apm

type APIKeyEntry struct {
	Name    string `json:"name"`
	Service string `json:"service"`
	Key     string `json:"key"`
	Space   string `json:"space,omitempty"`
}

type AccessLog struct {
	Timestamp  int64
	DeviceHash string
	Action     string
}

type AudioEntry struct {
	Name     string `json:"name"`
	FileName string `json:"file_name"`
	Content  []byte `json:"content"`
	Space    string `json:"space,omitempty"`
}

type AuditEntry struct {
	Timestamp time.Time `json:"timestamp"`
	Action    string    `json:"action"`
	Details   string    `json:"details"`
	User      string    `json:"user"`
	Hostname  string    `json:"hostname"`
}

type BankingEntry struct {
	Label    string `json:"label"`
	Type     string `json:"type"`
	Details  string `json:"details"`
	CVV      string `json:"cvv,omitempty"`
	Expiry   string `json:"expiry,omitempty"`
	Redacted bool   `json:"redacted,omitempty"`
	Space    string `json:"space,omitempty"`
}

type CICDSecretEntry struct {
	Name    string `json:"name"`
	Webhook string `json:"webhook"`
	EnvVars string `json:"env_vars"`
	Space   string `json:"space,omitempty"`
}

type CertificateEntry struct {
	Label      string    `json:"label"`
	CertData   string    `json:"cert_data"`
	PrivateKey string    `json:"private_key"`
	Issuer     string    `json:"issuer"`
	Expiry     time.Time `json:"expiry"`
	Space      string    `json:"space,omitempty"`
}

type Classification struct {
	MaxAccessLevel string `yaml:"max_access_level"`
	MFARequired    bool   `yaml:"mfa_required"`
}

type CloudCredentialEntry struct {
	Label      string `json:"label"`
	AccessKey  string `json:"access_key"`
	SecretKey  string `json:"secret_key"`
	Region     string `json:"region"`
	AccountID  string `json:"account_id"`
	Role       string `json:"role"`
	Expiration string `json:"expiration"`
	Space      string `json:"space,omitempty"`
}

type CloudProvider interface {
	UploadVault(vaultPath string, customKey string) (string, error)
	DownloadVault(fileID string) ([]byte, error)
	SyncVault(vaultPath, fileID string) error
	DeleteVault(fileID string) error
	ResolveKeyToID(key string) (string, error)
	ListMarketplacePlugins() ([]string, error)
	DownloadPlugin(name string, destDir string) error
	UploadPlugin(name string, pluginPath string) error
}

type ContactEntry struct {
	Name      string `json:"name"`
	Phone     string `json:"phone"`
	Email     string `json:"email"`
	Address   string `json:"address"`
	Emergency bool   `json:"emergency"`
	Space     string `json:"space,omitempty"`
}

type CryptoProfile struct {
	Name        string
	KDF         string
	Cipher      string
	Time        uint32
	Memory      uint32
	Parallelism uint8
	SaltLen     int
	NonceLen    int
}

type DockerRegistryEntry struct {
	Name        string `json:"name"`
	RegistryURL string `json:"registry_url"`
	Username    string `json:"username"`
	Token       string `json:"token"`
	Space       string `json:"Space,omitempty"`
}

type DocumentEntry struct {
	Name     string   `json:"name"`
	FileName string   `json:"file_name"`
	Content  []byte   `json:"content"`
	Password string   `json:"password"`
	Tags     []string `json:"tags,omitempty"`
	Expiry   string   `json:"expiry,omitempty"`
	Space    string   `json:"space,omitempty"`
}

type DropboxManager struct {
	Client files.Client
	Token  string
}

type Entry struct {
	Account  string `json:"account"`
	Username string `json:"username"`
	Password string `json:"password"`
	Space    string `json:"space,omitempty"`
}

type EphemeralSession struct {
	ID             string    `json:"id"`
	Label          string    `json:"label,omitempty"`
	Scope          string    `json:"scope"`
	BoundHostHash  string    `json:"bound_host_hash,omitempty"`
	BoundPID       int       `json:"bound_pid,omitempty"`
	BoundAgent     string    `json:"bound_agent,omitempty"`
	MasterPassword string    `json:"master_password"`
	CreatedAt      time.Time `json:"created_at"`
	ExpiresAt      time.Time `json:"expires_at"`
	Revoked        bool      `json:"revoked"`
	RevokedAt      time.Time `json:"revoked_at,omitempty"`
}

