config

type AddEnvRequest struct {
	ProjectId uuid.UUID `json:"project_id"`
	UserId    uuid.UUID `json:"user_id"`

	EnvName           string `json:"env_name"`
	CipherText        []byte `json:"cipher_text"`
	Nonce             []byte `json:"nonce"`
	WrappedDEK        []byte `json:"wrapped_dek,omitempty"`
	DekNonce          []byte `json:"dek_nonce,omitempty"`
	EncryptionVersion int32  `json:"encryption_version"`

	Metadata Metadata `json:"metadata"`
}

type AddEnvResponse struct {
	Message string `json:"message"`
}

type AddUserToProjectRequest struct {
	ProjectName        string    `json:"project_name"`
	AdminId            uuid.UUID `json:"admin_id"`
	UserId             uuid.UUID `json:"user_id"`
	WrappedPRK         []byte    `json:"wrapped_prk"`
	WrapNonce          []byte    `json:"wrap_nonce"`
	EphemeralPublicKey []byte    `json:"ephemeral_public_key"`
}

type AddUserToProjectResponse struct {
	Message string `json:"message"`
}

type Argon2idParams struct {
	Time        uint32 `json:"time"`
	Memory      uint32 `json:"memory"`
	Parallelism uint8  `json:"parallelism"`
	KeyLength   uint32 `json:"key_length"`
}

type AuditEntry struct {
	CreatedAt    time.Time `json:"timestamp"`
	ActorEmail   string    `json:"actor_email"`
	Action       string    `json:"action"`
	Status       string    `json:"status"`
	Environment  *string   `json:"environment,omitempty"`
	ErrorMessage string    `json:"error_message,omitempty"`
}

type CreateRequestBody struct {
	Email    string `json:"email"`
	Password string `json:"password"`

	PublicKey               []byte `json:"public_key"`
	EncryptedUserPrivateKey []byte `json:"encrypted_user_private_key"`
	PrivateKeySalt          []byte `json:"private_key_salt"`
	PrivateKeyNonce         []byte `json:"private_key_nonce"`

	RecoveryPrivateKey []byte `json:"recovery_encrypted_private_key"`
	RecoverySalt       []byte `json:"recovery_kdf_salt"`
	RecoveryNonce      []byte `json:"recovery_nonce"`
}

type CreateResponseBody struct {
	Message string      `json:"message"`
	User    UserBody    `json:"user"`
	Session SessionBody `json:"session"`
}

type EncryptedPrivateKey struct {
	EncryptedUserPrivateKey []byte `json:"encrypted_user_private_key"`
	PrivateKeySalt          []byte `json:"private_key_salt"`
	PrivateKeyNonce         []byte `json:"private_key_nonce"`
}

type EnvResponse struct {
	CipherText        []byte   `json:"cipher_text"`
	Nonce             []byte   `json:"nonce"`
	WrappedDEK        []byte   `json:"wrapped_dek,omitempty"`
	DekNonce          []byte   `json:"dek_nonce,omitempty"`
	EncryptionVersion int32    `json:"encryption_version"`
	Version           int32    `json:"version"`
	Metadata          Metadata `json:"metadata"`
}

type GetEnvForCIRequest struct {
	ProjectId uuid.UUID `json:"project_id"`
	EnvName   string    `json:"env_name"`
}

type GetEnvForCIResponse struct {
	CipherText        []byte `json:"cipher_text"`
	Nonce             []byte `json:"nonce"`
	WrappedDEK        []byte `json:"wrapped_dek,omitempty"`
	DekNonce          []byte `json:"dek_nonce,omitempty"`
	EncryptionVersion int32  `json:"encryption_version"`
}

type GetEnvRequest struct {
	ProjectId uuid.UUID `json:"project_id"`
	Email     string    `json:"user_email"`

	EnvName string `json:"env_name"`
	Version *int32 `json:"version"`
}

type GetEnvResponse struct {
	CipherText        []byte `json:"cipher_text"`
	Nonce             []byte `json:"nonce"`
	WrappedDEK        []byte `json:"wrapped_dek,omitempty"`
	DekNonce          []byte `json:"dek_nonce,omitempty"`
	EncryptionVersion int32  `json:"encryption_version"`
}

type GetEnvVersionsRequest struct {
	ProjectId uuid.UUID `json:"project_id"`
	Email     string    `json:"user_email"`

