entities

type APIToken struct {
	ID string
	// Token Name
	Name         string
	CreatedAt    *time.Time
	Token        string
	ProjectID    *uuid.UUID
	ProjectName  *string
	WorkflowID   *uuid.UUID
	WorkflowName *string
	// ACL policies for this token. Used for authorization checks.
	Policies []*authz.Policy
	// Scope and ScopeID name what the token is scoped to. They are loaded from the row, never
	// from a claim. Every row records them; a token recording none is confined to nothing.
	Scope   *authz.ResourceType
	ScopeID *uuid.UUID
	// ProjectIDs are the projects a product token reaches, loaded from the row.
	ProjectIDs []uuid.UUID
	// IsSystem marks tokens minted by internal code paths; these are hidden from the public API.
	IsSystem bool
}

type Membership struct {
	UserID    uuid.UUID
	Resources []*ResourceMembership
}

type Org struct {
	ID, Name  string
	CreatedAt *time.Time
	Suspended bool
}

type ResourceMembership struct {
	MembershipID uuid.UUID
	Role         authz.Role
	ResourceType authz.ResourceType
	ResourceID   uuid.UUID
}

type User struct {
	Email, ID, FirstName, LastName string
	CreatedAt                      *time.Time
}