type EphemeralSessionStore struct {
	Sessions map[string]EphemeralSession `json:"sessions"`
}

type ExportData struct {
	Entries           []Entry             `json:"entries"`
	TOTPEntries       []TOTPEntry         `json:"totp_entries"`
	Tokens            []TokenEntry        `json:"tokens"`
	SecureNotes       []SecureNoteEntry   `json:"secure_notes"`
	APIKeys           []APIKeyEntry       `json:"api_keys"`
	SSHKeys           []SSHKeyEntry       `json:"ssh_keys"`
	WiFiCredentials   []WiFiEntry         `json:"wifi_credentials"`
	RecoveryCodeItems []RecoveryCodeEntry `json:"recovery_codes"`
}

type GitHubManager struct {
	Client *github.Client
	Token  string
	Repo   string
	Ctx    context.Context
}

type GoogleDriveManager struct {
	Service *drive.Service
	Mode    string
}

type GovIDEntry struct {
	Type     string `json:"type"`
	IDNumber string `json:"id_number"`
	Name     string `json:"name"`
	Expiry   string `json:"expiry"`
	Space    string `json:"space,omitempty"`
}

type HistoryEntry struct {
	Timestamp  time.Time `json:"timestamp"`
	Action     string    `json:"action"`
	Category   string    `json:"category"`
	Identifier string    `json:"identifier"`
	Hash       string    `json:"hash,omitempty"`
	Signature  string    `json:"signature,omitempty"`
}

type IgnoreCloudRule struct {
	ProviderPattern string
	SpacePattern    string
	TypePattern     string
	NamePattern     string
}

type IgnoreConfig struct {
	Spaces        []string
	Entries       []IgnoreEntryRule
	Vocab         []string
	CloudSpecific []IgnoreCloudRule
	Misc          map[string]string
}

type IgnoreEntryRule struct {
	SpacePattern string
	TypePattern  string
	NamePattern  string
}

type K8sSecretEntry struct {
	Name         string `json:"name"`
	ClusterURL   string `json:"cluster_url"`
	K8sNamespace string `json:"namespace"`
	Expiration   string `json:"expiration"`
	Space        string `json:"space,omitempty"`
}

type Keys struct {
	EncryptionKey []byte
	AuthKey       []byte
	Validator     []byte
}

type LegalContractEntry struct {
	Name            string `json:"name"`
	Summary         string `json:"summary"`
	PartiesInvolved string `json:"parties_involved"`
	SignedDate      string `json:"signed_date"`
	Space           string `json:"space,omitempty"`
}

type MCPAuthConfig struct {
	Tokens map[string]MCPToken `json:"tokens"`
}

type MCPToken struct {
	Name        string    `json:"name"`
	Token       string    `json:"token"`
	Permissions []string  `json:"permissions"`
	CreatedAt   time.Time `json:"created_at"`
	ExpiresAt   time.Time `json:"expires_at,omitempty"`
	LastUsedAt  time.Time `json:"last_used_at,omitempty"`
	UsageCount  int       `json:"usage_count"`
}

type MCPTransaction struct {
	ID        string          `json:"id"`
	TokenName string          `json:"token_name"`
	Tool      string          `json:"tool"`
	Args      json.RawMessage `json:"args"`
	Preview   string          `json:"preview"`
	Status    string          `json:"status"`
	Receipt   string          `json:"receipt,omitempty"`
	CreatedAt time.Time       `json:"created_at"`
	ExpiresAt time.Time       `json:"expires_at"`
	UpdatedAt time.Time       `json:"updated_at"`
}

type MCPTransactionStore struct {
	Transactions map[string]MCPTransaction `json:"transactions"`
}

type MedicalRecordEntry struct {
	Label         string `json:"label"`
	InsuranceID   string `json:"insurance_id"`
	Prescriptions string `json:"prescriptions"`
	Allergies     string `json:"allergies"`
	Space         string `json:"space,omitempty"`
}

type NoteVocabulary struct {
	Words     map[string]VocabWord `json:"words"`
	Aliases   map[string]string    `json:"aliases"`
	UpdatedAt time.Time            `json:"updated_at,omitempty"`
}