	EnvName string `json:"env_name"`
}

type GetEnvVersionsResponse struct {
	EnvVersions []EnvResponse `json:"env_versions"`
}

type GetMemberProjectRequest struct {
	ProjectName string    `json:"project_name"`
	UserId      uuid.UUID `json:"user_id"`
}

type GetMemberProjectResponse struct {
	ProjectId          uuid.UUID `json:"project_id"`
	WrappedPRK         []byte    `json:"wrapped_prk"`
	WrapNonce          []byte    `json:"wrap_nonce"`
	EphemeralPublicKey []byte    `json:"ephemeral_public_key"`
}

type GetProjectByNameResponse struct {
	ProjectID uuid.UUID `json:"project_id"`
}

type GetProjectByRepo struct {
	RepoPrincipal string `json:"repo_principal"`
}

type GetUserProjectRequest struct {
	ProjectName string    `json:"project_name"`
	UserId      uuid.UUID `json:"user_id"`
}

type GetUserProjectResponse struct {
	ProjectId          uuid.UUID `json:"project_id"`
	WrappedPRK         []byte    `json:"wrapped_prk"`
	WrapNonce          []byte    `json:"wrap_nonce"`
	EphemeralPublicKey []byte    `json:"ephemeral_public_key"`
}

type GithubOIDCLoginRequest struct {
	IDToken string `json:"id_token"`
}

type GithubOIDCLoginResponse struct {
	SessionID uuid.UUID `json:"session_id"`
	ProjectID uuid.UUID `json:"project_id"`
}

type KeyPair struct {
	PublicKey  []byte              `json:"public_key"`
	PrivateKey []byte              `json:"private_key"`
	EncKey     EncryptedPrivateKey `json:"encrypted_private_key"`

	RecoveryKey    string              `json:"-"`
	RecoveryEncKey EncryptedPrivateKey `json:"recovery_encrypted_private_key"`
}

type ListProjectRequest struct {
	UserId uuid.UUID `json:"user_id"`
}

type ListProjectResponse struct {
	Projects []Project `json:"projects"`
}

type LoginRequestBody struct {
	Email    string `json:"email"`
	Password string `json:"password"`
}

type LoginResponseBody struct {
	Message string      `json:"message"`
	User    UserBody    `json:"user"`
	Session SessionBody `json:"session"`
}

type LogoutRequestBody struct {
	UserID uuid.UUID `json:"user_id"`
}

type LogoutResponseBody struct {
	Message string `json:"message"`
}

type MemberPublicKey struct {
	UserID    uuid.UUID `json:"user_id"`
	PublicKey []byte    `json:"public_key"`
}

type Metadata struct {
	Type string `json:"type"`
}

type NewWrappedDEK struct {
	EnvVersionID  uuid.UUID `json:"env_version_id"`
	NewWrappedDEK []byte    `json:"new_wrapped_dek"`
	NewDekNonce   []byte    `json:"new_dek_nonce"`
}

type Project struct {
	Id        uuid.UUID `json:"project_id"`
	Name      string    `json:"name"`
	Role      string    `json:"role"`
	IsRevoked bool      `json:"is_revoked"`
}

type ProjectAuditPagination struct {
	Limit  int `json:"limit"`
	Offset int `json:"offset"`
	Total  int `json:"total"`
}

type ProjectAuditRequest struct {
	ProjectID  string `json:"project_id"`
	Limit      int    `json:"limit"`
	Offset     int    `json:"offset"`
	ActorEmail string `json:"actor_email,omitempty"`
	Action     string `json:"action,omitempty"`
	Status     string `json:"status,omitempty"`
	From       string `json:"from,omitempty"`
	To         string `json:"to,omitempty"`
}

type ProjectAuditResponse struct {
	Logs       []AuditEntry           `json:"logs"`
	Pagination ProjectAuditPagination `json:"pagination"`
}

type ProjectCreateRequest struct {
	Name               string    `json:"name"`
	UserId             uuid.UUID `json:"user_id"`
	WrappedPRK         []byte    `json:"wrapped_prk"`
	WrapNonce          []byte    `json:"wrap_nonce"`
	EphemeralPublicKey []byte    `json:"ephemeral_public_key"`
}

type ProjectCreateResponse struct {
	Message string `json:"message"`
}

type ProjectDeleteRequest struct {
	ProjectName string    `json:"project_name"`
	UserId      uuid.UUID `json:"user_id"`
}

