cloudkit

type AccessKey struct {
	User      string `json:"user"`
	ID        string `json:"id"`
	Status    string `json:"status,omitempty"`
	CreatedAt string `json:"created_at,omitempty"`
}

type AssetPage struct {
	Instances []Instance
	Total     int
	Cursor    string
	HasMore   bool
	// Warnings records a kind that failed while another succeeded, so the tool
	// can report StatusPartial honestly instead of dropping it.
	Warnings []string
}

type AssetRequest struct {
	Kinds    []string
	Region   string
	PageSize int
	Cursor   string
}

type Bucket struct {
	Name      string `json:"name"`
	Region    string `json:"region,omitempty"`
	CreatedAt string `json:"created_at,omitempty"`
}

type CommandRequest struct {
	InstanceID string
	Command    string
	TimeoutSec int
	Region     string
}

type CommandResult struct {
	InstanceID string `json:"instance_id"`
	CommandID  string `json:"command_id"`
	Status     string `json:"status"`
	ExitCode   int    `json:"exit_code"`
	Stdout     string `json:"stdout,omitempty"`
	Stderr     string `json:"stderr,omitempty"`
	Truncated  bool   `json:"truncated,omitempty"`
	StdoutSize int    `json:"stdout_bytes,omitempty"`
}

type Credentials struct {
	AccessKey string
	SecretKey string
	Region    string
	// Endpoint optionally overrides the vendor endpoint (sovereign cloud,
	// private endpoint, or a test double's host).
	Endpoint string
}

type Error struct {
	Reason   Reason
	Provider string
	Code     string // vendor error code, verbatim
	Message  string // vendor message, verbatim (already public to the caller)
	MaskedAK string // AK 前 4 + 后 4
}

type IAMPage struct {
	Users      []IAMUser
	Policies   []IAMPolicy
	AccessKeys []AccessKey
	Total      int
	Cursor     string
	HasMore    bool
	Warnings   []string
}

type IAMPolicy struct {
	Name        string `json:"name"`
	ID          string `json:"id,omitempty"`
	Description string `json:"description,omitempty"`
	Attachments int    `json:"attachments"`
	Admin       bool   `json:"admin,omitempty"`
}

type IAMRequest struct {
	Include    []string // users | policies | access_keys
	MaxResults int
	Cursor     string
}

type IAMUser struct {
	Name      string `json:"name"`
	ID        string `json:"id,omitempty"`
	CreatedAt string `json:"created_at,omitempty"`
	// AdminHint is set when a directly attached policy looks like full
	// administrative access — the privesc surface an operator cares about.
	AdminHint string `json:"admin_hint,omitempty"`
}

type Identity struct {
	AccountID string `json:"account_id,omitempty"`
	ARN       string `json:"arn,omitempty"`
	Type      string `json:"type,omitempty"` // root_account | ram_user | iam_user | assumed_role | federated_user | ...
	Alias     string `json:"alias,omitempty"`
}

type Instance struct {
	ID        string   `json:"id"`
	Name      string   `json:"name,omitempty"`
	Kind      string   `json:"kind"` // compute | database
	Status    string   `json:"status,omitempty"`
	Type      string   `json:"type,omitempty"`
	Region    string   `json:"region,omitempty"`
	Zone      string   `json:"zone,omitempty"`
	PrivateIP []string `json:"private_ips,omitempty"`
	PublicIP  []string `json:"public_ips,omitempty"`
	Engine    string   `json:"engine,omitempty"` // database engine/version
}

type Kit struct {
	// contains filtered or unexported fields
}

type Object struct {
	Key          string `json:"key"`
	Size         int64  `json:"size"`
	LastModified string `json:"last_modified,omitempty"`
}

type Provider interface {
	// Name is the provider constant.
	Name() string
	// Verify performs the minimal read that proves the credential works
	// (GetCallerIdentity and its equivalents).
	Verify(ctx context.Context, creds Credentials) (Identity, error)
	// ListAssets lists compute and database instances.
	ListAssets(ctx context.Context, creds Credentials, req AssetRequest) (AssetPage, error)
	// ListIAM lists sub-accounts, policies and access-key metadata.
	ListIAM(ctx context.Context, creds Credentials, req IAMRequest) (IAMPage, error)
	// ListStorage lists buckets, or the objects of one bucket.
	ListStorage(ctx context.Context, creds Credentials, req StorageRequest) (StoragePage, error)
	// RunCommand runs one command through the vendor's cloud assistant.
	RunCommand(ctx context.Context, creds Credentials, req CommandRequest) (CommandResult, error)
}

type Reason string

type StoragePage struct {
	Buckets  []Bucket
	Objects  []Object
	Total    int
	Cursor   string
	HasMore  bool
	Warnings []string
}

type StorageRequest struct {
	Bucket     string
	Prefix     string
	MaxResults int
	Cursor     string
}