type PasswordPolicy struct {
	MinLength      int  `yaml:"min_length"`
	RequireUpper   bool `yaml:"require_uppercase"`
	RequireNumbers bool `yaml:"require_numbers"`
	RequireSymbols bool `yaml:"require_symbols"`
}

type PhotoEntry struct {
	Name     string `json:"name"`
	FileName string `json:"file_name"`
	Content  []byte `json:"content"`
	Space    string `json:"space,omitempty"`
}

type PluginManager interface {
	LoadPlugins() error
	ListPlugins() []string
	ExecuteHooks(hookType, hookName string, vault *Vault, vaultPath string) error
}

type Policy struct {
	Name           string                    `yaml:"name"`
	PasswordPolicy PasswordPolicy            `yaml:"password_policy"`
	RotationPolicy RotationPolicy            `yaml:"rotation_policy"`
	Classification map[string]Classification `yaml:"classification"`
}

type RecoveryCodeEntry struct {
	Service string   `json:"service"`
	Codes   []string `json:"codes"`
	Space   string   `json:"space,omitempty"`
}

type RecoveryData struct {
	EmailHash              []byte            `json:"email_hash,omitempty"`
	KeyHash                []byte            `json:"key_hash,omitempty"`
	DEKSlot                []byte            `json:"dek_slot,omitempty"` // DEK encrypted with Recovery Key
	Salt                   []byte            `json:"salt,omitempty"`     // Stable salt for recovery key
	ObfuscatedKey          []byte            `json:"obfuscated_key,omitempty"`
	RecoveryTokenHash      []byte            `json:"recovery_token_hash,omitempty"`
	RecoveryTokenExpiry    time.Time         `json:"recovery_token_expiry,omitempty"`
	RecoveryShareThreshold int               `json:"recovery_share_threshold,omitempty"`
	RecoveryShareCount     int               `json:"recovery_share_count,omitempty"`
	RecoveryShareHashes    map[string][]byte `json:"recovery_share_hashes,omitempty"`
	RecoveryCodeHashes     [][]byte          `json:"recovery_code_hashes,omitempty"`
	RecoveryCodeUsed       []bool            `json:"recovery_code_used,omitempty"`
	RecoveryPasskeyEnabled bool              `json:"recovery_passkey_enabled,omitempty"`
	RecoveryPasskeyUserID  []byte            `json:"recovery_passkey_user_id,omitempty"`
	RecoveryPasskeyCred    []byte            `json:"recovery_passkey_cred,omitempty"`
	AlertsEnabled          bool              `json:"alerts_enabled,omitempty"`
	SecurityLevel          int               `json:"security_level,omitempty"`
	AlertEmail             string            `json:"alert_email,omitempty"`
}

type RotationPolicy struct {
	RotateEveryDays  int `yaml:"rotate_every_days"`
	NotifyBeforeDays int `yaml:"notify_before_days"`
}

type SSHConfigEntry struct {
	Alias       string `json:"alias"`
	Host        string `json:"host"`
	User        string `json:"user"`
	Port        string `json:"port"`
	KeyPath     string `json:"key_path"`
	PrivateKey  string `json:"private_key"`
	Fingerprint string `json:"fingerprint"`
	Space       string `json:"Space,omitempty"`
}

type SSHKeyEntry struct {
	Name       string `json:"name"`
	PrivateKey string `json:"private_key"`
	Space      string `json:"space,omitempty"`
}

type SearchResult struct {
	Type       string
	Identifier string
	Data       interface{}
	Space      string
}

type SecretTelemetry struct {
	CreatedAt      time.Time `json:"created_at,omitempty"`
	UpdatedAt      time.Time `json:"updated_at,omitempty"`
	LastAccessed   time.Time `json:"last_accessed,omitempty"`
	LastRotation   time.Time `json:"last_rotation,omitempty"`
	AccessCount    int       `json:"access_count,omitempty"`
	Privilege      string    `json:"privilege,omitempty"`
	Exposed        bool      `json:"exposed,omitempty"`
	CreatedBy      string    `json:"created_by,omitempty"`
	UpdatedBy      string    `json:"updated_by,omitempty"`
	LastAccessedBy string    `json:"last_accessed_by,omitempty"`
	Source         string    `json:"source,omitempty"`
}

type SecretTrustScore struct {
	Category   string
	Identifier string
	Space      string
	Score      int
	Risk       string
	Reasons    []string
}