type ProjectDeleteResponse struct {
	Message string `json:"message"`
}

type RecoveryCompleteRequest struct {
	Email                   string `json:"email"`
	Password                string `json:"password"` // The new password for authentication
	EncryptedUserPrivateKey []byte `json:"encrypted_user_private_key"`
	PrivateKeySalt          []byte `json:"private_key_salt"`
	PrivateKeyNonce         []byte `json:"private_key_nonce"`
}

type RecoveryCompleteResponse struct {
	Message string `json:"message"`
}

type RecoveryInitRequest struct {
	Email string `json:"email"`
}

type RecoveryInitResponse struct {
	RecoveryPrivateKey []byte `json:"recovery_encrypted_private_key"`
	RecoverySalt       []byte `json:"recovery_kdf_salt"`
	RecoveryNonce      []byte `json:"recovery_nonce"`
}

type RefreshRequestBody struct {
	UserID uuid.UUID `json:"user_id"`
}

type RefreshResponseBody struct {
	Message string      `json:"message"`
	Session SessionBody `json:"session"`
}

type RotateCommitRequest struct {
	ProjectID          uuid.UUID       `json:"project_id"`
	UserID             uuid.UUID       `json:"user_id"`
	ExpectedPRKVersion int32           `json:"expected_prk_version"`
	NewWrappedPRKs     []WrappedKey    `json:"new_wrapped_prks"`
	NewWrappedDEKs     []NewWrappedDEK `json:"new_wrapped_deks"`
}

type RotateCommitResponse struct {
	NewPRKVersion int32 `json:"new_prk_version"`
}

type RotateInitRequest struct {
	ProjectID uuid.UUID `json:"project_id"`
	UserID    uuid.UUID `json:"user_id"`
}

type RotateInitResponse struct {
	WrappedPRKs      []WrappedKey      `json:"wrapped_prks"`
	WrappedDEKs      []WrappedDEK      `json:"wrapped_deks"`
	MemberPublicKeys []MemberPublicKey `json:"member_public_keys"`
	PRKVersion       int32             `json:"prk_version"`
}

type ServiceRole struct {
	ID   uuid.UUID `json:"id"`
	Name string    `json:"name"`

	ServiceRolePublicKey []byte `json:"service_role_public_key"`
	RepoPrincipal        string `json:"repo_principal"`

	CreatedBy uuid.UUID `json:"created_by"`
	CreatedAt time.Time `json:"created_at"`
}

type ServiceRoleCreateRequest struct {
	ServiceRoleName string `json:"service_role_name"`

	ServiceRolePublicKey []byte `json:"service_role_public_key"`

	RepoPrincipal string    `json:"repo_principal"`
	CreatedBy     uuid.UUID `json:"created_by"`
}

type ServiceRoleCreateResponse struct {
	Message     string      `json:"message"`
	ServiceRole ServiceRole `json:"service_role"`
}

type ServiceRoleDelegateRequest struct {
	RepoPrincipal string `json:"repo_principal"`

	ProjectId uuid.UUID `json:"project_id"`
	EnvName   string    `json:"env_name"`

	WrappedPRK         []byte `json:"wrapped_prk"`
	WrapNonce          []byte `json:"wrap_nonce"`
	EphemeralPublicKey []byte `json:"ephemeral_public_key"`

	DelegatedBy uuid.UUID `json:"delegated_by"`
}

type ServiceRoleDelegateResponse struct {
	Message string `json:"message"`
}

type ServiceRoleDeleteRequest struct {
	ServiceRoleId uuid.UUID `json:"service_role_id"`
	CreatedBy     uuid.UUID `json:"created_by"`
}

type ServiceRoleDeleteResponse struct {
	Message string `json:"message"`
}

type ServiceRoleGetRequest struct {
	RepoPrincipal string `json:"repo_principal"`
}

type ServiceRoleGetResponse struct {
	ServiceRole ServiceRole `json:"service_role"`
	Message     string      `json:"message"`
}

type ServiceRoleKeyPair struct {
	PublicKey  []byte `json:"public_key"`
	PrivateKey []byte `json:"private_key"`
}

type ServiceRoleListRequest struct {
	CreatedBy uuid.UUID `json:"created_by"`
}

type ServiceRoleListResponse struct {
	ServiceRoles []ServiceRole `json:"services"`
}

type ServiceRolePermsRequest struct {
	RepoPrincipal string `json:"repo_principal"`
}

