' },
  { slug: 'https',       name: 'HTTPS',       port: 443,   proto: 'tcp', icon: 'lock',       risk: 'med',  group: 'Web' },
  // File Transfer
  { slug: 'ftp',         name: 'FTP',         port: 21,    proto: 'tcp', icon: 'folder',     risk: 'high', group: 'File Transfer' },
  { slug: 'tftp',        name: 'TFTP',        port: 69,    proto: 'udp', icon: 'folder',     risk: 'high', group: 'File Transfer' },
  { slug: 'smb',         name: 'SMB',         port: 445,   proto: 'tcp', icon: 'hard-drive', risk: 'high', group: 'File Transfer' },
  // Directory
  { slug: 'ldap',        name: 'LDAP',        port: 389,   proto: 'tcp', icon: 'users',      risk: 'med',  group: 'Directory' },
  { slug: 'kerberos',    name: 'Kerberos',    port: 88,    proto: 'tcp', icon: 'key-round',  risk: 'med',  group: 'Directory' },
  { slug: 'llmnr',       name: 'LLMNR',       port: 5355,  proto: 'udp', icon: 'radio',      risk: 'low',  group: 'Directory' },
  // Databases
  { slug: 'mysql',       name: 'MySQL',       port: 3306,  proto: 'tcp', icon: 'database',   risk: 'high', group: 'Databases' },
  { slug: 'postgres',    name: 'Postgres',    port: 5432,  proto: 'tcp', icon: 'database',   risk: 'high', group: 'Databases' },
  { slug: 'mssql',       name: 'MSSQL',       port: 1433,  proto: 'tcp', icon: 'database',   risk: 'high', group: 'Databases' },
  { slug: 'mongodb',     name: 'MongoDB',     port: 27017, proto: 'tcp', icon: 'database',   risk: 'high', group: 'Databases' },
  { slug: 'redis',       name: 'Redis',       port: 6379,  proto: 'tcp', icon: 'zap',        risk: 'med',  group: 'Databases' },
  // Mail
  { slug: 'smtp',        name: 'SMTP',        port: 25,    proto: 'tcp', icon: 'mail',       risk: 'med',  group: 'Mail' },
  { slug: 'smtp_relay',  name: 'SMTP Relay',  port: 587,   proto: 'tcp', icon: 'mail',       risk: 'med',  group: 'Mail' },
  { slug: 'imap',        name: 'IMAP',        port: 143,   proto: 'tcp', icon: 'mail',       risk: 'med',  group: 'Mail' },
  { slug: 'pop3',        name: 'POP3',        port: 110,   proto: 'tcp', icon: 'mail',       risk: 'med',  group: 'Mail' },
  // Communications
  { slug: 'sip',         name: 'SIP',         port: 5060,  proto: 'udp', icon: 'phone',      risk: 'med',  group: 'Communications' },
  // IoT / OT
  { slug: 'mqtt',        name: 'MQTT',        port: 1883,  proto: 'tcp', icon: 'wifi',       risk: 'low',  group: 'IoT / OT' },
  { slug: 'modbus',      name: 'Modbus',      port: 502,   proto: 'tcp', icon: 'cpu',        risk: 'med',  group: 'IoT / OT' },
  { slug: 'coap',        name: 'CoAP',        port: 5683,  proto: 'udp', icon: 'wifi',       risk: 'low',  group: 'IoT / OT' },
  { slug: 'conpot',      name: 'Conpot (ICS)', port: 102,  proto: 'tcp', icon: 'cpu',        risk: 'med',  group: 'IoT / OT' },
  // Observability
  { slug: 'elasticsearch', name: 'Elasticsearch', port: 9200, proto: 'tcp', icon: 'activity', risk: 'med',  group: 'Observability' },
  { slug: 'snmp',        name: 'SNMP',        port: 161,   proto: 'udp', icon: 'activity',   risk: 'low',  group: 'Observability' },
  // Containers
  { slug: 'docker_api',  name: 'Docker API',  port: 2375,  proto: 'tcp', icon: 'box',        risk: 'high', group: 'Containers' },
  { slug: 'k8s',         name: 'Kubernetes',  port: 6443,  proto: 'tcp', icon: 'box',        risk: 'high', group: 'Containers' },
  { slug: 'registry',    name: 'Registry',    port: 5000,  proto: 'tcp', icon: 'box',        risk: 'med',  group: 'Containers' },
];