type SecureNoteEntry struct {
	Name    string `json:"name"`
	Content string `json:"content"`
	Space   string `json:"space,omitempty"`
}

type Session struct {
	MasterPassword    string        `json:"master_password"`
	ReadOnly          bool          `json:"readonly"`
	Expiry            time.Time     `json:"expiry"`
	LastUsed          time.Time     `json:"last_used"`
	InactivityTimeout time.Duration `json:"inactivity_timeout"`
}

type SoftwareLicenseEntry struct {
	ProductName    string `json:"product_name"`
	SerialKey      string `json:"serial_key"`
	ActivationInfo string `json:"activation_info"`
	Expiration     string `json:"expiration"`
	Space          string `json:"Space,omitempty"`
}

type SystemProfileInfo struct {
	OS             string
	Arch           string
	CPUCores       int
	TotalMemoryMB  uint64
	MemoryDetected bool
}

type TOTPEntry struct {
	Account string `json:"account"`
	Secret  string `json:"secret"`
	Space   string `json:"space,omitempty"`
}

type TokenEntry struct {
	Name  string `json:"name"`
	Token string `json:"token"`
	Type  string `json:"type"`
	Space string `json:"space,omitempty"`
}

type TravelEntry struct {
	Label          string `json:"label"`
	TicketNumber   string `json:"ticket_number"`
	BookingCode    string `json:"booking_code"`
	LoyaltyProgram string `json:"loyalty_program"`
	Space          string `json:"Space,omitempty"`
}

type UnlockResult struct {
	MasterPassword string
	Vault          *Vault
	ReadOnly       bool
	IsEphemeral    bool
}

type Vault struct {
	Salt                       []byte                 `json:"salt"`
	SecurityLevel              int                    `json:"security_level"` // 1-3
	Entries                    []Entry                `json:"entries"`
	TOTPEntries                []TOTPEntry            `json:"totp_entries"`
	TOTPOrder                  []string               `json:"totp_order,omitempty"`
	TOTPDomainLinks            map[string]string      `json:"totp_domain_links,omitempty"`
	Tokens                     []TokenEntry           `json:"tokens"`
	SecureNotes                []SecureNoteEntry      `json:"secure_notes"`
	APIKeys                    []APIKeyEntry          `json:"api_keys"`
	SSHKeys                    []SSHKeyEntry          `json:"ssh_keys"`
	WiFiCredentials            []WiFiEntry            `json:"wifi_credentials"`
	RecoveryCodeItems          []RecoveryCodeEntry    `json:"recovery_codes"`
	Certificates               []CertificateEntry     `json:"certificates"`
	BankingItems               []BankingEntry         `json:"banking_items"`
	Documents                  []DocumentEntry        `json:"documents"`
	AudioFiles                 []AudioEntry           `json:"audio_files"`
	VideoFiles                 []VideoEntry           `json:"video_files"`
	PhotoFiles                 []PhotoEntry           `json:"photo_files"`
	GovIDs                     []GovIDEntry           `json:"gov_ids"`
	MedicalRecords             []MedicalRecordEntry   `json:"medical_records"`
	TravelDocs                 []TravelEntry          `json:"travel_docs"`
	Contacts                   []ContactEntry         `json:"contacts"`
	CloudCredentialsItems      []CloudCredentialEntry `json:"cloud_credentials_items"`
	K8sSecrets                 []K8sSecretEntry       `json:"k8s_secrets"`
	DockerRegistries           []DockerRegistryEntry  `json:"docker_registries"`
	SSHConfigs                 []SSHConfigEntry       `json:"ssh_configs"`
	CICDSecrets                []CICDSecretEntry      `json:"cicd_secrets"`
	SoftwareLicenses           []SoftwareLicenseEntry `json:"software_licenses"`
	LegalContracts             []LegalContractEntry   `json:"legal_contracts"`
	History                    []HistoryEntry         `json:"history"`
	RetrievalKey               string                 `json:"retrieval_key,omitempty"`
	CloudFileID                string                 `json:"cloud_file_id,omitempty"`
	CloudCredentials           []byte                 `json:"cloud_credentials,omitempty"`
	CloudToken                 []byte                 `json:"cloud_token,omitempty"`
	FailedAttempts             uint8                  `json:"failed_attempts,omitempty"`
	EmergencyMode              bool                   `json:"emergency_mode,omitempty"`
	DecoyMode                  bool                   `json:"decoy_mode,omitempty"`
	DecoySessionCount          int                    `json:"decoy_session_count,omitempty"`
	Profile                    string                 `json:"profile,omitempty"`
	AutocompleteEnabled        bool                   `json:"autocomplete_enabled,omitempty"`
	AutocompleteWindowDisabled bool                   `json:"autocomplete_window_disabled,omitempty"`
	VocabCompressed            []byte                 `json:"vocab_compressed,omitempty"`