type ServiceRolePermsResponse struct {
	ProjectID   uuid.UUID `json:"project_id"`
	ProjectName string    `json:"project_name"`
	Env         string    `json:"env"`
}

type ServiceRollProjectKeyRequest struct {
	ProjectID uuid.UUID `json:"project_id"`
	SessionID uuid.UUID `json:"session_id"`
	Env       string    `json:"env"`
}

type ServiceRollProjectKeyResponse struct {
	ProjectId          uuid.UUID `json:"project_id"`
	WrappedPRK         []byte    `json:"wrapped_prk"`
	WrapNonce          []byte    `json:"wrap_nonce"`
	EphemeralPublicKey []byte    `json:"ephemeral_public_key"`
}

type SessionBody struct {
	AccessToken  uuid.UUID `json:"access_token"`
	RefreshToken uuid.UUID `json:"refresh_token"`
	ExpiresIn    int       `json:"expires_in"`
}

type SetAccessRequest struct {
	ProjectName string    `json:"project_name"`
	UserEmail   string    `json:"user_email"`
	AdminId     uuid.UUID `json:"admin_id"`
	IsRevoked   bool      `json:"is_revoked"`
}

type SetAccessResponse struct {
	Message string `json:"message"`
}

type Snapshot struct {
	Metadata    SnapshotProjectMetadata `json:"metadata"`
	Members     []SnapshotMember        `json:"members"`
	EnvVersions []SnapshotEnvVersion    `json:"env_versions"`
}

type SnapshotEnvVersion struct {
	EnvVersionID      uuid.UUID `json:"env_version_id"`
	EnvName           string    `json:"env_name"`
	Version           int32     `json:"version"`
	Ciphertext        []byte    `json:"ciphertext"`
	Nonce             []byte    `json:"nonce"`
	WrappedDEK        []byte    `json:"wrapped_dek"`
	DekNonce          []byte    `json:"dek_nonce"`
	EncryptionVersion int32     `json:"encryption_version"`
	CreatedAt         time.Time `json:"created_at"`
	CreatedBy         uuid.UUID `json:"created_by"`
	Metadata          []byte    `json:"metadata"`
}

type SnapshotExportRequest struct {
	ProjectName string    `json:"project_name"`
	UserID      uuid.UUID `json:"user_id"`
}

type SnapshotExportResponse struct {
	Snapshot Snapshot `json:"snapshot"`
	Checksum string   `json:"checksum"`
}

type SnapshotImportRequest struct {
	NewProjectName string    `json:"new_project_name"`
	UserID         uuid.UUID `json:"user_id"`
	Snapshot       Snapshot  `json:"snapshot"`
	Checksum       string    `json:"checksum"`
}

type SnapshotImportResponse struct {
	NewProjectID uuid.UUID `json:"new_project_id"`
}

type SnapshotMember struct {
	UserID             uuid.UUID `json:"user_id"`
	WrappedPRK         []byte    `json:"wrapped_prk"`
	WrapNonce          []byte    `json:"wrap_nonce"`
	EphemeralPublicKey []byte    `json:"ephemeral_public_key"`
}

type SnapshotProjectMetadata struct {
	Name       string `json:"name"`
	PrkVersion int32  `json:"prk_version"`
}

type UserBody struct {
	Id                      uuid.UUID      `json:"id"`
	Email                   string         `json:"email"`
	PublicKey               []byte         `json:"public_key"`
	EncryptedUserPrivateKey []byte         `json:"encrypted_user_private_key"`
	PrivateKeySalt          []byte         `json:"private_key_salt"`
	PrivateKeyNonce         []byte         `json:"private_key_nonce"`
	ArgonParams             Argon2idParams `json:"argon_params"`
}

type UserKeyRequestBody struct {
	Email string `json:"email"`
}

type UserKeyResponseBody struct {
	Message   string    `json:"message"`
	UserId    uuid.UUID `json:"user_id"`
	PublicKey []byte    `json:"public_key"`
}

type WrappedDEK struct {
	EnvVersionID uuid.UUID `json:"env_version_id"`
	WrappedDEK   []byte    `json:"wrapped_dek"`
	DekNonce     []byte    `json:"dek_nonce"`
}

type WrappedKey struct {
	UserID             uuid.UUID `json:"user_id"`
	WrappedPRK         []byte    `json:"wrapped_prk"`
	WrapNonce          []byte    `json:"wrap_nonce"`
	EphemeralPublicKey []byte    `json:"ephemeral_public_key"`
}