	AlertEmail                string                     `json:"alert_email,omitempty"`
	AlertsEnabled             bool                       `json:"alerts_enabled,omitempty"`
	AnomalyDetectionEnabled   bool                       `json:"anomaly_detection_enabled,omitempty"`
	LastCloudProvider         string                     `json:"last_cloud_provider,omitempty"`
	DriveSyncMode             string                     `json:"drive_sync_mode,omitempty"` // "apm_public" or "self_hosted"
	DriveKeyMetadataConsent   bool                       `json:"drive_key_metadata_consent,omitempty"`
	GitHubToken               string                     `json:"github_token,omitempty"`
	GitHubRepo                string                     `json:"github_repo,omitempty"`
	DropboxToken              []byte                     `json:"dropbox_token,omitempty"`
	DropboxSyncMode           string                     `json:"dropbox_sync_mode,omitempty"`
	DropboxKeyMetadataConsent bool                       `json:"dropbox_key_metadata_consent,omitempty"`
	DropboxFileID             string                     `json:"dropbox_file_id,omitempty"`
	CurrentSpace              string                     `json:"current_space,omitempty"`
	Spaces                    []string                   `json:"spaces"`
	ActivePolicy              Policy                     `json:"active_policy,omitempty"`
	PluginPermissionOverrides map[string]map[string]bool `json:"plugin_permission_overrides,omitempty"`
	NeedsRepair               bool                       `json:"-"`

	CurrentProfileParams   *CryptoProfile             `json:"-"`
	RecoveryEmail          string                     `json:"recovery_email,omitempty"`
	RecoveryHash           []byte                     `json:"recovery_hash,omitempty"`
	DEK                    []byte                     `json:"dek,omitempty"`
	RecoverySlot           []byte                     `json:"recovery_slot,omitempty"`
	RecoverySalt           []byte                     `json:"recovery_salt,omitempty"`
	RawRecoveryKey         string                     `json:"-"`
	ObfuscatedKey          []byte                     `json:"-"`
	RecoveryTokenHash      []byte                     `json:"recovery_token_hash,omitempty"`
	RecoveryTokenExpiry    time.Time                  `json:"recovery_token_expiry,omitempty"`
	RecoveryShareThreshold int                        `json:"recovery_share_threshold,omitempty"`
	RecoveryShareCount     int                        `json:"recovery_share_count,omitempty"`
	RecoveryShareHashes    map[string][]byte          `json:"recovery_share_hashes,omitempty"`
	SecretTelemetry        map[string]SecretTelemetry `json:"secret_telemetry,omitempty"`
	RecoveryCodeHashes     [][]byte                   `json:"recovery_code_hashes,omitempty"`
	RecoveryCodeUsed       []bool                     `json:"recovery_code_used,omitempty"`
	RecoveryPasskeyEnabled bool                       `json:"recovery_passkey_enabled,omitempty"`
	RecoveryPasskeyUserID  []byte                     `json:"recovery_passkey_user_id,omitempty"`
	RecoveryPasskeyCred    []byte                     `json:"recovery_passkey_cred,omitempty"`
}

type VideoEntry struct {
	Name     string `json:"name"`
	FileName string `json:"file_name"`
	Content  []byte `json:"content"`
	Space    string `json:"space,omitempty"`
}

type VocabWord struct {
	Score     int `json:"score"`
	Seen      int `json:"seen"`
	Accepted  int `json:"accepted"`
	Dismissed int `json:"dismissed"`
}

type WiFiEntry struct {
	SSID         string `json:"ssid"`
	Password     string `json:"password"`
	SecurityType string `json:"security_type"`
	RouterIP     string `json:"router_ip"`
	Space        string `json:"space,omitempty"`
}